last executing test programs:

352.791969ms ago: executing program 2 (id=2352):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000021dfd636dcc26c30c39fc94f195f09e4ced60a98caedb044b8467d8f62100d4503a6bce8f9d69bad1c121c8039862483ae7601fcd855a73aca848a16308aa0e51b3fe422115e111407df5ca7daeb000000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x1d, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000480)='kvm_test_age_hva\x00', r5}, 0x18)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="030000001801238c09d0ff0f1d0dbd30", 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="33000000fc77ffffffffffff", @ANYRES32=r5, @ANYBLOB, @ANYRES64=r2], 0x20)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r7, &(0x7f0000000100)="2fa20bdb5443df167bcadf985adfb7341cf1732e550a7556dc3f3e8b2adc7479ce4c2a16cc767bc540e789f61ec81431dd418d6f641f13d6a0c61640d52b6dc0cba789422b2e98", 0x47, 0x4000, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
writev(r10, &(0x7f0000000900)=[{&(0x7f0000000540)="78e89346", 0x4}], 0x1)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14)
mkdirat$cgroup(r9, &(0x7f00000004c0)='syz1\x00', 0x1ff)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f00000002c0)={@private2, r11}, 0x14)
socket$netlink(0x10, 0x3, 0xad72a60e5cf0d6)

280.439607ms ago: executing program 0 (id=2353):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000002280))

264.117047ms ago: executing program 2 (id=2354):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x90)

207.507802ms ago: executing program 0 (id=2356):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000100100000a"], 0x18}, 0xfc00)

207.176598ms ago: executing program 2 (id=2357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000d00)={0x2, &(0x7f0000000cc0)=[{0xac, 0x1, 0xc, 0x1}, {0x6, 0x4, 0x6, 0x3}]}, 0x10)

206.858726ms ago: executing program 1 (id=2358):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

196.328556ms ago: executing program 0 (id=2359):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x40)

121.571995ms ago: executing program 2 (id=2360):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0)

121.377811ms ago: executing program 1 (id=2361):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

121.026143ms ago: executing program 0 (id=2362):
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

72.919128ms ago: executing program 1 (id=2363):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8003}, 0xe)

72.480711ms ago: executing program 2 (id=2364):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x21, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800)

72.261529ms ago: executing program 1 (id=2365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x24040084)

1.637258ms ago: executing program 0 (id=2366):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0)

1.016353ms ago: executing program 1 (id=2367):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000101850000002e000000850000007d00000095000000000000004a43008e6b81ac78df2a6bcfc861033e41d8df342fd5128d7f3280362cbb46ccc36fda92a9f797c1b58f0da7137269b9de5b6568e1398e3d0589b1b36a1a582dc80e8b7c2df4df5dda875b7bcacf1e3bd8038eb520e90d529307bf5569ad6e2b585fd92fa141e89ec2c198c32f9de389eb33fccf32270c4caee41db9186f630dd24454204b9dc266524b09a694"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe88000000000000000000000000010100000000000000000000ffffac1414260000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000010000000232000000ac1414bb00eaffffff0000000000000000000000000000000000000000000000fffffeffffffffff0400000000000000040000000000000040000000000000000000000000000000000000000000000061f4ffffffffffff0300000000000000000000000000000000000100000000000000000002000000000000002dbd70000000000002000500000000000000000048000200"], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800)

713.006µs ago: executing program 0 (id=2368):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)

344.384µs ago: executing program 1 (id=2369):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94)

