last executing test programs:

1.305641711s ago: executing program 0 (id=2393):
r0 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0xf3e, 0x0)

1.182170681s ago: executing program 0 (id=2400):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)

1.178781578s ago: executing program 0 (id=2403):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x80047441, &(0x7f0000000180))

1.082832622s ago: executing program 0 (id=2409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

1.030056586s ago: executing program 0 (id=2412):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
close(0x3)

929.040214ms ago: executing program 1 (id=2419):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804)

158.295825ms ago: executing program 0 (id=2422):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="39c1309b9e556c7800"/28], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0)
epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000ffffff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a310000000014000480080001400000000007000240000000000a0007006e617400140000001100010000000000000000000000000a897f4d49d3915e655bf373"], 0x94}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="040100001c0007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRESOCT=r7], 0x104}}, 0x0)

158.097815ms ago: executing program 1 (id=2423):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0xb, 0x10001, 0x9, 0x1}, 0x50)

155.545836ms ago: executing program 2 (id=2424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0x7}, 0x18)

155.344808ms ago: executing program 1 (id=2425):
unshare(0x20000400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0)

155.243373ms ago: executing program 2 (id=2426):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x0)

95.685109ms ago: executing program 1 (id=2427):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', <r0=>0x0})
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r0, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x2}, 0xc)
bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x6)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xa, 0x4)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYBLOB='2\x00'/12, @ANYRESOCT, @ANYBLOB="e3", @ANYBLOB="fcab553bb34cd0dadff9be3495bcea65e4b446de9a04e4ab3cbbfdaf95", @ANYBLOB="b534eb6524f511515aa99c65f0a24a87f1122a5a775be1e1cf7f3bc9b986f31e57289a8c84733a3f4264765a9f2e4c7d2454f9f3d4155153fadf1f81dc77a29cdaf75ee51114a26bf381a22c80eeab19cc7ac1a6b08ef3ae274630ec"], 0x20)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={0x0, 0x28}}, 0x20004000)
sendmsg$nl_route_sched(r7, 0x0, 0x2000400c)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf25010000001c000480050003000000000005000300000000000500030006000000080002000200000074000c801c000b80080009004a2b5363080009000c2c5e2e08000a006997000054000b8008000a007707000008000900fe015869080009009dc7780d080009002c77fb2808000900ddd4743808000a00030b000008000a001ac7000008000a00af3b000008000a00f6a8000008000a0007c8000044000480050003000000000005000300000000000500030001000000050003000500000005a2aa211349924cfce8000300060000000500030006000000050003000700000005000300000000000c0004"], 0xfc}}, 0x4)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x34}}, 0x0)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c"], 0x114}], 0x1}, 0x0)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18)

95.477536ms ago: executing program 2 (id=2428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0)

95.355306ms ago: executing program 2 (id=2429):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00', {0x2, 0x0, @local}})

66.275777ms ago: executing program 2 (id=2430):
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local, {[@end, @end, @timestamp_addr={0x44, 0x4, 0x7d, 0x1, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)

2.409339ms ago: executing program 1 (id=2431):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0)

1.474684ms ago: executing program 1 (id=2432):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="920d", 0x2}], 0x1}}], 0x1, 0x20040000)
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4)
recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0)

