last executing test programs:

1.117841214s ago: executing program 1 (id=2180):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000180), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r0)

818.200449ms ago: executing program 0 (id=2191):
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x6}, 0x48)

818.066632ms ago: executing program 0 (id=2192):
r0 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000004c0), 0x4)

739.1694ms ago: executing program 0 (id=2193):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000902000000040000000000000700000000000000005f"], 0x0, 0x36}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x2}, 0x50)

738.964412ms ago: executing program 0 (id=2194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)

738.79209ms ago: executing program 0 (id=2195):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x2, 0x5, 0xffff, 0x3}, 0x20)

680.038986ms ago: executing program 0 (id=2196):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)

250.294346ms ago: executing program 1 (id=2197):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500401a06483a2b460515c"], 0x7)

169.333802ms ago: executing program 1 (id=2198):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="72e0a01e28ad594daa3163f87e", 0xd}, {&(0x7f0000000380)="a5c930d5a5636015aef4beb68f7af32d188f86812ecac8d3b912a66c9c036452fe9f2bd78b5ee8fe8d499777a52530fe688f35c829f4439d4e8bd3bee729de597178e0b664435e748673b46ee808e6a484fd32bacc2cf7256409d71307a8b4eb333da4ea713747c9e3e21b29a0c356", 0x6f}, {&(0x7f00000004c0)="c1d5e1172b0eb4973392171508f4e651548f988e829c9bef5ab39c418fc10f3616a9ae032258f5885d93c7467e7c23ce9764dff6d266063125e3108b5d81bab2604991952097b14590715b51d94a5d010ab825f38c33ce1687e2fa45f1bea945c6ad3f8fdc93daa2eca2ccd4a17e", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)="604a898ae59fa212e8d63a63a6303d0102b3478f91dd7a802fe9e6d7cc0a7a72c0d9dc4311332f43d095af29b9e06c92471d7d43955a49041ecd1b96931d4afc80aa92c55514da4ecd960595e9f1c75fab0239e8", 0x54}, {&(0x7f00000007c0)="baa066016db9e67a3c69907322f95c6e9ed379e658ed82dc637fdcadb95d9a2e1ffa156eda30b96cdc64a60f49530cc6c7f9daeadb099ca81a2d715b3d099158fefced9bf7c09e9c98fea5dcfd4d6ded7cb4bdd0e04f2af19120f5cf234dbe4471385f107e56634444a28859a7d7b050c9256390cc78a38a0eb902a38a50d32ff3d8b96ef942a10a9325222c998903cf9a128ebae54ab42e754e089121962cc15b11c88552ae631e5f12", 0xaa}, {&(0x7f0000000880)="ece417fc7f96212e550d4ad27388f8e2d890d00641c588fa34890984e35a8629c26c0e7217e7ea557d953a5017243af2f106f1e6d24b88dd424966eec111e551fca801b6a122326e9533492287de9391539fab52f3f3c703fd78269088a045d737f8a268a1ca445bdf32c631a1adeee7a86c11dd86dc5f8bdcebb5962fabd3d21e67724127a3ca590e6d5d574e9cedd82d3628f068bd315a2d835e7dfb459c6af1a1c5eb1512f590de11f22b318d2879993cc7a018f54c", 0xb7}], 0x3}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b40)="043ebef0c4e9be0c1f44ae8902e00272f6e514f467f73aee0b0020878b9a08ddfbbbe73189ac63cff3f05820d019badf4ceb8aba782de8199b9d2516b5c30b6560a7920768d7cef6b62244b5b6eacfae9e281ff493618123129a02ced96eed241b223847ca27996331ba84f7358013560cb877ba9f28b6", 0x77}, {&(0x7f0000000980)="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", 0x142}, {&(0x7f0000000cc0)="1297ae593585c53da2d9ab7f016d73799ac8b458de9ab9362e13bbd0f646dd543f73dc932715477d024e63cfc37429a14b3b3f6a7fccb39d21c495977315e7c968b37bfb98b38d2c5d77cd65762ce82c1964d1ab07e811f680c1cb79e192492c23ab72063a111966fdfe17ea76ff5434c21a1d0f3b0dcd963ef367e43f1cd4399936ea72a8df30ff3533b9e6583a1cc020efea4d90e21d8b20482489dfe726d2b1f2e8d920219cf4a35d4a47b816db404ac3aa0863e1da9135a217e3059472a09bb0e71ed72641c6447d8d0a416b772090e1ba5f00674f9513720a61732e23", 0xdf}, {&(0x7f0000000c40)="a03a95a2c4774e048b320683232d0e74ade1aa9d9b05db336d35ad68", 0x1c}, {&(0x7f0000000080)="bf23010b2d05d776d6ce5a83cb637f092ceba712fd33c6cbdc1a7fb5c20f55832ff636f4a805", 0x26}, {&(0x7f0000000e00)="e5b5862970a93ac36cb456670c3f6deea03ae5cb4733480c5ffa9f0b02743e7d0589d4ec6a86aa53547467fb59d77e0a19fd91a6b1a5af82befc5ad6096c8d63314ab2155725edc200a8831e99e34b1cfd12ae03b2aa335a5f1f2d27d45a20c2857b85dbebe666bc6649282e0c1941c00307702e0816dbc15171f882c3f8c7a7ace486824386abc62116aecdfe85ff7995d8127f02b02936786529a70ca2698a550cfb4163ff8b48b5a3a49d32a488173b725773080dcd11321881b582311f8fba", 0xc1}], 0x6}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="b99032700e9441b44d8ab573e390bfd6f1632a18f5a5217c53d98413d6ba747ba8bdde06ffde", 0x26}], 0x1}}], 0x5, 0x2000c044)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000b00), 0x0, 0x14044058, 0x0, 0x0)

169.116334ms ago: executing program 1 (id=2199):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x2, 0x1, 0x0, 0xe96, 0x0, @in=@rand_addr=0x2000000, @in6=@private1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x80}}, 0x0)

168.991706ms ago: executing program 1 (id=2200):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b1b, &(0x7f0000000040))

107.243798ms ago: executing program 1 (id=2202):
unshare(0x6a040000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0})
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)

107.037473ms ago: executing program 2 (id=2203):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)

106.755889ms ago: executing program 2 (id=2204):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400))

50.024523ms ago: executing program 2 (id=2205):
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

49.817467ms ago: executing program 2 (id=2206):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x2, 0x2}, 0xc)

189.702µs ago: executing program 2 (id=2207):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)

