last executing test programs:

1.830690741s ago: executing program 1 (id=2167):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c00028004000140000000000c0001800800014000e81b0205000500020000000500010006"], 0x68}}, 0x0)

1.830525819s ago: executing program 1 (id=2168):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0xe}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x2810)

1.759967725s ago: executing program 1 (id=2169):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="8f", 0x1}], 0x1)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

936.467057ms ago: executing program 1 (id=2212):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

867.529576ms ago: executing program 1 (id=2213):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)

264.53648ms ago: executing program 0 (id=2239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x34, r1, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)

203.090587ms ago: executing program 0 (id=2240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a0080fd00000000f7"], 0x24}}, 0x20000050)

202.977097ms ago: executing program 2 (id=2241):
r0 = socket$rds(0x15, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10023, 0x0)

202.922355ms ago: executing program 0 (id=2242):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000040))

202.61369ms ago: executing program 2 (id=2243):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000a00)='syz0\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000340)=0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000580)={@empty}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=@can_newroute={0x8c, 0x18, 0x2, 0x70bd2d, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff8, 0xfffffffffffffff7, 0x5, 0x6}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "70d2e33a169edf4d"}, 0x2}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0x5, 0xf7, 0xe2}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffffe, 0x4, 0x80}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1, 0x1}, 0x92, 0x0, 0x0, 0x0, "6c7cf2346f5b8a9a"}, 0x3}}, @CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x1, 0x0, 0x0, "9b209279017df261"}, 0x2}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x2, 0xfffffffffffffffa, 0x92}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000140)="41000200010001", 0x7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
recvmsg$can_raw(r9, &(0x7f0000000240)={&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/179, 0xb3}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0)

146.1469ms ago: executing program 0 (id=2244):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r3 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
close(r2)
close(r3)

133.760345ms ago: executing program 2 (id=2245):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20)

65.347756ms ago: executing program 2 (id=2246):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000300000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)

65.264356ms ago: executing program 2 (id=2247):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
sendfile(r0, r0, 0x0, 0x4)

64.029997ms ago: executing program 2 (id=2248):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e]}}, 0x0, 0x43}, 0x28)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

196.015µs ago: executing program 0 (id=2249):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x1d, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r2}, 0xc)

122.57µs ago: executing program 1 (id=2250):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt(r0, 0x0, 0x6, 0x0, &(0x7f0000000040))