0s ago: executing program 2 (id=2433):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49767' (ED25519) to the list of known hosts.
syzkaller login: [   40.690448][ T5745] cgroup: Unknown subsys name 'net'
[   40.795999][ T5745] cgroup: Unknown subsys name 'cpuset'
[   40.799853][ T5745] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.143638][ T5745] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   51.944932][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.969417][ T5210] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.972071][ T5210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.975897][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.979036][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.981865][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.984861][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.994661][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.997278][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.001436][ T5210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.005286][ T5210] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.008546][ T5210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.011459][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   52.012526][ T5210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.018001][ T5210] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.249243][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   52.309252][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   52.331148][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   52.399205][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.401568][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.404516][ T5850] bridge_slave_0: entered allmulticast mode
[   52.407414][ T5850] bridge_slave_0: entered promiscuous mode
[   52.435417][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.437825][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.440092][ T5850] bridge_slave_1: entered allmulticast mode
[   52.443272][ T5850] bridge_slave_1: entered promiscuous mode
[   52.460615][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.462851][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.466248][ T5853] bridge_slave_0: entered allmulticast mode
[   52.468885][ T5853] bridge_slave_0: entered promiscuous mode
[   52.471486][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.474500][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.477236][ T5856] bridge_slave_0: entered allmulticast mode
[   52.480083][ T5856] bridge_slave_0: entered promiscuous mode
[   52.490801][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.493008][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.495717][ T5853] bridge_slave_1: entered allmulticast mode
[   52.498363][ T5853] bridge_slave_1: entered promiscuous mode
[   52.507872][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.510491][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.512848][ T5856] bridge_slave_1: entered allmulticast mode
[   52.515899][ T5856] bridge_slave_1: entered promiscuous mode
[   52.527755][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.546503][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.550553][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.562028][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.566471][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.578306][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.582063][ T5850] team0: Port device team_slave_0 added
[   52.605279][ T5850] team0: Port device team_slave_1 added
[   52.608064][ T5853] team0: Port device team_slave_0 added
[   52.624491][ T5853] team0: Port device team_slave_1 added
[   52.642424][ T5856] team0: Port device team_slave_0 added
[   52.646217][ T5856] team0: Port device team_slave_1 added
[   52.662601][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.665142][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.672828][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.677211][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.679404][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.687881][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.692459][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.695005][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.702944][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.713697][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.715900][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.724153][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.727890][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.730044][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.737905][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.745355][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.747514][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.755890][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.807240][ T5850] hsr_slave_0: entered promiscuous mode
[   52.809555][ T5850] hsr_slave_1: entered promiscuous mode
[   52.822402][ T5853] hsr_slave_0: entered promiscuous mode
[   52.825581][ T5853] hsr_slave_1: entered promiscuous mode
[   52.827771][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   52.829599][ T5853] Cannot create hsr debugfs directory
[   52.835191][ T5856] hsr_slave_0: entered promiscuous mode
[   52.837929][ T5856] hsr_slave_1: entered promiscuous mode
[   52.839983][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   52.841837][ T5856] Cannot create hsr debugfs directory
[   53.055137][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.062145][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.067814][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.078016][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.115030][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.125079][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.131733][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.134123][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.136738][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.139040][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.145075][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.163714][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.186056][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.196489][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.201144][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   53.210485][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   53.219982][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.222340][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.224808][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.227083][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.246649][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.249639][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.252375][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.255882][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.296783][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.319692][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   53.330530][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.332746][ T4641] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.339819][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.342070][ T4641] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.348896][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.367465][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   53.385415][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.387787][ T4641] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.398180][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.400502][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.407624][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.440734][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   53.458882][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.461154][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.470735][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.473036][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.515047][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.564707][ T5853] veth0_vlan: entered promiscuous mode
[   53.570037][ T5853] veth1_vlan: entered promiscuous mode
[   53.600780][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.605822][ T5853] veth0_macvtap: entered promiscuous mode
[   53.610783][ T5853] veth1_macvtap: entered promiscuous mode
[   53.629121][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.639494][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.647416][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.652785][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.661083][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.665660][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.676321][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.687495][ T5856] veth0_vlan: entered promiscuous mode
[   53.715142][ T5856] veth1_vlan: entered promiscuous mode
[   53.721835][ T5850] veth0_vlan: entered promiscuous mode
[   53.737433][ T5850] veth1_vlan: entered promiscuous mode
[   53.750425][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.754870][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.772763][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.773039][ T5856] veth0_macvtap: entered promiscuous mode
[   53.777798][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.787633][ T5856] veth1_macvtap: entered promiscuous mode
[   53.800557][ T5850] veth0_macvtap: entered promiscuous mode
[   53.808058][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.809605][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   53.819683][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.827361][ T5850] veth1_macvtap: entered promiscuous mode
[   53.850067][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.855136][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   53.862743][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.865814][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.868742][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.878152][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   53.883288][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.898785][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.901542][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.913141][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.950260][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   53.953765][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.001573][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.010219][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.044234][ T5855] Bluetooth: hci0: command tx timeout
[   54.046130][ T5855] Bluetooth: hci2: command tx timeout
[   54.047010][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.047939][ T5851] Bluetooth: hci1: command tx timeout
[   54.050993][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.088767][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.091185][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.230656][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[   54.351243][ T5944] tipc: Started in network mode
[   54.352961][ T5944] tipc: Node identity 26d34625bfcb, cluster identity 4711
