last executing test programs:

490.51798ms ago: executing program 2 (id=2958):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x2}, 0x10)

307.164532ms ago: executing program 1 (id=2961):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000)

306.615076ms ago: executing program 2 (id=2963):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r1, 0x4}, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, &(0x7f0000000080))

250.881609ms ago: executing program 2 (id=2965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4, 0x0, 0x9}}}}, 0x30}}, 0x2c040090)

201.411748ms ago: executing program 1 (id=2966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
r3 = gettid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40000005, 0x26}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x20084024)

201.27377ms ago: executing program 0 (id=2967):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a}, 0x20)

201.111924ms ago: executing program 2 (id=2968):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xa2ec9000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})

140.143781ms ago: executing program 1 (id=2969):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd30, 0x35dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014)

139.885117ms ago: executing program 0 (id=2970):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x0, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x1, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0x1ff, 0x9, 0x8, 0x5, 0xb, 0x8, 0xd, 0x6, 0x9, 0x8, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0x8, 0x400, 0x7, 0x6, 0x3, 0x16, 0xfffffc00, 0xfffffffe, 0xfff, 0x10, 0x3ff, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x97, 0x2, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x4, 0x6, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000001, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x3ff, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x0, 0x5, 0x5, 0x0, 0x2, 0x6, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ea, 0x7, 0x73, 0x10001, 0x7, 0x8f1b, 0x3, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x7d, 0x3ff, 0x2, 0xffffff01, 0x1, 0x1, 0x8, 0xffffffff, 0x7fff, 0xfffffff8, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0x9, 0x1, 0x101, 0x80, 0xd8, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x4cdd072, 0x1, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x4, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0xd3f, 0xe48e, 0x3, 0x8, 0x3, 0x8, 0x77, 0xf, 0xeca, 0x8d, 0xe051, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e8, 0x5, 0x8, 0xc, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8c, 0xffffffff, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x5cd, 0x9, 0x277b, 0x3, 0x3, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x3069, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4815}, 0x0)

67.922395ms ago: executing program 1 (id=2971):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8, 0x1, 0x1, 0x0, 0x2400}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0)

67.691024ms ago: executing program 2 (id=2972):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, 0x0, 0x20, 0x70b92e, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xc0000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10001}]}, 0x34}, 0x1, 0x0, 0x0, 0x851}, 0x4014)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

67.334537ms ago: executing program 0 (id=2973):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xa1, @mcast1, 0x6}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14)

67.162153ms ago: executing program 0 (id=2974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33220}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x36}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x8}]}}}]}, 0x48}}, 0x0)

1.07043ms ago: executing program 1 (id=2975):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012"], 0x4c}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)

727.132µs ago: executing program 0 (id=2976):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff033168440372b89e14f00800a25e4113fdbe", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

543.251µs ago: executing program 2 (id=2977):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)

248.94µs ago: executing program 1 (id=2978):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={<r2=>0x0, 0x7f, "c487cc1f32346e261564e8ff75a02d4a32d48df2948db205a1faca6ed6797883b6d4c0dcf754791b1837520ed2416899d4cd8e066d8d0aa934b39426d139f35814db946471294ab89ee4790f3c860c7ac508cce75fafeef6704f6e7b96c2492cd9d4d154323f811ba23776745be9233cdf11972108843b5f9e512aaf92b3d2"}, &(0x7f0000000080)=0x87)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x2, 0x30}, 0xc)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