0s ago: executing program 0 (id=2251):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35811' (ED25519) to the list of known hosts.
syzkaller login: [   55.407516][ T5833] cgroup: Unknown subsys name 'net'
[   55.552517][ T5833] cgroup: Unknown subsys name 'cpuset'
[   55.556206][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.880481][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.276633][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.280400][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.284552][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.287860][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.291380][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.294216][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.294444][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.300647][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.300726][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.303308][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.306747][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.309043][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.312482][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.315067][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.317580][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.605375][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   60.613100][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   60.638033][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   60.778513][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.781612][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.784568][ T5845] bridge_slave_0: entered allmulticast mode
[   60.788620][ T5845] bridge_slave_0: entered promiscuous mode
[   60.794337][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.796992][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.799353][ T5845] bridge_slave_1: entered allmulticast mode
[   60.803704][ T5845] bridge_slave_1: entered promiscuous mode
[   60.814697][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.817806][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.821892][ T5847] bridge_slave_0: entered allmulticast mode
[   60.825745][ T5847] bridge_slave_0: entered promiscuous mode
[   60.879870][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.882788][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.886513][ T5847] bridge_slave_1: entered allmulticast mode
[   60.891325][ T5847] bridge_slave_1: entered promiscuous mode
[   60.932349][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.948944][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.952569][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.954865][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.957336][ T5846] bridge_slave_0: entered allmulticast mode
[   60.961614][ T5846] bridge_slave_0: entered promiscuous mode
[   60.967045][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.987014][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.989894][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.992978][ T5846] bridge_slave_1: entered allmulticast mode
[   60.995646][ T5846] bridge_slave_1: entered promiscuous mode
[   60.999613][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.012644][ T5845] team0: Port device team_slave_0 added
[   61.042935][ T5845] team0: Port device team_slave_1 added
[   61.046931][ T5847] team0: Port device team_slave_0 added
[   61.051119][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.066774][ T5847] team0: Port device team_slave_1 added
[   61.082726][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.095925][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.098740][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.109282][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.150545][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.153450][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.164562][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.171658][ T5846] team0: Port device team_slave_0 added
[   61.175764][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.178121][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.187795][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.192682][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.195206][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.204931][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.215392][ T5846] team0: Port device team_slave_1 added
[   61.244416][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.246931][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.256283][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.294696][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.297150][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.307592][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.328349][ T5847] hsr_slave_0: entered promiscuous mode
[   61.331778][ T5847] hsr_slave_1: entered promiscuous mode
[   61.345763][ T5845] hsr_slave_0: entered promiscuous mode
[   61.348658][ T5845] hsr_slave_1: entered promiscuous mode
[   61.351453][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   61.353696][ T5845] Cannot create hsr debugfs directory
[   61.408699][ T5846] hsr_slave_0: entered promiscuous mode
[   61.411374][ T5846] hsr_slave_1: entered promiscuous mode
[   61.413936][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   61.416188][ T5846] Cannot create hsr debugfs directory
[   61.686403][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.699670][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.710511][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.727404][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.773503][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.780041][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.804045][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.810662][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.866352][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.883175][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.893027][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.898899][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.025386][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.044033][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.067708][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   62.086164][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.088997][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.094956][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.097903][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.104921][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   62.124133][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.127180][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.137910][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.140790][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.150436][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.170640][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   62.192185][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.194944][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.201497][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.204355][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.371560][ T5238] Bluetooth: hci1: command tx timeout
[   62.374010][ T5238] Bluetooth: hci0: command tx timeout
[   62.376602][ T5855] Bluetooth: hci2: command tx timeout
[   62.473730][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.493812][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.521222][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.557894][ T5847] veth0_vlan: entered promiscuous mode
[   62.582567][ T5845] veth0_vlan: entered promiscuous mode
[   62.585699][ T5847] veth1_vlan: entered promiscuous mode
[   62.618587][ T5846] veth0_vlan: entered promiscuous mode
[   62.624249][ T5845] veth1_vlan: entered promiscuous mode
[   62.635717][ T5846] veth1_vlan: entered promiscuous mode
[   62.672597][ T5847] veth0_macvtap: entered promiscuous mode
[   62.680566][ T5847] veth1_macvtap: entered promiscuous mode
[   62.699518][ T5846] veth0_macvtap: entered promiscuous mode
[   62.705967][ T5845] veth0_macvtap: entered promiscuous mode
[   62.716117][ T5846] veth1_macvtap: entered promiscuous mode
[   62.724494][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.728118][ T5845] veth1_macvtap: entered promiscuous mode
[   62.743773][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.761735][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.767779][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.774962][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.778559][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.804409][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.807445][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.816523][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.843470][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.851714][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.874304][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.878158][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.898144][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.906224][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.933485][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.955224][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.988533][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.996359][  T537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.999589][  T537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.052834][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.055972][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.086679][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.091876][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.124808][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.128132][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.166775][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.168335][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.182134][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.244978][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.248917][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.597017][ T5934] syzkaller1: entered promiscuous mode
[   63.599290][ T5934] syzkaller1: entered allmulticast mode
[   63.844483][ T5955] netlink: zone id is out of range
[   63.846254][ T5955] netlink: zone id is out of range
[   63.847898][ T5955] netlink: zone id is out of range
[   63.851255][ T5955] netlink: zone id is out of range
[   63.853809][ T5955] netlink: zone id is out of range
[   63.860367][ T5955] netlink: zone id is out of range
[   63.862255][ T5955] netlink: zone id is out of range
[   63.864395][ T5955] netlink: zone id is out of range
[   63.866263][ T5955] netlink: zone id is out of range
[   63.868384][ T5955] netlink: zone id is out of range
[   64.380095][ T5988] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET)
[   64.451244][ T5855] Bluetooth: hci2: command tx timeout
[   64.451323][   T54] Bluetooth: hci0: command tx timeout