[   54.357684][ T5944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.360580][ T5944] syzkaller0: entered promiscuous mode
[   54.362820][ T5944] syzkaller0: entered allmulticast mode
[   54.402917][ T5944] tipc: Resetting bearer <eth:syzkaller0>
[   54.414521][ T5943] tipc: Resetting bearer <eth:syzkaller0>
[   54.427923][ T5943] tipc: Disabling bearer <eth:syzkaller0>
[   54.531194][ T5963] netlink: 'syz.0.43': attribute type 10 has an invalid length.
[   54.539039][ T5963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.43'.
[   54.555017][ T5963] batman_adv: batadv0: Adding interface: virt_wifi0
[   54.557095][ T5963] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.578750][ T5963] batman_adv: batadv0: Interface activated: virt_wifi0
[   54.636123][ T5287] IPVS: starting estimator thread 0...
[   54.680484][ T5980] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.51'.
[   54.764646][ T5976] IPVS: using max 79 ests per chain, 189600 per kthread
[   54.925153][ T6002] syz.2.62 uses obsolete (PF_INET,SOCK_PACKET)
[   54.944115][ T6002] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[   55.790778][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'.
[   55.925464][ T6102] warning: `syz.0.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.969923][ T6110] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.976363][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'.
[   55.980002][ T6110] bridge_slave_1: left allmulticast mode
[   55.981916][ T6110] bridge_slave_1: left promiscuous mode
[   55.987496][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.989418][ T6111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'.
[   55.992750][ T6111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'.
[   55.997168][ T6111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'.
[   56.000166][ T6111] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'.
[   56.006453][ T6110] bridge_slave_0: left allmulticast mode
[   56.008428][ T6110] bridge_slave_0: left promiscuous mode
[   56.010340][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.123678][ T5851] Bluetooth: hci1: command tx timeout
[   56.125618][ T5851] Bluetooth: hci2: command tx timeout
[   56.127850][ T5851] Bluetooth: hci0: command tx timeout
[   56.497662][ T6145] netlink: 'syz.0.123': attribute type 83 has an invalid length.
[   56.562677][ T6151] Illegal XDP return value 576795916 on prog  (id 13) dev N/A, expect packet loss!
[   56.684590][ T6161] netlink: 40 bytes leftover after parsing attributes in process `syz.0.131'.
[   56.851459][ T6172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   57.239200][ T6216] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.489750][ T6237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.827042][ T6262] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   57.909254][ T6268] netlink: 'syz.0.179': attribute type 10 has an invalid length.
[   57.938083][ T6268] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.100050][ T6283] netlink: 'syz.0.186': attribute type 1 has an invalid length.
[   58.118213][ T6283] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.121513][ T6286] Zero length message leads to an empty skb
[   58.145664][ T6283] bond1: (slave veth3): Enslaving as an active interface with a down link
[   58.153935][ T6283] vlan2: entered allmulticast mode
[   58.155717][ T6283] veth1: entered allmulticast mode
[   58.158125][ T6283] veth1: entered promiscuous mode
[   58.160172][ T6283] veth1: left promiscuous mode
[   58.162966][ T6283] bond1: (slave vlan2): making interface the new active one
[   58.166210][ T6283] veth1: entered promiscuous mode
[   58.168556][ T6283] vlan2: entered promiscuous mode
[   58.170698][ T6283] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   58.175616][ T6282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.213636][ T5851] Bluetooth: hci0: command tx timeout
[   58.214040][ T5210] Bluetooth: hci1: command tx timeout
[   58.217352][ T5855] Bluetooth: hci2: command tx timeout
[   58.517857][ T6323] netlink: 'syz.1.205': attribute type 83 has an invalid length.
[   59.895064][ T6386] __nla_validate_parse: 15 callbacks suppressed
[   59.895074][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'.
[   60.284977][ T5855] Bluetooth: hci0: command tx timeout
[   60.286980][ T5210] Bluetooth: hci2: command tx timeout
[   60.287072][ T5851] Bluetooth: hci1: command tx timeout
[   60.306784][ T6422] netlink: 87 bytes leftover after parsing attributes in process `syz.1.250'.
[   60.506751][ T6445] netlink: 76 bytes leftover after parsing attributes in process `syz.0.258'.
[   60.518803][ T6445] netlink: 76 bytes leftover after parsing attributes in process `syz.0.258'.
[   60.559482][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.259'.
[   61.804049][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'.
[   63.670607][ T6645] openvswitch: netlink: Missing valid actions attribute.
[   63.677188][ T6645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.846544][ T6651] netlink: 27 bytes leftover after parsing attributes in process `syz.0.309'.
[   63.940154][ T6657] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   64.102983][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'.
[   64.462475][ T6711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.335'.
[   64.505952][ T6715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.337'.
[   64.509007][ T6715] bond0: invalid ARP target 0.0.0.0 specified for addition
[   64.511508][ T6715] bond0: option arp_ip_target: invalid value (0)
[   64.909125][ T6739] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   64.911926][ T6739] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   65.028017][ T6747] ieee802154 phy0 wpan0: encryption failed: -22
[   65.103229][ T6753] sctp: [Deprecated]: syz.1.356 (pid 6753) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.103229][ T6753] Use struct sctp_sack_info instead
[   65.483921][ T5210] Bluetooth: hci2: command 0x0405 tx timeout
[   65.604929][ T6798] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   65.820580][ T6811] __nla_validate_parse: 1 callbacks suppressed
[   65.820590][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.382'.
[   65.837610][ T6811] bridge_slave_0: left allmulticast mode
[   65.839847][ T6811] bridge_slave_0: left promiscuous mode
[   65.842562][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.848901][ T6811] bridge_slave_1: left allmulticast mode
[   65.851325][ T6811] bridge_slave_1: left promiscuous mode
[   65.853447][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.863348][ T6811] bond0: (slave bond_slave_0): Releasing backup interface
[   65.869045][ T6811] bond0: (slave bond_slave_1): Releasing backup interface
[   65.876435][ T6811] team0: Port device team_slave_0 removed
[   65.881166][ T6811] team0: Port device team_slave_1 removed
[   65.885462][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.887992][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.891547][ T6811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.895412][ T6811] batman_adv: batadv0: Removing interface: batadv_slave_1
[   65.899789][ T6811] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   65.902430][ T6811] batman_adv: batadv0: Removing interface: virt_wifi0
[   65.909462][ T6811] bond0: (slave wlan1): Releasing backup interface
[   65.915918][ T6811] bond1: (slave veth3): Releasing active interface
[   65.918110][ T6811] bond1: (slave veth3): the permanent HWaddr of slave - f6:48:ea:10:25:61 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   65.926310][ T6811] bond1: (slave vlan2): Releasing active interface
[   65.929539][ T6811] vlan2: left promiscuous mode
[   65.933097][ T6811] veth1: left promiscuous mode
[   65.945295][ T6812] team0: Mode changed to "broadcast"
[   65.947830][ T6813] vlan0: entered promiscuous mode
[   65.957380][ T6813] team0: Port device vlan0 added
[   65.974678][ T6815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.977489][ T6815] syzkaller0: entered promiscuous mode
[   65.979371][ T6815] syzkaller0: entered allmulticast mode
[   65.989025][ T6811] tipc: Started in network mode
[   65.990724][ T6811] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   65.993951][ T6811] tipc: Enabled bearer <eth:team0>, priority 31
[   65.997566][ T6815] tipc: Resetting bearer <eth:syzkaller0>
[   66.001525][ T6814] tipc: Resetting bearer <eth:syzkaller0>
[   66.010639][ T6814] tipc: Disabling bearer <eth:syzkaller0>
[   66.140151][ T6825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.144334][ T6825] syzkaller0: entered promiscuous mode
[   66.146211][ T6825] syzkaller0: entered allmulticast mode
[   66.159793][ T6825] tipc: Resetting bearer <eth:syzkaller0>
[   66.171881][ T6824] tipc: Resetting bearer <eth:syzkaller0>
[   66.179702][ T6824] tipc: Disabling bearer <eth:syzkaller0>
[   66.191576][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'.
[   66.304780][ T6844] netlink: 60 bytes leftover after parsing attributes in process `syz.1.397'.
[   66.330704][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[   66.336008][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'.
[   66.520548][ T6872] lo speed is unknown, defaulting to 1000
[   66.522543][ T6872] lo speed is unknown, defaulting to 1000
[   66.527550][ T6872] lo speed is unknown, defaulting to 1000
[   66.531844][ T6872] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   66.541393][ T6872] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   66.557594][ T6872] lo speed is unknown, defaulting to 1000
[   66.560339][ T6872] lo speed is unknown, defaulting to 1000
[   66.562900][ T6872] lo speed is unknown, defaulting to 1000
[   66.653336][ T6878] netlink: 44 bytes leftover after parsing attributes in process `syz.1.414'.
[   66.674621][ T6878] team0: Port device team_slave_0 removed
[   66.787941][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'.
[   66.809811][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'.
[   66.814827][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'.
[   66.820774][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'.
[   66.848287][ T6891] tipc: Resetting bearer <eth:team0>
[   66.910232][ T6891] vlan0: left promiscuous mode
[   66.942635][ T6891] vlan2: left allmulticast mode
[   66.945828][ T6891] veth1: left allmulticast mode
[   66.953728][ T5849] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.959137][ T5849] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.962666][ T5849] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.966796][ T5849] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.984276][   T47] tipc: Node number set to 11578026
[   67.094698][ T6904] nbd0: detected capacity change from 0 to 549764202496
[   67.098031][   T56] block nbd0: Receive control failed (result -32)
[   67.098701][ T5840] block nbd0: Send control failed (result -32)
[   67.103147][ T5840] block nbd0: Request send failed, requeueing
[   67.110746][ T1113] block nbd0: Dead connection, failed to find a fallback
[   67.113109][ T1113] block nbd0: shutting down sockets