0s ago: executing program 0 (id=2979):
r0 = socket$tipc(0x1e, 0x4, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13633' (ED25519) to the list of known hosts.
syzkaller login: [   56.262262][ T5777] cgroup: Unknown subsys name 'net'
[   56.367457][ T5777] cgroup: Unknown subsys name 'cpuset'
[   56.371774][ T5777] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.170123][ T5777] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.966870][ T5875] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.290127][ T5886] chnl_net:caif_netlink_parms(): no params data found
[   69.359527][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.362403][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.365100][ T5886] bridge_slave_0: entered allmulticast mode
[   69.367981][ T5886] bridge_slave_0: entered promiscuous mode
[   69.372299][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.375003][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.377286][ T5886] bridge_slave_1: entered allmulticast mode
[   69.380052][ T5886] bridge_slave_1: entered promiscuous mode
[   69.404986][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.409674][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.430943][ T5886] team0: Port device team_slave_0 added
[   69.434424][ T5886] team0: Port device team_slave_1 added
[   69.451890][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.454349][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.462332][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.468145][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.470332][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.478375][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.508153][ T5886] hsr_slave_0: entered promiscuous mode
[   69.510616][ T5886] hsr_slave_1: entered promiscuous mode
[   69.616465][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.622601][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.627429][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.631946][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.652057][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.654513][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.657295][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.659591][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.701370][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.711218][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.715312][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.724511][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[   69.731067][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.733337][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.742139][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.744496][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.857949][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.886659][ T5886] veth0_vlan: entered promiscuous mode
[   69.892601][ T5886] veth1_vlan: entered promiscuous mode
[   69.913694][ T5886] veth0_macvtap: entered promiscuous mode
[   69.919749][ T5886] veth1_macvtap: entered promiscuous mode
[   69.931438][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.939202][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.947379][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.951442][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.955382][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.958915][ T5895] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.679657][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.895406][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.984921][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.097612][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.168589][ T5919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.173244][ T5919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.176932][ T5919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.177620][ T5917] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.179670][ T5919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.186519][ T5919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.190598][ T5919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.194629][ T5919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.198421][ T5919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.201417][ T5919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.209074][ T5923] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.213979][ T5919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.218200][ T5923] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.223236][ T5923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.245552][ T5923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.382261][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.385204][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.542216][ T5914] chnl_net:caif_netlink_parms(): no params data found
[   71.656071][ T5913] chnl_net:caif_netlink_parms(): no params data found
[   71.726221][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.728796][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.731095][ T5914] bridge_slave_0: entered allmulticast mode
[   71.734516][ T5914] bridge_slave_0: entered promiscuous mode
[   71.771019][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.773988][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.777993][ T5914] bridge_slave_1: entered allmulticast mode
[   71.781958][ T5914] bridge_slave_1: entered promiscuous mode
[   71.849136][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   71.885097][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.893977][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.898982][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.901987][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.905612][ T5913] bridge_slave_0: entered allmulticast mode
[   71.909383][ T5913] bridge_slave_0: entered promiscuous mode
[   71.913726][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.916769][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.919548][ T5913] bridge_slave_1: entered allmulticast mode
[   71.922320][ T5913] bridge_slave_1: entered promiscuous mode
[   72.020135][ T5914] team0: Port device team_slave_0 added
[   72.026380][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.037214][ T5914] team0: Port device team_slave_1 added
[   72.041641][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.096528][ T5913] team0: Port device team_slave_0 added
[   72.130169][ T5913] team0: Port device team_slave_1 added
[   72.133432][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.136632][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.138938][ T5915] bridge_slave_0: entered allmulticast mode
[   72.142068][ T5915] bridge_slave_0: entered promiscuous mode
[   72.146356][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.149322][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.152554][ T5915] bridge_slave_1: entered allmulticast mode
[   72.156894][ T5915] bridge_slave_1: entered promiscuous mode
[   72.182916][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.186868][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.195569][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.200269][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.202770][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.212982][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.245311][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.247992][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.257403][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.262101][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.266101][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.275779][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.283144][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.289264][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.379839][ T5915] team0: Port device team_slave_0 added
[   72.385737][ T5915] team0: Port device team_slave_1 added
[   72.403264][ T5914] hsr_slave_0: entered promiscuous mode
[   72.406142][ T5914] hsr_slave_1: entered promiscuous mode
[   72.408323][ T5914] debugfs: 'hsr0' already exists in 'hsr'
[   72.410198][ T5914] Cannot create hsr debugfs directory
[   72.457836][ T5913] hsr_slave_0: entered promiscuous mode