0s ago: executing program 2 (id=2208):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xfc, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x7e52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36134' (ED25519) to the list of known hosts.
syzkaller login: [   47.469404][ T5799] cgroup: Unknown subsys name 'net'
[   47.590167][ T5799] cgroup: Unknown subsys name 'cpuset'
[   47.593260][ T5799] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.046359][ T5799] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.382083][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.385414][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.388532][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.391980][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.395239][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.438660][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.441546][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.444587][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.447766][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.451387][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.484263][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.487314][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.490923][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.494284][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.497392][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.599905][ T5872] chnl_net:caif_netlink_parms(): no params data found
[   60.714813][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.717228][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.719893][ T5872] bridge_slave_0: entered allmulticast mode
[   60.722936][ T5872] bridge_slave_0: entered promiscuous mode
[   60.726644][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.729495][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.732196][ T5872] bridge_slave_1: entered allmulticast mode
[   60.735217][ T5872] bridge_slave_1: entered promiscuous mode
[   60.778633][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   60.789625][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.798637][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.823541][ T5879] chnl_net:caif_netlink_parms(): no params data found
[   60.845514][ T5872] team0: Port device team_slave_0 added
[   60.857887][ T5872] team0: Port device team_slave_1 added
[   60.884182][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.886965][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.890547][ T5876] bridge_slave_0: entered allmulticast mode
[   60.893932][ T5876] bridge_slave_0: entered promiscuous mode
[   60.908177][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.911298][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.913966][ T5876] bridge_slave_1: entered allmulticast mode
[   60.916877][ T5876] bridge_slave_1: entered promiscuous mode
[   60.920790][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.923449][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.932106][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.948209][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.950950][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.960580][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.984238][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.986537][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.988991][ T5879] bridge_slave_0: entered allmulticast mode
[   60.991807][ T5879] bridge_slave_0: entered promiscuous mode
[   60.995842][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.998825][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.001501][ T5879] bridge_slave_1: entered allmulticast mode
[   61.004522][ T5879] bridge_slave_1: entered promiscuous mode
[   61.009167][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.026540][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.046333][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.058283][ T5876] team0: Port device team_slave_0 added
[   61.069266][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.074125][ T5876] team0: Port device team_slave_1 added
[   61.083647][ T5872] hsr_slave_0: entered promiscuous mode
[   61.086445][ T5872] hsr_slave_1: entered promiscuous mode
[   61.104275][ T5879] team0: Port device team_slave_0 added
[   61.121026][ T5879] team0: Port device team_slave_1 added
[   61.123501][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.126093][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.135638][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.160129][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.162143][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.170324][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.174350][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.177095][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.187816][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.195224][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.197628][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.206096][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.260832][ T5876] hsr_slave_0: entered promiscuous mode
[   61.263386][ T5876] hsr_slave_1: entered promiscuous mode
[   61.265788][ T5876] debugfs: 'hsr0' already exists in 'hsr'
[   61.267920][ T5876] Cannot create hsr debugfs directory
[   61.280308][ T5879] hsr_slave_0: entered promiscuous mode
[   61.283108][ T5879] hsr_slave_1: entered promiscuous mode
[   61.285365][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   61.287389][ T5879] Cannot create hsr debugfs directory
[   61.380016][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.397604][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.405595][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.414706][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.470769][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.477219][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.482016][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.487467][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.490198][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.493023][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.495614][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.501241][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.543162][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.549596][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.565127][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.571059][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.576572][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.579140][ T5876] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.581826][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.584525][ T5876] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.614952][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.617592][ T5879] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.620619][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.623379][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.640827][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.644176][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.648938][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.652164][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.655523][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.660245][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.676763][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.694179][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   61.710105][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.712782][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.717079][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.720291][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.746533][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.767145][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.781778][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   61.802941][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   61.806557][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.809393][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.814315][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.817166][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.830339][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.832930][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.850586][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.853559][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.890454][ T5876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.910383][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.982954][ T5872] veth0_vlan: entered promiscuous mode
[   61.996659][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.003285][ T5872] veth1_vlan: entered promiscuous mode
[   62.028177][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.031742][ T5872] veth0_macvtap: entered promiscuous mode
[   62.043874][ T5872] veth1_macvtap: entered promiscuous mode
[   62.061295][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.067349][ T5876] veth0_vlan: entered promiscuous mode
[   62.079955][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.090062][ T5879] veth0_vlan: entered promiscuous mode
[   62.096344][ T5713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.100631][ T5713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.104930][ T5876] veth1_vlan: entered promiscuous mode
[   62.109969][ T5713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.117063][ T5713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.121266][ T5879] veth1_vlan: entered promiscuous mode
[   62.160980][ T5879] veth0_macvtap: entered promiscuous mode
[   62.169688][ T5879] veth1_macvtap: entered promiscuous mode
[   62.184385][ T5876] veth0_macvtap: entered promiscuous mode
[   62.195160][ T5876] veth1_macvtap: entered promiscuous mode
[   62.197800][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.201702][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.207698][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.213543][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.217727][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.233052][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.242991][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.254272][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.257879][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.262687][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.265627][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.276962][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.283887][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.287114][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.297291][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.308967][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.312910][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.388099][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.396417][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.400457][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.403384][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.436481][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.440593][ T5235] Bluetooth: hci0: command tx timeout
[   62.445126][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.486940][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.495931][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.518668][ T5235] Bluetooth: hci2: command tx timeout
[   62.519201][   T55] Bluetooth: hci1: command tx timeout
[   62.531786][ T5944] netlink: 104 bytes leftover after parsing attributes in process `syz.0.24'.
[   62.882018][ T5968] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   62.897807][ T5907] IPVS: starting estimator thread 0...
[   62.940410][ T5978] netlink: 120 bytes leftover after parsing attributes in process `syz.0.39'.
[   62.999851][ T5976] IPVS: using max 75 ests per chain, 180000 per kthread
[   63.049262][ T5988] netlink: 'syz.2.44': attribute type 21 has an invalid length.
[   63.052206][ T5988] netlink: 152 bytes leftover after parsing attributes in process `syz.2.44'.
[   63.125947][ T5992] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET)
[   63.133724][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'.
[   63.462934][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[   63.547473][ T6030] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.62'.