[   67.116124][ T1113] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.119312][ T1113] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.121979][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.128426][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.131152][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.134445][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.137227][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.140301][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.143910][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.149122][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.159829][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.173417][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.177102][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.183838][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.189213][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.196464][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.202543][ T5840] ldm_validate_partition_table(): Disk read failed.
[   67.205897][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.214044][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.219297][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   67.222216][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   67.227927][ T5840] Dev nbd0: unable to read RDB block 0
[   67.236303][ T5840]  nbd0: unable to read partition table
[   67.242454][ T5840] ldm_validate_partition_table(): Disk read failed.
[   67.247561][ T5840] Dev nbd0: unable to read RDB block 0
[   67.250727][ T5840]  nbd0: unable to read partition table
[   67.775926][ T6994] netlink: 'syz.2.467': attribute type 1 has an invalid length.
[   69.232814][ T7132] Bluetooth: MGMT ver 1.23
[   69.348700][ T7146] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   69.530472][ T7170] netlink: 'syz.0.551': attribute type 20 has an invalid length.
[   69.568750][ T7170] veth0_macvtap: left promiscuous mode
[   69.685415][ T7191] netlink: 'syz.0.560': attribute type 7 has an invalid length.
[   69.859241][ T7216] dvmrp1: tun_chr_ioctl cmd 1074025677
[   69.861275][ T7216] dvmrp1: linktype set to 805
[   70.016873][ T7243] : renamed from pim6reg1
[   70.137382][ T7261] lo speed is unknown, defaulting to 1000
[   70.950459][ T7306] netlink: 'syz.1.610': attribute type 2 has an invalid length.
[   70.995253][ T7308] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.997839][ T7308] bridge0: port 3(bond1) entered blocking state
[   71.000120][ T7308] bridge0: port 3(bond1) entered disabled state
[   71.002281][ T7308] bond1: entered allmulticast mode
[   71.007252][ T7308] bond1: entered promiscuous mode
[   71.009801][ T7308] bridge0: port 3(bond1) entered blocking state
[   71.012064][ T7308] bridge0: port 3(bond1) entered forwarding state
[   71.028036][ T7308] __nla_validate_parse: 93 callbacks suppressed
[   71.028045][ T7308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'.
[   71.033110][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.611'.
[   71.039421][ T7308] dummy0: entered promiscuous mode
[   71.042376][ T7308] team0: entered promiscuous mode
[   71.044252][ T7308] team_slave_1: entered promiscuous mode
[   71.048060][ T7308] bridge0: port 4(hsr1) entered blocking state
[   71.050297][ T7308] bridge0: port 4(hsr1) entered disabled state
[   71.052490][ T7308] hsr1: entered allmulticast mode
[   71.054237][ T7308] dummy0: entered allmulticast mode
[   71.056006][ T7308] team0: entered allmulticast mode
[   71.057802][ T7308] team_slave_1: entered allmulticast mode
[   71.060594][ T7308] hsr1: entered promiscuous mode
[   71.062637][ T7308] bridge0: port 4(hsr1) entered blocking state
[   71.064784][ T7308] bridge0: port 4(hsr1) entered forwarding state
[   71.069093][   T29] bridge0: port 3(bond1) entered disabled state
[   71.177299][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.180349][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.455744][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'.
[   71.469267][ T7349] bond2: entered promiscuous mode
[   71.471091][ T7349] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.489825][ T7349] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.503886][ T7349] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   71.507960][ T7349] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   71.530976][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.630'.
[   71.535473][ T7356] 8021q: adding VLAN 0 to HW filter on device bond2
[   71.631642][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'.
[   71.679022][ T7378] syzkaller1: entered promiscuous mode
[   71.683382][ T7378] syzkaller1: entered allmulticast mode
[   71.875186][ T7393] netlink: 244 bytes leftover after parsing attributes in process `syz.0.650'.
[   72.055229][ T7411] netlink: 'syz.0.658': attribute type 3 has an invalid length.
[   72.057703][ T7411] netlink: 'syz.0.658': attribute type 1 has an invalid length.
[   72.100540][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'.
[   72.103966][ T7415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'.
[   72.624983][ T7436] trusted_key: syz.2.670 sent an empty control message without MSG_MORE.
[   72.865263][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'.
[   72.926295][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   73.249554][ T7498] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   74.003276][ T7533] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   74.074117][ T7533] nbd1: detected capacity change from 0 to 127
[   74.077868][   T56] block nbd1: Receive control failed (result -104)
[   74.339636][ T7569] netlink: 'syz.2.728': attribute type 39 has an invalid length.
[   74.466886][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'.
[   74.469803][ T7581] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.472234][ T7581] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.477789][ T7581] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.480907][ T7581] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.673462][ T7603] netlink: 'syz.1.742': attribute type 3 has an invalid length.
[   74.676406][ T7603] netlink: 'syz.1.742': attribute type 2 has an invalid length.
[   74.678901][ T7603] netlink: 'syz.1.742': attribute type 2 has an invalid length.
[   74.786724][ T7613] lo speed is unknown, defaulting to 1000
[   75.255576][ T7650] netlink: 'syz.2.755': attribute type 1 has an invalid length.
[   75.258273][ T7650] netlink: 'syz.2.755': attribute type 4 has an invalid length.
[   75.832427][ T7684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   75.854582][ T7700] netlink: 'syz.0.777': attribute type 9 has an invalid length.
[   75.881584][ T7704] netlink: 'syz.0.779': attribute type 13 has an invalid length.
[   75.886099][ T7704] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[   76.268714][ T7753] __nla_validate_parse: 10 callbacks suppressed
[   76.268724][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'.
[   76.943401][ T7780] lo speed is unknown, defaulting to 1000
[   77.361696][ T7809] netlink: 32 bytes leftover after parsing attributes in process `syz.2.824'.
[   77.396751][ T7813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.399550][ T7813] syzkaller0: entered promiscuous mode
[   77.401457][ T7813] syzkaller0: entered allmulticast mode
[   77.415119][ T7813] tipc: Resetting bearer <eth:syzkaller0>
[   77.418436][ T7817] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   77.426736][ T7812] tipc: Resetting bearer <eth:syzkaller0>
[   77.439404][ T7812] tipc: Disabling bearer <eth:syzkaller0>
[   77.483077][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'.
[   77.500153][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'.
[   77.503430][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.2.832'.
[   77.518519][ T7824] netlink: 'syz.2.832': attribute type 4 has an invalid length.
[   77.620234][ T7836] veth1_to_bond: entered allmulticast mode
[   77.623149][ T7836] bond_slave_1: entered promiscuous mode
[   77.626410][ T7834] bond_slave_1: left promiscuous mode
[   77.628891][ T7834] veth1_to_bond: left allmulticast mode
[   77.883649][ T7858] sctp: [Deprecated]: syz.0.848 (pid 7858) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.883649][ T7858] Use struct sctp_sack_info instead
[   78.102409][ T7874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.850'.
[   78.126185][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.850'.
[   78.432647][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.437819][ T7909] 8021q: adding VLAN 0 to HW filter on device team0
[   78.440133][ T7909] tipc: Resetting bearer <eth:team0>
[   78.442232][ T7909] tipc: Resetting bearer <eth:team0>
[   78.448574][ T7909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.800342][ T7951] netlink: 'syz.1.879': attribute type 1 has an invalid length.
[   78.802863][ T7951] netlink: 224 bytes leftover after parsing attributes in process `syz.1.879'.
[   78.947840][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.891'.
[   79.024841][ T7982] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.894'.
[   79.767736][ T7989] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   80.233359][ T8053] lo speed is unknown, defaulting to 1000
[   80.347296][ T8064] lo speed is unknown, defaulting to 1000
[   80.646498][ T8097] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   80.798950][ T8109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.801760][ T8109] syzkaller0: entered promiscuous mode
[   80.803762][ T8109] syzkaller0: entered allmulticast mode
[   80.896582][ T8109] tipc: Resetting bearer <eth:syzkaller0>
[   80.900162][ T8108] tipc: Resetting bearer <eth:syzkaller0>
[   80.911584][ T8108] tipc: Disabling bearer <eth:syzkaller0>
[   80.916633][ T8116] netlink: 'syz.1.951': attribute type 66 has an invalid length.
[   81.041651][ T8128] lo speed is unknown, defaulting to 1000
[   81.079585][ T8131] ieee802154 phy0 wpan0: encryption failed: -22
[   81.156208][ T8138] hsr_slave_0: left promiscuous mode
[   81.158663][ T8138] hsr_slave_1: left promiscuous mode
[   81.360368][ T8144] raw_sendmsg: syz.0.962 forgot to set AF_INET. Fix it!
[   81.425260][   T10] cfg80211: failed to load regulatory.db
[   81.703018][ T8155] __nla_validate_parse: 5 callbacks suppressed
[   81.703080][ T8155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.965'.
[   81.857573][ T8162] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   81.870984][ T8162] netlink: 'syz.0.968': attribute type 4 has an invalid length.
[   81.923400][ T8162] tipc: Resetting bearer <eth:team0>
[   81.963827][ T5210] Bluetooth: hci2: command 0x0405 tx timeout
[   82.586171][ T8196] netlink: 332 bytes leftover after parsing attributes in process `syz.2.984'.
[   82.595711][ T8196] netlink: 104 bytes leftover after parsing attributes in process `syz.2.984'.
[   82.603175][ T8196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.984'.
[   82.660592][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'.
[   82.687938][ T8204] netlink: 'syz.2.988': attribute type 282 has an invalid length.
[   82.772118][ T8210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.990'.
[   82.848886][ T8218] netlink: 348 bytes leftover after parsing attributes in process `syz.2.995'.
[   82.890275][ T8222] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.997'.
[   82.976123][ T8230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'.
[   83.007868][ T8230] 8021q: adding VLAN 0 to HW filter on device bond3
[   83.010974][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1002'.