[   72.460731][ T5913] hsr_slave_1: entered promiscuous mode
[   72.463576][ T5913] debugfs: 'hsr0' already exists in 'hsr'
[   72.466511][ T5913] Cannot create hsr debugfs directory
[   72.470372][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.472824][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.481898][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.507778][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.510152][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.519042][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.609281][ T5915] hsr_slave_0: entered promiscuous mode
[   72.612539][ T5915] hsr_slave_1: entered promiscuous mode
[   72.615512][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[   72.617395][ T5915] Cannot create hsr debugfs directory
[   72.851382][ T5914] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.867697][ T5914] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.876698][ T5914] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.887771][ T5914] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.962078][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.979905][ T5914] 8021q: adding VLAN 0 to HW filter on device team0
[   72.988062][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.990780][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.003259][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.006321][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.149462][   T13] bridge_slave_1: left allmulticast mode
[   73.152047][   T13] bridge_slave_1: left promiscuous mode
[   73.162689][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.169840][   T13] bridge_slave_0: left allmulticast mode
[   73.171570][   T13] bridge_slave_0: left promiscuous mode
[   73.173357][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.228241][ T5923] Bluetooth: hci1: command tx timeout
[   73.297456][ T5920] Bluetooth: hci0: command tx timeout
[   73.300052][ T5923] Bluetooth: hci2: command tx timeout
[   73.477978][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.485693][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.490282][   T13] bond0 (unregistering): Released all slaves
[   73.558710][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.597341][   T13] hsr_slave_0: left promiscuous mode
[   73.599815][   T13] hsr_slave_1: left promiscuous mode
[   73.601977][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.605464][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.609080][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.611943][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.633899][   T13] veth1_macvtap: left promiscuous mode
[   73.638791][   T13] veth0_macvtap: left promiscuous mode
[   73.641099][   T13] veth1_vlan: left promiscuous mode
[   73.642992][   T13] veth0_vlan: left promiscuous mode
[   74.016486][   T13] team0 (unregistering): Port device team_slave_1 removed
[   74.046485][   T13] team0 (unregistering): Port device team_slave_0 removed
[   74.428104][ T5914] veth0_vlan: entered promiscuous mode
[   74.460881][ T5914] veth1_vlan: entered promiscuous mode
[   74.497586][ T5914] veth0_macvtap: entered promiscuous mode
[   74.507652][ T5914] veth1_macvtap: entered promiscuous mode
[   74.547089][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.553923][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.587977][ T5747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.608274][ T5747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.618324][ T5747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.633916][ T5747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.704872][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.707403][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.771759][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.778915][ T5915] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.785263][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.890969][ T5915] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.909375][ T5915] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.938565][ T5915] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.123965][ T5913] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   75.170071][ T5913] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   75.200066][ T5913] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   75.226918][ T5913] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   75.298529][ T5923] Bluetooth: hci1: command tx timeout
[   75.386550][ T5920] Bluetooth: hci0: command tx timeout
[   75.389429][ T5923] Bluetooth: hci2: command tx timeout
[   75.395421][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.418447][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   75.450779][  T684] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.453692][  T684] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.462589][  T684] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.465539][  T684] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.481626][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.551838][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.562136][ T5913] 8021q: adding VLAN 0 to HW filter on device team0
[   75.571547][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   75.600013][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.602898][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.621296][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.624408][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.811731][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.873533][ T5915] veth0_vlan: entered promiscuous mode
[   75.886697][ T5915] veth1_vlan: entered promiscuous mode
[   75.953203][ T5915] veth0_macvtap: entered promiscuous mode
[   75.960749][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.979455][ T5915] veth1_macvtap: entered promiscuous mode
[   75.995504][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'.
[   76.047215][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.063054][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.080419][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.085474][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.092044][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.097455][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.106013][ T5913] veth0_vlan: entered promiscuous mode
[   76.130041][ T5913] veth1_vlan: entered promiscuous mode
[   76.223070][ T5913] veth0_macvtap: entered promiscuous mode
[   76.230596][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.233130][ T5913] veth1_macvtap: entered promiscuous mode
[   76.237209][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.275237][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.278589][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.279052][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.288942][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.301003][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.305969][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.309709][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.316731][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.403802][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.410866][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.466160][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.469304][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.543172][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.31'.
[   76.597870][ T6018] netlink: 68 bytes leftover after parsing attributes in process `syz.1.31'.
[   77.374788][ T5923] Bluetooth: hci1: command tx timeout
[   77.455681][ T5920] Bluetooth: hci0: command tx timeout
[   77.457732][ T5923] Bluetooth: hci2: command tx timeout
[   77.495896][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.632903][ T6070] tipc: Started in network mode
[   77.638077][ T6070] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[   77.644666][ T6070] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   77.983283][ T6091] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET)
[   77.991642][ T6091] veth1_to_bond: entered allmulticast mode
[   77.997054][ T6091] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.006489][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[   78.027671][ T6091] bond0: (slave bond_slave_1): Releasing backup interface