0s ago: executing program 2 (id=2370):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001000700000014000880100007800c"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10652' (ED25519) to the list of known hosts.
syzkaller login: [   58.735516][ T5830] cgroup: Unknown subsys name 'net'
[   58.845404][ T5830] cgroup: Unknown subsys name 'cpuset'
[   58.851588][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.774619][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.147130][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.150958][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.155098][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.158445][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.160597][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.161944][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.165622][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.167489][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.174777][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.176363][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.181374][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.185092][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.188099][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.188566][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.234997][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.538275][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   66.716581][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   66.731613][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.735032][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.738210][ T5847] bridge_slave_0: entered allmulticast mode
[   66.742642][ T5847] bridge_slave_0: entered promiscuous mode
[   66.748576][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.752229][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.755288][ T5847] bridge_slave_1: entered allmulticast mode
[   66.759195][ T5847] bridge_slave_1: entered promiscuous mode
[   66.818100][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.827845][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   66.838895][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.917025][ T5847] team0: Port device team_slave_0 added
[   66.924254][ T5847] team0: Port device team_slave_1 added
[   66.986128][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.989101][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.992669][ T5845] bridge_slave_0: entered allmulticast mode
[   66.996650][ T5845] bridge_slave_0: entered promiscuous mode
[   67.017736][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.020766][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.032875][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.068817][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.073799][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.077049][ T5845] bridge_slave_1: entered allmulticast mode
[   67.081704][ T5845] bridge_slave_1: entered promiscuous mode
[   67.085528][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.088346][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.098879][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.110486][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.113325][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.116323][ T5848] bridge_slave_0: entered allmulticast mode
[   67.120982][ T5848] bridge_slave_0: entered promiscuous mode
[   67.153776][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.161942][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.165742][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.168555][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.172153][ T5848] bridge_slave_1: entered allmulticast mode
[   67.176026][ T5848] bridge_slave_1: entered promiscuous mode
[   67.263358][ T5845] team0: Port device team_slave_0 added
[   67.268187][ T5845] team0: Port device team_slave_1 added
[   67.273890][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.283378][ T5847] hsr_slave_0: entered promiscuous mode
[   67.287068][ T5847] hsr_slave_1: entered promiscuous mode
[   67.319111][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.338831][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.341778][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.352155][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.371605][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.374262][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.384775][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.417406][ T5848] team0: Port device team_slave_0 added
[   67.423148][ T5848] team0: Port device team_slave_1 added
[   67.478210][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.480667][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.488491][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.493961][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.496136][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.504389][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.527876][ T5845] hsr_slave_0: entered promiscuous mode
[   67.531612][ T5845] hsr_slave_1: entered promiscuous mode
[   67.534256][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   67.536501][ T5845] Cannot create hsr debugfs directory
[   67.662276][ T5848] hsr_slave_0: entered promiscuous mode
[   67.664995][ T5848] hsr_slave_1: entered promiscuous mode
[   67.667103][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   67.669383][ T5848] Cannot create hsr debugfs directory
[   67.863005][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.872468][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.891925][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.910361][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.957518][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.976718][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.994064][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.005480][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.032406][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.038257][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.047528][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.054255][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.131042][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.154126][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   68.168827][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.171355][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.188217][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.195886][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.198246][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.231751][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.237848][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   68.241209][   T54] Bluetooth: hci1: command tx timeout
[   68.256151][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.259100][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.284985][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.287686][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.296359][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   68.319955][   T54] Bluetooth: hci0: command tx timeout
[   68.320412][ T5850] Bluetooth: hci2: command tx timeout
[   68.329341][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.332427][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.362900][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.365832][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.377718][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.512900][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.569337][ T5847] veth0_vlan: entered promiscuous mode
[   68.584608][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.621460][ T5847] veth1_vlan: entered promiscuous mode
[   68.664976][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.671235][ T5845] veth0_vlan: entered promiscuous mode
[   68.686751][ T5845] veth1_vlan: entered promiscuous mode
[   68.696176][ T5847] veth0_macvtap: entered promiscuous mode
[   68.708364][ T5847] veth1_macvtap: entered promiscuous mode
[   68.744128][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.764539][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.790900][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.796478][ T5845] veth0_macvtap: entered promiscuous mode
[   68.799897][ T5848] veth0_vlan: entered promiscuous mode
[   68.806324][ T5845] veth1_macvtap: entered promiscuous mode
[   68.810746][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.830848][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.834477][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.855207][ T5848] veth1_vlan: entered promiscuous mode
[   68.894620][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.918644][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.942534][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.962385][ T4028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.974121][ T4028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.978583][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.983183][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.986739][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.022212][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.025982][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.033005][ T5848] veth0_macvtap: entered promiscuous mode
[   69.042452][ T5848] veth1_macvtap: entered promiscuous mode
[   69.091764][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.093200][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.109036][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.116889][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.132275][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.140813][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.161883][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.165484][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.168963][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.206201][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.218461][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.334729][ T4028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.337780][ T4028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.386049][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.390632][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.435109][ T5925] tipc: Started in network mode
[   69.437129][ T5925] tipc: Node identity ac14140f, cluster identity 4711
[   69.443336][ T5925] tipc: New replicast peer: 255.255.255.255
[   69.446658][ T5925] tipc: Enabled bearer <udp:syz2>, priority 10
[   69.617123][ T5933] Zero length message leads to an empty skb
[   69.621110][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   69.626982][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.630449][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.922881][ T5948] pim6reg1: entered promiscuous mode
[   69.927109][ T5948] pim6reg1: entered allmulticast mode
[   70.012990][ T5955] openvswitch: netlink: IPv4 tunnel dst address is zero
[   70.235789][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'.
[   70.331967][ T5850] Bluetooth: hci1: command tx timeout
[   70.399806][ T5850] Bluetooth: hci2: command tx timeout
[   70.400600][   T54] Bluetooth: hci0: command tx timeout
[   70.486258][ T5989] bridge_slave_0: left allmulticast mode
[   70.488552][ T5989] bridge_slave_0: left promiscuous mode
[   70.503662][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.515647][ T5989] bridge_slave_1: left allmulticast mode
[   70.518002][ T5989] bridge_slave_1: left promiscuous mode
[   70.523203][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.544913][ T5989] bond0: (slave bond_slave_0): Releasing backup interface
[   70.561577][   T51] tipc: Node number set to 2886997007
[   70.569043][ T5989] bond0: (slave bond_slave_1): Releasing backup interface
[   70.594882][ T5989] team0: Port device team_slave_0 removed
[   70.606722][ T5989] team0: Port device team_slave_1 removed