[   63.624111][ T6038] IPVS: Error connecting to the multicast addr
[   63.830903][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.834902][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.863236][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.069812][ T6072] Zero length message leads to an empty skb
[   64.083634][ T6072] TC_ACT_REPEAT abuse ?
[   64.085490][ T6072] TC_ACT_REPEAT abuse ?
[   64.097575][ T6072] TC_ACT_REPEAT abuse ?
[   64.112832][ T6071] TC_ACT_REPEAT abuse ?
[   64.124037][ T6071] TC_ACT_REPEAT abuse ?
[   64.329850][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'.
[   64.333763][ T6083] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   64.528572][   T55] Bluetooth: hci0: command tx timeout
[   64.566376][ T6103] netlink: 'syz.1.88': attribute type 58 has an invalid length.
[   64.569858][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.88'.
[   64.598860][   T55] Bluetooth: hci2: command tx timeout
[   64.599046][ T5235] Bluetooth: hci1: command tx timeout
[   64.820287][ T6127] netlink: 'syz.2.96': attribute type 26 has an invalid length.
[   64.838924][ T5907] TC_ACT_REPEAT abuse ?
[   64.917850][ T6137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.599112][ T6191] syzkaller0: entered allmulticast mode
[   65.614514][ T6191] syzkaller0 (unregistering): left allmulticast mode
[   66.071256][ T6220] pim6reg1: entered promiscuous mode
[   66.073324][ T6220] pim6reg1: entered allmulticast mode
[   66.124594][ T5312] TC_ACT_REPEAT abuse ?
[   66.362337][ T6243] tipc: Started in network mode
[   66.364372][ T6243] tipc: Node identity e289be2d43ce, cluster identity 4711
[   66.367164][ T6243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.375037][ T6243] syzkaller0: entered promiscuous mode
[   66.377295][ T6243] syzkaller0: entered allmulticast mode
[   66.387885][ T6243] tipc: Resetting bearer <eth:syzkaller0>
[   66.395330][ T6242] tipc: Resetting bearer <eth:syzkaller0>
[   66.400900][ T6242] tipc: Disabling bearer <eth:syzkaller0>
[   66.598537][ T5235] Bluetooth: hci0: command tx timeout
[   66.680232][ T5235] Bluetooth: hci2: command tx timeout
[   66.680681][   T55] Bluetooth: hci1: command tx timeout
[   66.790474][ T6274] netlink: 'syz.0.160': attribute type 21 has an invalid length.
[   66.908728][ T6288] syz_tun: entered allmulticast mode
[   67.058756][ T6287] syz_tun: left allmulticast mode
[   67.442006][ T6338] netlink: 'syz.2.190': attribute type 3 has an invalid length.
[   67.733579][ T6362] warning: `syz.0.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.739532][ T6364] __nla_validate_parse: 6 callbacks suppressed
[   67.739548][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'.
[   67.796302][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'.
[   67.917434][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'.
[   68.021575][ T6390] pimreg3: entered allmulticast mode
[   68.066039][ T6393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.253651][ T6406] netlink: 'syz.0.223': attribute type 1 has an invalid length.
[   68.290425][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.225'.
[   68.291910][ T6406] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.335899][ T6406] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   68.363023][ T6406] vlan2: entered allmulticast mode
[   68.372406][ T6406] veth1: entered allmulticast mode
[   68.375086][ T6406] veth1: entered promiscuous mode
[   68.377476][ T6406] veth1: left promiscuous mode
[   68.395881][ T6406] bond1: (slave vlan2): making interface the new active one
[   68.403546][ T6406] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   68.411251][ T6406] veth1: entered promiscuous mode
[   68.413770][ T6406] vlan2: entered promiscuous mode
[   68.416109][ T6406] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   68.423109][ T6417] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   68.427451][ T6417] net_ratelimit: 1 callbacks suppressed
[   68.427477][ T6417] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.592520][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'.
[   68.600806][ T6435] netlink: 'syz.0.237': attribute type 1 has an invalid length.
[   68.603065][ T6435] netlink: 'syz.0.237': attribute type 2 has an invalid length.
[   68.647862][ T6439] netlink: 'syz.0.239': attribute type 1 has an invalid length.
[   68.668654][ T6439] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.678579][   T55] Bluetooth: hci0: command tx timeout
[   68.694688][ T6439] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.697920][ T6439] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   68.706306][ T6439] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   68.727356][ T6444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.241'.
[   68.747236][ T6445] veth3: entered promiscuous mode
[   68.753009][ T6445] bond2: (slave veth3): Enslaving as an active interface with a down link
[   68.758671][   T55] Bluetooth: hci1: command tx timeout
[   68.759132][ T5235] Bluetooth: hci2: command tx timeout
[   68.766749][ T6445] erspan0: entered allmulticast mode
[   68.773783][ T6445] bond2: (slave erspan0): making interface the new active one
[   68.777940][ T6445] bond2: (slave erspan0): Enslaving as an active interface with an up link
[   68.872958][ T6455] Illegal XDP return value 143596736 on prog  (id 36) dev N/A, expect packet loss!
[   69.287921][ T6484] bridge_slave_0: left allmulticast mode
[   69.292422][ T6484] bridge_slave_0: left promiscuous mode
[   69.298997][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.313337][ T6484] bridge_slave_1: left allmulticast mode
[   69.315519][ T6484] bridge_slave_1: left promiscuous mode
[   69.317846][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.324605][ T6484] bond0: (slave bond_slave_0): Releasing backup interface
[   69.329491][ T6484] bond0: (slave bond_slave_1): Releasing backup interface
[   69.337471][ T6484] team0: Port device team_slave_0 removed
[   69.358940][ T6484] team0: Port device team_slave_1 removed
[   69.361424][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.363935][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.370854][ T6484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.373158][ T6484] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.406774][ T6487] team0: Mode changed to "loadbalance"
[   69.759490][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'.
[   69.872517][ T6532] ieee802154 phy0 wpan0: encryption failed: -22
[   70.170115][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   70.175749][ T6558] openvswitch: netlink: Flow actions attr not present in new flow.
[   70.292606][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'.
[   70.399234][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   70.539441][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   70.639536][ T6594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.310'.
[   70.649762][ T5894] bond1: (slave wlan0): failed to get link speed/duplex
[   70.741433][ T6604] netlink: 'syz.2.314': attribute type 8 has an invalid length.
[   70.766595][ T5894] bond1: (slave wlan0): failed to get link speed/duplex
[   70.858103][ T6622] netlink: 'syz.0.323': attribute type 10 has an invalid length.
[   70.896738][ T6622] bridge0: port 3(macsec0) entered blocking state
[   70.905157][ T6622] bridge0: port 3(macsec0) entered disabled state
[   70.907647][ T6622] macsec0: entered allmulticast mode
[   70.916313][ T6622] veth1_macvtap: entered allmulticast mode
[   70.919709][ T6622] macsec0: entered promiscuous mode
[   70.922072][ T6622] bridge0: port 3(macsec0) entered blocking state
[   70.924243][ T6622] bridge0: port 3(macsec0) entered forwarding state
[   70.929143][ T5894] bond1: (slave wlan0): failed to get link speed/duplex
[   71.039094][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   71.212536][ T6649] netlink: 152 bytes leftover after parsing attributes in process `syz.1.330'.
[   71.321552][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.324730][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.637476][ T5713] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.643225][ T5713] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.647881][ T5713] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.658702][ T5713] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.678839][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   71.775884][ T6682] dummy0: entered promiscuous mode
[   71.778051][ T6682] macvtap1: entered promiscuous mode
[   71.781427][ T6682] macvtap1: entered allmulticast mode
[   71.783812][ T6682] dummy0: entered allmulticast mode
[   71.833129][ T6641] syz.2.329 (6641) used greatest stack depth: 20112 bytes left
[   71.977203][ T6706] wg1 speed is unknown, defaulting to 1000
[   71.979625][ T6706] wg1 speed is unknown, defaulting to 1000
[   71.982790][ T6706] wg1 speed is unknown, defaulting to 1000
[   71.986855][ T6706] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.995132][ T6707] netlink: 'syz.1.359': attribute type 8 has an invalid length.
[   71.995215][ T6706] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   72.012102][ T6707] bond0: entered promiscuous mode
[   72.014970][ T6707] bond_slave_0: entered promiscuous mode
[   72.017140][ T6707] bond_slave_1: entered promiscuous mode
[   72.021520][ T6707] bond0: left promiscuous mode
[   72.023422][ T6707] bond_slave_0: left promiscuous mode
[   72.025714][ T6707] bond_slave_1: left promiscuous mode
[   72.041781][ T6706] wg1 speed is unknown, defaulting to 1000
[   72.044868][ T6706] wg1 speed is unknown, defaulting to 1000
[   72.047825][ T6706] wg1 speed is unknown, defaulting to 1000
[   72.892778][ T6789] netlink: 'syz.1.398': attribute type 10 has an invalid length.
[   72.896934][ T6789] team0: Device dummy0 is up. Set it down before adding it as a team port
[   73.180672][ T6822] __nla_validate_parse: 3 callbacks suppressed
[   73.180687][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'.
[   73.282664][ T6829] netlink: 'syz.1.413': attribute type 10 has an invalid length.
[   73.286027][ T6829] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.295463][ T6829] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.314636][ T6829] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   73.390809][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'.
[   73.403128][ T6840] netlink: 'syz.2.418': attribute type 4 has an invalid length.
[   73.448641][   T12] net_ratelimit: 16 callbacks suppressed
[   73.448657][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   73.581625][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   73.582329][ T6848] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   73.591976][ T6848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.422'.
[   73.607157][ T6848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.620883][ T6848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.637304][ T6848] bond0 (unregistering): Released all slaves
[   73.688579][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   73.809280][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   73.835319][ T6872] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   73.838664][ T6872] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   73.842091][ T6872] netlink: 160 bytes leftover after parsing attributes in process `syz.2.434'.
[   73.846580][ T6872] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   73.853220][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'.
[   73.904892][ T6879] netlink: 788 bytes leftover after parsing attributes in process `syz.0.436'.
[   73.938778][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   74.070090][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   74.180835][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   74.234212][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'.
[   74.299343][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   74.425691][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   74.539347][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   74.661586][   T33] audit: type=1800 audit(1756433788.943:2): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.448" name="memory.events" dev="tmpfs" ino=791 res=0 errno=0
[   75.863469][ T6942] netlink: 140 bytes leftover after parsing attributes in process `syz.1.463'.
[   76.330149][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'.
[   76.339740][ T6979] Bluetooth: MGMT ver 1.23
[   77.079224][ T5235] Bluetooth: hci2: command tx timeout