[   78.042832][ T6091] veth1_to_bond (unregistering): left allmulticast mode
[   78.240252][ T6099] Bluetooth: MGMT ver 1.23
[   78.999675][ T6123] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   79.244481][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.87'.
[   79.454627][ T5923] Bluetooth: hci1: command tx timeout
[   79.545472][ T5920] Bluetooth: hci0: command tx timeout
[   79.547734][ T5923] Bluetooth: hci2: command tx timeout
[   79.637160][ T6163] netlink: 'syz.1.98': attribute type 9 has an invalid length.
[   79.642313][ T6163] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.98'.
[   79.804145][ T6171] netlink: 88 bytes leftover after parsing attributes in process `syz.2.103'.
[   80.350025][ T6201] netlink: 48 bytes leftover after parsing attributes in process `syz.2.115'.
[   80.448495][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[   80.564322][ T6209] netlink: 'syz.1.119': attribute type 4 has an invalid length.
[   80.579846][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.122'.
[   80.590322][ T6209] netlink: 'syz.1.119': attribute type 4 has an invalid length.
[   80.894220][ T6228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.129'.
[   80.914479][ T6228] unsupported nlmsg_type 40
[   81.221496][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[   81.271448][ T6247] Zero length message leads to an empty skb
[   81.614979][ T5923] Bluetooth: hci2: command tx timeout
[   82.508531][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'.
[   82.657335][ T6287] trusted_key: syz.0.154 sent an empty control message without MSG_MORE.
[   83.037164][ T6306] netlink: 3 bytes leftover after parsing attributes in process `syz.0.160'.
[   83.053229][ T6306] batadv1: entered promiscuous mode
[   83.056652][ T6306] batadv1: entered allmulticast mode
[   83.288093][ T5293] udevd[5293]: worker [5854] terminated by signal 33 (Unknown signal 33)
[   83.293548][ T5293] udevd[5293]: worker [5854] failed while handling '/devices/virtual/net/lapb6/queues/tx-0'
[   83.305848][ T5293] udevd[5293]: worker [5876] terminated by signal 33 (Unknown signal 33)
[   83.308571][ T5293] udevd[5293]: worker [5876] failed while handling '/devices/virtual/net/lapb6/queues/rx-0'
[   83.339223][ T6312] sctp: [Deprecated]: syz.1.162 (pid 6312) Use of int in maxseg socket option.
[   83.339223][ T6312] Use struct sctp_assoc_value instead
[   83.490289][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'.
[   83.508554][ T6316] warning: `syz.1.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.652715][ T6322] tap0: tun_chr_ioctl cmd 1074025677
[   83.655336][ T6322] tap0: linktype set to 800
[   83.933764][ T6338] tipc: Started in network mode
[   83.944444][ T6338] tipc: Node identity 12756436f4ac, cluster identity 4711
[   83.947732][ T6338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.957104][ T6338] syzkaller0: entered promiscuous mode
[   83.971752][ T6338] syzkaller0: entered allmulticast mode
[   84.001782][ T6343] TCP: TCP_TX_DELAY enabled
[   84.009211][ T6343] syz_tun: entered allmulticast mode
[   84.029052][ T6338] tipc: Resetting bearer <eth:syzkaller0>
[   84.033501][ T6342] syz_tun: left allmulticast mode
[   84.038270][ T6335] tipc: Resetting bearer <eth:syzkaller0>
[   84.052743][ T6335] tipc: Disabling bearer <eth:syzkaller0>
[   85.300287][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'.
[   85.403673][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'.
[   85.547398][ T6403] Driver unsupported XDP return value 0 on prog  (id 36) dev N/A, expect packet loss!
[   85.687010][ T6412] IPv6: sit1: Disabled Multicast RS
[   85.888155][ T6423] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   86.091573][ T6440] netlink: 'syz.2.218': attribute type 2 has an invalid length.
[   86.102356][ T6440] netlink: 244 bytes leftover after parsing attributes in process `syz.2.218'.
[   86.473937][ T6469] netlink: 'syz.1.233': attribute type 1 has an invalid length.
[   86.749034][  T794] cfg80211: failed to load regulatory.db
[   86.751102][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'.
[   86.916583][ T6491] can: request_module (can-proto-0) failed.
[   87.241760][ T6502] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.265926][ T6502] bond0: (slave bond1): Enslaving as an active interface with an up link
[   87.452489][ T6508] netlink: 72 bytes leftover after parsing attributes in process `syz.2.250'.
[   87.456876][ T6508] netlink: 72 bytes leftover after parsing attributes in process `syz.2.250'.
[   88.058495][ T6526] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.258'.
[   88.133543][ T6533] tipc: Started in network mode
[   88.136976][ T6533] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   88.141459][ T6533] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[   88.292801][ T6543] syz_tun: refused to change device tx_queue_len
[   89.256077][ T5311] tipc: Node number set to 10136234
[   89.771771][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'.
[   89.853352][ T6588] sctp: [Deprecated]: syz.1.282 (pid 6588) Use of struct sctp_assoc_value in delayed_ack socket option.
[   89.853352][ T6588] Use struct sctp_sack_info instead
[   90.535836][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.300'.
[   90.854633][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'.
[   90.870238][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'.
[   91.367873][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'.
[   91.387467][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'.
[   91.480562][ T6687] netlink: 96 bytes leftover after parsing attributes in process `syz.0.331'.
[   91.953476][ T6724] netlink: 300 bytes leftover after parsing attributes in process `syz.0.348'.
[   92.529154][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   92.574439][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'.
[   92.781951][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[   92.882804][ T6790] pim6reg: entered allmulticast mode
[   92.900628][ T6790] pim6reg: left allmulticast mode
[   93.561122][ T6810] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.576655][ T6810] syzkaller0: entered promiscuous mode
[   93.579281][ T6810] syzkaller0: entered allmulticast mode
[   93.608861][ T6810] tipc: Resetting bearer <eth:syzkaller0>
[   93.620195][ T6809] tipc: Resetting bearer <eth:syzkaller0>
[   93.634986][ T6809] tipc: Disabling bearer <eth:syzkaller0>
[   93.953835][ T6822] erspan0: entered promiscuous mode
[   93.958436][ T6822] macsec1: entered promiscuous mode
[   93.975311][ T6822] erspan0: left promiscuous mode
[   93.986262][ T6824] ieee802154 phy0 wpan0: encryption failed: -90
[   94.019868][ T6826] syz.0.387 (6826) used greatest stack depth: 18768 bytes left
[   94.076013][ T6830] netlink: 232 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.359815][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.363574][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.438233][ T6836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.446026][ T6836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.487257][ T6836] tipc: Resetting bearer <eth:ipvlan1>
[   94.565128][ T5747] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.569159][ T5747] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.599958][ T5747] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.608934][ T5747] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.756342][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'.
[   94.760465][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'.
[   94.767179][ T6861] netlink: 'syz.0.404': attribute type 13 has an invalid length.
[   95.780270][ T6905] openvswitch: netlink: Missing key (keys=40, expected=80)
[   96.236088][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.239100][ T6917] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.509351][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.538520][ T6917] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.101870][ T6921] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.126215][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.135412][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.143366][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.154779][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.390286][ T6958] netlink: 'syz.2.441': attribute type 15 has an invalid length.