[   70.612430][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.615916][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.626127][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.629257][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.733156][ T6003] syz.0.41 uses obsolete (PF_INET,SOCK_PACKET)
[   70.877658][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'.
[   70.957562][ T6015] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.46'.
[   71.051916][ T6019] 8021q: adding VLAN 0 to HW filter on device bond1
[   71.123992][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.128654][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.175339][ T6026] netlink: 'syz.0.51': attribute type 1 has an invalid length.
[   71.546061][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   71.573714][ T6053] syz_tun: entered allmulticast mode
[   71.688967][ T6052] syz_tun: left allmulticast mode
[   71.824776][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'.
[   72.060241][   T33] audit: type=1800 audit(1755746028.024:2): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.67" name="memory.events" dev="tmpfs" ino=118 res=0 errno=0
[   72.136183][ T6090] syzkaller1: entered promiscuous mode
[   72.138075][ T6090] syzkaller1: entered allmulticast mode
[   72.250526][ T6096] netlink: 'syz.1.80': attribute type 4 has an invalid length.
[   72.399924][   T54] Bluetooth: hci1: command tx timeout
[   72.458497][ T6115] netlink: 'syz.2.89': attribute type 10 has an invalid length.
[   72.479824][   T54] Bluetooth: hci0: command tx timeout
[   72.490643][   T54] Bluetooth: hci2: command tx timeout
[   72.820380][ T6145] netlink: 'syz.1.102': attribute type 1 has an invalid length.
[   72.857330][ T6145] bond1 (unregistering): Released all slaves
[   72.937153][ T6152] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'.
[   72.993207][ T6154] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.160982][ T6160] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   73.186093][ T6160] bridge_slave_0: left allmulticast mode
[   73.188514][ T6160] bridge_slave_0: left promiscuous mode
[   73.192629][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.199011][ T6160] bridge_slave_1: left allmulticast mode
[   73.208137][ T6160] bridge_slave_1: left promiscuous mode
[   73.212036][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.220479][ T6160] bond0: (slave bond_slave_0): Releasing backup interface
[   73.235141][ T6160] bond0: (slave bond_slave_1): Releasing backup interface
[   73.254592][ T6160] team0: Port device team_slave_0 removed
[   73.266202][ T6160] team0: Port device team_slave_1 removed
[   73.270726][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.273854][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.278549][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.282951][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.294743][ T6162] netlink: 'syz.0.108': attribute type 10 has an invalid length.
[   73.315436][ T6162] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   73.326221][ T6162] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.556119][ T6164] netlink: 'syz.2.109': attribute type 1 has an invalid length.
[   73.707448][ T6168] netlink: 'syz.1.111': attribute type 5 has an invalid length.
[   73.761550][ T6173] openvswitch: netlink: IP tunnel dst address not specified
[   73.854221][ T6180] netlink: 'syz.1.117': attribute type 32 has an invalid length.
[   73.887944][ T6183] netlink: 'syz.1.119': attribute type 23 has an invalid length.
[   73.911931][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.120'.
[   73.981224][   T24] cfg80211: failed to load regulatory.db
[   74.047889][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.126'.
[   74.149845][ T6208] Bluetooth: MGMT ver 1.23
[   74.289271][ T6222] netlink: 'syz.2.138': attribute type 1 has an invalid length.
[   74.293477][ T6222] netlink: 168 bytes leftover after parsing attributes in process `syz.2.138'.
[   74.296385][ T6222] NCSI netlink: No device for ifindex 0
[   74.479829][   T54] Bluetooth: hci1: command tx timeout
[   74.560628][   T54] Bluetooth: hci2: command tx timeout
[   74.725264][ T6210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.798901][ T6251] __nla_validate_parse: 2 callbacks suppressed
[   74.798913][ T6251] netlink: 248 bytes leftover after parsing attributes in process `syz.2.152'.
[   75.862859][ T6276] netlink: 56 bytes leftover after parsing attributes in process `syz.0.161'.
[   75.909585][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[   76.209283][ T6297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.171'.
[   76.242562][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'.
[   76.361221][ T6304] warning: `syz.0.174' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.381154][ T6304] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   76.462701][ T6308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.176'.
[   76.704934][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'.
[   77.833531][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'.
[   77.886534][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'.
[   78.352665][ T6339] hsr_slave_0: left promiscuous mode
[   78.360833][ T6339] hsr_slave_1: left promiscuous mode
[   78.375520][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.384762][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.387643][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.409811][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.417077][ T6345] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.190'.
[   78.640688][ T4028] wlan1: Trigger new scan to find an IBSS to join
[   78.979139][ T6389] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.106700][ T6389] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.183874][ T6389] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.263073][ T6389] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.418340][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.432984][ T5879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.455895][ T5879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.512427][ T5879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.050594][ T6454] __nla_validate_parse: 2 callbacks suppressed
[   80.050638][ T6454] netlink: 156 bytes leftover after parsing attributes in process `syz.1.242'.
[   80.095163][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[   80.208060][ T6458] validate_nla: 1 callbacks suppressed
[   80.208088][ T6458] netlink: 'syz.1.245': attribute type 1 has an invalid length.
[   80.222556][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'.
[   80.227624][ T6458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.245'.
[   80.276890][ T6458] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   80.283313][ T6458] gretap1: entered promiscuous mode
[   80.477954][ T6482] sctp: [Deprecated]: syz.0.255 (pid 6482) Use of int in max_burst socket option deprecated.
[   80.477954][ T6482] Use struct sctp_assoc_value instead
[   80.490729][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'.
[   80.844654][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'.
[   80.859296][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[   81.097293][ T6540] netlink: 9 bytes leftover after parsing attributes in process `syz.0.280'.
[   81.206959][ T6549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.284'.
[   81.296033][ T6558] netlink: 'syz.2.288': attribute type 3 has an invalid length.
[   81.307472][ T6558] netlink: 'syz.2.288': attribute type 3 has an invalid length.
[   81.609853][   T36] wlan1: Trigger new scan to find an IBSS to join
[   81.715736][ T6590] netlink: 14679 bytes leftover after parsing attributes in process `syz.1.304'.
[   81.768771][ T6595] netlink: 'syz.0.306': attribute type 4 has an invalid length.
[   81.848954][ T6601] Bluetooth: MGMT ver 1.23
[   82.333192][ T6637] sit0: entered promiscuous mode
[   82.335240][ T6637] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   82.945893][ T6683] netlink: 'syz.2.344': attribute type 7 has an invalid length.
[   82.954092][ T6683] netlink: 'syz.2.344': attribute type 8 has an invalid length.
[   83.570488][ T6730] sctp: [Deprecated]: syz.1.364 (pid 6730) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.570488][ T6730] Use struct sctp_sack_info instead
[   83.619739][ T6732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.747585][ T6736] geneve0: entered promiscuous mode
[   83.789788][ T6738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.154260][ T6766] tipc: Failed to remove unknown binding: 66,1,1/0:2868591470/2868591472
[   84.158052][ T6766] tipc: Failed to remove unknown binding: 66,1,1/0:2868591470/2868591472
[   84.206796][ T6768] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   84.417134][ T6784] unsupported nla_type 52263
[   84.573267][ T1090] wlan1: Trigger new scan to find an IBSS to join
[   85.085216][ T6842] netlink: 'syz.0.416': attribute type 4 has an invalid length.
[   85.103127][ T6843] __nla_validate_parse: 5 callbacks suppressed
[   85.103146][ T6843] netlink: 232 bytes leftover after parsing attributes in process `syz.1.417'.
[   85.108488][ T6843] netlink: 232 bytes leftover after parsing attributes in process `syz.1.417'.
[   85.112698][ T6843] netlink: 44 bytes leftover after parsing attributes in process `syz.1.417'.
[   85.198525][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[   85.206014][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'.
[   85.265024][ T6860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.422'.
[   85.268501][ T6860] bridge0: port 3(macvlan1) entered blocking state
[   85.271005][ T6860] bridge0: port 3(macvlan1) entered disabled state
[   85.273199][ T6860] macvlan1: entered allmulticast mode
[   85.275016][ T6860] veth1_vlan: entered allmulticast mode
[   85.277904][ T6860] macvlan1: entered promiscuous mode
[   85.333001][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'.
[   85.424612][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'.
[   85.459765][ T6875] macvlan2: entered promiscuous mode
[   85.461884][ T6875] macvlan2: entered allmulticast mode
[   85.464326][ T6875] bond1: (slave macvlan2): Opening slave failed
[   85.534381][ T1090] wlan1: Creating new IBSS network, BSSID 9a:01:4a:d2:f0:c2
[   85.572586][ T6885] syzkaller1: entered promiscuous mode
[   85.576926][ T6885] syzkaller1: entered allmulticast mode
[   85.682628][ T6895] syz.0.438 uses old SIOCAX25GETINFO
[   85.899096][ T6916] openvswitch: netlink: Key type 30 is not supported
[   86.823612][ T6989] netlink: 'syz.1.482': attribute type 21 has an invalid length.
[   86.946484][ T6995] openvswitch: netlink: Message has 16 unknown bytes.
[   86.967080][ T6997] tipc: Started in network mode
[   86.968895][ T6997] tipc: Node identity ac14140f, cluster identity 4711
[   86.982391][ T6997] tipc: New replicast peer: 255.255.255.255
[   86.985297][ T6997] tipc: Enabled bearer <udp:syz2>, priority 10
[   87.280389][ T7032] netlink: 'syz.0.502': attribute type 3 has an invalid length.
[   87.601328][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'.
[   87.760233][ T7047] netlink: 'syz.2.508': attribute type 4 has an invalid length.
[   87.763303][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'.
[   88.000472][ T5899] tipc: Node number set to 2886997007
[   89.140705][ T7150] netlink: 'syz.0.558': attribute type 15 has an invalid length.
[   89.156437][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.163179][ T7150] netlink: 'syz.0.558': attribute type 15 has an invalid length.
[   89.164260][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.170504][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.175111][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.610598][   T56] block nbd0: Receive control failed (result -32)
[   89.792353][ T7179] sctp: [Deprecated]: syz.0.571 (pid 7179) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.792353][ T7179] Use struct sctp_sack_info instead
[   90.175798][ T7207] netlink: 'syz.1.578': attribute type 13 has an invalid length.
[   90.189762][ T7207] netlink: 'syz.1.578': attribute type 17 has an invalid length.
[   90.263373][ T7207] bridge0: port 3(macvlan1) entered blocking state
[   90.266237][ T7207] bridge0: port 3(macvlan1) entered listening state