[   83.028306][ T8230] bond3: (slave batadv0): Opening slave failed
[   83.286700][ T8258] delete_channel: no stack
[   83.526120][ T8287] dummy0: entered promiscuous mode
[   83.528981][ T8287] team0: entered promiscuous mode
[   83.530650][ T8287] team_slave_0: entered promiscuous mode
[   83.558379][ T8287] team_slave_1: entered promiscuous mode
[   83.561005][ T8287] debugfs: 'hsr1' already exists in 'hsr'
[   83.563168][ T8287] Cannot create hsr debugfs directory
[   84.215207][ T8356] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) !
[   84.326190][ T8368] netlink: 'syz.2.1066': attribute type 1 has an invalid length.
[   84.616442][ T8405] lo speed is unknown, defaulting to 1000
[   84.655772][ T8408] netlink: 'syz.0.1083': attribute type 13 has an invalid length.
[   84.658416][ T8408] netlink: 'syz.0.1083': attribute type 17 has an invalid length.
[   84.717341][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.725323][ T8408] 8021q: adding VLAN 0 to HW filter on device team0
[   84.732492][ T8408] tipc: Resetting bearer <eth:team0>
[   84.735319][ T8408] tipc: Resetting bearer <eth:team0>
[   84.739798][ T8408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.191064][ T8443] netlink: 'syz.1.1100': attribute type 1 has an invalid length.
[   85.275415][ T8450] veth0: entered promiscuous mode
[   85.277864][ T8449] veth0: left promiscuous mode
[   85.411203][ T8458] bridge0: port 4(hsr1) entered disabled state
[   85.413400][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.415997][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.528188][ T8458] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   85.538277][   T10] lo speed is unknown, defaulting to 1000
[   85.540452][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.543624][   T10] syz2: Port: 1 Link DOWN
[   85.547131][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.550212][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.553198][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.567188][ T8487] lo speed is unknown, defaulting to 1000
[   86.659113][ T8502] netlink: 'syz.1.1126': attribute type 11 has an invalid length.
[   86.764744][ T8515] __nla_validate_parse: 12 callbacks suppressed
[   86.764755][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'.
[   86.769756][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'.
[   86.772649][ T8515] netlink: 'syz.1.1130': attribute type 12 has an invalid length.
[   86.777746][ T8515] netlink: 'syz.1.1130': attribute type 14 has an invalid length.
[   86.857295][ T8525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'.
[   86.860426][ T8529] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[   87.320050][ T8555] ieee802154 phy0 wpan0: encryption failed: -22
[   87.745793][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'.
[   87.848914][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'.
[   87.851897][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'.
[   87.854545][ T8579] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1158'.
[   87.855125][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'.
[   87.896700][ T8583] netlink: 'syz.1.1160': attribute type 18 has an invalid length.
[   87.976247][ T8593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.979111][ T8593] syzkaller0: entered promiscuous mode
[   87.980878][ T8593] syzkaller0: entered allmulticast mode
[   87.988370][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'.
[   88.003341][ T8593] tipc: Resetting bearer <eth:syzkaller0>
[   88.006799][ T8591] tipc: Resetting bearer <eth:syzkaller0>
[   88.015215][ T8591] tipc: Disabling bearer <eth:syzkaller0>
[   88.036202][ T8599] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   88.168026][ T8615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1176'.
[   88.200155][ T8620] netlink: 'syz.1.1179': attribute type 2 has an invalid length.
[   88.232520][ T8625] netlink: 'syz.2.1181': attribute type 21 has an invalid length.
[   88.388470][ T8650] netlink: 'syz.0.1193': attribute type 1 has an invalid length.
[   88.416572][ T8650] bond2: (slave bridge3): making interface the new active one
[   88.416971][ T8654] IPVS: ovf: FWM 3 0x00000003 - no destination available
[   88.419495][ T8650] bond2: (slave bridge3): Enslaving as an active interface with an up link
[   88.543103][ T8673] syzkaller1: entered promiscuous mode
[   88.553435][ T8673] syzkaller1: entered allmulticast mode
[   89.523971][ T8708] bond0: option mode: unable to set because the bond device is up
[   89.796335][ T8735] tipc: New replicast peer: 255.255.255.255
[   89.799171][ T8735] tipc: Enabled bearer <udp:syz2>, priority 10
[   89.801949][ T8735] tipc: Disabling bearer <udp:syz2>
[   90.780935][ T8750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.786147][ T8750] syzkaller0: entered promiscuous mode
[   90.787931][ T8750] syzkaller0: entered allmulticast mode
[   90.799790][ T8750] tipc: Resetting bearer <eth:syzkaller0>
[   90.807216][ T8749] tipc: Resetting bearer <eth:syzkaller0>
[   90.824266][ T8749] tipc: Disabling bearer <eth:syzkaller0>
[   90.977948][   T10] IPVS: starting estimator thread 0...
[   90.980828][ T8763] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   91.063654][ T8770] IPVS: using max 79 ests per chain, 189600 per kthread
[   91.275580][ T8800] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   91.333450][ T8802] syzkaller0: entered promiscuous mode
[   91.336211][ T8802] syzkaller0: entered allmulticast mode
[   92.203191][ T8822] __nla_validate_parse: 9 callbacks suppressed
[   92.203204][ T8822] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1269'.
[   92.532160][ T8852] dummy0: entered promiscuous mode
[   92.542794][ T8852] dummy0: entered allmulticast mode
[   92.690046][ T8870] netlink: 'syz.0.1292': attribute type 21 has an invalid length.
[   92.693462][ T8870] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1292'.
[   93.568047][ T8958] netlink: 'syz.1.1328': attribute type 1 has an invalid length.
[   93.570506][ T8958] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1328'.
[   94.519772][ T8990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   94.875470][ T9017] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1355'.
[   94.878501][ T9017] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1355'.
[   94.881500][ T9017] netlink: 'syz.0.1355': attribute type 6 has an invalid length.
[   94.884708][ T9017] netlink: 'syz.0.1355': attribute type 5 has an invalid length.
[   94.887148][ T9017] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1355'.
[   95.204731][ T9044] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0
[   95.392169][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1372'.
[   95.398675][ T9052] xfrm1: entered promiscuous mode
[   95.400492][ T9052] xfrm1: entered allmulticast mode
[   95.566441][ T9072] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1382'.
[   95.597509][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'.
[   95.621383][ T9078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.692649][ T9090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1389'.
[   96.044197][ T9130] netlink: 'syz.2.1409': attribute type 1 has an invalid length.
[   96.068437][ T9130] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.092404][ T9130] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.095147][ T9130] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.099378][ T9139] netlink: 'syz.0.1412': attribute type 83 has an invalid length.
[   96.100058][ T9130] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   96.137498][ T9142] veth3: entered promiscuous mode
[   96.140675][ T9142] bond1: (slave veth3): Enslaving as an active interface with a down link
[   96.146254][ T9142] erspan0: entered allmulticast mode
[   96.153258][ T9142] bond1: (slave erspan0): making interface the new active one
[   96.158399][ T9142] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   96.278241][ T9139] syz_tun: entered promiscuous mode
[   96.287655][ T9139] batadv_slave_0: entered promiscuous mode
[   96.295277][ T9139] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   96.299310][ T9139] hsr0: entered allmulticast mode
[   96.300979][ T9139] syz_tun: entered allmulticast mode
[   96.302765][ T9139] batadv_slave_0: entered allmulticast mode
[   96.318176][ T9139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.659335][ T9207] netlink: 'syz.1.1445': attribute type 1 has an invalid length.
[   96.952001][ T9233] macvlan2: entered allmulticast mode
[   96.954460][ T9233] veth1_vlan: entered allmulticast mode
[   96.958395][ T9233] veth1_vlan: left allmulticast mode
[   97.582365][ T9262] __nla_validate_parse: 6 callbacks suppressed
[   97.582377][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'.
[   97.873597][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'.
[   97.876656][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'.
[   97.879759][ T9279] netlink: 'syz.1.1477': attribute type 20 has an invalid length.
[   97.885430][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1477'.
[   97.888363][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1477'.
[   97.891437][ T9279] netlink: 'syz.1.1477': attribute type 20 has an invalid length.
[   98.008442][ T9291] netlink: 'syz.0.1483': attribute type 1 has an invalid length.
[   98.014817][ T9291] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1483'.
[   98.118245][ T9302] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1487'.
[   98.212684][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1490'.
[   98.267761][ T9316] netlink: 'syz.0.1494': attribute type 4 has an invalid length.
[   98.277379][ T9316] netlink: 'syz.0.1494': attribute type 4 has an invalid length.
[   98.388545][ T9332] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1502'.
[   98.401848][ T9332] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   98.646547][ T9361] syzkaller1: tun_chr_ioctl cmd 1074025672
[   98.648847][ T9361] syzkaller1: ignored: set checksum disabled
[   98.839654][ T9375] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[   98.921829][ T9379] lo speed is unknown, defaulting to 1000
[   99.003794][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'.
[   99.052167][ T9397] netlink: 'syz.0.1532': attribute type 1 has an invalid length.
[   99.215422][ T9414] netlink: 'syz.2.1540': attribute type 2 has an invalid length.
[   99.816220][ T9477] netlink: 'syz.2.1570': attribute type 10 has an invalid length.
[   99.828763][ T9477] team0: Device dummy0 failed to register rx_handler
[  101.622243][ T9594] lo speed is unknown, defaulting to 1000
[  102.223280][ T9658] syzkaller1: entered promiscuous mode
[  102.227462][ T9658] syzkaller1: entered allmulticast mode
[  102.497551][ T9673] lo speed is unknown, defaulting to 1000
[  102.506162][ T9676] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  102.537243][ T5855] Bluetooth: hci2: link tx timeout
[  102.539322][ T5855] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.543115][ T5210] Bluetooth: hci2: link tx timeout
[  102.545522][ T5210] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.847134][ T9703] syzkaller1: entered promiscuous mode
[  102.849125][ T9703] syzkaller1: entered allmulticast mode
[  103.521970][ T9739] lo speed is unknown, defaulting to 1000
[  103.698353][ T9749] __nla_validate_parse: 6 callbacks suppressed