[   97.991864][ T6985] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.454'.
[   98.108787][ T6992] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   98.318109][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   99.258098][ T7037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.474'.
[   99.523128][ T7054] netlink: 'syz.1.477': attribute type 13 has an invalid length.
[   99.528665][ T7054] netlink: 'syz.1.477': attribute type 17 has an invalid length.
[   99.758041][ T7069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.349018][ T7054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.416945][  T794] IPVS: starting estimator thread 0...
[  100.504509][ T7080] IPVS: using max 64 ests per chain, 153600 per kthread
[  100.669994][ T7092] netlink: 100 bytes leftover after parsing attributes in process `syz.0.491'.
[  101.230641][ T7102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'.
[  101.295976][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'.
[  101.338620][ T7107] netlink: 'syz.1.500': attribute type 4 has an invalid length.
[  101.410730][ T7111] netlink: 'syz.2.503': attribute type 3 has an invalid length.
[  101.771084][ T7125] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  102.456367][ T7172] netlink: 'syz.1.531': attribute type 30 has an invalid length.
[  102.483305][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'.
[  102.648855][ T7178] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.652227][ T7178] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.750405][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.539'.
[  102.847243][ T7194] netlink: 'syz.0.541': attribute type 1 has an invalid length.
[  102.849458][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.850671][ T7194] netlink: 224 bytes leftover after parsing attributes in process `syz.0.541'.
[  102.869912][ T7178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.034294][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.037878][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.078199][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.081716][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.173519][ T7205] netlink: 'syz.1.547': attribute type 5 has an invalid length.
[  103.222051][ T7210] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'.
[  103.350484][ T7218] geneve3: entered promiscuous mode
[  103.360105][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  103.363387][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  103.374688][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  103.378094][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  103.428867][ T7227] sctp: [Deprecated]: syz.1.556 (pid 7227) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.428867][ T7227] Use struct sctp_sack_info instead
[  103.513610][ T7230] netlink: 'syz.1.558': attribute type 9 has an invalid length.
[  103.515101][ T7232] netlink: 'syz.2.559': attribute type 58 has an invalid length.
[  103.519853][ T7232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.559'.
[  103.525713][ T7230] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.558'.
[  103.691233][ T7240] ieee802154 phy0 wpan0: encryption failed: -22
[  103.817147][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.564'.
[  103.820327][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'.
[  103.823347][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.564'.
[  103.836076][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.564'.
[  104.015698][ T7250] netlink: 'syz.1.567': attribute type 11 has an invalid length.
[  104.210949][ T7258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.221527][ T7258] syzkaller0: entered promiscuous mode
[  104.227404][ T7258] syzkaller0: entered allmulticast mode
[  104.233643][ T7258] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  104.249416][ T7258] tipc: Resetting bearer <eth:syzkaller0>
[  104.265483][ T7257] tipc: Resetting bearer <eth:syzkaller0>
[  104.280673][ T7257] tipc: Disabling bearer <eth:syzkaller0>
[  104.401980][ T7271] netlink: 'syz.0.575': attribute type 8 has an invalid length.
[  104.828912][ T7290] netlink: 'syz.2.584': attribute type 12 has an invalid length.
[  104.831980][ T7290] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.584'.
[  104.835294][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'.
[  105.023406][ T7302] vlan2: entered promiscuous mode
[  105.027004][ T7302] syz_tun: entered promiscuous mode
[  105.439032][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.601'.
[  105.474128][ T7329] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  105.883969][ T7374] ..0: renamed from hsr0
[  105.896685][ T7374] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.904219][ T7374] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  105.916940][ T7374] ..0: entered allmulticast mode
[  105.919048][ T7374] hsr_slave_0: entered allmulticast mode
[  105.936734][ T7374] hsr_slave_1: entered allmulticast mode
[  105.940185][ T7374] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  106.746884][ T7371] syz.0.624: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  106.753568][ T7371] CPU: 0 UID: 0 PID: 7371 Comm: syz.0.624 Not tainted syzkaller #0 PREEMPT(full) 
[  106.753580][ T7371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  106.753586][ T7371] Call Trace:
[  106.753592][ T7371]  <TASK>
[  106.753597][ T7371]  dump_stack_lvl+0x189/0x250
[  106.753625][ T7371]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.753636][ T7371]  ? __pfx__printk+0x10/0x10
[  106.753664][ T7371]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  106.753711][ T7371]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  106.753722][ T7371]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  106.753732][ T7371]  warn_alloc+0x214/0x310
[  106.753750][ T7371]  ? __pfx_warn_alloc+0x10/0x10
[  106.753766][ T7371]  ? __get_vm_area_node+0x28f/0x300
[  106.753779][ T7371]  ? hash_netport4_resize+0x235/0x1b60
[  106.753793][ T7371]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  106.753818][ T7371]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  106.753832][ T7371]  ? rcu_is_watching+0x15/0xb0
[  106.753842][ T7371]  ? hash_netport4_resize+0x235/0x1b60
[  106.753852][ T7371]  ? hash_netport4_resize+0x235/0x1b60
[  106.753862][ T7371]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  106.753876][ T7371]  ? hash_netport4_resize+0x235/0x1b60
[  106.753889][ T7371]  hash_netport4_resize+0x235/0x1b60
[  106.753898][ T7371]  ? hash_netport4_uadt+0xc97/0xf30
[  106.753910][ T7371]  ? __pfx_hash_netport4_add+0x10/0x10
[  106.753919][ T7371]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  106.753938][ T7371]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  106.753957][ T7371]  call_ad+0x44e/0xb00
[  106.753978][ T7371]  ? __pfx_call_ad+0x10/0x10
[  106.754002][ T7371]  ? __nla_parse+0x40/0x60
[  106.754013][ T7371]  ip_set_ad+0x791/0x930
[  106.754029][ T7371]  ? __pfx_ip_set_ad+0x10/0x10
[  106.754074][ T7371]  nfnetlink_rcv_msg+0xb4d/0x1130
[  106.754089][ T7371]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  106.754109][ T7371]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  106.754146][ T7371]  ? __asan_memcpy+0x40/0x70
[  106.754159][ T7371]  ? sched_balance_rq+0x19a0/0x57a0
[  106.754172][ T7371]  ? __lock_acquire+0xab9/0xd20
[  106.754192][ T7371]  netlink_rcv_skb+0x208/0x470
[  106.754202][ T7371]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  106.754215][ T7371]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  106.754228][ T7371]  ? bpf_lsm_capable+0x9/0x20
[  106.754240][ T7371]  ? security_capable+0x7e/0x2e0
[  106.754257][ T7371]  nfnetlink_rcv+0x26a/0x2520
[  106.754269][ T7371]  ? is_bpf_text_address+0x26/0x2b0
[  106.754283][ T7371]  ? kernel_text_address+0xa5/0xe0
[  106.754295][ T7371]  ? __kernel_text_address+0xd/0x40
[  106.754311][ T7371]  ? unwind_get_return_address+0x4d/0x90
[  106.754322][ T7371]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  106.754333][ T7371]  ? arch_stack_walk+0xfc/0x150
[  106.754350][ T7371]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  106.754363][ T7371]  ? stack_depot_save_flags+0x40/0x860
[  106.754376][ T7371]  ? __lock_acquire+0xab9/0xd20
[  106.754400][ T7371]  ? __lock_acquire+0xab9/0xd20