[   90.269087][ T7207] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.272143][ T7207] bridge0: port 2(bridge_slave_1) entered listening state
[   90.275369][ T7207] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.278323][ T7207] bridge0: port 1(bridge_slave_0) entered listening state
[   90.295798][ T7207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   90.303843][ T7211] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   90.332369][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.403556][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.500832][ T7216] __nla_validate_parse: 3 callbacks suppressed
[   90.500848][ T7216] netlink: 176 bytes leftover after parsing attributes in process `syz.2.585'.
[   90.507391][ T7216] netlink: 176 bytes leftover after parsing attributes in process `syz.2.585'.
[   91.384470][ T7207] syz.1.578 (7207) used greatest stack depth: 19680 bytes left
[   91.506180][ T7242] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[   91.817254][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'.
[   91.825908][ T7268] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.833938][ T7272] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   91.903125][ T7278] netlink: 'syz.2.612': attribute type 11 has an invalid length.
[   91.954121][ T7282] netlink: 'syz.0.614': attribute type 3 has an invalid length.
[   92.545418][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'.
[   92.616289][ T7334] lo speed is unknown, defaulting to 1000
[   92.619697][ T7334] lo speed is unknown, defaulting to 1000
[   92.623711][ T7334] lo speed is unknown, defaulting to 1000
[   92.651693][ T7334] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   92.685914][ T7334] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   92.730817][ T7342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.741530][ T7337] Driver unsupported XDP return value 0 on prog  (id 103) dev N/A, expect packet loss!
[   92.749251][ T7334] lo speed is unknown, defaulting to 1000
[   92.770611][ T7334] lo speed is unknown, defaulting to 1000
[   92.773375][ T7334] lo speed is unknown, defaulting to 1000
[   92.954734][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'.
[   93.105281][ T7380] nbd: must specify a size in bytes for the device
[   93.113154][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'.
[   93.127854][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.664'.
[   93.132670][ T7384] netlink: 152 bytes leftover after parsing attributes in process `syz.1.664'.
[   93.402317][ T7397] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.580952][ T7401] netlink: 'syz.0.671': attribute type 29 has an invalid length.
[   93.952349][ T7426] netlink: 56 bytes leftover after parsing attributes in process `syz.2.682'.
[   94.035673][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'.
[   94.374728][ T7451] netlink: 'syz.2.693': attribute type 22 has an invalid length.
[   94.402701][ T5879] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.406262][ T5879] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.409323][ T5879] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.413581][ T5879] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.417319][ T7451] netlink: 'syz.2.693': attribute type 22 has an invalid length.
[   94.473633][ T7458] lo speed is unknown, defaulting to 1000
[   94.963901][ T7500] netlink: 'syz.1.715': attribute type 1 has an invalid length.
[   94.986054][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.016591][ T7500] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.019729][ T7500] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   95.024899][ T7500] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   95.078920][ T7505] veth3: entered promiscuous mode
[   95.085439][ T7505] bond1: (slave veth3): Enslaving as an active interface with a down link
[   95.105257][ T7500] erspan0: entered allmulticast mode
[   95.112660][ T7500] bond1: (slave erspan0): making interface the new active one
[   95.116412][ T7500] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   95.664299][ T7541] __nla_validate_parse: 5 callbacks suppressed
[   95.664313][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.732'.
[   95.861598][ T7548] block nbd1: server does not support multiple connections per device.
[   95.873788][ T7548] block nbd1: shutting down sockets
[   96.161152][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[   96.164685][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[   96.627738][ T7589] netlink: 'syz.1.751': attribute type 5 has an invalid length.
[   97.193094][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'.
[   97.817518][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'.
[   98.174220][ T7687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.793'.
[   98.296062][ T5858] IPVS: starting estimator thread 0...
[   98.364914][   T33] audit: type=1800 audit(1755746054.334:3): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.793" name="cgroup.controllers" dev="tmpfs" ino=1381 res=0 errno=0
[   98.390767][ T7692] IPVS: using max 61 ests per chain, 146400 per kthread
[   98.480112][ T7700] netlink: 504 bytes leftover after parsing attributes in process `syz.2.798'.
[   98.772689][    C0] Unknown status report in ack skb
[   99.132553][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'.
[   99.135731][ T7729] chnl_net:caif_netlink_parms(): no params data found
[   99.227183][ T7734] bridge: RTM_NEWNEIGH with invalid state 0x8
[   99.434527][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.827'.
[   99.437851][ T7759] tc_dump_action: action bad kind
[   99.594755][ T7773] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  100.594680][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'.
[  101.218177][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'.
[  101.265593][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'.
[  101.563864][ T7849] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.866'.
[  101.884943][ T7859] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  102.412120][ T7873] netlink: 'syz.2.877': attribute type 4 has an invalid length.
[  102.421951][ T7873] netlink: 'syz.2.877': attribute type 4 has an invalid length.
[  102.496325][ T7880] netlink: 'syz.2.880': attribute type 4 has an invalid length.
[  102.505091][ T7880] netlink: 'syz.2.880': attribute type 4 has an invalid length.
[  102.529280][ T7880] lo speed is unknown, defaulting to 1000
[  102.599086][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'.
[  102.625371][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'.
[  102.769029][ T7895] syzkaller0: entered promiscuous mode
[  102.773876][ T7895] syzkaller0: entered allmulticast mode
[  103.636927][ T7910] IPv6: sit1: Disabled Multicast RS
[  103.942691][ T7932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.901'.
[  103.945821][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'.
[  104.901471][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'.
[  105.004615][ T7964] netlink: 'syz.1.916': attribute type 14 has an invalid length.
[  105.157846][ T7969] bridge0: port 3(macvlan1) entered disabled state
[  105.161160][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.164326][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.241746][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.253453][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.317881][ T7969] veth1_vlan: left allmulticast mode
[  105.380394][ T5860] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.383308][ T5860] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.386142][ T5860] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.389878][ T5860] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.686225][ T8017] netlink: 'syz.2.934': attribute type 10 has an invalid length.
[  107.718551][ T8018] erspan0: left allmulticast mode
[  107.756096][ T8020] netlink: 'syz.0.935': attribute type 1 has an invalid length.
[  107.766200][ T8020] netlink: 120 bytes leftover after parsing attributes in process `syz.0.935'.
[  107.781423][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.784988][ T8018] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  107.926989][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'.
[  107.930993][ T8029] netlink: 92 bytes leftover after parsing attributes in process `syz.2.939'.
[  108.076500][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'.
[  108.083262][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.943'.
[  108.103542][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.944'.
[  108.106986][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.944'.
[  108.225294][ T8043] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  108.228011][ T8043] IPv6: NLM_F_CREATE should be set when creating new route
[  108.437499][ T8018] syz.1.931 (8018) used greatest stack depth: 19512 bytes left
[  108.541569][ T8063] syz_tun: entered allmulticast mode
[  108.554723][ T8063] dvmrp8: entered allmulticast mode
[  108.601224][ T8063] lo speed is unknown, defaulting to 1000
[  108.648806][ T5860] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  109.366788][ T8062] syz_tun: left allmulticast mode
[  109.369022][ T8062] dvmrp8: left allmulticast mode
[  109.395668][ T8073] netlink: 'syz.1.954': attribute type 23 has an invalid length.
[  109.932811][ T8108] C: renamed from team_slave_0
[  109.944028][ T8108] netlink: 'syz.0.972': attribute type 3 has an invalid length.
[  109.953371][ T8108] netlink: 152 bytes leftover after parsing attributes in process `syz.0.972'.
[  109.961735][ T8108] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  110.143001][   T33] audit: type=1107 audit(1755746066.114:4): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  110.526159][ T8158] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.996'.
[  110.821880][ T8182] x9: renamed from bridge_slave_0
[  110.826628][ T8182] netlink: 'syz.1.1007': attribute type 5 has an invalid length.
[  110.841322][ T8182] netlink: 'syz.1.1007': attribute type 12 has an invalid length.
[  110.947132][ T8187] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  110.951702][ T8187] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  111.223245][ T8199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.348912][ T8205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1019'.
[  111.398414][ T8205] gretap1: left promiscuous mode
[  111.401140][ T8205] geneve0: left promiscuous mode
[  111.403582][ T8205] veth3: left promiscuous mode
[  111.425477][ T8205] netlink: 'syz.1.1019': attribute type 1 has an invalid length.
[  111.803076][ T8231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.809187][ T8231] syzkaller0: entered promiscuous mode
[  111.814301][ T8231] syzkaller0: entered allmulticast mode
[  111.838757][ T8231] tipc: Resetting bearer <eth:syzkaller0>
[  111.845374][ T8230] tipc: Resetting bearer <eth:syzkaller0>
[  111.868131][ T8230] tipc: Disabling bearer <eth:syzkaller0>
[  112.379679][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.492446][ T8281] syzkaller1: entered promiscuous mode
[  112.494889][ T8281] syzkaller1: entered allmulticast mode
[  113.090066][   T54] Bluetooth: hci2: link tx timeout
[  113.093033][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.097661][ T5850] Bluetooth: hci2: link tx timeout
[  113.100082][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.361329][ T8309] netlink: 'syz.0.1066': attribute type 1 has an invalid length.
[  113.364345][ T8309] __nla_validate_parse: 5 callbacks suppressed
[  113.364359][ T8309] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1066'.
[  114.235193][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'.
[  114.241135][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'.
[  114.685980][ T8366] bond0 (unregistering): Released all slaves
[  115.119750][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  115.128726][ T8339] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  115.131799][ T8339] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  115.163384][ T8339] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  115.165467][ T8339] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  115.269546][ T8418] netlink: 'syz.1.1106': attribute type 83 has an invalid length.