[   77.775129][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[   77.792396][ T7017] team0: No ports can be present during mode change
[   78.193303][ T7058] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.513'.
[   78.204542][ T7050] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.513'.
[   78.235212][ T7061] wg1 speed is unknown, defaulting to 1000
[   78.266103][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'.
[   78.301876][ T7067] wg1 speed is unknown, defaulting to 1000
[   78.478751][ T5894] net_ratelimit: 35 callbacks suppressed
[   78.478775][ T5894] bond1: (slave wlan0): failed to get link speed/duplex
[   78.589523][ T5894] bond1: (slave wlan0): failed to get link speed/duplex
[   78.708683][ T5713] bond1: (slave wlan0): failed to get link speed/duplex
[   78.818664][ T5894] bond1: (slave wlan0): failed to get link speed/duplex
[   78.928782][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   78.976608][ T7124] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   79.048949][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   79.115405][ T7135] netlink: 'syz.0.552': attribute type 39 has an invalid length.
[   79.169164][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   79.278862][ T5894] bond1: (slave wlan0): failed to get link speed/duplex
[   79.296394][ T7140] tipc: Started in network mode
[   79.298692][ T7140] tipc: Node identity fe4a45503acf, cluster identity 4711
[   79.301702][ T7140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.305261][ T7140] syzkaller0: entered promiscuous mode
[   79.307522][ T7140] syzkaller0: entered allmulticast mode
[   79.316907][ T7140] tipc: Resetting bearer <eth:syzkaller0>
[   79.321091][ T7138] tipc: Resetting bearer <eth:syzkaller0>
[   79.324683][ T7138] tipc: Disabling bearer <eth:syzkaller0>
[   79.389619][ T5894] bond1: (slave wlan0): failed to get link speed/duplex
[   79.392969][ T7144] ieee802154 phy0 wpan0: encryption failed: -22
[   79.498759][   T12] bond1: (slave wlan0): failed to get link speed/duplex
[   79.578688][   T12] vlan2: left promiscuous mode
[   79.771851][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.570'.
[   79.842786][ T7187] bond1: (slave wlan0): Releasing active interface
[   79.845286][ T7187] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   79.852052][ T7187] vlan2: entered promiscuous mode
[   79.951120][ T7193] netlink: 47 bytes leftover after parsing attributes in process `syz.0.577'.
[   80.035164][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.582'.
[   80.175621][ T7210] syzkaller0: entered promiscuous mode
[   80.177884][ T7210] syzkaller0: entered allmulticast mode
[   80.211601][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.587'.
[   80.395823][ T7232] syzkaller1: entered promiscuous mode
[   80.398018][ T7232] syzkaller1: entered allmulticast mode
[   80.683732][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.608'.
[   80.801014][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[   80.940119][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[   81.473589][ T7329] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[   81.492683][ T7329] bond0: entered promiscuous mode
[   81.495044][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.518737][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.522003][ T7329] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[   81.526331][ T7329] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   81.537611][ T7329] bond0: (slave wireguard0): making interface the new active one
[   81.541351][ T7329] wireguard0: entered promiscuous mode
[   81.544887][ T7329] bond0: (slave wireguard0): Enslaving as an active interface with an up link
[   81.562319][   T10] cfg80211: failed to load regulatory.db
[   81.573031][ T7329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.576025][ T7329] IPv6: NLM_F_CREATE should be set when creating new route
[   81.578985][ T7329] IPv6: NLM_F_CREATE should be set when creating new route
[   81.607299][ T7329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.626397][ T7329] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address
[   81.646348][ T7329] bond0: (slave wireguard1): Enslaving as a backup interface with an up link
[   81.739944][ T7352] trusted_key: syz.2.653 sent an empty control message without MSG_MORE.
[   81.813593][ T7363] netlink: 'syz.2.658': attribute type 21 has an invalid length.
[   81.829727][ T7364] netlink: 'syz.0.659': attribute type 7 has an invalid length.
[   82.132540][ T7396] netlink: 'syz.1.674': attribute type 12 has an invalid length.
[   82.203912][ T7406] wg1 speed is unknown, defaulting to 1000
[   82.482463][ T7440] netlink: 'syz.1.694': attribute type 1 has an invalid length.
[   82.485529][ T7440] NCSI netlink: No device for ifindex 813332851
[   82.610721][ T7458] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[   82.677642][ T7463] pim6reg1: entered promiscuous mode
[   82.680916][ T7463] pim6reg1: entered allmulticast mode
[   82.812323][ T7463] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.817690][ T7463] team0: Port device bond1 added
[   83.454159][ T7534] __nla_validate_parse: 15 callbacks suppressed
[   83.454171][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.734'.
[   83.662630][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'.
[   83.684511][ T7562] net_ratelimit: 5 callbacks suppressed
[   83.684527][ T7562] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   83.802890][ T7579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.846387][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'.
[   84.022613][ T7615] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   84.032386][ T7615] tipc: Enabled bearer <udp:s>, priority 10
[   84.153099][ T7627] wg1 speed is unknown, defaulting to 1000
[   84.158647][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   84.298544][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   84.448746][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   84.588485][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   84.728568][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   84.878472][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   85.018816][   T10] tipc: Node number set to 3297068368
[   85.045323][ T7666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'.
[   85.105380][ T7672] tipc: Cannot configure node identity twice
[   85.158587][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   85.247179][ T7685] delete_channel: no stack
[   85.417509][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.816'.
[   86.395136][ T7797] netlink: 'syz.2.843': attribute type 1 has an invalid length.
[   86.397930][ T7797] netlink: 244 bytes leftover after parsing attributes in process `syz.2.843'.
[   86.706339][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.862'.
[   86.710189][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'.
[   86.731376][ T7842] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   86.796733][ T7848] netlink: 'syz.0.865': attribute type 1 has an invalid length.
[   86.800587][ T7848] netlink: 232 bytes leftover after parsing attributes in process `syz.0.865'.
[   86.804252][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'.
[   88.623136][   T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[   88.871155][ T7964] sctp: [Deprecated]: syz.1.909 (pid 7964) Use of int in maxseg socket option.
[   88.871155][ T7964] Use struct sctp_assoc_value instead
[   88.904391][ T7968] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   88.911113][ T7970] netlink: 'syz.0.912': attribute type 2 has an invalid length.
[   88.919696][ T7970] __nla_validate_parse: 4 callbacks suppressed
[   88.919726][ T7970] netlink: 116 bytes leftover after parsing attributes in process `syz.0.912'.
[   89.042930][ T7984] erspan0: left allmulticast mode
[   89.047994][ T7984] 8021q: adding VLAN 0 to HW filter on device team0
[   89.052602][ T7984] net_ratelimit: 4 callbacks suppressed
[   89.052607][ T7984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.078578][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   89.437511][ T7990] netlink: 'syz.2.922': attribute type 1 has an invalid length.
[   89.554445][ T8000] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.557785][ T7999] tipc: Resetting bearer <eth:syzkaller0>
[   89.597190][ T7999] tipc: Disabling bearer <eth:syzkaller0>
[   89.604986][ T8006] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   89.785208][ T8024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.937'.
[   90.032420][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.943'.
[   90.118569][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   90.154524][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.944'.
[   90.158094][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.944'.
[   90.398982][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'.
[   90.640224][ T8078] netlink: 'syz.0.961': attribute type 1 has an invalid length.
[   90.654351][ T8078] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.678165][ T8078] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.681868][ T8078] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   90.687437][ T8078] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   90.779875][ T3749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.782388][ T3749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.977359][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.966'.
[   90.981083][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.966'.
[   90.986987][ T8091] ip6gretap0: entered promiscuous mode
[   90.990652][ T8091] syz_tun: entered promiscuous mode
[   91.099235][   T12] vlan2: left promiscuous mode
[   91.169768][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   91.410652][ T8123] netlink: 'syz.2.980': attribute type 10 has an invalid length.
[   91.413905][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.2.980'.
[   91.417799][ T8123] dummy0: entered promiscuous mode
[   91.426115][ T8123] bridge0: port 1(dummy0) entered blocking state
[   91.430030][ T8123] bridge0: port 1(dummy0) entered disabled state
[   91.433255][ T8123] dummy0: entered allmulticast mode
[   91.629785][ T8141] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   91.632628][ T8141] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   91.635768][ T8141] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   92.198488][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   92.206239][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'.
[   92.314554][ T8215] netlink: 'syz.0.1023': attribute type 1 has an invalid length.
[   92.317607][ T8215] netlink: 'syz.0.1023': attribute type 3 has an invalid length.
[   92.413852][ T8230] netlink: 'syz.2.1030': attribute type 1 has an invalid length.
[   92.457141][ T8227] smc: net device bond0 applied user defined pnetid SYZ2
[   92.637249][ T8257] x_tables: ip_tables: udp match: only valid for protocol 17
[   92.654587][ T8259] netlink: 'syz.1.1044': attribute type 3 has an invalid length.
[   93.248609][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   93.598576][   T33] audit: type=1800 audit(1756433807.873:3): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1049" name="memory.events" dev="tmpfs" ino=1838 res=0 errno=0
[   93.609148][   T33] audit: type=1804 audit(1756433807.873:4): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1049" name="memory.events" dev="tmpfs" ino=1838 res=1 errno=0
[   93.646425][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.649694][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.694681][ T8275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.767602][ T8275] dummy0: left allmulticast mode
[   93.774828][ T5894] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.782449][ T5894] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.794402][ T5894] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.803967][ T5894] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.961194][ T8308] __nla_validate_parse: 7 callbacks suppressed
[   93.961210][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'.
[   94.017288][ T8314] netlink: 'syz.2.1069': attribute type 1 has an invalid length.
[   94.023990][ T8314] netlink: 'syz.2.1069': attribute type 2 has an invalid length.
[   94.026799][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'.
[   94.145522][ T8320] ip6gre1: entered promiscuous mode
[   94.158818][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'.
[   94.236001][ T8328] dvmrp8: entered allmulticast mode
[   94.288516][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   94.327941][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'.