[  103.698365][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'.
[  103.741157][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  103.745257][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  103.748126][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  103.750899][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  103.754018][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  103.757024][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  103.759899][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  103.762812][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  103.766944][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'.
[  104.055425][   T47] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  104.085604][ T9780] netlink: 'syz.0.1702': attribute type 1 has an invalid length.
[  104.123937][ T9780] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.138977][ T9780] bond3: (slave bridge4): making interface the new active one
[  104.145111][ T9780] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  104.162458][ T9780] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  104.190931][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.193441][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.200390][ T9789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  104.427107][ T9819] tipc: Started in network mode
[  104.428746][ T9819] tipc: Node identity 760cec8f8625, cluster identity 4711
[  104.431176][ T9819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.436186][ T9819] syzkaller0: entered promiscuous mode
[  104.437948][ T9819] syzkaller0: entered allmulticast mode
[  104.448627][ T1113] block nbd1: Possible stuck request ffff888021e20000: control (read@0,1024B). Runtime 30 seconds
[  104.452516][ T1113] block nbd1: Possible stuck request ffff888021e20200: control (read@1024,1024B). Runtime 30 seconds
[  104.457128][ T1113] block nbd1: Possible stuck request ffff888021e20400: control (read@2048,1024B). Runtime 30 seconds
[  104.460603][ T1113] block nbd1: Possible stuck request ffff888021e20600: control (read@3072,1024B). Runtime 30 seconds
[  104.462070][ T9819] tipc: Resetting bearer <eth:syzkaller0>
[  104.469637][ T9818] tipc: Resetting bearer <eth:syzkaller0>
[  104.480029][ T9818] tipc: Disabling bearer <eth:syzkaller0>
[  104.604602][ T5210] Bluetooth: hci2: command 0x0405 tx timeout
[  104.946629][ T9884] netlink: 'syz.0.1751': attribute type 6 has an invalid length.
[  105.184181][ T9917] netlink: 'syz.1.1767': attribute type 10 has an invalid length.
[  105.560633][ T9984] netlink: 'syz.1.1796': attribute type 9 has an invalid length.
[  105.567833][ T9984] netlink: 'syz.1.1796': attribute type 6 has an invalid length.
[  105.579415][ T9970] lo speed is unknown, defaulting to 1000
[  105.626916][ T9980] IPv6: Can't replace route, no match found
[  105.710285][ T9970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.718521][ T9966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.906381][T10009] netlink: 'syz.2.1808': attribute type 4 has an invalid length.
[  105.988285][T10017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.995409][T10017] syzkaller0: entered promiscuous mode
[  105.997801][T10017] syzkaller0: entered allmulticast mode
[  106.013684][T10016] tipc: Resetting bearer <eth:syzkaller0>
[  106.035159][T10016] tipc: Disabling bearer <eth:syzkaller0>
[  106.047540][T10023] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  106.160675][T10037] netlink: 'syz.2.1822': attribute type 12 has an invalid length.
[  106.310313][T10051] pimreg: entered allmulticast mode
[  108.297659][T10151] gtp1: entered promiscuous mode
[  108.299394][T10151] gtp1: entered allmulticast mode
[  108.308096][T10153] netlink: 'syz.0.1862': attribute type 4 has an invalid length.
[  108.582480][T10182] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  108.791362][T10201] netlink: 'syz.2.1888': attribute type 5 has an invalid length.
[  108.795381][T10201] __nla_validate_parse: 24 callbacks suppressed
[  108.795391][T10201] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1888'.
[  108.823179][T10203] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1890'.
[  108.829861][T10203] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  108.896483][T10210] pimreg: left allmulticast mode
[  108.994203][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'.
[  109.137549][T10233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  109.140850][T10233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  109.203409][T10242] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  109.206555][T10242] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  109.212095][T10243] netlink: 304 bytes leftover after parsing attributes in process `syz.1.1909'.
[  109.243372][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'.
[  109.255133][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'.
[  109.261841][T10245] bridge5: entered promiscuous mode
[  109.265978][T10245] macsec1: entered promiscuous mode
[  109.267970][T10245] macsec1: entered allmulticast mode
[  109.269696][T10245] bridge5: entered allmulticast mode
[  109.272267][T10245] bridge5: port 1(macsec1) entered blocking state
[  109.275480][T10245] bridge5: port 1(macsec1) entered disabled state
[  109.286659][T10245] bridge5: left allmulticast mode
[  109.288604][T10245] bridge5: left promiscuous mode
[  109.322918][T10251] netlink: 'syz.1.1913': attribute type 25 has an invalid length.
[  109.746011][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1921'.
[  110.001543][T10294] netlink: 'syz.2.1927': attribute type 24 has an invalid length.
[  110.059541][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1928'.
[  110.581984][T10316] netlink: zone id is out of range
[  110.587430][T10316] netlink: zone id is out of range
[  110.589578][T10316] netlink: zone id is out of range
[  110.591316][T10316] netlink: zone id is out of range
[  110.593039][T10316] netlink: zone id is out of range
[  110.595356][T10316] netlink: zone id is out of range
[  111.254234][T10343] sctp: [Deprecated]: syz.2.1948 (pid 10343) Use of int in maxseg socket option.
[  111.254234][T10343] Use struct sctp_assoc_value instead
[  111.461237][T10351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  111.468614][T10351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  111.474190][T10351] bond0 (unregistering): Released all slaves
[  111.683816][T10369] lo speed is unknown, defaulting to 1000
[  111.918702][T10375] bond0: entered promiscuous mode
[  111.921182][T10375] bond0: left promiscuous mode
[  111.961886][T10375] bond0: entered promiscuous mode
[  111.964692][T10375] bond0: left promiscuous mode
[  112.418513][T10417] lo speed is unknown, defaulting to 1000
[  112.547074][T10431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.550000][T10431] syzkaller0: entered promiscuous mode
[  112.553127][T10431] syzkaller0: entered allmulticast mode
[  112.601206][T10431] tipc: Resetting bearer <eth:syzkaller0>
[  112.605943][T10430] tipc: Resetting bearer <eth:syzkaller0>
[  112.630983][T10430] tipc: Disabling bearer <eth:syzkaller0>
[  112.786341][T10455] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  112.831048][T10459] netlink: 'syz.1.1998': attribute type 1 has an invalid length.
[  114.057919][T10562] __nla_validate_parse: 14 callbacks suppressed
[  114.057931][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'.
[  114.071742][T10562] gre1: entered promiscuous mode
[  114.369335][T10583] IPv6: Can't replace route, no match found
[  114.658907][T10594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2059'.
[  114.668588][T10594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2059'.
[  114.807995][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'.
[  114.811920][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'.
[  115.349964][T10633] pim6reg1: entered promiscuous mode
[  115.351734][T10633] pim6reg1: entered allmulticast mode
[  115.365067][T10635] netlink: 'syz.2.2079': attribute type 21 has an invalid length.
[  115.370339][T10635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2079'.
[  115.408591][T10633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2078'.
[  115.431450][T10633] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.435134][T10633] team0: Port device bond5 added
[  115.445590][ T1091] tipc: Resetting bearer <eth:team0>
[  115.460367][T10644] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2083'.
[  115.463335][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'.
[  115.478963][T10644] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2083'.
[  115.576570][T10660] netlink: 'syz.0.2091': attribute type 74 has an invalid length.
[  115.872831][T10685] netlink: 'syz.1.2101': attribute type 1 has an invalid length.
[  115.901466][T10689] net_ratelimit: 32 callbacks suppressed
[  115.901479][T10689] openvswitch: netlink: IP tunnel TTL not specified.
[  116.094863][T10713] netlink: 'syz.1.2111': attribute type 5 has an invalid length.
[  116.892033][T10765] netlink: 'syz.0.2133': attribute type 7 has an invalid length.
[  116.897961][T10765] netlink: 'syz.0.2133': attribute type 4 has an invalid length.
[  116.904916][T10765] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  116.908692][T10769] netlink: 'syz.2.2134': attribute type 1 has an invalid length.
[  116.911427][T10769] netlink: 'syz.2.2134': attribute type 3 has an invalid length.
[  116.916288][T10769] netlink: 'syz.2.2134': attribute type 1 has an invalid length.
[  116.926335][T10769] NCSI netlink: No device for ifindex 0
[  117.037851][T10783] lo speed is unknown, defaulting to 1000
[  117.215440][T10803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.218115][T10803] syzkaller0: entered promiscuous mode
[  117.219913][T10803] syzkaller0: entered allmulticast mode
[  117.253057][T10802] tipc: Resetting bearer <eth:syzkaller0>
[  117.266338][T10802] tipc: Disabling bearer <eth:syzkaller0>
[  117.508093][T10826] netlink: 'syz.1.2161': attribute type 1 has an invalid length.
[  117.790352][T10873] GUP no longer grows the stack in syz.0.2184 (10873): 200000006000-20000000a000 (200000005000)
[  117.795167][T10873] CPU: 1 UID: 0 PID: 10873 Comm: syz.0.2184 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  117.795183][T10873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.795188][T10873] Call Trace:
[  117.795193][T10873]  <TASK>
[  117.795198][T10873]  dump_stack_lvl+0x189/0x250
[  117.795214][T10873]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.795223][T10873]  ? __pfx__printk+0x10/0x10
[  117.795232][T10873]  ? find_vma+0xe7/0x160
[  117.795250][T10873]  __get_user_pages+0x2a60/0x30b0
[  117.795276][T10873]  ? __pfx___get_user_pages+0x10/0x10
[  117.795286][T10873]  ? __gup_longterm_locked+0xbf7/0x15b0
[  117.795298][T10873]  ? down_read_killable+0x1d1/0x350
[  117.795305][T10873]  ? try_get_folio+0x633/0x660
[  117.795317][T10873]  __gup_longterm_locked+0xd66/0x15b0
[  117.795328][T10873]  ? try_grab_folio_fast+0x1be/0x4f0
[  117.795343][T10873]  ? gup_fast_fallback+0x1afc/0x2260
[  117.795354][T10873]  gup_fast_fallback+0x1cd4/0x2260
[  117.795378][T10873]  ? __pfx_gup_fast_fallback+0x10/0x10
[  117.795387][T10873]  ? __mutex_lock+0x335/0x1340
[  117.795400][T10873]  ? is_valid_gup_args+0x11f/0x200
[  117.795411][T10873]  ? get_user_pages_fast+0x4d/0xb0