[  115.305577][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1109'.
[  115.308623][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1109'.
[  115.312074][ T8425] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1109'.
[  115.452818][ T8441] netpci0: tun_chr_ioctl cmd 1074025681
[  115.724873][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1117'.
[  116.216987][ T8473] sch_fq: defrate 0 ignored.
[  116.442533][ T8491] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1136'.
[  116.447918][ T8491] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1136'.
[  116.505527][ T8494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.536710][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'.
[  116.760553][ T8514] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  116.765352][ T8514] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  116.772021][ T8514] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  117.024895][ T8536] netlink: 'syz.2.1153': attribute type 5 has an invalid length.
[  117.907684][    C1] vcan0: j1939_session_tx_dat: 0xffff88810c8e9400: queue data error: -100
[  117.910984][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  117.913909][    C1] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[  117.916732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.919678][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.922684][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.925560][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.928485][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.931520][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.934500][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.937410][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.940399][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.943314][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.946250][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.949076][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.952114][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.954981][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.957985][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.960957][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.963905][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.966765][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.969824][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.972778][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.975787][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.978718][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.981774][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.984681][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.987732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.990771][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.993867][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  117.996806][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  117.999867][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.002790][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.005703][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.008636][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.011720][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.014863][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.017867][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.020848][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.023778][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.026663][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.029752][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.032651][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.035636][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.038658][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.041756][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.044571][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.047567][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.050588][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.053568][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.056501][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.059619][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.062606][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.065648][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.068591][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.071806][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.074758][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.077703][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.080702][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.083578][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.086638][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.089844][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.092741][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.095608][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.098473][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.101638][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.104498][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.107372][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.110337][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.113375][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.116275][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.119269][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.122272][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.125324][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.128153][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.131314][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.134274][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.137309][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.140292][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.143170][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.145947][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.148811][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.151770][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.154626][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.157348][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.160315][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.163215][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.166194][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.169014][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.172007][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.175180][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.178227][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.181254][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.184152][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.187011][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.190171][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.193036][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.195984][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.198907][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.201915][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.204777][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.207647][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.210726][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.213685][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.216586][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.219697][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.222509][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.225386][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.228245][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.231418][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.234786][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.237751][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.240708][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.243632][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.246503][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.249637][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.252591][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.255554][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.258435][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.261518][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.264404][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.267335][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.270352][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.273694][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.276563][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.279639][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.282527][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.285500][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  118.288381][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  118.443390][ T8594] netlink: 'syz.1.1179': attribute type 3 has an invalid length.
[  118.921291][ T8627] __nla_validate_parse: 5 callbacks suppressed
[  118.921310][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'.
[  118.927751][ T8627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1195'.
[  118.943015][ T8627] bridge0: port 4(vlan2) entered blocking state
[  118.948725][ T8627] bridge0: port 4(vlan2) entered disabled state
[  118.952552][ T8627] vlan2: entered allmulticast mode
[  118.954670][ T8627] bridge0: entered allmulticast mode
[  118.962168][ T8627] vlan2: left allmulticast mode
[  118.964219][ T8627] bridge0: left allmulticast mode
[  119.088759][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'.
[  119.747968][ T8691] netlink: 'syz.0.1221': attribute type 5 has an invalid length.
[  119.903122][ T8706] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1228'.
[  121.514092][ T8749] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1248'.
[  121.525559][ T8753] netlink: 'syz.2.1250': attribute type 4 has an invalid length.
[  121.658813][ T8769] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1258'.
[  121.669680][ T8769] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1258'.
[  121.673419][ T8769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1258'.
[  121.817344][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1264'.
[  122.072068][ T8798] lo speed is unknown, defaulting to 1000
[  122.466921][   T33] audit: type=1800 audit(1755746078.434:5): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1286" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2059 res=0 errno=0
[  122.485749][ T8832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1288'.
[  122.502624][   T33] audit: type=1804 audit(1755746078.454:6): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1286" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2059 res=1 errno=0
[  122.503916][ T8834] netlink: 'syz.1.1289': attribute type 4 has an invalid length.
[  122.512074][ T8832] openvswitch: netlink: Flow actions attr not present in new flow.
[  122.540494][ T8834] netlink: 'syz.1.1289': attribute type 4 has an invalid length.
[  122.937939][ T8862] lo speed is unknown, defaulting to 1000
[  123.353196][ T8903] netlink: 'syz.2.1319': attribute type 2 has an invalid length.
[  123.356142][ T8903] netlink: 'syz.2.1319': attribute type 1 has an invalid length.
[  123.431757][ T8908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.435518][ T8908] syzkaller0: entered promiscuous mode
[  123.437802][ T8908] syzkaller0: entered allmulticast mode
[  123.464842][ T8908] tipc: Resetting bearer <eth:syzkaller0>
[  123.474282][ T8906] tipc: Resetting bearer <eth:syzkaller0>
[  123.500921][ T8906] tipc: Disabling bearer <eth:syzkaller0>
[  123.515806][ T8917] IPv6: NLM_F_CREATE should be specified when creating new route
[  123.647661][ T8929] veth0: entered promiscuous mode
[  123.681575][ T8929] veth0 (unregistering): left promiscuous mode
[  123.924918][ T8951] netlink: 'syz.2.1342': attribute type 9 has an invalid length.
[  124.293038][ T8979] netlink: 'syz.2.1357': attribute type 1 has an invalid length.