[   94.423754][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'.
[   94.722854][ T8319] dvmrp8: left allmulticast mode
[   94.888061][ T8370] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.895669][ T8370] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   95.064146][ T8388] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   95.218969][ T8406] tipc: Started in network mode
[   95.220911][ T8406] tipc: Node identity 9253154169db, cluster identity 4711
[   95.223423][ T8406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.227147][ T8406] syzkaller0: entered promiscuous mode
[   95.230775][ T8406] syzkaller0: entered allmulticast mode
[   95.241173][ T8406] tipc: Resetting bearer <eth:syzkaller0>
[   95.246942][ T8405] tipc: Resetting bearer <eth:syzkaller0>
[   95.251000][ T8405] tipc: Disabling bearer <eth:syzkaller0>
[   95.318516][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   95.653169][ T8456] netlink: 'syz.2.1133': attribute type 10 has an invalid length.
[   95.656204][ T8456] bridge0: port 1(dummy0) entered blocking state
[   95.658809][ T8456] bridge0: port 1(dummy0) entered forwarding state
[   95.664886][ T8456] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   95.815486][ T8466] netlink: 'syz.1.1136': attribute type 1 has an invalid length.
[   95.821225][ T8466] netlink: 'syz.1.1136': attribute type 3 has an invalid length.
[   95.824395][ T8466] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1136'.
[   95.828257][ T8466] NCSI netlink: No device for ifindex 0
[   95.892416][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'.
[   95.895656][ T8474] block nbd0: not configured, cannot reconfigure
[   95.896073][ T8476] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[   95.923430][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1142'.
[   95.973838][ T8482] wg1 speed is unknown, defaulting to 1000
[   96.045437][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'.
[   96.183477][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1144'.
[   96.193804][ T8482] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   96.368482][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   96.617666][ T8547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.620267][ T8547] IPv6: NLM_F_CREATE should be set when creating new route
[   96.622808][ T8547] IPv6: NLM_F_CREATE should be set when creating new route
[   96.625390][ T8547] IPv6: NLM_F_CREATE should be set when creating new route
[   96.630745][ T8547] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   96.674742][ T8552] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   97.083906][ T8592] wg1 speed is unknown, defaulting to 1000
[   97.398575][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   97.766380][ T8645] validate_nla: 3 callbacks suppressed
[   97.766404][ T8645] netlink: 'syz.1.1218': attribute type 32 has an invalid length.
[   97.830708][ T8649] netlink: 'syz.1.1220': attribute type 29 has an invalid length.
[   97.850096][ T8649] netlink: 'syz.1.1220': attribute type 29 has an invalid length.
[   98.370665][ T8686] nbd: must specify at least one socket
[   98.412949][ T8690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.416065][ T8690] syzkaller0: entered promiscuous mode
[   98.419541][ T8690] syzkaller0: entered allmulticast mode
[   98.426157][ T8690] tipc: Resetting bearer <eth:syzkaller0>
[   98.429849][ T8689] tipc: Resetting bearer <eth:syzkaller0>
[   98.433370][ T8689] tipc: Disabling bearer <eth:syzkaller0>
[   98.438699][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   98.925762][ T8724] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.933099][ T8724] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   98.948924][ T8726] netlink: 'syz.2.1256': attribute type 4 has an invalid length.
[   98.957239][ T8726] netlink: 'syz.2.1256': attribute type 4 has an invalid length.
[   99.107328][ T8736] sctp: [Deprecated]: syz.2.1261 (pid 8736) Use of int in max_burst socket option.
[   99.107328][ T8736] Use struct sctp_assoc_value instead
[   99.297806][ T8754] __nla_validate_parse: 14 callbacks suppressed
[   99.297818][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1270'.
[   99.422637][ T8764] wg1 speed is unknown, defaulting to 1000
[   99.478601][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   99.845101][ T8791] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1287'.
[  100.084037][ T8806] bond0: (slave bridge0): Releasing backup interface
[  100.087673][ T8806] bridge0: port 1(dummy0) entered disabled state
[  100.092091][ T8806] dummy0: left allmulticast mode
[  100.094504][ T8806] bridge0: port 1(dummy0) entered disabled state
[  100.102310][ T8806] team0: Port device bond1 removed
[  100.132174][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'.
[  100.518538][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  100.912217][ T8864] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.914770][ T8864] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  101.558477][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  101.820284][ T8926] xt_l2tp: unknown flags: 51
[  101.873264][ T8940] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1354'.
[  101.900855][ T8942] batman_adv: batadv0: Adding interface: vxlan0
[  101.903945][ T8942] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.914349][ T8942] batman_adv: batadv0: Interface activated: vxlan0
[  101.916955][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.924478][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.927910][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.945518][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.975804][ T8952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.017564][ T8956] netlink: 'syz.1.1364': attribute type 1 has an invalid length.
[  102.030613][ T8963] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1365'.
[  102.035113][ T8956] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.042839][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'.
[  102.085551][ T8968] netlink: 'syz.1.1369': attribute type 21 has an invalid length.
[  102.152576][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1374'.
[  102.424372][ T8991] atomic_op ffff88802b564998 conn xmit_atomic 0000000000000000
[  102.598806][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  102.996159][ T8994] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1379'.
[  103.000944][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'.
[  103.310568][ T9017] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  103.320181][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1392'.
[  103.457305][ T9023] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.461235][ T9023] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.511975][ T9034] netlink: 'syz.1.1397': attribute type 12 has an invalid length.
[  103.632505][ T9055] syz.1.1406: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  103.637433][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.1.1406 Not tainted syzkaller #0 PREEMPT(full) 
[  103.637446][ T9055] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.637453][ T9055] Call Trace:
[  103.637467][ T9055]  <TASK>
[  103.637474][ T9055]  dump_stack_lvl+0x189/0x250
[  103.637489][ T9055]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.637499][ T9055]  ? __pfx__printk+0x10/0x10
[  103.637509][ T9055]  ? lock_release+0x4b/0x3e0
[  103.637521][ T9055]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  103.637531][ T9055]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  103.637541][ T9055]  warn_alloc+0x214/0x310
[  103.637553][ T9055]  ? stack_depot_save_flags+0x40/0x860
[  103.637565][ T9055]  ? __pfx_warn_alloc+0x10/0x10
[  103.637576][ T9055]  ? kasan_save_track+0x4f/0x80
[  103.637587][ T9055]  ? xskq_create+0x56/0x170
[  103.637597][ T9055]  ? xsk_init_queue+0xb0/0x110
[  103.637606][ T9055]  ? xsk_setsockopt+0x4dc/0x8d0
[  103.637616][ T9055]  ? do_sock_setsockopt+0x17c/0x1b0
[  103.637624][ T9055]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  103.637657][ T9055]  ? do_syscall_64+0xfa/0x3b0
[  103.637665][ T9055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.637675][ T9055]  __vmalloc_node_range_noprof+0x125/0x12f0
[  103.637692][ T9055]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  103.637705][ T9055]  ? xsk_setsockopt+0x462/0x8d0
[  103.637715][ T9055]  ? __kasan_kmalloc+0x93/0xb0
[  103.637726][ T9055]  vmalloc_user_noprof+0xad/0xf0
[  103.637738][ T9055]  ? xskq_create+0xbf/0x170
[  103.637748][ T9055]  xskq_create+0xbf/0x170
[  103.637759][ T9055]  xsk_init_queue+0xb0/0x110
[  103.637769][ T9055]  xsk_setsockopt+0x4dc/0x8d0
[  103.637779][ T9055]  ? __pfx_xsk_setsockopt+0x10/0x10
[  103.637788][ T9055]  ? __pfx_aa_sk_perm+0x10/0x10
[  103.637799][ T9055]  ? lock_release+0x4b/0x3e0
[  103.637809][ T9055]  ? aa_sock_opt_perm+0xff/0x1b0
[  103.637817][ T9055]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  103.637825][ T9055]  ? __pfx_xsk_setsockopt+0x10/0x10
[  103.637835][ T9055]  do_sock_setsockopt+0x17c/0x1b0
[  103.637844][ T9055]  __x64_sys_setsockopt+0x13f/0x1b0
[  103.637852][ T9055]  do_syscall_64+0xfa/0x3b0
[  103.637859][ T9055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.637884][ T9055]  ? exc_page_fault+0x9f/0xf0
[  103.637897][ T9055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.637905][ T9055] RIP: 0033:0x7f68e638ebe9
[  103.637913][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  103.637921][ T9055] RSP: 002b:00007f68e72d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  103.637931][ T9055] RAX: ffffffffffffffda RBX: 00007f68e65b5fa0 RCX: 00007f68e638ebe9
[  103.637937][ T9055] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  103.637943][ T9055] RBP: 00007f68e6411e19 R08: 0000000000000004 R09: 0000000000000000
[  103.637948][ T9055] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  103.637953][ T9055] R13: 00007f68e65b6038 R14: 00007f68e65b5fa0 R15: 00007ffe4af34fa8
[  103.637962][ T9055]  </TASK>
[  103.638005][ T9055] Mem-Info:
[  103.641006][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  103.644400][ T9055] active_anon:5101 inactive_anon:0 isolated_anon:0
[  103.644400][ T9055]  active_file:1419 inactive_file:38231 isolated_file:0
[  103.644400][ T9055]  unevictable:1768 dirty:436 writeback:0
[  103.644400][ T9055]  slab_reclaimable:10043 slab_unreclaimable:53516
[  103.644400][ T9055]  mapped:18305 shmem:2443 pagetables:1016
[  103.644400][ T9055]  sec_pagetables:0 bounce:0
[  103.644400][ T9055]  kernel_misc_reclaimable:0
[  103.644400][ T9055]  free:298322 free_pcp:20977 free_cma:0
[  103.770768][ T9055] Node 0 active_anon:10656kB inactive_anon:0kB active_file:3348kB inactive_file:137688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30644kB dirty:964kB writeback:0kB shmem:4932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4360kB pagetables:1944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.782778][ T9055] Node 1 active_anon:9680kB inactive_anon:0kB active_file:2328kB inactive_file:15236kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42576kB dirty:780kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7168kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  103.793521][ T9055] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  103.802805][ T9055] lowmem_reserve[]: 0 811 811 811 811
[  103.804659][ T9055] Node 0 DMA32 free:289336kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10648kB inactive_anon:0kB active_file:3348kB inactive_file:137688kB unevictable:3536kB writepending:964kB present:1556484kB managed:830916kB mlocked:0kB bounce:0kB free_pcp:40672kB local_pcp:21052kB free_cma:0kB
[  103.815034][ T9055] lowmem_reserve[]: 0 0 0 0 0
[  103.816638][ T9055] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  103.826915][ T9055] lowmem_reserve[]: 0 0 854 854 854
[  103.828786][ T9055] Node 1 Normal free:429684kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9688kB inactive_anon:0kB active_file:2328kB inactive_file:15236kB unevictable:3536kB writepending:780kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43280kB local_pcp:14312kB free_cma:0kB
[  103.841478][ T9055] lowmem_reserve[]: 0 0 0 0 0
[  103.843530][ T9055] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  103.848792][ T9055] Node 0 DMA32: 976*4kB (UME) 305*8kB (UME) 113*16kB (UM) 207*32kB (UME) 54*64kB (UM) 30*128kB (UME) 32*256kB (UME) 18*512kB (UM) 12*1024kB (UME) 2*2048kB (ME) 57*4096kB (UM) = 289336kB