[  117.795421][T10873]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  117.795436][T10873]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  117.795444][T10873]  ? wait_for_space+0x24d/0x2d0
[  117.795456][T10873]  iov_iter_get_pages2+0x5e/0xa0
[  117.795468][T10873]  __se_sys_vmsplice+0x548/0x10d0
[  117.795482][T10873]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  117.795493][T10873]  ? __pfx_futex_wait+0x10/0x10
[  117.795511][T10873]  ? __lock_acquire+0xab9/0xd20
[  117.795535][T10873]  ? do_pipe2+0xf7/0x170
[  117.795545][T10873]  ? rcu_is_watching+0x15/0xb0
[  117.795558][T10873]  ? do_syscall_64+0xbe/0x3b0
[  117.795571][T10873]  do_syscall_64+0xfa/0x3b0
[  117.795581][T10873]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.795591][T10873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.795598][T10873]  ? exc_page_fault+0x9f/0xf0
[  117.795609][T10873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.795616][T10873] RIP: 0033:0x7f5f6d18eb69
[  117.795624][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.795631][T10873] RSP: 002b:00007f5f6dffa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  117.795640][T10873] RAX: ffffffffffffffda RBX: 00007f5f6d3b5fa0 RCX: 00007f5f6d18eb69
[  117.795646][T10873] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  117.795650][T10873] RBP: 00007f5f6d211df1 R08: 0000000000000000 R09: 0000000000000000
[  117.795654][T10873] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  117.795659][T10873] R13: 0000000000000000 R14: 00007f5f6d3b5fa0 R15: 00007fff3e6938c8
[  117.795671][T10873]  </TASK>
[  118.285460][T10921] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  118.434621][T10942] macsec1: entered promiscuous mode
[  118.444316][T10942] macvlan1: entered promiscuous mode
[  118.447154][T10942] macsec1: entered allmulticast mode
[  118.448862][T10942] macvlan1: entered allmulticast mode
[  118.451322][T10942] veth1_vlan: entered allmulticast mode
[  118.456646][T10942] macvlan1: left allmulticast mode
[  118.458328][T10942] veth1_vlan: left allmulticast mode
[  118.460059][T10942] macvlan1: left promiscuous mode
[  118.586536][T10957] lo speed is unknown, defaulting to 1000
[  118.906284][T10991] sctp: [Deprecated]: syz.2.2239 (pid 10991) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.906284][T10991] Use struct sctp_sack_info instead
[  119.115387][T11008] lo speed is unknown, defaulting to 1000
[  119.587411][T11022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.637170][T11033] __nla_validate_parse: 23 callbacks suppressed
[  119.637184][T11033] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2255'.
[  119.644360][T11034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.372150][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2274'.
[  120.733311][T11097] validate_nla: 1 callbacks suppressed
[  120.733327][T11097] netlink: 'syz.1.2282': attribute type 1 has an invalid length.
[  120.739648][T11097] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2282'.
[  120.743661][T11097] netlink: 'syz.1.2282': attribute type 1 has an invalid length.
[  121.745783][T11124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.096095][T11144] netlink: 'syz.2.2301': attribute type 6 has an invalid length.
[  122.735832][T11180] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  123.571770][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2322'.
[  123.803012][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2338'.
[  124.175714][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2353'.
[  124.471398][T11259] nbd: nbd1 already in use
[  124.473206][T11259] block nbd1: NBD_DISCONNECT
[  124.477955][T11259] block nbd1: Send disconnect failed -32
[  124.481775][T11259] block nbd1: shutting down sockets
[  124.514323][    C1] blk_print_req_error: 24 callbacks suppressed
[  124.514336][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.519066][    C1] buffer_io_error: 23 callbacks suppressed
[  124.519072][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  124.523356][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.526214][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  124.528607][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.531880][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  124.534331][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.537105][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  124.574976][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.577783][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read
[  124.580433][ T5840] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.583225][ T5840] Buffer I/O error on dev nbd1, logical block 1, async page read
[  124.591767][ T5840] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.595223][ T5840] Buffer I/O error on dev nbd1, logical block 2, async page read
[  124.602893][ T5840] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.610105][ T5840] Buffer I/O error on dev nbd1, logical block 3, async page read
[  124.619221][ T5840] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.622355][ T5840] Buffer I/O error on dev nbd1, logical block 0, async page read
[  124.628375][ T5840] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  124.634412][ T5840] Buffer I/O error on dev nbd1, logical block 1, async page read
[  124.644653][ T5840] ldm_validate_partition_table(): Disk read failed.
[  124.652415][ T5840] Dev nbd1: unable to read RDB block 0
[  124.657008][ T5840]  nbd1: unable to read partition table
[  124.666719][ T5840] ldm_validate_partition_table(): Disk read failed.
[  124.675633][ T5840] Dev nbd1: unable to read RDB block 0
[  124.678266][ T5840]  nbd1: unable to read partition table
[  124.878155][T11275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'.
[  125.038041][T11273] infiniband syz1: set down
[  125.042481][T11273] infiniband syz1: added veth1_to_bond
[  125.104789][T11273] RDS/IB: syz1: added
[  125.106776][T11273] smc: adding ib device syz1 with port count 1
[  125.108928][T11273] smc:    ib device syz1 port 1 has pnetid 
[  125.662486][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2374'.
[  125.710398][T11299] netlink: 'syz.1.2375': attribute type 1 has an invalid length.
[  125.735002][T11300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'.
[  125.820072][T11304] bridge6: entered allmulticast mode
[  125.874285][T11308] nbd: couldn't find device at index 536870912
[  126.588254][T11322] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2386'.
[  126.867100][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'.
[  126.870015][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'.
[  126.892243][T11371] bridge7: entered promiscuous mode
[  126.896531][T11371] bridge7: entered allmulticast mode
[  126.916238][T11374] syzkaller1: entered promiscuous mode
[  126.918036][T11374] syzkaller1: entered allmulticast mode
[  127.732368][T11373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.857334][T11412] netlink: 'syz.1.2427': attribute type 7 has an invalid length.
[  127.859976][T11412] netlink: 'syz.1.2427': attribute type 8 has an invalid length.
[  127.862564][T11412] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2427'.
[  127.976343][T11423] netlink: 'syz.0.2422': attribute type 2 has an invalid length.
[  127.988712][T11423] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2422'.
[  128.000265][T11423] ==================================================================
[  128.002956][T11423] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  128.005602][T11423] Write of size 8 at addr ffff88802d728db0 by task syz.0.2422/11423
[  128.009068][T11423] 
[  128.009877][T11423] CPU: 1 UID: 0 PID: 11423 Comm: syz.0.2422 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  128.009890][T11423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.009895][T11423] Call Trace:
[  128.009900][T11423]  <TASK>
[  128.009904][T11423]  dump_stack_lvl+0x189/0x250
[  128.009916][T11423]  ? __kasan_check_byte+0x12/0x40
[  128.009931][T11423]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.009940][T11423]  ? lock_release+0x4b/0x3e0
[  128.009953][T11423]  ? __virt_addr_valid+0x4a5/0x5c0
[  128.009965][T11423]  print_report+0xca/0x240
[  128.009978][T11423]  ? __xfrm_state_delete+0x696/0xca0
[  128.009989][T11423]  kasan_report+0x118/0x150
[  128.010001][T11423]  ? __xfrm_state_delete+0x696/0xca0
[  128.010012][T11423]  __xfrm_state_delete+0x696/0xca0
[  128.010025][T11423]  xfrm_state_flush+0x45f/0x770
[  128.010038][T11423]  xfrm_flush_sa+0xea/0x2a0
[  128.010047][T11423]  ? rcu_is_watching+0x15/0xb0
[  128.010060][T11423]  ? __pfx_xfrm_flush_sa+0x10/0x10
[  128.010070][T11423]  ? apparmor_capable+0x137/0x1b0
[  128.010078][T11423]  ? __nla_parse+0x40/0x60
[  128.010088][T11423]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.010098][T11423]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.010105][T11423]  ? bpf_trace_run2+0x322/0x4b0
[  128.010122][T11423]  ? rcu_is_watching+0x15/0xb0
[  128.010132][T11423]  ? trace_contention_end+0x39/0x120
[  128.010139][T11423]  ? __mutex_lock+0x335/0x1340
[  128.010152][T11423]  netlink_rcv_skb+0x208/0x470
[  128.010164][T11423]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.010172][T11423]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  128.010184][T11423]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.010194][T11423]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.010204][T11423]  xfrm_netlink_rcv+0x79/0x90
[  128.010212][T11423]  netlink_unicast+0x82f/0x9e0
[  128.010223][T11423]  ? __pfx_netlink_unicast+0x10/0x10
[  128.010232][T11423]  ? netlink_sendmsg+0x642/0xb30
[  128.010241][T11423]  ? skb_put+0x11b/0x210
[  128.010248][T11423]  netlink_sendmsg+0x805/0xb30
[  128.010260][T11423]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.010270][T11423]  ? aa_sock_msg_perm+0x94/0x160
[  128.010281][T11423]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  128.010290][T11423]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.010300][T11423]  __sock_sendmsg+0x21c/0x270
[  128.010310][T11423]  ____sys_sendmsg+0x505/0x830
[  128.010319][T11423]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.010328][T11423]  ? import_iovec+0x74/0xa0
[  128.010339][T11423]  ___sys_sendmsg+0x21f/0x2a0
[  128.010346][T11423]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.010359][T11423]  ? __fget_files+0x2a/0x420
[  128.010366][T11423]  ? __fget_files+0x3a0/0x420
[  128.010374][T11423]  __x64_sys_sendmsg+0x19b/0x260
[  128.010382][T11423]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  128.010391][T11423]  ? rcu_is_watching+0x15/0xb0
[  128.010402][T11423]  ? do_syscall_64+0xbe/0x3b0
[  128.010413][T11423]  do_syscall_64+0xfa/0x3b0
[  128.010423][T11423]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.010433][T11423]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.010440][T11423]  ? exc_page_fault+0x9f/0xf0
[  128.010450][T11423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.010457][T11423] RIP: 0033:0x7f5f6d18eb69
[  128.010465][T11423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.010472][T11423] RSP: 002b:00007f5f6df97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.010481][T11423] RAX: ffffffffffffffda RBX: 00007f5f6d3b6240 RCX: 00007f5f6d18eb69
[  128.010487][T11423] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a
[  128.010491][T11423] RBP: 00007f5f6d211df1 R08: 0000000000000000 R09: 0000000000000000