[  124.359303][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.371537][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.421108][ T8991] netlink: 'syz.0.1363': attribute type 1 has an invalid length.
[  124.440385][ T8989] __nla_validate_parse: 2 callbacks suppressed
[  124.440402][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'.
[  124.448680][ T8989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'.
[  124.454080][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'.
[  124.459161][ T8989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'.
[  124.464358][ T8989] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1361'.
[  124.500066][ T8991] bond2: entered promiscuous mode
[  124.502485][ T8991] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.553090][ T8991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.556000][ T8991] IPv6: NLM_F_CREATE should be set when creating new route
[  124.558869][ T8991] IPv6: NLM_F_CREATE should be set when creating new route
[  124.562656][ T8991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.587565][ T8994] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.593939][ T8994] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  124.599610][ T8994] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  124.611353][ T8994] bond2: (slave wireguard0): making interface the new active one
[  124.614585][ T8994] wireguard0: entered promiscuous mode
[  124.618891][ T8994] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  126.244848][ T8991] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  126.439319][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'.
[  126.456406][ T9020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.555710][ T9029] netlink: 'syz.1.1378': attribute type 28 has an invalid length.
[  126.931911][ T9047] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1387'.
[  127.128676][ T9064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.133844][ T9064] syzkaller0: entered promiscuous mode
[  127.135858][ T9064] syzkaller0: entered allmulticast mode
[  127.159224][ T9064] tipc: Resetting bearer <eth:syzkaller0>
[  127.166023][ T9063] tipc: Resetting bearer <eth:syzkaller0>
[  127.178256][ T9063] tipc: Disabling bearer <eth:syzkaller0>
[  127.506817][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'.
[  127.511187][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'.
[  127.514383][ T9076] netlink: 'syz.0.1400': attribute type 13 has an invalid length.
[  127.856327][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'.
[  128.267617][ T9107] netlink: 'syz.1.1414': attribute type 1 has an invalid length.
[  128.272354][ T9107] netlink: 'syz.1.1414': attribute type 2 has an invalid length.
[  128.372308][ T9113] netlink: 'syz.0.1417': attribute type 1 has an invalid length.
[  128.441857][ T9117] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  128.446897][ T9117] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  128.683656][ T9131] lo speed is unknown, defaulting to 1000
[  128.786577][ T9131] gtp0: entered promiscuous mode
[  128.788675][ T9131] gtp0: entered allmulticast mode
[  129.126555][ T9163] lo speed is unknown, defaulting to 1000
[  129.131467][ T9163] lo speed is unknown, defaulting to 1000
[  129.134602][ T9163] lo speed is unknown, defaulting to 1000
[  129.255714][ T9170] ip6tnl1: entered promiscuous mode
[  129.350203][ T9163] infiniband syz0: set down
[  129.352163][ T9163] infiniband syz0: added lo
[  129.392686][   T24] lo speed is unknown, defaulting to 1000
[  129.402033][ T9163] RDS/IB: syz0: added
[  129.404708][ T9163] smc: adding ib device syz0 with port count 1
[  129.407671][ T9163] smc:    ib device syz0 port 1 has pnetid 
[  129.412999][ T5900] lo speed is unknown, defaulting to 1000
[  129.419064][ T9163] lo speed is unknown, defaulting to 1000
[  129.594145][ T9190] __nla_validate_parse: 6 callbacks suppressed
[  129.594164][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1449'.
[  129.714059][ T9163] lo speed is unknown, defaulting to 1000
[  129.912033][ T9163] lo speed is unknown, defaulting to 1000
[  129.936427][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1455'.
[  130.067269][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  130.192394][ T9220] openvswitch: netlink: Multiple metadata blocks provided
[  130.322781][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'.
[  130.385025][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'.
[  130.392850][ T9236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  130.396078][ T9236] IPv6: NLM_F_CREATE should be set when creating new route
[  130.398846][ T9236] IPv6: NLM_F_CREATE should be set when creating new route
[  130.561100][ T9248] tipc: Started in network mode
[  130.563126][ T9248] tipc: Node identity 2249c73b174b, cluster identity 4711
[  130.566017][ T9248] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.573556][ T9248] syzkaller0: entered promiscuous mode
[  130.575540][ T9248] syzkaller0: entered allmulticast mode
[  130.595504][ T9248] tipc: Resetting bearer <eth:syzkaller0>
[  130.611815][ T9247] tipc: Resetting bearer <eth:syzkaller0>
[  130.630748][ T9247] tipc: Disabling bearer <eth:syzkaller0>
[  130.712334][ T9263] netlink: 212264 bytes leftover after parsing attributes in process `syz.0.1484'.
[  130.818260][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'.
[  130.853108][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'.
[  130.957382][ T9282] veth0_vlan: left promiscuous mode
[  130.960329][ T9282] veth0_vlan: entered promiscuous mode
[  131.171863][ T9299] netlink: 'syz.2.1493': attribute type 3 has an invalid length.
[  132.231386][ T9316] lo speed is unknown, defaulting to 1000
[  132.252610][ T9316] lo speed is unknown, defaulting to 1000
[  133.997727][ T9351] tap0: tun_chr_ioctl cmd 2148553947
[  134.201961][ T9367] syzkaller0: entered promiscuous mode
[  134.204017][ T9367] syzkaller0: entered allmulticast mode
[  134.537296][ T9395] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1543'.
[  134.710649][ T9407] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  134.776320][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1552'.
[  134.803076][ T9417] netlink: 'syz.0.1554': attribute type 1 has an invalid length.
[  135.041872][ T9437] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1563'.
[  135.305065][ T9451] lo speed is unknown, defaulting to 1000
[  135.308645][ T9451] lo speed is unknown, defaulting to 1000
[  135.521804][ T9458] netlink: 'syz.1.1573': attribute type 1 has an invalid length.
[  135.529221][ T9458] netlink: 'syz.1.1573': attribute type 1 has an invalid length.
[  135.646386][ T9464] blkio.reset_stats is deprecated
[  135.664011][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1576'.
[  135.773036][ T9470] batadv_slave_0: entered promiscuous mode
[  135.912199][ T9483] sctp: [Deprecated]: syz.2.1583 (pid 9483) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.912199][ T9483] Use struct sctp_sack_info instead
[  136.138088][ T9495] ip6gre1: entered allmulticast mode
[  136.377168][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'.
[  136.438015][ T9511] netlink: 'syz.0.1596': attribute type 1 has an invalid length.
[  136.491819][ T9513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1597'.
[  137.174851][ T9565] xfrm2: entered allmulticast mode
[  137.499088][ T9580] lo speed is unknown, defaulting to 1000
[  137.503087][ T9580] lo speed is unknown, defaulting to 1000
[  137.914758][ T9608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1641'.
[  137.918767][ T9608] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1641'.
[  138.034565][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1645'.
[  138.038181][ T9616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1645'.
[  138.801144][ T9666] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1660'.
[  138.850707][ T9670] netlink: 'syz.0.1661': attribute type 10 has an invalid length.
[  140.123407][ T9720] __nla_validate_parse: 2 callbacks suppressed
[  140.123430][ T9720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1684'.
[  140.295637][ T9736] sctp: [Deprecated]: syz.2.1692 (pid 9736) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.295637][ T9736] Use struct sctp_sack_info instead
[  140.412926][ T9746] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1697'.
[  140.486758][ T9754] netlink: 'syz.2.1701': attribute type 1 has an invalid length.
[  140.490158][ T9754] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1701'.
[  140.493868][ T9754] netlink: 97 bytes leftover after parsing attributes in process `syz.2.1701'.
[  140.531248][ T9756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1702'.
[  140.546367][ T9760] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  140.578026][ T9764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1706'.
[  140.714338][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'.
[  140.717587][ T9771] macvlan1: left allmulticast mode
[  140.727853][ T9771] macvlan1: left promiscuous mode
[  140.732479][ T9771] bridge0: port 3(macvlan1) entered disabled state
[  140.736349][ T9771] bridge_slave_1: left allmulticast mode
[  140.738115][ T9771] bridge_slave_1: left promiscuous mode
[  140.740745][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.752626][ T9771] x9: left allmulticast mode
[  140.754780][ T9771] x9: left promiscuous mode
[  140.756589][ T9771] bridge0: port 1(1x9) entered disabled state
[  141.215353][ T9805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.217840][ T9805] IPv6: NLM_F_CREATE should be set when creating new route
[  141.467221][  T791] IPVS: starting estimator thread 0...
[  141.485472][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1733'.
[  141.579554][ T9827] IPVS: using max 61 ests per chain, 146400 per kthread
[  141.885898][ T9860] nbd: device at index 1 is going down
[  142.006517][ T9865] veth1_to_bond: entered allmulticast mode
[  142.013637][ T9865] bond_slave_1: entered promiscuous mode
[  142.023077][ T9865] bond_slave_1: left promiscuous mode
[  142.025876][ T9865] veth1_to_bond: left allmulticast mode
[  142.204190][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'.
[  142.345620][ T9875] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.089642][ T9920] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  143.159142][ T9926] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  143.165088][ T9926] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  143.291214][ T9938] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1783'.
[  143.308890][ T9937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.313099][ T9937] syzkaller0: entered promiscuous mode
[  143.315469][ T9937] syzkaller0: entered allmulticast mode
[  143.354646][ T9937] tipc: Resetting bearer <eth:syzkaller0>
[  143.365640][ T9934] tipc: Resetting bearer <eth:syzkaller0>
[  143.397973][ T9934] tipc: Disabling bearer <eth:syzkaller0>
[  144.546921][ T9985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.551138][ T9985] syzkaller0: entered promiscuous mode
[  144.553141][ T9985] syzkaller0: entered allmulticast mode
[  144.574516][ T9985] tipc: Resetting bearer <eth:syzkaller0>
[  144.579319][ T9984] tipc: Resetting bearer <eth:syzkaller0>
[  144.594600][ T9984] tipc: Disabling bearer <eth:syzkaller0>
[  145.580425][T10059] can: request_module (can-proto-5) failed.
[  145.702599][T10068] __nla_validate_parse: 7 callbacks suppressed
[  145.702620][T10068] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1842'.
[  145.711184][T10068] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1842'.
[  145.714128][T10068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1842'.
[  145.718960][T10068] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1842'.
[  145.725004][T10068] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1842'.
[  145.727970][T10068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1842'.
[  145.739311][T10070] pimreg: entered allmulticast mode
[  145.756875][T10070] dvmrp8: entered allmulticast mode
[  145.760716][T10070] pimreg: left allmulticast mode
[  145.763166][T10070] dvmrp8: left allmulticast mode
[  146.065991][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1853'.
[  146.148176][T10103] sit0: left promiscuous mode