[   64.453542][ T5855] Bluetooth: hci1: command tx timeout
[   64.667413][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   64.671192][ T6001] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[   64.848007][ T6011] warning: `syz.2.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.082377][ T6027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.108680][ T6027] netlink: 96 bytes leftover after parsing attributes in process `syz.0.50'.
[   65.692811][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.945947][ T6085] Zero length message leads to an empty skb
[   65.963471][ T6087] tipc: Invalid UDP bearer configuration
[   65.963510][ T6087] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   66.374430][ T6115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.435184][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'.
[   66.462406][ T6119] bridge_slave_1: left allmulticast mode
[   66.464096][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'.
[   66.464378][ T6119] bridge_slave_1: left promiscuous mode
[   66.474379][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.482792][ T6119] bridge_slave_0: left allmulticast mode
[   66.485413][ T6119] bridge_slave_0: left promiscuous mode
[   66.506173][ T6123] netlink: 'syz.0.89': attribute type 2 has an invalid length.
[   66.509566][ T6123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.89'.
[   66.514586][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.531209][ T5238] Bluetooth: hci2: command tx timeout
[   66.533752][ T5855] Bluetooth: hci0: command tx timeout
[   66.542193][ T5855] Bluetooth: hci1: command tx timeout
[   66.656990][ T6125] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.828739][ T6137] netlink: 'syz.1.96': attribute type 21 has an invalid length.
[   66.850187][ T6137] netlink: 'syz.1.96': attribute type 22 has an invalid length.
[   66.853502][ T6137] netlink: 'syz.1.96': attribute type 23 has an invalid length.
[   66.856781][ T6137] netlink: 136 bytes leftover after parsing attributes in process `syz.1.96'.
[   66.997038][ T6151] netlink: 'syz.0.102': attribute type 12 has an invalid length.
[   66.999675][ T6151] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.102'.
[   67.115274][ T6153] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   67.137245][ T6153] syzkaller0: entered promiscuous mode
[   67.139671][ T6153] syzkaller0: entered allmulticast mode
[   67.168836][ T6164] veth0: entered promiscuous mode
[   67.173089][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'.
[   67.674306][ T6188] netlink: 308 bytes leftover after parsing attributes in process `syz.1.117'.
[   67.677514][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[   68.610311][ T5238] Bluetooth: hci0: command tx timeout
[   68.610593][   T54] Bluetooth: hci2: command tx timeout
[   68.612215][ T5855] Bluetooth: hci1: command tx timeout
[   68.898911][ T6226] syz.2.132 (6226) used greatest stack depth: 18616 bytes left
[   69.136197][ T6251] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   69.224669][ T6259] netlink: 'syz.0.148': attribute type 3 has an invalid length.
[   69.227232][ T6259] netlink: 'syz.0.148': attribute type 1 has an invalid length.
[   69.229690][ T6259] NCSI netlink: No device for ifindex 0
[   69.620475][ T6290] Illegal XDP return value 914905054 on prog  (id 20) dev N/A, expect packet loss!
[   69.677282][ T6294] net_ratelimit: 12 callbacks suppressed
[   69.677293][ T6294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.858449][ T6308] __nla_validate_parse: 3 callbacks suppressed
[   69.858463][ T6308] netlink: 176 bytes leftover after parsing attributes in process `syz.2.168'.
[   69.866166][ T6308] ip6gretap0: entered promiscuous mode
[   69.868842][ T6308] netlink: 176 bytes leftover after parsing attributes in process `syz.2.168'.
[   70.003608][ T6312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.005894][ T6316] netlink: 'syz.0.172': attribute type 1 has an invalid length.
[   70.071026][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.089636][ T6312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.113965][ T6320] ipvlan2: entered allmulticast mode
[   70.115971][ T6320] bond1: entered allmulticast mode
[   70.120453][ T6322] lo speed is unknown, defaulting to 1000
[   70.123451][ T6322] lo speed is unknown, defaulting to 1000
[   70.133660][ T6316] bond1: (slave gretap1): making interface the new active one
[   70.136640][ T6316] gretap1: entered allmulticast mode
[   70.139629][ T6316] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   70.143753][ T6322] lo speed is unknown, defaulting to 1000
[   70.157640][ T6322] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.171488][ T6322] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   70.175030][ T6312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.225409][ T6322] lo speed is unknown, defaulting to 1000
[   70.238617][ T6322] lo speed is unknown, defaulting to 1000
[   70.243697][ T6322] lo speed is unknown, defaulting to 1000
[   70.296277][ T6312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.343029][ T6329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.177'.
[   70.346730][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'.
[   70.351598][ T6329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.177'.
[   70.355350][ T6329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.177'.
[   70.463187][ T5864] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.466568][ T6335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'.
[   70.493475][ T5864] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.523957][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.546402][ T5864] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.644178][ T6343] pim6reg1: entered promiscuous mode
[   70.646220][ T6343] pim6reg1: entered allmulticast mode
[   70.652696][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'.
[   70.906660][ T6363] openvswitch: netlink: IPv4 tun info is not correct
[   70.961450][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.195'.
[   70.995865][ T6369] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.197'.
[   71.126825][ T6375] Bluetooth: MGMT ver 1.23
[   71.243675][ T6389] netlink: 'syz.2.205': attribute type 2 has an invalid length.
[   71.343798][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.347852][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.555579][ T6414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.700612][ T6428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   72.126902][ T6449] ip6gretap0: entered promiscuous mode
[   72.129442][ T6449] macsec1: entered promiscuous mode
[   72.157723][ T6449] macsec1: entered allmulticast mode
[   72.162439][ T6449] ip6gretap0: entered allmulticast mode
[   72.673656][ T6494] ieee802154 phy0 wpan0: encryption failed: -22
[   72.737899][ T6499] netlink: 'syz.2.251': attribute type 11 has an invalid length.
[   72.741873][ T6497] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   72.859548][ T6503] openvswitch: netlink: Message has 24 unknown bytes.
[   73.474470][ T5864] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   73.775572][ T6559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.784100][ T5749] lo speed is unknown, defaulting to 1000
[   73.786787][ T5749] syz2: Port: 1 Link DOWN
[   74.850233][ T6595] tipc: Started in network mode
[   74.852477][ T6595] tipc: Node identity a2575a882286, cluster identity 4711
[   74.855668][ T6595] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.927302][ T6595] syzkaller0: entered promiscuous mode
[   74.932693][ T6595] syzkaller0: entered allmulticast mode
[   74.935678][ T6595] tipc: Resetting bearer <eth:syzkaller0>
[   75.760096][ T6594] tipc: Resetting bearer <eth:syzkaller0>
[   75.913218][ T1267] tipc: Node number set to 2161203848
[   76.540729][ T6594] tipc: Disabling bearer <eth:syzkaller0>
[   76.744990][ T6620] __nla_validate_parse: 6 callbacks suppressed
[   76.745006][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[   76.755378][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[   77.093762][ T6636] lo speed is unknown, defaulting to 1000
[   77.695343][ T6657] netlink: 'syz.1.320': attribute type 29 has an invalid length.
[   78.230941][ T6682] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   78.828309][ T6717] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[   78.868133][ T6719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.346'.
[   79.125715][ T6741] tipc: Started in network mode
[   79.127959][ T6741] tipc: Node identity 4, cluster identity 4711
[   79.134701][ T6741] tipc: Node number set to 4
[   79.382233][ T6752] lo speed is unknown, defaulting to 1000
[   79.550354][ T6757] tipc: Started in network mode
[   79.552650][ T6757] tipc: Node identity 66891d1ba4fa, cluster identity 4711
[   79.555947][ T6757] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.561137][ T6757] syzkaller0: entered promiscuous mode
[   79.564035][ T6757] syzkaller0: entered allmulticast mode
[   79.620552][ T6757] tipc: Resetting bearer <eth:syzkaller0>
[   79.625462][ T6756] tipc: Resetting bearer <eth:syzkaller0>
[   79.636518][ T6756] tipc: Disabling bearer <eth:syzkaller0>
[   80.147592][ T6772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.370'.
[   80.233943][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'.
[   80.237147][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'.
[   80.390073][ T6788] netlink: 'syz.0.378': attribute type 21 has an invalid length.
[   80.407839][ T6788] IPv6: NLM_F_CREATE should be specified when creating new route
[   80.411308][ T6788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   80.414493][ T6788] IPv6: NLM_F_CREATE should be set when creating new route
[   80.417355][ T6788] IPv6: NLM_F_CREATE should be set when creating new route
[   80.419832][ T6788] IPv6: NLM_F_CREATE should be set when creating new route
[   81.008605][ T6842] unsupported nlmsg_type 40
[   81.209329][ T6862] lo speed is unknown, defaulting to 1000
[   81.379389][ T6875] tipc: Can't bind to reserved service type 2
[   81.585429][  T973] cfg80211: failed to load regulatory.db
[   81.619067][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'.
[   81.695588][ T6902] openvswitch: netlink: Message has 16 unknown bytes.
[   81.807669][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.437'.
[   82.223329][ T6945] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.453'.
[   82.366762][ T6955] vlan2: entered promiscuous mode
[   82.368944][ T6955] bridge0: entered promiscuous mode
[   82.396826][ T6955] bridge0: port 3(vlan2) entered blocking state
[   82.400301][ T6955] bridge0: port 3(vlan2) entered disabled state
[   82.403891][ T6955] vlan2: entered allmulticast mode
[   82.406186][ T6955] bridge0: entered allmulticast mode
[   82.413560][ T6955] vlan2: left allmulticast mode
[   82.415691][ T6955] bridge0: left allmulticast mode
[   82.506244][ T6965] lo speed is unknown, defaulting to 1000
[   82.916398][ T7003] netem: change failed
[   83.102722][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'.
[   83.113214][ T7010] batadv0: entered promiscuous mode
[   83.115381][ T7010] macvtap1: entered promiscuous mode