[  103.854667][ T9055] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  103.860312][ T9055] Node 1 Normal: 685*4kB (UME) 758*8kB (UME) 489*16kB (UM) 422*32kB (UM) 163*64kB (UM) 92*128kB (UM) 56*256kB (UM) 27*512kB (UM) 27*1024kB (UME) 13*2048kB (UME) 72*4096kB (UM) = 429684kB
[  103.866227][ T9055] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.869542][ T9055] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  103.873333][ T9055] 42095 total pagecache pages
[  103.875217][ T9055] 0 pages in swap cache
[  103.880087][ T9055] Free swap  = 124996kB
[  103.882116][ T9055] Total swap = 124996kB
[  103.883680][ T9055] 786301 pages RAM
[  103.885379][ T9055] 0 pages HighMem/MovableOnly
[  103.888476][ T9055] 241340 pages reserved
[  103.890269][ T9055] 0 pages cma reserved
[  103.986850][ T9071] bond0: Error: Cannot enslave bond to itself.
[  104.015743][ T9074] netlink: 'syz.1.1415': attribute type 2 has an invalid length.
[  104.678533][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  105.139136][ T9114] netlink: 'syz.0.1433': attribute type 10 has an invalid length.
[  105.143003][ T9114] bridge0: port 3(macsec0) entered disabled state
[  105.145753][ T9114] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.148944][ T9114] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.175679][ T9114] __nla_validate_parse: 2 callbacks suppressed
[  105.175694][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1433'.
[  105.181799][ T9114] macsec0: left allmulticast mode
[  105.183710][ T9114] veth1_macvtap: left allmulticast mode
[  105.185916][ T9114] macsec0: left promiscuous mode
[  105.188104][ T9114] bridge0: port 3(macsec0) entered disabled state
[  105.197241][ T9114] bridge_slave_1: left allmulticast mode
[  105.205714][ T9114] bridge_slave_1: left promiscuous mode
[  105.219278][ T9114] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.223949][ T9114] bridge_slave_0: left allmulticast mode
[  105.227047][ T9114] bridge_slave_0: left promiscuous mode
[  105.231621][ T9114] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.455276][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1452'.
[  105.718620][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  105.727690][ T9197] netlink: 'syz.0.1472': attribute type 11 has an invalid length.
[  106.363859][ T9237] netlink: 'syz.2.1489': attribute type 2 has an invalid length.
[  106.768633][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  106.778095][ T9272] netlink: 'syz.1.1504': attribute type 1 has an invalid length.
[  106.838128][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'.
[  106.842791][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1508'.
[  107.137127][ T9301] netlink: 'syz.2.1518': attribute type 3 has an invalid length.
[  107.179552][ T9307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1520'.
[  107.211868][ T9311] syzkaller1: entered promiscuous mode
[  107.214256][ T9311] syzkaller1: entered allmulticast mode
[  107.798565][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  107.824722][ T9352] lo speed is unknown, defaulting to 1000
[  107.827049][ T9352] lo speed is unknown, defaulting to 1000
[  107.831242][ T9352] lo speed is unknown, defaulting to 1000
[  107.845355][ T9352] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  107.890000][ T9352] lo speed is unknown, defaulting to 1000
[  107.912863][ T9352] lo speed is unknown, defaulting to 1000
[  107.940610][ T9352] lo speed is unknown, defaulting to 1000
[  108.390583][ T9376] wg1 speed is unknown, defaulting to 1000
[  108.392824][ T9376] lo speed is unknown, defaulting to 1000
[  108.524724][ T9380] dummy0: left promiscuous mode
[  108.548968][ T9380] ip6gre1: left promiscuous mode
[  108.848601][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  109.024624][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'.
[  109.632111][ T9451] wg1 speed is unknown, defaulting to 1000
[  109.634576][ T9451] lo speed is unknown, defaulting to 1000
[  109.757035][ T9451] netlink: 'syz.2.1582': attribute type 2 has an invalid length.
[  109.811370][ T9455] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1583'.
[  109.834484][ T9457] netlink: 'syz.2.1584': attribute type 1 has an invalid length.
[  109.850481][ T9457] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.862068][ T9457] bond2: (slave ip6erspan0): making interface the new active one
[  109.866066][ T9457] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  109.875448][ T9457] syz.2.1584 (9457) used greatest stack depth: 19376 bytes left
[  109.878747][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  110.015158][ T9470] syzkaller1: entered promiscuous mode
[  110.017465][ T9470] syzkaller1: entered allmulticast mode
[  110.918529][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  111.598157][ T9621] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1618'.
[  111.672885][ T9629] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.676109][ T9629] syzkaller0: entered promiscuous mode
[  111.678277][ T9629] syzkaller0: entered allmulticast mode
[  111.695021][ T9629] tipc: Resetting bearer <eth:syzkaller0>
[  111.703812][ T9628] tipc: Resetting bearer <eth:syzkaller0>
[  111.711813][ T9628] tipc: Disabling bearer <eth:syzkaller0>
[  111.856781][ T9651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.866885][ T9651] syzkaller0: entered promiscuous mode
[  111.869649][ T9651] syzkaller0: entered allmulticast mode
[  111.877777][ T9651] tipc: Resetting bearer <eth:syzkaller0>
[  111.890509][ T9649] tipc: Resetting bearer <eth:syzkaller0>
[  111.901344][ T9649] tipc: Disabling bearer <eth:syzkaller0>
[  111.958519][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  112.055602][ T9669] netlink: 'syz.2.1642': attribute type 39 has an invalid length.
[  112.295465][ T9684] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1649'.
[  112.489744][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1658'.
[  112.741351][ T9735] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  112.998499][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  113.507268][ T9810] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  113.713546][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1710'.
[  113.747064][ T9824] netlink: 'syz.2.1713': attribute type 1 has an invalid length.
[  113.754754][ T9826] gretap1: entered promiscuous mode
[  113.756535][ T9826] gretap1: entered allmulticast mode
[  113.825567][ T9830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.833331][ T9830] syzkaller0: entered promiscuous mode
[  113.836325][ T9830] syzkaller0: entered allmulticast mode
[  113.845185][ T9830] tipc: Resetting bearer <eth:syzkaller0>
[  113.850021][ T9829] tipc: Resetting bearer <eth:syzkaller0>
[  113.855402][ T9829] tipc: Disabling bearer <eth:syzkaller0>
[  113.899793][ T9838] netlink: 'syz.2.1720': attribute type 1 has an invalid length.
[  113.903011][ T9838] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1720'.
[  114.048575][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  114.520390][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'.
[  114.641476][ T9903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.653628][ T9903] syzkaller0: entered promiscuous mode
[  114.655644][ T9903] syzkaller0: entered allmulticast mode
[  114.662451][ T9903] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  114.666632][ T9903] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  114.674675][ T9903] tipc: Resetting bearer <eth:syzkaller0>
[  114.681932][ T9902] tipc: Resetting bearer <eth:syzkaller0>
[  114.686732][ T9902] tipc: Disabling bearer <eth:syzkaller0>
[  114.954003][ T9929] netlink: 'syz.2.1763': attribute type 30 has an invalid length.
[  114.989366][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'.
[  114.992588][ T9933] openvswitch: netlink: Missing key (keys=40, expected=100)
[  115.004352][ T9937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'.
[  115.033962][ T9939] pimreg: entered allmulticast mode
[  115.039554][ T9939] pimreg: left allmulticast mode
[  115.078602][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  115.128079][ T9954] netlink: 'syz.1.1772': attribute type 13 has an invalid length.
[  115.133231][ T9954] netlink: 'syz.1.1772': attribute type 17 has an invalid length.
[  115.175624][ T9954] 8021q: adding VLAN 0 to HW filter on device team0
[  115.181727][ T9954] dummy0: left promiscuous mode
[  115.187680][ T9954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.213937][ T9959] wg1 speed is unknown, defaulting to 1000
[  115.223884][ T9959] lo speed is unknown, defaulting to 1000
[  115.309731][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  115.461262][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1785'.
[  115.470426][ T9977] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  115.473893][ T9977] team0: Device ipvlan2 is already an upper device of the team interface
[  115.624995][ T9979] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  115.701347][ T9986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1789'.
[  115.905996][ T9986] wg1 speed is unknown, defaulting to 1000
[  115.909275][ T9986] lo speed is unknown, defaulting to 1000
[  116.059335][T10001] syzkaller1: entered promiscuous mode
[  116.061072][T10001] syzkaller1: entered allmulticast mode
[  116.118593][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  116.272386][T10035] netlink: 'syz.0.1808': attribute type 6 has an invalid length.
[  116.297890][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  116.531220][T10064] syz_tun: entered allmulticast mode
[  116.534584][T10063] syz_tun: left allmulticast mode
[  116.545891][T10065] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  116.554012][T10065] syzkaller0: entered promiscuous mode
[  116.556653][T10065] syzkaller0: entered allmulticast mode
[  117.168529][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  117.198118][T10100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.363137][T10118] tun0: tun_chr_ioctl cmd 1074025681
[  117.415998][T10120] __nla_validate_parse: 6 callbacks suppressed
[  117.416012][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'.
[  117.648527][ T5235] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  117.934977][T10154] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.940613][T10154] syzkaller0: entered promiscuous mode
[  117.945105][T10154] syzkaller0: entered allmulticast mode
[  117.956711][T10154] tipc: Resetting bearer <eth:syzkaller0>
[  117.960225][T10153] tipc: Resetting bearer <eth:syzkaller0>
[  117.971772][T10153] tipc: Disabling bearer <eth:syzkaller0>
[  118.077854][T10163] wg1 speed is unknown, defaulting to 1000
[  118.081377][T10163] lo speed is unknown, defaulting to 1000
[  118.123085][T10169] sctp: [Deprecated]: syz.0.1867 (pid 10169) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.123085][T10169] Use struct sctp_sack_info instead
[  118.141293][ T5235] Bluetooth: hci2: link tx timeout
[  118.143628][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.146953][   T55] Bluetooth: hci2: link tx timeout
[  118.149208][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.152465][   T55] Bluetooth: hci2: link tx timeout
[  118.154480][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.185015][T10171] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1869'.
[  118.198507][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  118.251171][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'.
[  118.418598][T10192] sock: sock_set_timeout: `syz.1.1876' (pid 10192) tries to set negative timeout
[  118.552657][T10201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.564811][T10201] tipc: Failed to remove unknown binding: 66,1,1/0:4023279466/4023279468
[  118.569029][   T47] IPVS: starting estimator thread 0...
[  118.575953][T10188] wg1 speed is unknown, defaulting to 1000
[  118.578159][T10188] lo speed is unknown, defaulting to 1000
[  118.579965][T10201] tipc: Failed to remove unknown binding: 66,1,1/0:4023279466/4023279468
[  118.583723][T10201] tipc: Failed to remove unknown binding: 66,1,1/0:4023279466/4023279468
[  118.589924][T10201] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1882'.
[  118.670073][T10202] IPVS: using max 91 ests per chain, 218400 per kthread
[  119.248546][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  119.293180][T10263] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1908'.
[  120.091709][T10317] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1932'.
[  120.208624][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  120.288500][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  120.311146][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1940'.