[  146.189974][T10103] xfrm2: left allmulticast mode
[  146.193649][ T5879] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.197013][ T5879] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.204410][ T5879] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.212946][ T5879] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.505684][T10125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.513126][T10125] syzkaller0: entered promiscuous mode
[  146.516156][T10125] syzkaller0: entered allmulticast mode
[  146.537451][T10125] tipc: Resetting bearer <eth:syzkaller0>
[  146.542341][T10124] tipc: Resetting bearer <eth:syzkaller0>
[  146.557034][T10124] tipc: Disabling bearer <eth:syzkaller0>
[  146.965747][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'.
[  146.985331][T10154] team0 (unregistering): Port device team_slave_0 removed
[  146.989806][T10154] team0 (unregistering): Port device team_slave_1 removed
[  147.133080][T10168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  147.228783][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'.
[  147.354086][T10190] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  147.836481][T10211] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1903'.
[  147.896871][T10213] netlink: 'syz.1.1904': attribute type 9 has an invalid length.
[  148.091589][T10217] lo speed is unknown, defaulting to 1000
[  148.096997][T10217] lo speed is unknown, defaulting to 1000
[  148.128075][T10219] geneve2: entered allmulticast mode
[  148.133041][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.137338][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.140666][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.144376][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.509802][T10229] netlink: 'syz.2.1908': attribute type 4 has an invalid length.
[  148.626990][T10233] lo speed is unknown, defaulting to 1000
[  148.633429][T10233] lo speed is unknown, defaulting to 1000
[  149.351610][T10248] syzkaller0: entered promiscuous mode
[  149.359699][T10248] syzkaller0: entered allmulticast mode
[  151.837574][T10305] netlink: 'syz.1.1937': attribute type 3 has an invalid length.
[  151.846974][T10305] syz_tun: entered allmulticast mode
[  151.881721][T10305] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.886462][T10305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.986836][T10310] __nla_validate_parse: 2 callbacks suppressed
[  151.986859][T10310] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1939'.
[  151.994142][T10310] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1939'.
[  152.251679][T10324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1946'.
[  152.265816][T10324] unsupported nlmsg_type 40
[  152.826103][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1954'.
[  152.989496][T10354] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.083821][T10358] netlink: 'syz.2.1960': attribute type 10 has an invalid length.
[  153.087250][T10358] team0: Cannot enslave team device to itself
[  153.470942][T10370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1966'.
[  153.655202][T10374] syzkaller1: entered promiscuous mode
[  153.657244][T10374] syzkaller1: entered allmulticast mode
[  153.688188][T10378] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  153.729499][T10384] netlink: 'syz.2.1973': attribute type 9 has an invalid length.
[  153.776460][T10388] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1975'.
[  153.785949][T10390] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1976'.
[  153.906478][T10402] netlink: 'syz.2.1984': attribute type 12 has an invalid length.
[  154.112018][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'.
[  154.116305][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'.
[  154.922218][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'.
[  155.630469][T10515] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  155.965477][T10541] netlink: 'syz.2.2041': attribute type 5 has an invalid length.
[  156.635465][T10584] netlink: 'syz.1.2058': attribute type 9 has an invalid length.
[  157.198280][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f32f000: rx timeout, send abort
[  157.702565][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f32f000: abort rx timeout. Force session deactivation
[  157.796254][T10620] __nla_validate_parse: 5 callbacks suppressed
[  157.796277][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2074'.
[  157.882190][T10625] tipc: Trying to set illegal importance in message
[  158.172747][T10650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2089'.
[  158.273110][T10657] netlink: 'syz.0.2093': attribute type 62 has an invalid length.
[  158.327432][T10662] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2095'.
[  158.439033][T10671] netlink: 'syz.1.2099': attribute type 1 has an invalid length.
[  158.456009][T10671] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2099'.
[  158.665258][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2106'.
[  158.901828][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2117'.
[  158.941216][T10711] lo speed is unknown, defaulting to 1000
[  158.947642][T10711] lo speed is unknown, defaulting to 1000
[  159.060027][T10718] bond0: (slave wlan1): Releasing backup interface
[  159.806577][T10754] netlink: 'syz.0.2134': attribute type 4 has an invalid length.
[  160.077555][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'.
[  160.082410][T10769] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  160.085548][T10769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.346417][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.351075][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.355033][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.358657][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.368533][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.373016][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.460607][T10787] netlink: 'syz.0.2147': attribute type 1 has an invalid length.
[  160.578949][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2152'.
[  160.622099][T10797] netlink: 'syz.1.2153': attribute type 7 has an invalid length.
[  160.625429][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'.
[  161.198244][T10831] siw: device registration error -23
[  161.215103][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2167'.
[  161.321526][T10843] trusted_key: syz.0.2175 sent an empty control message without MSG_MORE.
[  162.543152][T10943] netlink: 'syz.2.2221': attribute type 5 has an invalid length.
[  162.546367][T10943] netlink: 'syz.2.2221': attribute type 6 has an invalid length.
[  162.932749][T10983] __nla_validate_parse: 5 callbacks suppressed
[  162.932760][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'.
[  163.019252][T10991] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2244'.
[  163.525952][T11033] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  163.529638][T11033] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  163.631681][T11041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2268'.
[  163.733242][T11048] netlink: 'syz.2.2269': attribute type 13 has an invalid length.
[  163.735985][T11048] netlink: 'syz.2.2269': attribute type 17 has an invalid length.
[  163.767268][T11048] ip6gretap0: entered promiscuous mode
[  163.776362][T11048] 8021q: adding VLAN 0 to HW filter on device team0
[  163.782854][T11048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.788573][  T972] lo speed is unknown, defaulting to 1000
[  163.794957][  T972] syz0: Port: 1 Link ACTIVE
[  163.797467][  T972] lo speed is unknown, defaulting to 1000
[  163.824734][T11048] lo speed is unknown, defaulting to 1000
[  163.828781][T11048] lo speed is unknown, defaulting to 1000
[  163.873382][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.934483][T11051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.010742][T11048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.454683][T11082] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2286'.
[  164.457139][T11084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2287'.
[  164.706935][T11100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2295'.
[  164.711161][T11100] openvswitch: netlink: Flow actions attr not present in new flow.
[  164.716691][T11102] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2296'.
[  164.788514][T11109] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2298'.
[  164.990420][T11127] netlink: 'syz.0.2307': attribute type 9 has an invalid length.
[  165.047087][T11130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2308'.
[  165.241516][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2312'.
[  166.586635][T11208] lo speed is unknown, defaulting to 1000
[  166.591830][T11208] lo speed is unknown, defaulting to 1000
[  166.721346][T11216] netlink: 'syz.0.2342': attribute type 1 has an invalid length.
[  167.229199][T11238] netlink: 'syz.2.2352': attribute type 4 has an invalid length.
[  167.645138][T11284] ==================================================================
[  167.647878][T11284] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  167.650619][T11284] Read of size 2 at addr ffff88802b500142 by task syz.1.2372/11284
[  167.654178][T11284] 
[  167.655506][T11284] CPU: 0 UID: 0 PID: 11284 Comm: syz.1.2372 Not tainted syzkaller #0 PREEMPT(full) 
[  167.655521][T11284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.655528][T11284] Call Trace:
[  167.655534][T11284]  <TASK>
[  167.655556][T11284]  dump_stack_lvl+0x189/0x250
[  167.655572][T11284]  ? __kasan_check_byte+0x12/0x40
[  167.655586][T11284]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.655596][T11284]  ? lock_release+0x4b/0x3e0
[  167.655611][T11284]  ? __virt_addr_valid+0x4a5/0x5c0
[  167.655623][T11284]  print_report+0xca/0x240
[  167.655632][T11284]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  167.655643][T11284]  kasan_report+0x118/0x150
[  167.655656][T11284]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  167.655671][T11284]  __xfrm_state_lookup+0x6ad/0x8d0
[  167.655685][T11284]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  167.655698][T11284]  ? xfrm_state_lookup+0x45/0x1e0
[  167.655706][T11284]  xfrm_state_lookup+0x11e/0x1e0
[  167.655716][T11284]  xfrm_add_sa_expire+0x19c/0x4b0
[  167.655726][T11284]  ? __pfx_xfrm_add_sa_expire+0x10/0x10
[  167.655736][T11284]  ? __nla_parse+0x40/0x60
[  167.655748][T11284]  xfrm_user_rcv_msg+0x7a3/0xab0
[  167.655758][T11284]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  167.655773][T11284]  ? __pfx___mutex_trylock_common+0x10/0x10
[  167.655782][T11284]  ? rcu_is_watching+0x15/0xb0
[  167.655790][T11284]  ? trace_contention_end+0x39/0x120
[  167.655798][T11284]  ? __mutex_lock+0x335/0x1360
[  167.655811][T11284]  netlink_rcv_skb+0x208/0x470
[  167.655824][T11284]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  167.655832][T11284]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.655845][T11284]  ? netlink_deliver_tap+0x2e/0x1b0
[  167.655856][T11284]  ? netlink_deliver_tap+0x2e/0x1b0
[  167.655866][T11284]  xfrm_netlink_rcv+0x79/0x90
[  167.655875][T11284]  netlink_unicast+0x82f/0x9e0
[  167.655914][T11284]  ? __pfx_netlink_unicast+0x10/0x10
[  167.655927][T11284]  ? netlink_sendmsg+0x642/0xb30
[  167.655938][T11284]  ? skb_put+0x11b/0x210
[  167.655946][T11284]  netlink_sendmsg+0x805/0xb30
[  167.655960][T11284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.655974][T11284]  ? aa_sock_msg_perm+0xf1/0x1d0
[  167.655988][T11284]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  167.655997][T11284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.656008][T11284]  __sock_sendmsg+0x21c/0x270
[  167.656019][T11284]  ____sys_sendmsg+0x505/0x830
[  167.656027][T11284]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.656037][T11284]  ? import_iovec+0x74/0xa0
[  167.656046][T11284]  ___sys_sendmsg+0x21f/0x2a0
[  167.656054][T11284]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.656068][T11284]  ? __fget_files+0x2a/0x420
[  167.656079][T11284]  ? __fget_files+0x3a0/0x420
[  167.656108][T11284]  __x64_sys_sendmsg+0x19b/0x260
[  167.656117][T11284]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.656128][T11284]  ? rcu_is_watching+0x15/0xb0