[   83.117646][ T7010] macvtap1: entered allmulticast mode
[   83.120678][ T7010] batadv0: entered allmulticast mode
[   83.123445][ T7010] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   83.252216][ T7018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.485'.
[   83.727573][ T7049] netlink: 156 bytes leftover after parsing attributes in process `syz.0.500'.
[   84.104718][ T7072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.141439][ T7072] syzkaller0: entered promiscuous mode
[   84.150300][ T7072] syzkaller0: entered allmulticast mode
[   84.165080][ T7072] tipc: Resetting bearer <eth:syzkaller0>
[   84.169592][ T7071] tipc: Resetting bearer <eth:syzkaller0>
[   84.185089][ T7071] tipc: Disabling bearer <eth:syzkaller0>
[   85.014770][ T7130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.029314][ T7130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.188617][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.194853][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.204275][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.211037][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.615160][ T7175] netlink: 'syz.2.544': attribute type 2 has an invalid length.
[   85.618709][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.2.544'.
[   86.191752][ T7216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.194552][ T7216] syzkaller0: entered promiscuous mode
[   86.197224][ T7216] syzkaller0: entered allmulticast mode
[   86.210824][ T7216] tipc: Resetting bearer <eth:syzkaller0>
[   86.216060][ T7215] tipc: Resetting bearer <eth:syzkaller0>
[   86.227130][ T7215] tipc: Disabling bearer <eth:syzkaller0>
[   86.926581][ T7292] syz_tun: entered allmulticast mode
[   86.931642][ T7291] syz_tun: left allmulticast mode
[   86.959526][ T7293] netlink: 44 bytes leftover after parsing attributes in process `syz.1.586'.
[   87.217481][ T7312] lo speed is unknown, defaulting to 1000
[   87.473487][ T7320] netlink: 'syz.0.598': attribute type 9 has an invalid length.
[   87.993615][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'.
[   88.000846][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'.
[   88.254808][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'.
[   88.257877][ T7351] netlink: 120 bytes leftover after parsing attributes in process `syz.0.608'.
[   88.262395][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'.
[   89.161319][ T7365] ieee802154 phy0 wpan0: encryption failed: -22
[   89.386670][ T7366] netlink: 68 bytes leftover after parsing attributes in process `syz.1.615'.
[   89.431626][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.0.623'.
[   89.434812][ T7387] tc_dump_action: action bad kind
[   89.519416][ T7390] netlink: 'syz.1.625': attribute type 4 has an invalid length.
[   89.582198][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.586121][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.731452][ T7390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.747016][ T7390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.896589][ T7390] ip6gretap0: left allmulticast mode
[   89.919358][ T7390] batadv0: left allmulticast mode
[   89.929370][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.933205][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.946476][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.960646][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.010621][ T7402] lo speed is unknown, defaulting to 1000
[   90.369862][   T54] Bluetooth: hci2: command tx timeout
[   90.890430][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'.
[   90.894130][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'.
[   90.898075][ T7434] netlink: 'syz.0.642': attribute type 20 has an invalid length.
[   90.911508][ T7434] netlink: 'syz.0.642': attribute type 20 has an invalid length.
[   90.911721][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.918640][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.926157][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.932151][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.343572][ T7454] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.615576][ T7478] "syz.0.664" (7478) uses obsolete ecb(arc4) skcipher
[   92.078981][ T7513] netlink: 'syz.2.679': attribute type 3 has an invalid length.
[   92.082354][ T7513] __nla_validate_parse: 8 callbacks suppressed
[   92.082363][ T7513] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.679'.
[   92.108785][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'.
[   92.607408][ T5749] IPVS: starting estimator thread 0...
[   92.610166][ T7538] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   92.721675][ T7546] IPVS: using max 78 ests per chain, 187200 per kthread
[   92.884777][ T7565] nbd1: detected capacity change from 0 to 63
[   92.893373][ T7578] netlink: 'syz.0.709': attribute type 1 has an invalid length.
[   92.893735][ T7573] block nbd1: NBD_DISCONNECT
[   92.901168][ T7573] block nbd1: Disconnected due to user request.
[   92.903793][ T7573] block nbd1: shutting down sockets
[   92.907130][ T7565] netlink: 40 bytes leftover after parsing attributes in process `syz.1.703'.
[   92.911357][ T7565] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   92.919547][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.923542][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[   92.926666][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.930041][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[   92.932719][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.935861][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[   92.938951][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.942784][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[   92.946096][ T5857] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.949290][ T5857] Buffer I/O error on dev nbd1, logical block 0, async page read
[   92.965880][ T5857] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.976578][ T5857] Buffer I/O error on dev nbd1, logical block 1, async page read
[   92.980481][ T5857] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.983540][ T5857] Buffer I/O error on dev nbd1, logical block 2, async page read
[   92.986126][ T5857] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   92.995941][ T5857] Buffer I/O error on dev nbd1, logical block 3, async page read
[   92.998902][ T5857] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.002985][ T5857] Buffer I/O error on dev nbd1, logical block 0, async page read
[   93.006523][ T5857] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.012096][ T5857] Buffer I/O error on dev nbd1, logical block 1, async page read
[   93.018267][ T5857] ldm_validate_partition_table(): Disk read failed.
[   93.024275][ T5857] Dev nbd1: unable to read RDB block 0
[   93.027291][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.711'.
[   93.034694][ T5857]  nbd1: unable to read partition table
[   93.040211][ T7583] netlink: 'syz.2.711': attribute type 21 has an invalid length.
[   93.042162][ T5857] ldm_validate_partition_table(): Disk read failed.
[   93.045887][ T5857] Dev nbd1: unable to read RDB block 0
[   93.048706][ T5857]  nbd1: unable to read partition table
[   93.117610][ T7591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.126729][ T7591] syzkaller0: entered promiscuous mode
[   93.128604][ T7591] syzkaller0: entered allmulticast mode
[   93.145522][ T7591] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[   93.151065][ T7591] tipc: Resetting bearer <eth:syzkaller0>
[   93.154309][ T7589] tipc: Resetting bearer <eth:syzkaller0>
[   93.161181][ T7589] tipc: Disabling bearer <eth:syzkaller0>
[   93.170054][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'.
[   93.186519][ T7596] netlink: 147804 bytes leftover after parsing attributes in process `syz.2.711'.
[   93.413194][ T7614] openvswitch: netlink: Message has 24 unknown bytes.
[   93.784588][ T7650] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[   93.787453][ T7650] netlink: 224 bytes leftover after parsing attributes in process `syz.1.736'.
[   94.101214][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'.
[   94.105097][ T7669] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   94.108299][ T7669] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.234383][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'.
[   94.377817][ T7700] netlink: 'syz.0.756': attribute type 10 has an invalid length.
[   94.398153][ T7700] team0: Port device dummy0 added
[   94.403770][ T7700] netlink: 'syz.0.756': attribute type 10 has an invalid length.
[   94.422254][ T7700] team0: Port device dummy0 removed
[   94.426752][ T7700] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.196734][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'.
[   95.243504][ T7738] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   95.636955][ T7773] syzkaller1: entered promiscuous mode
[   95.638788][ T7773] syzkaller1: entered allmulticast mode
[   95.861241][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.864738][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.003693][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.026450][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.221956][ T7777] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   96.252788][   T33] audit: type=1800 audit(1756230557.477:2): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.788" name="memory.events" dev="tmpfs" ino=1297 res=0 errno=0
[   96.272545][ T7777] ipvlan2: left allmulticast mode
[   96.275534][ T7777] bond1: left allmulticast mode
[   96.277391][ T7777] gretap1: left allmulticast mode
[   96.296296][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.299483][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.306700][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.310544][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.313780][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.317232][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.323261][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   96.327638][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.715226][ T7811] vlan0: entered promiscuous mode
[   96.732911][ T7811] lo speed is unknown, defaulting to 1000
[   96.740972][ T7811] lo speed is unknown, defaulting to 1000
[   96.743434][ T7811] lo speed is unknown, defaulting to 1000
[   96.758022][ T7812] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[   96.767020][ T7812] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[   96.905596][   T48] lo speed is unknown, defaulting to 1000
[   96.908832][ T7811] infiniband syz0: set down
[   96.912414][ T7811] infiniband syz0: added lo
[   96.947966][ T7811] RDS/IB: syz0: added
[   96.951587][ T7811] smc: adding ib device syz0 with port count 1
[   96.953910][ T7811] smc:    ib device syz0 port 1 has pnetid 
[   96.957679][   T48] lo speed is unknown, defaulting to 1000
[   96.962760][ T7811] lo speed is unknown, defaulting to 1000
[   97.106994][ T7811] lo speed is unknown, defaulting to 1000
[   97.214535][ T7811] lo speed is unknown, defaulting to 1000
[   97.412298][ T7828] lo speed is unknown, defaulting to 1000
[   97.416656][ T7828] lo speed is unknown, defaulting to 1000