[  128.010496][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.010500][T11423] R13: 0000000000000000 R14: 00007f5f6d3b6240 R15: 00007fff3e6938c8
[  128.010508][T11423]  </TASK>
[  128.010511][T11423] 
[  128.027381][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'.
[  128.027725][T11423] Allocated by task 11314:
[  128.136283][T11423]  kasan_save_track+0x3e/0x80
[  128.137800][T11423]  __kasan_slab_alloc+0x6c/0x80
[  128.139384][T11423]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  128.141208][T11423]  xfrm_state_alloc+0x24/0x2f0
[  128.142774][T11423]  pfkey_add+0x6e4/0x2e00
[  128.144191][T11423]  pfkey_sendmsg+0xbfe/0x1090
[  128.145752][T11423]  __sock_sendmsg+0x21c/0x270
[  128.147316][T11423]  ____sys_sendmsg+0x505/0x830
[  128.148915][T11423]  ___sys_sendmsg+0x21f/0x2a0
[  128.150482][T11423]  __x64_sys_sendmsg+0x19b/0x260
[  128.152126][T11423]  do_syscall_64+0xfa/0x3b0
[  128.153648][T11423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.155564][T11423] 
[  128.156370][T11423] Freed by task 1270:
[  128.157700][T11423]  kasan_save_track+0x3e/0x80
[  128.159286][T11423]  kasan_save_free_info+0x46/0x50
[  128.160950][T11423]  __kasan_slab_free+0x62/0x70
[  128.162542][T11423]  kmem_cache_free+0x18f/0x400
[  128.164114][T11423]  xfrm_state_gc_task+0x518/0x6a0
[  128.165739][T11423]  process_scheduled_works+0xae1/0x17b0
[  128.167489][T11423]  worker_thread+0x8a0/0xda0
[  128.169014][T11423]  kthread+0x711/0x8a0
[  128.170351][T11423]  ret_from_fork+0x3fc/0x770
[  128.171896][T11423]  ret_from_fork_asm+0x1a/0x30
[  128.173438][T11423] 
[  128.174225][T11423] The buggy address belongs to the object at ffff88802d728d80
[  128.174225][T11423]  which belongs to the cache xfrm_state of size 928
[  128.178635][T11423] The buggy address is located 48 bytes inside of
[  128.178635][T11423]  freed 928-byte region [ffff88802d728d80, ffff88802d729120)
[  128.183043][T11423] 
[  128.183856][T11423] The buggy address belongs to the physical page:
[  128.185928][T11423] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802d729b00 pfn:0x2d728
[  128.189167][T11423] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  128.191886][T11423] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  128.194336][T11423] page_type: f5(slab)
[  128.195648][T11423] raw: 00fff00000000040 ffff88801e2243c0 dead000000000122 0000000000000000
[  128.198377][T11423] raw: ffff88802d729b00 00000000800e0007 00000000f5000000 0000000000000000
[  128.201106][T11423] head: 00fff00000000040 ffff88801e2243c0 dead000000000122 0000000000000000
[  128.203834][T11423] head: ffff88802d729b00 00000000800e0007 00000000f5000000 0000000000000000
[  128.206557][T11423] head: 00fff00000000002 ffffea0000b5ca01 00000000ffffffff 00000000ffffffff
[  128.209361][T11423] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  128.212179][T11423] page dumped because: kasan: bad access detected
[  128.214262][T11423] page_owner tracks the page as allocated
[  128.216110][T11423] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6538, tgid 6534 (syz.2.292), ts 62665084392, free_ts 58287761603
[  128.222157][T11423]  post_alloc_hook+0x240/0x2a0
[  128.223751][T11423]  get_page_from_freelist+0x21e4/0x22c0
[  128.225544][T11423]  __alloc_frozen_pages_noprof+0x181/0x370
[  128.227403][T11423]  alloc_pages_mpol+0x232/0x4a0
[  128.228976][T11423]  allocate_slab+0x8a/0x3b0
[  128.230434][T11423]  ___slab_alloc+0xbfc/0x1480
[  128.231952][T11423]  kmem_cache_alloc_noprof+0x283/0x3c0
[  128.233674][T11423]  xfrm_state_alloc+0x24/0x2f0
[  128.235218][T11423]  xfrm_state_find+0x37d4/0x5400
[  128.236900][T11423]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  128.238936][T11423]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  128.240701][T11423]  xfrm_lookup_route+0x3c/0x1c0
[  128.242335][T11423]  udp_sendmsg+0x142e/0x2170
[  128.243847][T11423]  __sock_sendmsg+0x19c/0x270
[  128.245378][T11423]  ____sys_sendmsg+0x52d/0x830
[  128.246978][T11423]  ___sys_sendmsg+0x21f/0x2a0
[  128.248493][T11423] page last free pid 5269 tgid 5269 stack trace:
[  128.250520][T11423]  __free_frozen_pages+0xc71/0xe70
[  128.252211][T11423]  __put_partials+0x161/0x1c0
[  128.253769][T11423]  put_cpu_partial+0x17c/0x250
[  128.255340][T11423]  __slab_free+0x2f7/0x400
[  128.256861][T11423]  qlist_free_all+0x97/0x140
[  128.258383][T11423]  kasan_quarantine_reduce+0x148/0x160
[  128.260173][T11423]  __kasan_slab_alloc+0x22/0x80
[  128.261803][T11423]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  128.263579][T11423]  getname_flags+0xb8/0x540
[  128.265070][T11423]  do_sys_openat2+0xbc/0x1c0
[  128.266604][T11423]  __x64_sys_openat+0x138/0x170
[  128.268203][T11423]  do_syscall_64+0xfa/0x3b0
[  128.269698][T11423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.271627][T11423] 
[  128.272444][T11423] Memory state around the buggy address:
[  128.274239][T11423]  ffff88802d728c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  128.276872][T11423]  ffff88802d728d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  128.279414][T11423] >ffff88802d728d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.281971][T11423]                                      ^
[  128.283749][T11423]  ffff88802d728e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.286259][T11423]  ffff88802d728e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.288771][T11423] ==================================================================
[  128.291586][T11423] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  128.293921][T11423] CPU: 1 UID: 0 PID: 11423 Comm: syz.0.2422 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  128.297740][T11423] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.300884][T11423] Call Trace:
[  128.301934][T11423]  <TASK>
[  128.302889][T11423]  dump_stack_lvl+0x99/0x250
[  128.304366][T11423]  ? __asan_memcpy+0x40/0x70
[  128.305881][T11423]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.307532][T11423]  ? __pfx__printk+0x10/0x10
[  128.309026][T11423]  panic+0x2db/0x790
[  128.310357][T11423]  ? __pfx_panic+0x10/0x10
[  128.311878][T11423]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  128.313859][T11423]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.315829][T11423]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.317943][T11423]  ? print_memory_metadata+0x314/0x400
[  128.319769][T11423]  ? __xfrm_state_delete+0x696/0xca0
[  128.321534][T11423]  check_panic_on_warn+0x89/0xb0
[  128.323154][T11423]  ? __xfrm_state_delete+0x696/0xca0
[  128.324872][T11423]  end_report+0x78/0x160
[  128.326237][T11423]  kasan_report+0x129/0x150
[  128.327770][T11423]  ? __xfrm_state_delete+0x696/0xca0
[  128.329469][T11423]  __xfrm_state_delete+0x696/0xca0
[  128.331109][T11423]  xfrm_state_flush+0x45f/0x770
[  128.332682][T11423]  xfrm_flush_sa+0xea/0x2a0
[  128.334136][T11423]  ? rcu_is_watching+0x15/0xb0
[  128.335744][T11423]  ? __pfx_xfrm_flush_sa+0x10/0x10
[  128.337395][T11423]  ? apparmor_capable+0x137/0x1b0
[  128.339061][T11423]  ? __nla_parse+0x40/0x60
[  128.340562][T11423]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.342185][T11423]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.343957][T11423]  ? bpf_trace_run2+0x322/0x4b0
[  128.345512][T11423]  ? rcu_is_watching+0x15/0xb0
[  128.347029][T11423]  ? trace_contention_end+0x39/0x120
[  128.348728][T11423]  ? __mutex_lock+0x335/0x1340
[  128.350241][T11423]  netlink_rcv_skb+0x208/0x470
[  128.351863][T11423]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.353567][T11423]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  128.355268][T11423]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.356936][T11423]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.358583][T11423]  xfrm_netlink_rcv+0x79/0x90
[  128.360097][T11423]  netlink_unicast+0x82f/0x9e0
[  128.361668][T11423]  ? __pfx_netlink_unicast+0x10/0x10
[  128.363362][T11423]  ? netlink_sendmsg+0x642/0xb30
[  128.365003][T11423]  ? skb_put+0x11b/0x210
[  128.366413][T11423]  netlink_sendmsg+0x805/0xb30
[  128.368009][T11423]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.369745][T11423]  ? aa_sock_msg_perm+0x94/0x160
[  128.371385][T11423]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  128.373115][T11423]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.374849][T11423]  __sock_sendmsg+0x21c/0x270
[  128.376400][T11423]  ____sys_sendmsg+0x505/0x830
[  128.377976][T11423]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.379673][T11423]  ? import_iovec+0x74/0xa0
[  128.381134][T11423]  ___sys_sendmsg+0x21f/0x2a0
[  128.382615][T11423]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.384277][T11423]  ? __fget_files+0x2a/0x420
[  128.385811][T11423]  ? __fget_files+0x3a0/0x420
[  128.387344][T11423]  __x64_sys_sendmsg+0x19b/0x260
[  128.389005][T11423]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  128.390776][T11423]  ? rcu_is_watching+0x15/0xb0
[  128.392383][T11423]  ? do_syscall_64+0xbe/0x3b0
[  128.393976][T11423]  do_syscall_64+0xfa/0x3b0
[  128.395517][T11423]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.397237][T11423]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.399217][T11423]  ? exc_page_fault+0x9f/0xf0
[  128.400724][T11423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.402553][T11423] RIP: 0033:0x7f5f6d18eb69
[  128.403984][T11423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.410064][T11423] RSP: 002b:00007f5f6df97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.412736][T11423] RAX: ffffffffffffffda RBX: 00007f5f6d3b6240 RCX: 00007f5f6d18eb69
[  128.415220][T11423] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 000000000000000a
[  128.417794][T11423] RBP: 00007f5f6d211df1 R08: 0000000000000000 R09: 0000000000000000
[  128.420352][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.422923][T11423] R13: 0000000000000000 R14: 00007f5f6d3b6240 R15: 00007fff3e6938c8
[  128.425505][T11423]  </TASK>
[  128.427253][T11423] Kernel Offset: disabled
[  128.428698][T11423] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:00:36  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82087c01 RBX=ffffffffffffffff RCX=ffffffff82087d2e RDX=0000000000000001
RSI=0000000000000004 RDI=ffffc90003ebf5c0 RBP=ffffc90003ebf628 RSP=ffffc90003ebf528
R8 =ffffc90003ebf5c3 R9 =1ffff920007d7eb8 R10=dffffc0000000000 R11=fffff520007d7eb8
R12=0000000000000001 R13=dffffc0000000000 R14=fffff520007d7eb9 R15=1ffff920007d7eb8
RIP=ffffffff8222bd93 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555571f85500 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b7a45f160 CR3=00000000307a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 00000000000000ff XMM05=0000000000000000 00007f6b7a612e17
XMM06=0000000000000000 00007f6b7a612e11 XMM07=0000000000000000 00007f6b7a612e25
XMM08=0000000000000000 00007f6b7a612eab XMM09=0000000000000000 00007f6b7a612f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001859 RDI=000000000000185a RBP=00000000000003f8 RSP=ffffc90003edea90
R8 =ffff888106c28237 R9 =1ffff11020d85046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95926 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5f6df976c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000147030 CR3=0000000030e72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 000000000000ff00 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