[  120.330609][T10338] netlink: del zone limit has 8 unknown bytes
[  120.810340][T10386] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1965'.
[  120.813197][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'.
[  120.816017][T10386] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  120.873548][T10395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1967'.
[  120.935871][T10396] wg1 speed is unknown, defaulting to 1000
[  120.946418][T10396] lo speed is unknown, defaulting to 1000
[  121.318498][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  121.460395][ T5894] syzkaller0: tun_net_xmit 76
[  121.462518][ T5894] syzkaller0: tun_net_xmit 48
[  121.474049][T10458] syzkaller0: create flow: hash 41179307 index 1
[  121.484026][T10456] syzkaller0: delete flow: hash 41179307 index 1
[  121.728009][T10479] macvlan2: entered allmulticast mode
[  121.729938][T10479] veth1_vlan: entered allmulticast mode
[  121.732616][T10479] bridge0: port 3(macvlan2) entered blocking state
[  121.734807][T10479] bridge0: port 3(macvlan2) entered disabled state
[  121.737473][T10479] macvlan2: entered promiscuous mode
[  121.779486][T10488] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  121.784773][T10488] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  121.789248][T10488] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  122.003034][T10509] netlink: 'syz.0.2018': attribute type 8 has an invalid length.
[  122.110873][T10524] erspan0: entered promiscuous mode
[  122.113752][T10524] erspan0: left promiscuous mode
[  122.195407][T10535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  122.358605][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  122.460779][T10562] __nla_validate_parse: 9 callbacks suppressed
[  122.460789][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'.
[  122.514149][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'.
[  122.582504][T10578] netlink: 'syz.2.2052': attribute type 2 has an invalid length.
[  122.590723][T10580] netlink: 'syz.0.2053': attribute type 10 has an invalid length.
[  122.602724][T10580] veth0_vlan: left promiscuous mode
[  122.605304][T10580] veth0_vlan: entered promiscuous mode
[  122.609143][T10580] team0: Device veth0_vlan failed to register rx_handler
[  123.026860][T10646] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2082'.
[  123.030494][T10646] .70: renamed from hsr0
[  123.040095][T10646] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.044725][T10646] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.049372][T10646] .70: entered allmulticast mode
[  123.051352][T10646] hsr_slave_0: entered allmulticast mode
[  123.053268][T10646] hsr_slave_1: entered allmulticast mode
[  123.055806][T10646] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  123.317851][T10683] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2100'.
[  123.385477][T10691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.398593][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  123.402628][T10691] syzkaller0: entered promiscuous mode
[  123.404674][T10691] syzkaller0: entered allmulticast mode
[  123.427454][T10691] tipc: Resetting bearer <eth:syzkaller0>
[  123.436536][T10690] tipc: Resetting bearer <eth:syzkaller0>
[  123.502294][T10690] tipc: Disabling bearer <eth:syzkaller0>
[  123.966506][T10733] vlan2: entered promiscuous mode
[  123.971877][T10733] vlan2: entered allmulticast mode
[  123.973947][T10733] hsr_slave_1: entered allmulticast mode
[  124.189370][T10739] wg1 speed is unknown, defaulting to 1000
[  124.193121][T10739] lo speed is unknown, defaulting to 1000
[  124.382300][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2123'.
[  124.385937][T10743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2123'.
[  124.439268][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  124.496317][T10749] ieee802154 phy1 wpan1: encryption failed: -22
[  124.719999][T10755] netlink: 'syz.0.2129': attribute type 21 has an invalid length.
[  124.746502][T10758] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  124.865840][T10767] netlink: 'syz.2.2134': attribute type 10 has an invalid length.
[  124.872789][T10767] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  124.983704][T10770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.073220][T10781] netlink: 'syz.1.2140': attribute type 10 has an invalid length.
[  125.083897][T10781] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.099500][T10781] team0: Port device bond0 added
[  125.203296][T10789] netlink: 'syz.1.2143': attribute type 17 has an invalid length.
[  125.292486][T10789] veth1_vlan: left allmulticast mode
[  125.300665][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'.
[  125.304992][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'.
[  125.308863][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2143'.
[  125.312246][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'.
[  125.478654][T10794] wg1 speed is unknown, defaulting to 1000
[  125.484816][T10794] lo speed is unknown, defaulting to 1000
[  125.488633][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  126.518463][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  126.828676][T10820] wg1 speed is unknown, defaulting to 1000
[  126.834382][T10820] lo speed is unknown, defaulting to 1000
[  127.034488][T10850] netlink: 'syz.1.2166': attribute type 1 has an invalid length.
[  127.071875][T10850] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  127.077017][T10850] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  127.095021][T10855] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  127.099542][T10855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  127.105500][   T47] lo speed is unknown, defaulting to 1000
[  127.524944][T10884] __nla_validate_parse: 1 callbacks suppressed
[  127.524955][T10884] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2182'.
[  127.558526][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  127.589165][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2186'.
[  128.407311][T10931] IPv6: Can't replace route, no match found
[  128.440639][T10935] wg1 speed is unknown, defaulting to 1000
[  128.443091][T10935] lo speed is unknown, defaulting to 1000
[  128.502054][T10935] syzkaller0: entered promiscuous mode
[  128.503980][T10935] syzkaller0: entered allmulticast mode
[  128.510414][T10935] macsec0: entered promiscuous mode
[  128.591581][    C1] ==================================================================
[  128.594682][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  128.597800][    C1] Write of size 8 at addr ffff888112ea44b0 by task syz.2.2209/10948
[  128.598490][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  128.601415][    C1] 
[  128.601431][    C1] CPU: 1 UID: 0 PID: 10948 Comm: syz.2.2209 Not tainted syzkaller #0 PREEMPT(full) 
[  128.601446][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.601455][    C1] Call Trace:
[  128.601463][    C1]  <IRQ>
[  128.601471][    C1]  dump_stack_lvl+0x189/0x250
[  128.601492][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  128.601511][    C1]  ? rcu_is_watching+0x15/0xb0
[  128.601524][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.601540][    C1]  ? rcu_is_watching+0x15/0xb0
[  128.601552][    C1]  ? lock_release+0x4b/0x3e0
[  128.601848][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  128.601862][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  128.601878][    C1]  print_report+0xca/0x240
[  128.601890][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  128.601902][    C1]  kasan_report+0x118/0x150
[  128.601923][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  128.601940][    C1]  __xfrm_state_delete+0x696/0xca0
[  128.601955][    C1]  xfrm_timer_handler+0x18f/0xa00
[  128.601980][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  128.602000][    C1]  ? rcu_is_watching+0x15/0xb0
[  128.602014][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.602033][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.602053][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  128.602073][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  128.602093][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  128.602113][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  128.602126][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  128.602143][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  128.602158][    C1]  handle_softirqs+0x286/0x870
[  128.602174][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  128.602189][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  128.602204][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  128.602222][    C1]  __irq_exit_rcu+0xca/0x1f0
[  128.602235][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  128.602251][    C1]  irq_exit_rcu+0x9/0x30
[  128.602263][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  128.602284][    C1]  </IRQ>
[  128.602289][    C1]  <TASK>
[  128.602294][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  128.602311][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x37/0x90
[  128.602333][    C1] Code: 08 60 a0 92 65 8b 15 08 b0 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1
[  128.602344][    C1] RSP: 0018:ffffc900041b7310 EFLAGS: 00000246
[  128.602366][    C1] RAX: ffffffff822e60e0 RBX: 8000000037141007 RCX: ffff888021391cc0
[  128.602377][    C1] RDX: 0000000000000000 RSI: 0000000000037141 RDI: 0000000400000000
[  128.602386][    C1] RBP: ffffc900041b7650 R08: ffffea0000dc5047 R09: 1ffffd40001b8a08
[  128.602396][    C1] R10: dffffc0000000000 R11: fffff940001b8a09 R12: 0000000000037141
[  128.602405][    C1] R13: 1ffffd40001b8a0b R14: 0000000000037141 R15: 0000000000000000
[  128.602418][    C1]  ? pfn_valid+0x420/0x490
[  128.602440][    C1]  pfn_valid+0x420/0x490
[  128.602458][    C1]  page_table_check_clear+0x21/0x700
[  128.602478][    C1]  ? vm_normal_page+0xb7/0x210
[  128.602492][    C1]  unmap_page_range+0x3445/0x4370
[  128.602522][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  128.602538][    C1]  ? mas_find+0xb0e/0xd30
[  128.602559][    C1]  unmap_vmas+0x399/0x580
[  128.602575][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  128.602596][    C1]  exit_mmap+0x248/0xb50
[  128.602618][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  128.602635][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  128.602658][    C1]  ? __pfx_exit_aio+0x10/0x10
[  128.602682][    C1]  ? uprobe_clear_state+0x274/0x290
[  128.602701][    C1]  __mmput+0x118/0x420
[  128.602714][    C1]  exit_mm+0x1da/0x2c0
[  128.602732][    C1]  ? __pfx_exit_mm+0x10/0x10
[  128.602749][    C1]  ? rcu_is_watching+0x15/0xb0
[  128.602763][    C1]  do_exit+0x648/0x2300
[  128.602782][    C1]  ? do_raw_spin_lock+0x121/0x290
[  128.602799][    C1]  ? __pfx_do_exit+0x10/0x10
[  128.602850][    C1]  ? rcu_is_watching+0x15/0xb0
[  128.602866][    C1]  do_group_exit+0x21c/0x2d0
[  128.602885][    C1]  get_signal+0x1286/0x1340
[  128.602905][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  128.602930][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  128.602955][    C1]  ? rcu_is_watching+0x15/0xb0
[  128.602970][    C1]  exit_to_user_mode_loop+0x75/0x110
[  128.602991][    C1]  do_syscall_64+0x2bd/0x3b0
[  128.603004][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.603018][    C1]  ? exc_page_fault+0x9f/0xf0
[  128.603036][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.603051][    C1] RIP: 0033:0x7fe71118ebe9
[  128.603063][    C1] Code: Unable to access opcode bytes at 0x7fe71118ebbf.
[  128.603070][    C1] RSP: 002b:00007fe71208a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  128.603084][    C1] RAX: fffffffffffffe00 RBX: 00007fe7113b5fa8 RCX: 00007fe71118ebe9
[  128.603093][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe7113b5fa8
[  128.603102][    C1] RBP: 00007fe7113b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  128.603110][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.603119][    C1] R13: 00007fe7113b6038 R14: 00007ffdbd24edd0 R15: 00007ffdbd24eeb8
[  128.603134][    C1]  </TASK>
[  128.603139][    C1] 
[  128.778792][    C1] Allocated by task 8698:
[  128.780623][    C1]  kasan_save_track+0x3e/0x80
[  128.782579][    C1]  __kasan_slab_alloc+0x6c/0x80
[  128.784181][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  128.786326][    C1]  xfrm_state_alloc+0x24/0x2f0
[  128.788207][    C1]  __find_acq_core+0x8a7/0x1c00
[  128.790099][    C1]  xfrm_find_acq+0x78/0xa0