[   97.483602][ T7838] lo: entered allmulticast mode
[   97.488421][ T7837] lo: left allmulticast mode
[   97.553611][   T13] nci: nci_rx_work: unknown MT 0x1
[   98.369137][ T7878] __nla_validate_parse: 3 callbacks suppressed
[   98.369146][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'.
[   98.421590][ T7878] hsr_slave_1 (unregistering): left promiscuous mode
[   98.878915][ T7909] netlink: 'syz.0.838': attribute type 11 has an invalid length.
[   98.882472][ T7909] netlink: 44 bytes leftover after parsing attributes in process `syz.0.838'.
[   99.119638][ T7947] netlink: 'syz.1.854': attribute type 1 has an invalid length.
[   99.300490][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[   99.633925][ T7995] dummy0: entered promiscuous mode
[   99.638355][ T7995] bond0: entered promiscuous mode
[   99.640881][ T7991] netlink: 64 bytes leftover after parsing attributes in process `syz.0.868'.
[   99.644912][ T7995] bond_slave_0: entered promiscuous mode
[   99.647805][ T7995] bond_slave_1: entered promiscuous mode
[   99.654669][ T7995] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[   99.659010][ T7995] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[   99.663738][ T7995] hsr1: entered allmulticast mode
[   99.666206][ T7995] dummy0: entered allmulticast mode
[   99.668415][ T7995] bond0: entered allmulticast mode
[   99.670802][ T7995] bond_slave_0: entered allmulticast mode
[   99.673165][ T7995] bond_slave_1: entered allmulticast mode
[   99.741058][ T7999] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   99.968598][ T8009] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  100.073089][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'.
[  100.207114][ T8034] netlink: 'syz.2.894': attribute type 4 has an invalid length.
[  100.942504][ T8115] netlink: 'syz.2.929': attribute type 11 has an invalid length.
[  100.945838][ T8115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.929'.
[  100.961691][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'.
[  101.133595][ T8143] bridge_slave_0: default FDB implementation only supports local addresses
[  101.764006][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.956'.
[  102.010452][ T8190] netlink: 'syz.1.961': attribute type 10 has an invalid length.
[  102.014832][ T8190] team0: Port device dummy0 added
[  102.018263][ T8190] netlink: 'syz.1.961': attribute type 10 has an invalid length.
[  102.030276][ T8190] team0: Port device dummy0 removed
[  102.038796][ T8190] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  102.050196][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  103.004212][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'.
[  103.043370][ T8239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'.
[  103.067122][ T8244] syzkaller1: entered promiscuous mode
[  103.069453][ T8244] syzkaller1: entered allmulticast mode
[  103.934176][ T8269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.995'.
[  104.024651][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'.
[  104.027770][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'.
[  104.257637][ T8302] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  104.285183][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.287892][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.301018][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.304643][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.311313][ T8306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.606407][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1027'.
[  104.625966][ T8339] bond0: (slave dummy0): Releasing backup interface
[  104.630480][ T8339] batman_adv: batadv0: Adding interface: dummy0
[  104.632856][ T8339] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.642304][ T8339] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  104.662325][ T8339] batman_adv: batadv0: Adding interface: ip6gretap1
[  104.665178][ T8339] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.676586][ T8339] batman_adv: batadv0: Interface activated: ip6gretap1
[  104.732749][ T8347] batadv_slave_1: entered promiscuous mode
[  105.799630][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'.
[  105.846683][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'.
[  105.895817][ T8372] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.959311][ T8372] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.006228][ T8372] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.070234][ T8372] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.109563][ T8384] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1044'.
[  106.155703][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.173910][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.187100][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.194423][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  106.237123][ T8394] pim6reg1: entered promiscuous mode
[  106.239068][ T8394] pim6reg1: entered allmulticast mode
[  106.395995][ T8401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.208142][   T54] Bluetooth: hci2: link tx timeout
[  107.210670][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.277015][ T8416] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1063'.
[  107.435380][ T8424] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[  107.438514][ T8424] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1067'.
[  107.775571][ T8440] netlink: 'syz.2.1075': attribute type 1 has an invalid length.
[  107.784256][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1075'.
[  107.791195][ T8440] netlink: 'syz.2.1075': attribute type 1 has an invalid length.
[  108.377099][ T8488] batman_adv: batadv0: Removing interface: dummy0
[  108.388541][ T8488] bridge_slave_0: left allmulticast mode
[  108.399849][ T8488] bridge_slave_0: left promiscuous mode
[  108.407096][ T8488] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.426722][ T8488] bridge_slave_1: left allmulticast mode
[  108.441413][ T8488] bridge_slave_1: left promiscuous mode
[  108.444547][ T8488] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.452509][ T8488] bond0: (slave bond_slave_0): Releasing backup interface
[  108.472571][ T8488] bond0: (slave bond_slave_1): Releasing backup interface
[  108.478306][ T8488] team0: Port device team_slave_0 removed
[  108.482958][ T8488] team0: Port device team_slave_1 removed
[  108.486107][ T8488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.492046][ T8488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.497499][ T8488] bond1: (slave gretap1): Releasing active interface
[  108.504143][ T8488] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  108.507498][ T8488] batman_adv: batadv0: Removing interface: ip6gretap1
[  108.553417][ T8488] team0: Mode changed to "activebackup"
[  108.767782][ T8525] lo speed is unknown, defaulting to 1000
[  108.771516][ T8525] lo speed is unknown, defaulting to 1000
[  109.125776][ T8568] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  109.262098][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  109.769464][ T8593] netlink: 'syz.1.1113': attribute type 1 has an invalid length.
[  109.774206][ T8593] netlink: 'syz.1.1113': attribute type 1 has an invalid length.
[  109.777735][ T8593] __nla_validate_parse: 6 callbacks suppressed
[  109.777746][ T8593] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1113'.
[  109.824295][ T8618] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  109.998450][ T8632] netlink: 'syz.2.1132': attribute type 1 has an invalid length.
[  110.021462][ T8632] bond1: entered promiscuous mode
[  110.024008][ T8632] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.053975][ T8632] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.060567][ T8632] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  110.063865][ T8632] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  110.072720][ T8632] bond1: (slave wireguard0): making interface the new active one
[  110.075388][ T8632] wireguard0: entered promiscuous mode
[  110.078489][ T8632] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  110.086308][ T8641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.088783][ T8641] IPv6: NLM_F_CREATE should be set when creating new route
[  110.091422][ T8641] IPv6: NLM_F_CREATE should be set when creating new route
[  110.095893][ T8641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.114313][ T8641] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  110.130745][ T8641] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[  110.184390][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1139'.
[  110.722157][ T8712] netlink: 'syz.0.1168': attribute type 9 has an invalid length.
[  110.955557][ T8735] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1179'.
[  111.245986][ T8762] pimreg: entered allmulticast mode
[  111.595936][ T8799] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1206'.
[  111.599541][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'.
[  111.615293][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'.
[  111.838169][ T8811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1210'.
[  111.842041][ T8811] team0: Mode changed to "broadcast"
[  111.844931][ T8811] vlan0: entered promiscuous mode
[  111.848361][ T8811] tipc: Enabled bearer <eth:team0>, priority 0
[  111.989557][ T8820] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  112.184505][ T8840] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1223'.
[  112.187863][ T8840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1223'.
[  112.193539][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1223'.
[  112.813348][ T8871] gtp0: entered promiscuous mode
[  112.927300][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.932685][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.938258][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.945391][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.185223][ T8996] netdevsim netdevsim0 : renamed from netdevsim0
[  114.491941][ T9016] veth0_to_bond: entered allmulticast mode
[  114.804185][ T9038] __nla_validate_parse: 8 callbacks suppressed
[  114.804196][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  114.821258][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  115.014480][ T9060] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  115.017509][ T9060] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  115.023501][ T9061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1327'.
[  115.153421][ T9074] lo speed is unknown, defaulting to 1000
[  115.164529][ T9074] lo speed is unknown, defaulting to 1000
[  115.886321][ T9128] netlink: 'syz.0.1356': attribute type 1 has an invalid length.
[  115.964385][ T9135] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  115.992928][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'.
[  116.205142][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'.
[  116.227397][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1370'.
[  116.235424][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1369'.
[  116.368981][ T9170] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.632682][ T9191] trusted_key: syz.2.1385 sent an empty control message without MSG_MORE.