[  106.754416][ T7371]  ? netlink_deliver_tap+0x2e/0x1b0
[  106.754427][ T7371]  ? netlink_deliver_tap+0x2e/0x1b0
[  106.754438][ T7371]  netlink_unicast+0x82f/0x9e0
[  106.754455][ T7371]  ? __pfx_netlink_unicast+0x10/0x10
[  106.754468][ T7371]  ? netlink_sendmsg+0x642/0xb30
[  106.754475][ T7371]  ? skb_put+0x11b/0x210
[  106.754487][ T7371]  netlink_sendmsg+0x805/0xb30
[  106.754523][ T7371]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.754533][ T7371]  ? aa_sock_msg_perm+0xf1/0x1d0
[  106.754542][ T7371]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  106.754557][ T7371]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.754565][ T7371]  __sock_sendmsg+0x21c/0x270
[  106.754580][ T7371]  ____sys_sendmsg+0x505/0x830
[  106.754594][ T7371]  ? __pfx_____sys_sendmsg+0x10/0x10
[  106.754607][ T7371]  ? import_iovec+0x74/0xa0
[  106.754620][ T7371]  ___sys_sendmsg+0x21f/0x2a0
[  106.754630][ T7371]  ? __pfx____sys_sendmsg+0x10/0x10
[  106.754656][ T7371]  ? __fget_files+0x2a/0x420
[  106.754664][ T7371]  ? __fget_files+0x3a0/0x420
[  106.754675][ T7371]  __x64_sys_sendmsg+0x19b/0x260
[  106.754686][ T7371]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  106.754700][ T7371]  ? rcu_is_watching+0x15/0xb0
[  106.754710][ T7371]  ? do_syscall_64+0xbe/0x3b0
[  106.754724][ T7371]  do_syscall_64+0xfa/0x3b0
[  106.754732][ T7371]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.754741][ T7371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.754749][ T7371]  ? exc_page_fault+0x9f/0xf0
[  106.754757][ T7371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.754765][ T7371] RIP: 0033:0x7f2c60b8ebe9
[  106.754774][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.754781][ T7371] RSP: 002b:00007f2c61a05038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.754790][ T7371] RAX: ffffffffffffffda RBX: 00007f2c60dc5fa0 RCX: 00007f2c60b8ebe9
[  106.754796][ T7371] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005
[  106.754801][ T7371] RBP: 00007f2c60c11e19 R08: 0000000000000000 R09: 0000000000000000
[  106.754806][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  106.754810][ T7371] R13: 00007f2c60dc6038 R14: 00007f2c60dc5fa0 R15: 00007ffd1f1c50c8
[  106.754823][ T7371]  </TASK>
[  106.969004][ T7371] Mem-Info:
[  106.970499][ T7371] active_anon:3933 inactive_anon:0 isolated_anon:0
[  106.970499][ T7371]  active_file:1424 inactive_file:38250 isolated_file:0
[  106.970499][ T7371]  unevictable:1768 dirty:357 writeback:0
[  106.970499][ T7371]  slab_reclaimable:9699 slab_unreclaimable:66420
[  106.970499][ T7371]  mapped:17952 shmem:2441 pagetables:943
[  106.970499][ T7371]  sec_pagetables:0 bounce:0
[  106.970499][ T7371]  kernel_misc_reclaimable:0
[  106.970499][ T7371]  free:276011 free_pcp:22316 free_cma:0
[  106.993435][ T7371] Node 0 active_anon:9152kB inactive_anon:0kB active_file:1028kB inactive_file:136952kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25700kB dirty:32kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4940kB pagetables:1628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  107.006049][ T7371] Node 1 active_anon:6512kB inactive_anon:0kB active_file:4668kB inactive_file:16048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46108kB dirty:1396kB writeback:0kB shmem:4960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6420kB pagetables:2008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  107.023856][ T7371] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  107.033843][ T7371] lowmem_reserve[]: 0 811 811 811 811
[  107.037786][ T7371] Node 0 DMA32 free:288348kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9220kB inactive_anon:0kB active_file:1028kB inactive_file:136952kB unevictable:3536kB writepending:32kB present:1556484kB managed:830880kB mlocked:0kB bounce:0kB free_pcp:39380kB local_pcp:18212kB free_cma:0kB
[  107.049615][ T7371] lowmem_reserve[]: 0 0 0 0 0
[  107.058933][ T7371] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  107.091030][ T7371] lowmem_reserve[]: 0 0 854 854 854
[  107.093439][ T7371] Node 1 Normal free:342128kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6512kB inactive_anon:0kB active_file:4668kB inactive_file:16048kB unevictable:3536kB writepending:1396kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50456kB local_pcp:32236kB free_cma:0kB
[  107.113095][ T7371] lowmem_reserve[]: 0 0 0 0 0
[  107.115199][ T7371] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  107.119589][ T7371] Node 0 DMA32: 1337*4kB (UME) 571*8kB (UM) 276*16kB (UME) 77*32kB (UM) 67*64kB (UME) 40*128kB (UME) 18*256kB (UM) 11*512kB (UM) 10*1024kB (ME) 6*2048kB (UM) 56*4096kB (M) = 288348kB
[  107.126267][ T7371] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  107.132209][ T7371] Node 1 Normal: 625*4kB (UME) 328*8kB (UM) 263*16kB (UM) 555*32kB (UM) 192*64kB (UME) 48*128kB (UME) 18*256kB (UME) 7*512kB (UM) 4*1024kB (UME) 3*2048kB (ME) 68*4096kB (UM) = 342484kB
[  107.138481][ T7371] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  107.142138][ T7371] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  107.145403][ T7371] 42115 total pagecache pages
[  107.146976][ T7371] 0 pages in swap cache
[  107.148416][ T7371] Free swap  = 124996kB
[  107.149831][ T7371] Total swap = 124996kB
[  107.151205][ T7371] 786301 pages RAM
[  107.152670][ T7371] 0 pages HighMem/MovableOnly
[  107.154802][ T7371] 241349 pages reserved
[  107.156438][ T7371] 0 pages cma reserved
[  107.271016][ T7419] validate_nla: 2 callbacks suppressed
[  107.271051][ T7419] netlink: 'syz.2.642': attribute type 6 has an invalid length.
[  107.271196][ T7420] netlink: 'syz.0.644': attribute type 8 has an invalid length.
[  107.516618][ T7438] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  107.550479][ T7440] macvtap1: entered promiscuous mode
[  107.553026][ T7440] erspan0: entered promiscuous mode
[  107.557777][ T7440] macvtap1: entered allmulticast mode
[  107.561173][ T7440] erspan0: entered allmulticast mode
[  107.669384][    T9] IPVS: starting estimator thread 0...
[  107.754898][ T7453] IPVS: using max 45 ests per chain, 108000 per kthread
[  107.833992][ T7463] can: request_module (can-proto-0) failed.
[  107.841456][ T7463] openvswitch: netlink: IP tunnel dst address not specified
[  108.199494][ T7486] netlink: 'syz.1.672': attribute type 1 has an invalid length.
[  108.304477][ T7494] __nla_validate_parse: 17 callbacks suppressed
[  108.304488][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'.
[  108.399563][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'.
[  108.583690][ T7525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.692'.
[  108.906415][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.701'.
[  108.910180][ T7543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  108.913372][ T7543] IPv6: NLM_F_CREATE should be set when creating new route
[  108.916354][ T7543] IPv6: NLM_F_CREATE should be set when creating new route
[  109.085079][ T7551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.705'.
[  109.140246][ T7555] netlink: 'syz.2.707': attribute type 1 has an invalid length.
[  109.338567][ T7572] netlink: 'syz.2.715': attribute type 21 has an invalid length.
[  110.110807][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'.
[  110.181095][ T7609] ip6tnl1: entered promiscuous mode
[  110.199387][ T7609] ip6tnl1: entered allmulticast mode
[  110.206297][ T7609] team0: Device ip6tnl1 is of different type
[  110.902975][ T7628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.737'.
[  111.238491][ T7645] openvswitch: netlink: Multiple metadata blocks provided
[  111.534567][ T7664] nbd0: detected capacity change from 0 to 127
[  111.548374][   T56] block nbd0: Receive control failed (result -32)
[  111.599342][ T7670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.610254][ T7670] syzkaller0: entered promiscuous mode
[  111.612519][ T7670] syzkaller0: entered allmulticast mode
[  111.659609][ T7670] tipc: Resetting bearer <eth:syzkaller0>
[  111.666185][ T7669] tipc: Resetting bearer <eth:syzkaller0>
[  111.698962][ T7669] tipc: Disabling bearer <eth:syzkaller0>
[  111.982121][ T7702] netlink: 'syz.0.771': attribute type 1 has an invalid length.
[  112.099258][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'.
[  112.102850][ T7711] netlink: 34 bytes leftover after parsing attributes in process `syz.2.775'.
[  112.511621][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'.