[  167.656137][T11284]  ? do_syscall_64+0xbe/0x3b0
[  167.656151][T11284]  do_syscall_64+0xfa/0x3b0
[  167.656163][T11284]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.656173][T11284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.656181][T11284]  ? exc_page_fault+0x9f/0xf0
[  167.656191][T11284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.656200][T11284] RIP: 0033:0x7f8763b8ebe9
[  167.656211][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.656218][T11284] RSP: 002b:00007f87649f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.656229][T11284] RAX: ffffffffffffffda RBX: 00007f8763db5fa0 RCX: 00007f8763b8ebe9
[  167.656235][T11284] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  167.656241][T11284] RBP: 00007f8763c11e19 R08: 0000000000000000 R09: 0000000000000000
[  167.656247][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.656252][T11284] R13: 00007f8763db6038 R14: 00007f8763db5fa0 R15: 00007fff76bb3aa8
[  167.656261][T11284]  </TASK>
[  167.656264][T11284] 
[  167.785847][T11284] Allocated by task 10898:
[  167.787318][T11284]  kasan_save_track+0x3e/0x80
[  167.788866][T11284]  __kasan_slab_alloc+0x6c/0x80
[  167.790452][T11284]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  167.792175][T11284]  xfrm_state_alloc+0x24/0x2f0
[  167.793674][T11284]  pfkey_add+0x6e4/0x2e00
[  167.795182][T11284]  pfkey_sendmsg+0xbfe/0x1090
[  167.796680][T11284]  __sock_sendmsg+0x21c/0x270
[  167.798208][T11284]  ____sys_sendmsg+0x505/0x830
[  167.799765][T11284]  ___sys_sendmsg+0x21f/0x2a0
[  167.801288][T11284]  __x64_sys_sendmsg+0x19b/0x260
[  167.802838][T11284]  do_syscall_64+0xfa/0x3b0
[  167.804302][T11284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.806574][T11284] 
[  167.807422][T11284] Freed by task 791:
[  167.808687][T11284]  kasan_save_track+0x3e/0x80
[  167.810465][T11284]  kasan_save_free_info+0x46/0x50
[  167.812016][T11284]  __kasan_slab_free+0x5b/0x80
[  167.813525][T11284]  kmem_cache_free+0x18f/0x400
[  167.815040][T11284]  xfrm_state_gc_task+0x52d/0x6b0
[  167.816629][T11284]  process_scheduled_works+0xae1/0x17b0
[  167.818406][T11284]  worker_thread+0x8a0/0xda0
[  167.819850][T11284]  kthread+0x711/0x8a0
[  167.821145][T11284]  ret_from_fork+0x3fc/0x770
[  167.822608][T11284]  ret_from_fork_asm+0x1a/0x30
[  167.824143][T11284] 
[  167.824871][T11284] The buggy address belongs to the object at ffff88802b500000
[  167.824871][T11284]  which belongs to the cache xfrm_state of size 928
[  167.829099][T11284] The buggy address is located 322 bytes inside of
[  167.829099][T11284]  freed 928-byte region [ffff88802b500000, ffff88802b5003a0)
[  167.833385][T11284] 
[  167.834144][T11284] The buggy address belongs to the physical page:
[  167.836136][T11284] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b500000 pfn:0x2b500
[  167.839537][T11284] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  167.842429][T11284] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  167.845021][T11284] page_type: f5(slab)
[  167.846328][T11284] raw: 00fff00000000040 ffff888104a3cc80 dead000000000122 0000000000000000
[  167.849563][T11284] raw: ffff88802b500000 00000000800e0007 00000000f5000000 0000000000000000
[  167.852318][T11284] head: 00fff00000000040 ffff888104a3cc80 dead000000000122 0000000000000000
[  167.855113][T11284] head: ffff88802b500000 00000000800e0007 00000000f5000000 0000000000000000
[  167.857895][T11284] head: 00fff00000000002 ffffea0000ad4001 00000000ffffffff 00000000ffffffff
[  167.860981][T11284] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  167.863897][T11284] page dumped because: kasan: bad access detected
[  167.865933][T11284] page_owner tracks the page as allocated
[  167.867719][T11284] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6270, tgid 6269 (syz.1.158), ts 75805381251, free_ts 75444323505
[  167.873648][T11284]  post_alloc_hook+0x240/0x2a0
[  167.875193][T11284]  get_page_from_freelist+0x21e4/0x22c0
[  167.876922][T11284]  __alloc_frozen_pages_noprof+0x181/0x370
[  167.878743][T11284]  alloc_pages_mpol+0x232/0x4a0
[  167.880316][T11284]  allocate_slab+0x8a/0x370
[  167.882003][T11284]  ___slab_alloc+0xbeb/0x1410
[  167.883929][T11284]  kmem_cache_alloc_noprof+0x283/0x3c0
[  167.886170][T11284]  xfrm_state_alloc+0x24/0x2f0
[  167.888151][T11284]  __find_acq_core+0x8a7/0x1c00
[  167.890070][T11284]  xfrm_find_acq+0x78/0xa0
[  167.891942][T11284]  xfrm_alloc_userspi+0x6b3/0xc90
[  167.893966][T11284]  xfrm_user_rcv_msg+0x7a3/0xab0
[  167.895969][T11284]  netlink_rcv_skb+0x208/0x470
[  167.897865][T11284]  xfrm_netlink_rcv+0x79/0x90
[  167.899811][T11284]  netlink_unicast+0x82f/0x9e0
[  167.901727][T11284]  netlink_sendmsg+0x805/0xb30
[  167.903670][T11284] page last free pid 5847 tgid 5847 stack trace:
[  167.906234][T11284]  __free_frozen_pages+0xbc4/0xd30
[  167.908337][T11284]  __slab_free+0x303/0x3c0
[  167.910010][T11284]  qlist_free_all+0x97/0x140
[  167.911504][T11284]  kasan_quarantine_reduce+0x148/0x160
[  167.913269][T11284]  __kasan_slab_alloc+0x22/0x80
[  167.914910][T11284]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  167.916685][T11284]  getname_flags+0xb8/0x540
[  167.918157][T11284]  user_path_at+0x24/0x60
[  167.919554][T11284]  __x64_sys_umount+0xee/0x160
[  167.921199][T11284]  do_syscall_64+0xfa/0x3b0
[  167.922614][T11284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.924520][T11284] 
[  167.925302][T11284] Memory state around the buggy address:
[  167.927163][T11284]  ffff88802b500000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.929680][T11284]  ffff88802b500080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.932254][T11284] >ffff88802b500100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.934790][T11284]                                            ^
[  167.936822][T11284]  ffff88802b500180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.939406][T11284]  ffff88802b500200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.941946][T11284] ==================================================================
[  167.962546][T11284] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  167.964888][T11284] CPU: 0 UID: 0 PID: 11284 Comm: syz.1.2372 Not tainted syzkaller #0 PREEMPT(full) 
[  167.967917][T11284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.971151][T11284] Call Trace:
[  167.972241][T11284]  <TASK>
[  167.973213][T11284]  dump_stack_lvl+0x99/0x250
[  167.975085][T11284]  ? __asan_memcpy+0x40/0x70
[  167.976950][T11284]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.979104][T11284]  ? __pfx__printk+0x10/0x10
[  167.981036][T11284]  vpanic+0x281/0x750
[  167.982728][T11284]  ? preempt_schedule+0xae/0xc0
[  167.984638][T11284]  ? __pfx_vpanic+0x10/0x10
[  167.986131][T11284]  ? preempt_schedule_common+0x83/0xd0
[  167.987908][T11284]  ? preempt_schedule+0xae/0xc0
[  167.989521][T11284]  ? __pfx_preempt_schedule+0x10/0x10
[  167.991347][T11284]  panic+0xb9/0xc0
[  167.992585][T11284]  ? __pfx_panic+0x10/0x10
[  167.994246][T11284]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  167.996193][T11284]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  167.997887][T11284]  check_panic_on_warn+0x89/0xb0
[  167.999471][T11284]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  168.001228][T11284]  end_report+0x78/0x160
[  168.002718][T11284]  kasan_report+0x129/0x150
[  168.004299][T11284]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  168.006029][T11284]  __xfrm_state_lookup+0x6ad/0x8d0
[  168.007893][T11284]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  168.009784][T11284]  ? xfrm_state_lookup+0x45/0x1e0
[  168.011425][T11284]  xfrm_state_lookup+0x11e/0x1e0
[  168.012996][T11284]  xfrm_add_sa_expire+0x19c/0x4b0
[  168.014593][T11284]  ? __pfx_xfrm_add_sa_expire+0x10/0x10
[  168.016361][T11284]  ? __nla_parse+0x40/0x60
[  168.017858][T11284]  xfrm_user_rcv_msg+0x7a3/0xab0
[  168.019565][T11284]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  168.021812][T11284]  ? __pfx___mutex_trylock_common+0x10/0x10
[  168.024101][T11284]  ? rcu_is_watching+0x15/0xb0
[  168.026120][T11284]  ? trace_contention_end+0x39/0x120
[  168.027881][T11284]  ? __mutex_lock+0x335/0x1360
[  168.029631][T11284]  netlink_rcv_skb+0x208/0x470
[  168.031214][T11284]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  168.033270][T11284]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.035474][T11284]  ? netlink_deliver_tap+0x2e/0x1b0
[  168.037639][T11284]  ? netlink_deliver_tap+0x2e/0x1b0
[  168.039778][T11284]  xfrm_netlink_rcv+0x79/0x90
[  168.041435][T11284]  netlink_unicast+0x82f/0x9e0
[  168.043091][T11284]  ? __pfx_netlink_unicast+0x10/0x10
[  168.044762][T11284]  ? netlink_sendmsg+0x642/0xb30
[  168.046382][T11284]  ? skb_put+0x11b/0x210
[  168.048133][T11284]  netlink_sendmsg+0x805/0xb30
[  168.050050][T11284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.052074][T11284]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.053902][T11284]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.055603][T11284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.057469][T11284]  __sock_sendmsg+0x21c/0x270
[  168.059452][T11284]  ____sys_sendmsg+0x505/0x830
[  168.061478][T11284]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.063653][T11284]  ? import_iovec+0x74/0xa0
[  168.065391][T11284]  ___sys_sendmsg+0x21f/0x2a0
[  168.067310][T11284]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.069406][T11284]  ? __fget_files+0x2a/0x420
[  168.071169][T11284]  ? __fget_files+0x3a0/0x420
[  168.072721][T11284]  __x64_sys_sendmsg+0x19b/0x260
[  168.074435][T11284]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.076161][T11284]  ? rcu_is_watching+0x15/0xb0
[  168.077755][T11284]  ? do_syscall_64+0xbe/0x3b0
[  168.079274][T11284]  do_syscall_64+0xfa/0x3b0
[  168.080708][T11284]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.082346][T11284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.084275][T11284]  ? exc_page_fault+0x9f/0xf0
[  168.085816][T11284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.087750][T11284] RIP: 0033:0x7f8763b8ebe9
[  168.089241][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.096478][T11284] RSP: 002b:00007f87649f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.099894][T11284] RAX: ffffffffffffffda RBX: 00007f8763db5fa0 RCX: 00007f8763b8ebe9
[  168.103199][T11284] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003
[  168.105807][T11284] RBP: 00007f8763c11e19 R08: 0000000000000000 R09: 0000000000000000
[  168.108466][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.111002][T11284] R13: 00007f8763db6038 R14: 00007f8763db5fa0 R15: 00007fff76bb3aa8
[  168.113571][T11284]  </TASK>
[  168.115181][T11284] Kernel Offset: disabled
[  168.116626][T11284] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:15:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013d8 RDI=00000000000013d9 RBP=00000000000003f8 RSP=ffffc9000417ea30
R8 =ffff888021b40237 R9 =1ffff11004368046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af990e R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f87649f76c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f87649f6fc8 CR3=000000010d0d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8763d87498 00007f8763d87470 XMM03=00007f8763d874a8 00007f8763d874a0
XMM04=00007f87648ed100 00007f8763d87460 XMM05=00007f8763d87478 00007f8763d874c0
XMM06=00007f8763d874b8 00007f8763d874b0 XMM07=00007f8763d874a8 00007f8763d874a0
XMM08=0000000000000000 00007f8763c12ee7 XMM09=0000000000000000 00007f8763c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44deb RBX=1ffff11009608341 RCX=ffff888113763980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000310f600 RSP=ffffc9000310f480
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44dd3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f72726ca6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000010d0d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000029
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f87648ed100 00007f8763d87460 XMM05=00007f8763d87478 00007f8763d874c0
XMM06=00007f8763d874b8 00007f8763d874b0 XMM07=00007f8763d874a8 00007f8763d874a0
XMM08=0000000000000000 00007f8763c12ee7 XMM09=0000000000000000 00007f8763c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