[  117.336483][ T9194] bond0: (slave bond_slave_0): Releasing backup interface
[  117.340641][ T9194] bond_slave_0: left promiscuous mode
[  117.343300][ T9194] bond_slave_0: left allmulticast mode
[  117.347516][ T9194] bond0: (slave bond_slave_1): Releasing backup interface
[  117.352805][ T9194] bond_slave_1: left promiscuous mode
[  117.360313][ T9194] bond_slave_1: left allmulticast mode
[  117.368880][ T9194] team0: Port device team_slave_0 removed
[  117.380453][ T9194] team0: Port device team_slave_1 removed
[  117.383139][ T9194] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.387759][ T9194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.397728][ T9194] bond1: (slave wireguard0): Releasing backup interface
[  117.400831][ T9194] wireguard0: left promiscuous mode
[  117.403747][ T9194] bond1: (slave wireguard1): making interface the new active one
[  117.407599][ T9194] wireguard1: entered promiscuous mode
[  117.428249][ T9194] bond1: (slave wireguard1): Releasing backup interface
[  117.431477][ T9194] wireguard1: left promiscuous mode
[  117.538385][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1392'.
[  117.559106][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.570914][ T9207] bond0: (slave rose0): Enslaving as an active interface with an up link
[  117.618828][ T9215] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  117.712843][ T9221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.727424][ T9221] syzkaller0: entered promiscuous mode
[  117.736452][ T9221] syzkaller0: entered allmulticast mode
[  117.765104][ T9221] tipc: Resetting bearer <eth:syzkaller0>
[  117.771544][ T9220] tipc: Resetting bearer <eth:syzkaller0>
[  117.783643][ T9220] tipc: Disabling bearer <eth:syzkaller0>
[  117.950184][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'.
[  118.099071][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1411'.
[  118.215025][ T9267] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  118.376665][ T9284] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  118.787018][ T9326] Unsupported ieee802154 address type: 0
[  119.042874][ T9353] Bluetooth: MGMT ver 1.23
[  119.557178][ T9398] macsec1: left promiscuous mode
[  119.559412][ T9398] macvtap1: left promiscuous mode
[  119.564517][ T9398] gtp0: left promiscuous mode
[  119.614755][ T9400] lo speed is unknown, defaulting to 1000
[  119.633576][ T9403] 8021q: adding VLAN 0 to HW filter on device bond3
[  119.637137][ T9400] lo speed is unknown, defaulting to 1000
[  119.974152][ T9419] __nla_validate_parse: 177 callbacks suppressed
[  119.974165][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'.
[  120.294711][ T9442] netlink: 'syz.1.1495': attribute type 10 has an invalid length.
[  120.300749][ T9442] bond0: (slave dummy0): Releasing backup interface
[  120.325031][ T9442] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  120.328142][ T9442] team0: Failed to send options change via netlink (err -105)
[  120.333140][ T9442] team0: Port device dummy0 added
[  120.338365][ T9442] netlink: 'syz.1.1495': attribute type 10 has an invalid length.
[  120.346661][ T9442] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  120.360215][ T9442] team0: Failed to send options change via netlink (err -105)
[  120.363022][ T9442] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  120.376678][ T9442] team0: Port device dummy0 removed
[  120.383411][ T9442] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  120.477749][ T9456] syz0: rxe_newlink: already configured on lo
[  120.747305][ T9475] netlink: 'syz.0.1511': attribute type 12 has an invalid length.
[  120.750229][ T9475] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1511'.
[  120.777488][ T9486] netlink: 'syz.1.1515': attribute type 1 has an invalid length.
[  120.782239][ T9486] netlink: 'syz.1.1515': attribute type 2 has an invalid length.
[  121.991065][ T9586] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  122.083379][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1564'.
[  122.087754][ T9590] openvswitch: netlink: Flow actions attr not present in new flow.
[  122.349268][   T48] IPVS: starting estimator thread 0...
[  122.366442][ T9630] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  122.369613][ T9630] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  122.439917][ T9628] IPVS: using max 45 ests per chain, 108000 per kthread
[  123.171541][ T9672] netlink: 'syz.0.1602': attribute type 1 has an invalid length.
[  123.174891][ T9672] netlink: 'syz.0.1602': attribute type 1 has an invalid length.
[  123.253123][ T9680] netlink: 'syz.1.1606': attribute type 3 has an invalid length.
[  123.451170][ T9701] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1617'.
[  123.455051][ T9701] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1617'.
[  123.458882][ T9701] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1617'.
[  123.463664][ T9702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.466665][ T9702] syzkaller0: entered promiscuous mode
[  123.468510][ T9702] syzkaller0: entered allmulticast mode
[  123.474143][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1617'.
[  123.481352][ T9702] tipc: Resetting bearer <eth:syzkaller0>
[  123.527111][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'.
[  123.531741][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'.
[  123.536537][ T9708] netlink: 'syz.1.1619': attribute type 13 has an invalid length.
[  123.583952][ T9713] netlink: 'syz.1.1622': attribute type 83 has an invalid length.
[  123.611420][ T9715] vlan0: left promiscuous mode
[  123.614231][ T9715] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  123.626052][ T9715] hsr1: left allmulticast mode
[  123.626266][ T9719] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1625'.
[  123.628186][ T9715] dummy0: left allmulticast mode
[  123.633617][ T9715] bond0: left allmulticast mode
[  123.637798][ T9715] bond1: left promiscuous mode
[  123.641459][ T9715] tipc: Resetting bearer <eth:syzkaller0>
[  123.644696][ T9715] syzkaller0: left promiscuous mode
[  123.646601][ T9715] syzkaller0: left allmulticast mode
[  123.653925][ T8545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.658788][ T8545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.763784][ T9725] syzkaller1: entered promiscuous mode
[  123.766150][ T9725] syzkaller1: entered allmulticast mode
[  124.114741][ T9741] tipc: Enabling of bearer <et:g> rejected, media not registered
[  124.804813][ T9773] lo speed is unknown, defaulting to 1000
[  124.807392][ T9773] lo speed is unknown, defaulting to 1000
[  125.042149][ T9794] __nla_validate_parse: 3 callbacks suppressed
[  125.042159][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'.
[  125.088526][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  125.156531][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1663'.
[  125.563303][ T9850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.682672][ T9861] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1690'.
[  125.805649][ T9876] 8021q: adding VLAN 0 to HW filter on device batadv1
[  125.809053][ T9876] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  125.820268][ T9876] team0: Failed to send options change via netlink (err -105)
[  125.825256][ T9876] team0: Port device batadv1 added
[  126.137796][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1704'.
[  126.762232][ T9945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.766094][ T9945] syzkaller0: entered promiscuous mode
[  126.768309][ T9945] syzkaller0: entered allmulticast mode
[  126.788209][ T9945] tipc: Resetting bearer <eth:syzkaller0>
[  126.793224][ T9944] tipc: Resetting bearer <eth:syzkaller0>
[  126.804397][ T9944] tipc: Disabling bearer <eth:syzkaller0>
[  126.821664][ T9948] lo speed is unknown, defaulting to 1000
[  126.824415][ T9948] lo speed is unknown, defaulting to 1000
[  127.127304][ T9977] netlink: 'syz.1.1744': attribute type 6 has an invalid length.
[  127.428651][T10000] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.485329][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1755'.
[  127.547114][T10008] batadv_slave_1: entered promiscuous mode
[  127.556603][T10008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1756'.
[  127.561431][T10007] batadv_slave_1: left promiscuous mode
[  127.891628][T10041] netlink: 'syz.2.1772': attribute type 1 has an invalid length.
[  127.924633][T10041] 8021q: adding VLAN 0 to HW filter on device bond2
[  127.942144][T10041] bond2: (slave bridge2): making interface the new active one
[  127.946321][T10041] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  127.962848][T10041] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  128.458319][T10066] pim6reg1: entered promiscuous mode
[  128.461084][T10066] pim6reg1: entered allmulticast mode
[  128.708038][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1786'.
[  128.824013][T10087] netlink: 'syz.0.1790': attribute type 11 has an invalid length.
[  128.827928][T10086] smc: net device bond0 applied user defined pnetid SYZ2
[  128.840986][T10075] smc: net device bond0 erased user defined pnetid SYZ2
[  129.318673][T10127] netlink: 'syz.2.1809': attribute type 3 has an invalid length.
[  129.322161][T10127] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1809'.
[  129.395386][T10129] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  130.013377][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1822'.
[  130.235736][T10181] __nla_validate_parse: 1 callbacks suppressed
[  130.235749][T10181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1832'.
[  130.336328][T10190] lo speed is unknown, defaulting to 1000
[  130.339270][T10190] lo speed is unknown, defaulting to 1000
[  130.544361][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'.
[  130.552257][T10202] dummy0: entered promiscuous mode
[  130.554695][T10202] bridge0: port 1(macvlan2) entered blocking state
[  130.556972][T10202] bridge0: port 1(macvlan2) entered disabled state
[  130.559257][T10202] macvlan2: entered allmulticast mode
[  130.563015][T10202] dummy0: entered allmulticast mode
[  130.566334][T10202] macvlan2: entered promiscuous mode
[  130.575156][T10203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  130.781863][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'.
[  130.813275][T10213] netlink: 'syz.0.1843': attribute type 2 has an invalid length.
[  131.291095][T10237] lo speed is unknown, defaulting to 1000
[  131.298433][T10237] lo speed is unknown, defaulting to 1000
[  131.553676][T10254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  131.777217][T10266] pim6reg9: entered allmulticast mode
[  132.280637][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1875'.
[  132.342735][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'.
[  132.377322][T10287] netlink: 'syz.1.1877': attribute type 11 has an invalid length.
[  132.387676][T10287] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1877'.
[  132.519218][T10299] netlink: 'syz.1.1882': attribute type 30 has an invalid length.
[  132.564348][T10298] lo speed is unknown, defaulting to 1000
[  132.568449][T10298] lo speed is unknown, defaulting to 1000
[  133.339842][ T5855] Bluetooth: hci2: command 0x0406 tx timeout