[  112.577565][ T7740] netlink: 'syz.0.788': attribute type 83 has an invalid length.
[  113.191876][ T7764] netlink: 'syz.0.799': attribute type 3 has an invalid length.
[  113.438859][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'.
[  113.739394][ T7807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'.
[  113.783425][ T7812] netlink: 'syz.1.824': attribute type 28 has an invalid length.
[  114.041394][ T7836] netlink: 96 bytes leftover after parsing attributes in process `syz.2.834'.
[  114.092699][ T7840] tun0: tun_chr_ioctl cmd 1074025672
[  114.102047][ T7840] tun0: ignored: set checksum disabled
[  114.236191][ T7848] netlink: 'syz.2.839': attribute type 1 has an invalid length.
[  114.241455][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'.
[  114.571243][ T7869] nbd: socks must be embedded in a SOCK_ITEM attr
[  114.959516][ T7897] netlink: 'syz.0.863': attribute type 2 has an invalid length.
[  115.120656][ T7908] netlink: 228 bytes leftover after parsing attributes in process `syz.1.867'.
[  115.238993][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'.
[  115.592148][ T7933] netlink: 'syz.1.880': attribute type 13 has an invalid length.
[  116.155698][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'.
[  116.159516][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.891'.
[  116.163654][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.891'.
[  116.168728][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.2.891'.
[  116.177713][ T7966] netlink: 'syz.2.891': attribute type 16 has an invalid length.
[  116.181193][ T7966] netlink: 'syz.2.891': attribute type 17 has an invalid length.
[  116.247067][ T7966] IPv6: NLM_F_REPLACE set, but no existing node found!
[  116.376802][   T33] audit: type=1800 audit(1757375785.978:2): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.894" name="memory.events" dev="tmpfs" ino=1391 res=0 errno=0
[  116.528292][ T7982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.533036][ T7982] syzkaller0: entered promiscuous mode
[  116.538476][ T7982] syzkaller0: entered allmulticast mode
[  116.556869][ T7982] tipc: Resetting bearer <eth:syzkaller0>
[  116.561466][ T7981] tipc: Resetting bearer <eth:syzkaller0>
[  116.576188][ T7981] tipc: Disabling bearer <eth:syzkaller0>
[  117.159793][ T8020] geneve0: entered allmulticast mode
[  117.626216][ T8044] netlink: 'syz.1.930': attribute type 25 has an invalid length.
[  117.629800][ T8044] netlink: 'syz.1.930': attribute type 7 has an invalid length.
[  117.826020][ T8054] macvlan2: entered allmulticast mode
[  117.828105][ T8054] bond0: entered allmulticast mode
[  117.830107][ T8054] bond_slave_0: entered allmulticast mode
[  117.831962][ T8054] bond_slave_1: entered allmulticast mode
[  117.842273][ T8054] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  117.849684][ T8054] bond0: left allmulticast mode
[  117.852189][ T8054] bond_slave_0: left allmulticast mode
[  117.854953][ T8054] bond_slave_1: left allmulticast mode
[  117.990755][ T8067] macvtap1: entered promiscuous mode
[  117.992957][ T8067] dummy0: entered promiscuous mode
[  118.011265][ T8067] macvtap1: entered allmulticast mode
[  118.013789][ T8067] dummy0: entered allmulticast mode
[  118.045155][ T8072] dummy0: left allmulticast mode
[  118.047342][ T8072] dummy0: left promiscuous mode
[  118.420880][ T8102] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  118.958006][ T8137] vxcan2: entered allmulticast mode
[  119.328512][ T8156] netlink: 'syz.0.976': attribute type 1 has an invalid length.
[  119.331590][ T8156] netlink: 'syz.0.976': attribute type 2 has an invalid length.
[  119.549776][ T8169] __nla_validate_parse: 5 callbacks suppressed
[  119.549792][ T8169] netlink: 104 bytes leftover after parsing attributes in process `syz.2.984'.
[  119.616536][ T8172] syzkaller1: entered promiscuous mode
[  119.618849][ T8172] syzkaller1: entered allmulticast mode
[  119.622436][ T8172] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  119.945911][ T8202] netlink: 'syz.1.999': attribute type 2 has an invalid length.
[  119.950361][ T8204] netlink: 'syz.0.1000': attribute type 10 has an invalid length.
[  120.012312][ T8204] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  120.437525][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'.
[  120.547658][ T8248] netlink: 'syz.0.1017': attribute type 1 has an invalid length.
[  120.641575][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1021'.
[  120.958742][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'.
[  120.962816][ T8275] tipc: Enabled bearer <eth:vlan0>, priority 18
[  121.670286][ T8311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1046'.
[  122.074243][   T10] tipc: Node number set to 3873006646
[  122.299106][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'.
[  122.438754][ T8348] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  122.538730][ T8355] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.1065'.
[  122.730983][ T8361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1067'.
[  122.810555][ T8353] infiniband syz0: set down
[  122.813186][ T8353] infiniband syz0: added veth0_vlan
[  122.871152][ T8353] RDS/IB: syz0: added
[  122.873233][ T8353] smc: adding ib device syz0 with port count 1
[  122.875793][ T8353] smc:    ib device syz0 port 1 has no pnetid
[  123.166748][ T8372] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1072'.
[  123.272799][ T8374] syzkaller0: entered promiscuous mode
[  123.276946][ T8374] syzkaller0: entered allmulticast mode
[  123.293774][ T8374] syzkaller0: tun_chr_ioctl cmd 1074025677
[  123.302574][ T8374] syzkaller0: Linktype set failed because interface is up
[  123.480349][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1079'.
[  123.926248][ T8421] : renamed from bond_slave_0
[  124.122446][ T8439] syz_tun: entered allmulticast mode
[  124.131487][ T8439] dvmrp8: entered allmulticast mode
[  124.240482][ T8441] netlink: 'syz.2.1105': attribute type 23 has an invalid length.
[  124.483126][ T8438] syz_tun: left allmulticast mode
[  124.501278][ T8438] dvmrp8: left allmulticast mode
[  124.609989][ T8447] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  124.875555][ T8455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.294985][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1122'.
[  125.432452][ T8489] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1126'.
[  125.692056][ T8505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.695390][ T8507] netlink: zone id is out of range
[  125.696392][ T8505] syzkaller0: entered promiscuous mode
[  125.699963][ T8505] syzkaller0: entered allmulticast mode
[  125.739474][ T8505] tipc: Resetting bearer <eth:syzkaller0>
[  125.746051][ T8504] tipc: Resetting bearer <eth:syzkaller0>
[  125.772406][ T8504] tipc: Disabling bearer <eth:syzkaller0>
[  125.932091][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1139'.
[  126.283316][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'.
[  126.540280][ T8557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.849921][ T8569] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.1156'.
[  127.060905][ T8577] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1160'.
[  127.065671][ T8577] gretap0: entered promiscuous mode
[  127.171297][ T8581] gretap0: left promiscuous mode
[  127.182971][ T8581] ..0: left allmulticast mode
[  127.189600][ T8581] hsr_slave_0: left allmulticast mode
[  127.191977][ T8581] hsr_slave_1: left allmulticast mode
[  127.203270][ T8581] geneve0: left allmulticast mode
[  127.206226][ T8581] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  127.211875][ T8581] geneve3: left promiscuous mode
[  127.225465][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.229329][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.233014][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.239155][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.354455][ T8585] syzkaller1: entered promiscuous mode
[  127.356668][ T8585] syzkaller1: entered allmulticast mode
[  127.521245][ T8592] pim6reg1: entered promiscuous mode
[  127.526631][ T8592] pim6reg1: entered allmulticast mode
[  127.675276][ T8605] IPv6: Can't replace route, no match found
[  127.805436][ T8615] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1179'.
[  127.920565][ T8624] netlink: 'syz.1.1184': attribute type 4 has an invalid length.