[  128.791829][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  128.793817][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.795735][    C1]  netlink_rcv_skb+0x208/0x470
[  128.797588][    C1]  xfrm_netlink_rcv+0x79/0x90
[  128.799276][    C1]  netlink_unicast+0x82f/0x9e0
[  128.800997][    C1]  netlink_sendmsg+0x805/0xb30
[  128.802875][    C1]  __sock_sendmsg+0x21c/0x270
[  128.804683][    C1]  ____sys_sendmsg+0x505/0x830
[  128.806506][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  128.808319][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  128.810297][    C1]  do_syscall_64+0xfa/0x3b0
[  128.812105][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.814397][    C1] 
[  128.815345][    C1] Freed by task 47:
[  128.816790][    C1]  kasan_save_track+0x3e/0x80
[  128.818693][    C1]  kasan_save_free_info+0x46/0x50
[  128.820637][    C1]  __kasan_slab_free+0x5b/0x80
[  128.822337][    C1]  kmem_cache_free+0x18f/0x400
[  128.824066][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  128.826044][    C1]  process_scheduled_works+0xae1/0x17b0
[  128.828184][    C1]  worker_thread+0x8a0/0xda0
[  128.829852][    C1]  kthread+0x711/0x8a0
[  128.831404][    C1]  ret_from_fork+0x3fc/0x770
[  128.833201][    C1]  ret_from_fork_asm+0x1a/0x30
[  128.835018][    C1] 
[  128.835954][    C1] The buggy address belongs to the object at ffff888112ea4480
[  128.835954][    C1]  which belongs to the cache xfrm_state of size 928
[  128.840514][    C1] The buggy address is located 48 bytes inside of
[  128.840514][    C1]  freed 928-byte region [ffff888112ea4480, ffff888112ea4820)
[  128.844514][    C1] 
[  128.845247][    C1] The buggy address belongs to the physical page:
[  128.847185][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112ea4
[  128.849768][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  128.852214][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  128.854945][    C1] page_type: f5(slab)
[  128.856462][    C1] raw: 057ff00000000040 ffff88801c3f33c0 dead000000000122 0000000000000000
[  128.859557][    C1] raw: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  128.862335][    C1] head: 057ff00000000040 ffff88801c3f33c0 dead000000000122 0000000000000000
[  128.865116][    C1] head: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  128.867698][    C1] head: 057ff00000000002 ffffea00044ba901 00000000ffffffff 00000000ffffffff
[  128.870766][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  128.873959][    C1] page dumped because: kasan: bad access detected
[  128.876406][    C1] page_owner tracks the page as allocated
[  128.878424][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6093, tgid 6090 (syz.0.85), ts 64493843332, free_ts 64489979131
[  128.884327][    C1]  post_alloc_hook+0x240/0x2a0
[  128.885887][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  128.887814][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  128.889726][    C1]  alloc_pages_mpol+0x232/0x4a0
[  128.891498][    C1]  allocate_slab+0x8a/0x370
[  128.893159][    C1]  ___slab_alloc+0xbeb/0x1410
[  128.894807][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  128.896640][    C1]  xfrm_state_alloc+0x24/0x2f0
[  128.898438][    C1]  xfrm_add_sa+0x17d1/0x4070
[  128.899874][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.901562][    C1]  netlink_rcv_skb+0x208/0x470
[  128.903368][    C1]  xfrm_netlink_rcv+0x79/0x90
[  128.904995][    C1]  netlink_unicast+0x82f/0x9e0
[  128.906511][    C1]  netlink_sendmsg+0x805/0xb30
[  128.908121][    C1]  __sock_sendmsg+0x21c/0x270
[  128.909607][    C1]  ____sys_sendmsg+0x505/0x830
[  128.911344][    C1] page last free pid 6092 tgid 6091 stack trace:
[  128.913307][    C1]  __free_frozen_pages+0xbc4/0xd30
[  128.914918][    C1]  __put_partials+0x156/0x1a0
[  128.916395][    C1]  put_cpu_partial+0x17c/0x250
[  128.917942][    C1]  __slab_free+0x2d5/0x3c0
[  128.919351][    C1]  qlist_free_all+0x97/0x140
[  128.920996][    C1]  kasan_quarantine_reduce+0x148/0x160
[  128.922690][    C1]  __kasan_slab_alloc+0x22/0x80
[  128.924297][    C1]  __kmalloc_noprof+0x224/0x4f0
[  128.925882][    C1]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  128.927838][    C1]  genl_family_rcv_msg_doit+0xb8/0x300
[  128.929895][    C1]  genl_rcv_msg+0x60e/0x790
[  128.931599][    C1]  netlink_rcv_skb+0x208/0x470
[  128.933450][    C1]  genl_rcv+0x28/0x40
[  128.935010][    C1]  netlink_unicast+0x82f/0x9e0
[  128.936879][    C1]  netlink_sendmsg+0x805/0xb30
[  128.938737][    C1]  __sock_sendmsg+0x21c/0x270
[  128.940446][    C1] 
[  128.941171][    C1] Memory state around the buggy address:
[  128.942882][    C1]  ffff888112ea4380: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  128.945647][    C1]  ffff888112ea4400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  128.948166][    C1] >ffff888112ea4480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.950857][    C1]                                      ^
[  128.952609][    C1]  ffff888112ea4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.955090][    C1]  ffff888112ea4580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  128.957529][    C1] ==================================================================
[  128.960566][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  128.962957][    C1] CPU: 1 UID: 0 PID: 10948 Comm: syz.2.2209 Not tainted syzkaller #0 PREEMPT(full) 
[  128.966115][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.969518][    C1] Call Trace:
[  128.970840][    C1]  <IRQ>
[  128.971970][    C1]  dump_stack_lvl+0x99/0x250
[  128.973761][    C1]  ? __asan_memcpy+0x40/0x70
[  128.975568][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.977521][    C1]  ? __pfx__printk+0x10/0x10
[  128.979399][    C1]  vpanic+0x281/0x750
[  128.980909][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  128.982815][    C1]  ? __pfx_vpanic+0x10/0x10
[  128.984595][    C1]  ? rcu_is_watching+0x15/0xb0
[  128.986358][    C1]  panic+0xb9/0xc0
[  128.987539][    C1]  ? __pfx_panic+0x10/0x10
[  128.989198][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  128.991357][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.993514][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  128.995390][    C1]  check_panic_on_warn+0x89/0xb0
[  128.997048][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  128.998774][    C1]  end_report+0x78/0x160
[  129.000338][    C1]  kasan_report+0x129/0x150
[  129.001804][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  129.003435][    C1]  __xfrm_state_delete+0x696/0xca0
[  129.005128][    C1]  xfrm_timer_handler+0x18f/0xa00
[  129.006817][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  129.008754][    C1]  ? rcu_is_watching+0x15/0xb0
[  129.010596][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.012370][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.014263][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  129.016220][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  129.018244][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  129.020068][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  129.021881][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  129.023912][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  129.025806][    C1]  handle_softirqs+0x286/0x870
[  129.027548][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  129.029240][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  129.031232][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  129.033258][    C1]  __irq_exit_rcu+0xca/0x1f0
[  129.035060][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  129.037067][    C1]  irq_exit_rcu+0x9/0x30
[  129.038766][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  129.040952][    C1]  </IRQ>
[  129.042108][    C1]  <TASK>
[  129.043258][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  129.045582][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x37/0x90
[  129.048112][    C1] Code: 08 60 a0 92 65 8b 15 08 b0 e0 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1
[  129.054441][    C1] RSP: 0018:ffffc900041b7310 EFLAGS: 00000246
[  129.056746][    C1] RAX: ffffffff822e60e0 RBX: 8000000037141007 RCX: ffff888021391cc0
[  129.059749][    C1] RDX: 0000000000000000 RSI: 0000000000037141 RDI: 0000000400000000
[  129.062727][    C1] RBP: ffffc900041b7650 R08: ffffea0000dc5047 R09: 1ffffd40001b8a08
[  129.065712][    C1] R10: dffffc0000000000 R11: fffff940001b8a09 R12: 0000000000037141
[  129.068705][    C1] R13: 1ffffd40001b8a0b R14: 0000000000037141 R15: 0000000000000000
[  129.071652][    C1]  ? pfn_valid+0x420/0x490
[  129.073298][    C1]  pfn_valid+0x420/0x490
[  129.074954][    C1]  page_table_check_clear+0x21/0x700
[  129.076735][    C1]  ? vm_normal_page+0xb7/0x210
[  129.078176][    C1]  unmap_page_range+0x3445/0x4370
[  129.079829][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  129.081593][    C1]  ? mas_find+0xb0e/0xd30
[  129.083191][    C1]  unmap_vmas+0x399/0x580
[  129.084687][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  129.086186][    C1]  exit_mmap+0x248/0xb50
[  129.087507][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  129.089323][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  129.091475][    C1]  ? __pfx_exit_aio+0x10/0x10
[  129.093323][    C1]  ? uprobe_clear_state+0x274/0x290
[  129.095301][    C1]  __mmput+0x118/0x420
[  129.096886][    C1]  exit_mm+0x1da/0x2c0
[  129.098506][    C1]  ? __pfx_exit_mm+0x10/0x10
[  129.099988][    C1]  ? rcu_is_watching+0x15/0xb0
[  129.101593][    C1]  do_exit+0x648/0x2300
[  129.103151][    C1]  ? do_raw_spin_lock+0x121/0x290
[  129.104935][    C1]  ? __pfx_do_exit+0x10/0x10
[  129.106413][    C1]  ? rcu_is_watching+0x15/0xb0
[  129.108141][    C1]  do_group_exit+0x21c/0x2d0
[  129.109821][    C1]  get_signal+0x1286/0x1340
[  129.111453][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  129.113286][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  129.115308][    C1]  ? rcu_is_watching+0x15/0xb0
[  129.116766][    C1]  exit_to_user_mode_loop+0x75/0x110
[  129.118401][    C1]  do_syscall_64+0x2bd/0x3b0
[  129.119798][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.121573][    C1]  ? exc_page_fault+0x9f/0xf0
[  129.122982][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.124760][    C1] RIP: 0033:0x7fe71118ebe9
[  129.126094][    C1] Code: Unable to access opcode bytes at 0x7fe71118ebbf.
[  129.128115][    C1] RSP: 002b:00007fe71208a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  129.130570][    C1] RAX: fffffffffffffe00 RBX: 00007fe7113b5fa8 RCX: 00007fe71118ebe9
[  129.132864][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe7113b5fa8
[  129.135384][    C1] RBP: 00007fe7113b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  129.137687][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.140227][    C1] R13: 00007fe7113b6038 R14: 00007ffdbd24edd0 R15: 00007ffdbd24eeb8
[  129.143017][    C1]  </TASK>
[  129.144585][    C1] Kernel Offset: disabled
[  129.145888][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:17:23  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a02385 RBX=ffffffff81a02344 RCX=ffffffff8de95100 RDX=0000000000000100
RSI=ffffffff8be33660 RDI=ffffffff8be33620 RBP=ffffc90000006df0 RSP=ffffc90000006ce0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c19
R12=dffffc0000000000 R13=1ffff92000000da0 R14=0000000000000200 R15=0000000000000034
RIP=ffffffff81a02373 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3411fff8 CR3=000000011d926000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81748c2c ffffffff81748653
XMM02=ffffffff8957dfe4 ffffffff81748653 XMM03=ffffffff823c7f64 ffffffff823c7dfd
XMM04=00007f65d8aed100 00007f65d7f87460 XMM05=00007f65d7f87478 00007f65d7f874c0
XMM06=00007f65d7f874b8 00007f65d7f874b0 XMM07=00007f65d7f874a8 00007f65d7f874a0
XMM08=0000000000000000 00007f65d7e12ee7 XMM09=0000000000000000 00007f65d7e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=00000000009d7420 RCX=dffffc0000000000 RDX=0000000000000100
RSI=ffffffff819d6bda RDI=ffffffff819d8080 RBP=ffffffff8d452a1c RSP=ffffc900001dfbd8
R8 =ffffc900001dfd00 R9 =ffffc900001dfe20 R10=0000000000000073 R11=0000000000000100
R12=ffffffff81000000 R13=00000000000083ed R14=00000000000083f9 R15=00000000000083e2
RIP=ffffffff81b4c0c6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe71208a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe712089fc8 CR3=000000010f090000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f68e6412e53
XMM06=0000000000000000 00007f68e6412e4d XMM07=0000000000000000 00007f68e6412e61
XMM08=0000000000000000 00007f68e6412ee7 XMM09=0000000000000000 00007f68e6412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