[  133.454031][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'.
[  133.567956][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1890'.
[  133.974996][T10343] lo speed is unknown, defaulting to 1000
[  133.978710][T10343] lo speed is unknown, defaulting to 1000
[  134.468242][T10368] nbd: must specify a device to reconfigure
[  134.700730][T10387] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1920'.
[  134.704451][T10387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1920'.
[  134.721237][T10387] pimreg: left allmulticast mode
[  134.781546][T10395] rdma_rxe: rxe_newlink: failed to add lo
[  134.835721][T10395] ip6gretap0: left promiscuous mode
[  134.843836][T10395] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.847748][T10395] 8021q: adding VLAN 0 to HW filter on device team0
[  134.853547][T10395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.937662][T10409] netlink: 'syz.1.1931': attribute type 1 has an invalid length.
[  135.133550][T10424] team0 (unregistering): Port device team_slave_0 removed
[  135.138023][T10424] team0 (unregistering): Port device team_slave_1 removed
[  135.168431][T10421] macvtap1: entered promiscuous mode
[  135.173498][T10421] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  135.588615][T10459] __nla_validate_parse: 4 callbacks suppressed
[  135.588631][T10459] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1952'.
[  135.609271][T10461] erspan1: entered promiscuous mode
[  135.743881][T10470] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  136.020868][   T33] audit: type=1800 audit(1756230597.247:3): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1967" name="memory.events" dev="tmpfs" ino=3207 res=0 errno=0
[  136.083189][T10492] netlink: 'syz.0.1966': attribute type 6 has an invalid length.
[  136.236179][T10499] netlink: 'syz.0.1971': attribute type 1 has an invalid length.
[  136.238968][T10499] netlink: 'syz.0.1971': attribute type 2 has an invalid length.
[  136.328555][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1975'.
[  136.507807][T10524] tipc: Invalid UDP bearer configuration
[  136.507835][T10524] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  136.770254][T10535] block nbd0: server does not support multiple connections per device.
[  136.775160][T10535] block nbd0: shutting down sockets
[  136.968844][T10562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2000'.
[  137.076894][T10570] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  137.172809][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2008'.
[  137.348058][T10594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.362496][T10594] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  137.366101][T10594] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  137.373684][T10594] tipc: Resetting bearer <eth:syzkaller0>
[  137.374030][T10596] netlink: 'syz.2.2017': attribute type 12 has an invalid length.
[  137.379069][T10596] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2017'.
[  137.523630][T10612] netlink: 'syz.1.2025': attribute type 12 has an invalid length.
[  137.783243][T10643] openvswitch: netlink: IPv4 tun info is not correct
[  137.883978][T10653] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  137.888338][T10653] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  137.944755][T10655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2046'.
[  138.144667][T10670] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  138.151527][T10670] syzkaller0: entered promiscuous mode
[  138.153605][T10670] syzkaller0: entered allmulticast mode
[  138.198404][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2055'.
[  138.214449][T10674] geneve2: entered promiscuous mode
[  138.218615][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.225610][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.229688][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.233097][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.239863][T10676] netlink: 'syz.0.2056': attribute type 13 has an invalid length.
[  138.244438][T10676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2056'.
[  138.256737][T10676] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  139.273080][T10696] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  139.457115][T10713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.550385][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'.
[  140.156956][T10744] netlink: 'syz.1.2086': attribute type 12 has an invalid length.
[  140.329239][T10754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2090'.
[  140.364745][T10759] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  140.423498][T10763] lo speed is unknown, defaulting to 1000
[  140.426398][T10763] lo speed is unknown, defaulting to 1000
[  140.735662][T10789] delete_channel: no stack
[  141.237223][T10837] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2130'.
[  141.241622][T10837] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2130'.
[  141.403961][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  141.407903][T10849] netlink: 'syz.1.2136': attribute type 30 has an invalid length.
[  141.418695][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.418735][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'.
[  141.427652][T10849] netlink: 'syz.1.2136': attribute type 30 has an invalid length.
[  141.427952][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.436066][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.447593][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.499245][T10855] netlink: 'syz.0.2139': attribute type 3 has an invalid length.
[  142.023085][T10866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.057549][T10868] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2145'.
[  142.488632][T10898] ip6gre1: entered promiscuous mode
[  142.510430][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'.
[  142.754121][T10902] dvmrp8: entered allmulticast mode
[  142.792817][T10897] dvmrp8: left allmulticast mode
[  143.072249][T10919] netlink: 'syz.1.2167': attribute type 1 has an invalid length.
[  143.205362][T10926] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2170'.
[  143.456750][T10948] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  143.489225][T10953] netlink: 'syz.2.2182': attribute type 5 has an invalid length.
[  143.608198][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2186'.
[  143.930712][T11005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2206'.
[  143.933890][T11005] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2206'.
[  144.232900][T11041] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  144.365442][T11053] netlink: 'syz.0.2228': attribute type 4 has an invalid length.
[  144.745635][T11084] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  144.758494][T11084] Bluetooth: MGMT ver 1.23
[  144.958861][T11102] dvmrp8: entered allmulticast mode
[  144.970191][T11101] dvmrp8: left allmulticast mode
[  144.986749][T11106] ==================================================================
[  144.989451][T11106] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  144.992255][T11106] Read of size 2 at addr ffff88810fabc142 by task syz.1.2253/11106
[  144.995788][T11106] 
[  144.996583][T11106] CPU: 0 UID: 0 PID: 11106 Comm: syz.1.2253 Not tainted syzkaller #0 PREEMPT(full) 
[  144.996594][T11106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.996599][T11106] Call Trace:
[  144.996603][T11106]  <TASK>
[  144.996607][T11106]  dump_stack_lvl+0x189/0x250
[  144.996619][T11106]  ? __kasan_check_byte+0x12/0x40
[  144.996631][T11106]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.996639][T11106]  ? lock_release+0x4b/0x3e0
[  144.996651][T11106]  ? __virt_addr_valid+0x4a5/0x5c0
[  144.996661][T11106]  print_report+0xca/0x240
[  144.996668][T11106]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  144.996679][T11106]  kasan_report+0x118/0x150
[  144.996689][T11106]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  144.996701][T11106]  __xfrm_state_lookup+0x6ad/0x8d0
[  144.996713][T11106]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  144.996725][T11106]  xfrm_state_add+0x27d/0xc40
[  144.996734][T11106]  xfrm_add_sa+0x35a1/0x4070
[  144.996743][T11106]  ? __pfx_xfrm_add_sa+0x10/0x10
[  144.996750][T11106]  ? apparmor_capable+0x137/0x1b0
[  144.996759][T11106]  ? __nla_parse+0x40/0x60
[  144.996770][T11106]  xfrm_user_rcv_msg+0x7a3/0xab0
[  144.996779][T11106]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.996792][T11106]  ? __pfx___mutex_trylock_common+0x10/0x10
[  144.996800][T11106]  ? rcu_is_watching+0x15/0xb0
[  144.996807][T11106]  ? trace_contention_end+0x39/0x120
[  144.996815][T11106]  ? __mutex_lock+0x335/0x1360
[  144.996825][T11106]  netlink_rcv_skb+0x208/0x470
[  144.996835][T11106]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  144.996843][T11106]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.996854][T11106]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.996863][T11106]  ? netlink_deliver_tap+0x2e/0x1b0
[  144.996873][T11106]  xfrm_netlink_rcv+0x79/0x90
[  144.996880][T11106]  netlink_unicast+0x82f/0x9e0
[  144.996890][T11106]  ? __pfx_netlink_unicast+0x10/0x10
[  144.996899][T11106]  ? netlink_sendmsg+0x642/0xb30
[  144.996908][T11106]  ? skb_put+0x11b/0x210
[  144.996919][T11106]  netlink_sendmsg+0x805/0xb30
[  144.996930][T11106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.996940][T11106]  ? aa_sock_msg_perm+0xf1/0x1d0
[  144.996950][T11106]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.996958][T11106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.996967][T11106]  __sock_sendmsg+0x21c/0x270
[  144.996977][T11106]  ____sys_sendmsg+0x505/0x830
[  144.996984][T11106]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.996992][T11106]  ? import_iovec+0x74/0xa0
[  144.997000][T11106]  ___sys_sendmsg+0x21f/0x2a0
[  144.997007][T11106]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.997019][T11106]  ? __fget_files+0x2a/0x420
[  144.997030][T11106]  ? __fget_files+0x3a0/0x420
[  144.997041][T11106]  __x64_sys_sendmsg+0x19b/0x260
[  144.997048][T11106]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.997057][T11106]  ? rcu_is_watching+0x15/0xb0
[  144.997064][T11106]  ? do_syscall_64+0xbe/0x3b0
[  144.997075][T11106]  do_syscall_64+0xfa/0x3b0
[  144.997084][T11106]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.997092][T11106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.997100][T11106]  ? exc_page_fault+0x9f/0xf0
[  144.997109][T11106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.997116][T11106] RIP: 0033:0x7fced078ebe9
[  144.997124][T11106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.997130][T11106] RSP: 002b:00007fced1636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.997139][T11106] RAX: ffffffffffffffda RBX: 00007fced09b5fa0 RCX: 00007fced078ebe9
[  144.997144][T11106] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  144.997149][T11106] RBP: 00007fced0811e19 R08: 0000000000000000 R09: 0000000000000000
[  144.997153][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.997157][T11106] R13: 00007fced09b6038 R14: 00007fced09b5fa0 R15: 00007ffd134c2408
[  144.997165][T11106]  </TASK>
[  144.997167][T11106] 
[  145.119917][T11106] Allocated by task 8463:
[  145.121327][T11106]  kasan_save_track+0x3e/0x80
[  145.122858][T11106]  __kasan_slab_alloc+0x6c/0x80
[  145.124530][T11106]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  145.126350][T11106]  xfrm_state_alloc+0x24/0x2f0
[  145.127919][T11106]  xfrm_state_find+0x37d4/0x5400
[  145.129664][T11106]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  145.132048][T11106]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  145.134157][T11106]  xfrm_lookup_route+0x3c/0x1c0
[  145.135931][T11106]  udp_sendmsg+0x142e/0x2170
[  145.137390][T11106]  __sock_sendmsg+0x19c/0x270
[  145.138872][T11106]  ____sys_sendmsg+0x52d/0x830
[  145.140420][T11106]  ___sys_sendmsg+0x21f/0x2a0
[  145.142072][T11106]  __sys_sendmmsg+0x227/0x430
[  145.143656][T11106]  __x64_sys_sendmmsg+0xa0/0xc0
[  145.145169][T11106]  do_syscall_64+0xfa/0x3b0
[  145.146627][T11106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.148508][T11106] 
[  145.149298][T11106] Freed by task 5900:
[  145.150587][T11106]  kasan_save_track+0x3e/0x80
[  145.152106][T11106]  kasan_save_free_info+0x46/0x50
[  145.153897][T11106]  __kasan_slab_free+0x5b/0x80
[  145.155759][T11106]  kmem_cache_free+0x18f/0x400
[  145.157319][T11106]  xfrm_state_gc_task+0x52d/0x6b0
[  145.158902][T11106]  process_scheduled_works+0xae1/0x17b0
[  145.160649][T11106]  worker_thread+0x8a0/0xda0
[  145.162125][T11106]  kthread+0x711/0x8a0
[  145.163428][T11106]  ret_from_fork+0x3fc/0x770
[  145.164952][T11106]  ret_from_fork_asm+0x1a/0x30
[  145.166549][T11106] 
[  145.167360][T11106] The buggy address belongs to the object at ffff88810fabc000
[  145.167360][T11106]  which belongs to the cache xfrm_state of size 928
[  145.171872][T11106] The buggy address is located 322 bytes inside of
[  145.171872][T11106]  freed 928-byte region [ffff88810fabc000, ffff88810fabc3a0)
[  145.176294][T11106] 
[  145.177095][T11106] The buggy address belongs to the physical page:
[  145.179180][T11106] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810fabc000 pfn:0x10fabc
[  145.182455][T11106] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  145.185251][T11106] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  145.188077][T11106] page_type: f5(slab)
[  145.189430][T11106] raw: 057ff00000000240 ffff8881047b1c80 ffffea00043ad610 ffff888104d1b588
[  145.192199][T11106] raw: ffff88810fabc000 00000000000e0001 00000000f5000000 0000000000000000
[  145.194998][T11106] head: 057ff00000000240 ffff8881047b1c80 ffffea00043ad610 ffff888104d1b588
[  145.197899][T11106] head: ffff88810fabc000 00000000000e0001 00000000f5000000 0000000000000000
[  145.200710][T11106] head: 057ff00000000002 ffffea00043eaf01 00000000ffffffff 00000000ffffffff
[  145.203564][T11106] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  145.206800][T11106] page dumped because: kasan: bad access detected
[  145.208919][T11106] page_owner tracks the page as allocated
[  145.210895][T11106] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6037, tgid 6036 (syz.1.53), ts 65191941106, free_ts 65171586094
[  145.217324][T11106]  post_alloc_hook+0x240/0x2a0
[  145.218841][T11106]  get_page_from_freelist+0x21e4/0x22c0
[  145.220593][T11106]  __alloc_frozen_pages_noprof+0x181/0x370
[  145.222403][T11106]  alloc_pages_mpol+0x232/0x4a0
[  145.224115][T11106]  allocate_slab+0x8a/0x370
[  145.225825][T11106]  ___slab_alloc+0xbeb/0x1410
[  145.227334][T11106]  kmem_cache_alloc_noprof+0x283/0x3c0
[  145.229032][T11106]  xfrm_state_alloc+0x24/0x2f0
[  145.230550][T11106]  __find_acq_core+0x8a7/0x1c00
[  145.232101][T11106]  xfrm_find_acq+0x78/0xa0
[  145.233543][T11106]  xfrm_alloc_userspi+0x6b3/0xc90
[  145.235183][T11106]  xfrm_user_rcv_msg+0x7a3/0xab0
[  145.236754][T11106]  netlink_rcv_skb+0x208/0x470
[  145.238323][T11106]  xfrm_netlink_rcv+0x79/0x90
[  145.239831][T11106]  netlink_unicast+0x82f/0x9e0
[  145.241448][T11106]  netlink_sendmsg+0x805/0xb30
[  145.243019][T11106] page last free pid 6025 tgid 6025 stack trace:
[  145.245542][T11106]  __free_frozen_pages+0xbc4/0xd30
[  145.247199][T11106]  free_large_kmalloc+0x13a/0x1f0
[  145.248922][T11106]  device_release+0x9c/0x1c0
[  145.250430][T11106]  kobject_put+0x22b/0x480
[  145.251838][T11106]  netdev_run_todo+0xd2e/0xea0
[  145.253350][T11106]  tun_chr_close+0x13c/0x1c0
[  145.254895][T11106]  __fput+0x44c/0xa70
[  145.256187][T11106]  task_work_run+0x1d4/0x260
[  145.257727][T11106]  exit_to_user_mode_loop+0xec/0x110
[  145.259416][T11106]  do_syscall_64+0x2bd/0x3b0
[  145.260909][T11106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.262828][T11106] 
[  145.263662][T11106] Memory state around the buggy address:
[  145.265840][T11106]  ffff88810fabc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.268761][T11106]  ffff88810fabc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.271849][T11106] >ffff88810fabc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.274584][T11106]                                            ^
[  145.276927][T11106]  ffff88810fabc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.280126][T11106]  ffff88810fabc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  145.283062][T11106] ==================================================================
[  145.286279][T11106] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  145.288693][T11106] CPU: 0 UID: 0 PID: 11106 Comm: syz.1.2253 Not tainted syzkaller #0 PREEMPT(full) 
[  145.291781][T11106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.295124][T11106] Call Trace:
[  145.296209][T11106]  <TASK>
[  145.297164][T11106]  dump_stack_lvl+0x99/0x250
[  145.298668][T11106]  ? __asan_memcpy+0x40/0x70
[  145.300149][T11106]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.301849][T11106]  ? __pfx__printk+0x10/0x10
[  145.303457][T11106]  vpanic+0x281/0x750
[  145.305140][T11106]  ? __pfx_vpanic+0x10/0x10
[  145.306642][T11106]  ? irqentry_exit+0x74/0x90
[  145.308119][T11106]  panic+0xb9/0xc0
[  145.309393][T11106]  ? __pfx_panic+0x10/0x10
[  145.310869][T11106]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  145.312756][T11106]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  145.314707][T11106]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  145.316398][T11106]  check_panic_on_warn+0x89/0xb0
[  145.318015][T11106]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  145.319718][T11106]  end_report+0x78/0x160
[  145.321079][T11106]  kasan_report+0x129/0x150
[  145.322556][T11106]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  145.324573][T11106]  __xfrm_state_lookup+0x6ad/0x8d0
[  145.326403][T11106]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  145.328276][T11106]  xfrm_state_add+0x27d/0xc40
[  145.329817][T11106]  xfrm_add_sa+0x35a1/0x4070
[  145.331367][T11106]  ? __pfx_xfrm_add_sa+0x10/0x10
[  145.333003][T11106]  ? apparmor_capable+0x137/0x1b0
[  145.334944][T11106]  ? __nla_parse+0x40/0x60
[  145.336465][T11106]  xfrm_user_rcv_msg+0x7a3/0xab0
[  145.338171][T11106]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  145.339991][T11106]  ? __pfx___mutex_trylock_common+0x10/0x10
[  145.341959][T11106]  ? rcu_is_watching+0x15/0xb0
[  145.343609][T11106]  ? trace_contention_end+0x39/0x120
[  145.345681][T11106]  ? __mutex_lock+0x335/0x1360
[  145.347259][T11106]  netlink_rcv_skb+0x208/0x470
[  145.348747][T11106]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  145.350541][T11106]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  145.352304][T11106]  ? netlink_deliver_tap+0x2e/0x1b0
[  145.354026][T11106]  ? netlink_deliver_tap+0x2e/0x1b0
[  145.355785][T11106]  xfrm_netlink_rcv+0x79/0x90
[  145.357332][T11106]  netlink_unicast+0x82f/0x9e0
[  145.359107][T11106]  ? __pfx_netlink_unicast+0x10/0x10
[  145.361105][T11106]  ? netlink_sendmsg+0x642/0xb30
[  145.362944][T11106]  ? skb_put+0x11b/0x210
[  145.364639][T11106]  netlink_sendmsg+0x805/0xb30
[  145.366366][T11106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.368096][T11106]  ? aa_sock_msg_perm+0xf1/0x1d0
[  145.369690][T11106]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  145.371453][T11106]  ? __pfx_netlink_sendmsg+0x10/0x10
[  145.373204][T11106]  __sock_sendmsg+0x21c/0x270
[  145.375010][T11106]  ____sys_sendmsg+0x505/0x830
[  145.376827][T11106]  ? __pfx_____sys_sendmsg+0x10/0x10
[  145.378597][T11106]  ? import_iovec+0x74/0xa0
[  145.380055][T11106]  ___sys_sendmsg+0x21f/0x2a0
[  145.381632][T11106]  ? __pfx____sys_sendmsg+0x10/0x10
[  145.383402][T11106]  ? __fget_files+0x2a/0x420
[  145.385395][T11106]  ? __fget_files+0x3a0/0x420
[  145.386968][T11106]  __x64_sys_sendmsg+0x19b/0x260
[  145.388643][T11106]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  145.390440][T11106]  ? rcu_is_watching+0x15/0xb0
[  145.392035][T11106]  ? do_syscall_64+0xbe/0x3b0
[  145.393581][T11106]  do_syscall_64+0xfa/0x3b0
[  145.395135][T11106]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.396879][T11106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.398956][T11106]  ? exc_page_fault+0x9f/0xf0
[  145.400574][T11106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.402544][T11106] RIP: 0033:0x7fced078ebe9
[  145.404387][T11106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  145.412152][T11106] RSP: 002b:00007fced1636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  145.415464][T11106] RAX: ffffffffffffffda RBX: 00007fced09b5fa0 RCX: 00007fced078ebe9
[  145.418082][T11106] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  145.420664][T11106] RBP: 00007fced0811e19 R08: 0000000000000000 R09: 0000000000000000
[  145.423300][T11106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.426364][T11106] R13: 00007fced09b6038 R14: 00007fced09b5fa0 R15: 00007ffd134c2408
[  145.428960][T11106]  </TASK>
[  145.430706][T11106] Kernel Offset: disabled
[  145.432060][T11106] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:50:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001c12 RDI=0000000000001c13 RBP=00000000000003f8 RSP=ffffc90006f269d0
R8 =ffff888021098237 R9 =1ffff11004213046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af98f5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fced16366c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001300 CR3=0000000114a3e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fced0987498 00007fced0987470 XMM03=00007fced09874a8 00007fced09874a0
XMM04=00007fced14ed100 00007fced0987460 XMM05=00007fced0987478 00007fced09874c0
XMM06=00007fced09874b8 00007fced09874b0 XMM07=00007fced09874a8 00007fced09874a0
XMM08=0000000000000000 00007fced0812ee7 XMM09=0000000000000000 00007fced0812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11021cdb6c1 RBX=1ffffffff1bccd92 RCX=ffff88810de4c780 RDX=1ffff11021bc98f7
RSI=0000000000000040 RDI=ffff88810de4c7f8 RBP=0000000000000000 RSP=ffffc900001e07c0
R8 =0000000000000000 R9 =ffffffff897415a4 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=0000000000000180 R13=ffffffff8de66c90 R14=ffff88810e6db480 R15=dffffc0000000000
RIP=ffffffff8974197f RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f484eaa4800 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563d08352000 CR3=000000010edc0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