[  128.012871][ T8634] netlink: 'syz.1.1187': attribute type 2 has an invalid length.
[  128.037821][ T8634] ave_0: entered promiscuous mode
[  128.093577][ T8636] veth5: entered allmulticast mode
[  128.258489][ T8652] netlink: 'syz.1.1197': attribute type 9 has an invalid length.
[  128.489926][ T8668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1205'.
[  128.538120][ T8670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1206'.
[  128.608586][ T8671] vlan2: entered promiscuous mode
[  128.610984][ T8671] bond0: entered promiscuous mode
[  128.613041][ T8671] bond_slave_0: entered promiscuous mode
[  128.616099][ T8671] bond1: entered promiscuous mode
[  128.656341][ T8666] infiniband syz2: set down
[  128.658600][ T8666] infiniband syz2: added ipvlan0
[  128.700193][ T8666] RDS/IB: syz2: added
[  128.701880][ T8666] smc: adding ib device syz2 with port count 1
[  128.704969][ T8666] smc:    ib device syz2 port 1 has no pnetid
[  129.098777][ T8675] raw_sendmsg: syz.0.1207 forgot to set AF_INET. Fix it!
[  129.211228][ T8682] lo speed is unknown, defaulting to 1000
[  129.213925][ T8682] lo speed is unknown, defaulting to 1000
[  129.218610][ T8682] lo speed is unknown, defaulting to 1000
[  129.227167][ T8682] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  129.243390][ T8682] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  129.272665][ T8682] lo speed is unknown, defaulting to 1000
[  129.281721][ T8682] lo speed is unknown, defaulting to 1000
[  129.286339][ T8682] lo speed is unknown, defaulting to 1000
[  129.341946][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1214'.
[  129.743402][ T8718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.772966][ T8720] openvswitch: netlink: IPv4 tun info is not correct
[  130.383694][ T8756] __nla_validate_parse: 3 callbacks suppressed
[  130.383710][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'.
[  130.413402][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1244'.
[  130.582808][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1249'.
[  130.587392][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1249'.
[  130.590901][ T8766] netlink: 'syz.2.1249': attribute type 6 has an invalid length.
[  130.706910][ T8778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1255'.
[  130.710623][ T8778] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1255'.
[  130.713817][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'.
[  130.755169][ T8782] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  130.943543][ T8800] vti0: entered promiscuous mode
[  130.947856][ T8798] syzkaller0: entered promiscuous mode
[  130.949665][ T8798] syzkaller0: entered allmulticast mode
[  131.238375][ T8821] netlink: 'syz.0.1276': attribute type 2 has an invalid length.
[  131.307383][ T8830] netlink: 'syz.2.1281': attribute type 2 has an invalid length.
[  131.467088][ T8846] netlink: 'syz.2.1289': attribute type 1 has an invalid length.
[  131.514711][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'.
[  131.531704][ T8848] geneve2: entered promiscuous mode
[  131.544714][ T8848] geneve2: entered allmulticast mode
[  131.548694][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.553438][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.565553][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.572327][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.367900][ T8895] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1307'.
[  132.741806][ T8926] openvswitch: netlink: IPv4 tun info is not correct
[  132.822967][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.825825][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.025042][ T8935] syzkaller1: entered promiscuous mode
[  133.027294][ T8935] syzkaller1: entered allmulticast mode
[  133.218360][ T8921] lo speed is unknown, defaulting to 1000
[  133.431391][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1336'.
[  133.487813][   T12] syzkaller0: tun_net_xmit 76
[  133.508823][   T12] syzkaller0: tun_net_xmit 48
[  133.516524][ T5311] syzkaller0: tun_net_xmit 76
[  133.532219][ T8954] syzkaller0: tun_net_xmit 76
[  133.536164][ T8954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.548636][ T8953] tipc: Resetting bearer <eth:syzkaller0>
[  134.544429][ T5311] tipc: Node number set to 20905985
[  135.041722][ T8953] tipc: Disabling bearer <eth:syzkaller0>
[  135.049461][ T8961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.052348][ T8964] syzkaller0: entered promiscuous mode
[  135.060175][ T8964] syzkaller0: entered allmulticast mode
[  135.103548][ T8969] tipc: Resetting bearer <eth:syzkaller0>
[  135.110239][ T8957] tipc: Resetting bearer <eth:syzkaller0>
[  135.158095][ T8957] tipc: Disabling bearer <eth:syzkaller0>
[  135.683554][ T8986] lo speed is unknown, defaulting to 1000
[  136.090657][ T9021] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  136.096301][ T9021] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  136.369429][ T9030] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1368'.
[  137.284297][ T9077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1390'.
[  137.878451][ T9092] netlink: 'syz.1.1397': attribute type 3 has an invalid length.
[  138.386288][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'.
[  138.997817][ T9119] syzkaller1: entered promiscuous mode
[  139.000223][ T9119] syzkaller1: entered allmulticast mode
[  139.057376][ T9121] dvmrp1: tun_chr_ioctl cmd 1074025677
[  139.059475][ T9121] dvmrp1: linktype set to 768
[  139.219804][ T9130] bridge1: entered allmulticast mode
[  139.298869][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'.
[  139.488448][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'.
[  139.915299][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'.
[  140.987171][ T9249] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  141.076706][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'.
[  141.156793][ T9265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1476'.
[  142.234273][   T13] nci: nci_rx_work: unknown MT 0x1
[  143.081784][ T9318] netlink: zone id is out of range
[  143.083685][ T9318] netlink: zone id is out of range
[  143.086073][ T9318] netlink: zone id is out of range
[  143.087903][ T9318] netlink: zone id is out of range
[  143.089542][ T9318] netlink: zone id is out of range
[  143.091510][ T9318] netlink: zone id is out of range
[  143.093459][ T9318] netlink: zone id is out of range
[  143.096760][ T9318] netlink: zone id is out of range
[  143.098389][ T9318] netlink: zone id is out of range
[  143.099986][ T9318] netlink: zone id is out of range
[  143.473798][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'.
[  143.483247][ T9350] bridge_slave_1: left allmulticast mode
[  143.487899][ T9350] bridge_slave_1: left promiscuous mode
[  143.490471][ T9350] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.499138][ T9350] bridge_slave_0: left allmulticast mode
[  143.501408][ T9350] bridge_slave_0: left promiscuous mode
[  143.510787][ T9350] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.659279][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1519'.
[  143.901098][ T9376] netlink: 'syz.2.1525': attribute type 4 has an invalid length.
[  144.040202][ T9383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1529'.
[  144.209323][ T9394] : entered promiscuous mode
[  144.296900][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'.
[  144.359386][ T9414] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1542'.
[  144.395154][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  144.419757][ T9420] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  144.676866][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1549'.
[  144.680242][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1549'.
[  144.683659][ T9432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1549'.
[  144.687517][ T9432] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1549'.
[  144.691908][ T9432] netlink: 'syz.0.1549': attribute type 10 has an invalid length.
[  144.698643][ T9432] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  145.133870][ T9430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'.
[  145.275788][ T9440] netlink: 'syz.0.1554': attribute type 1 has an invalid length.
[  145.278714][ T9440] netlink: 'syz.0.1554': attribute type 3 has an invalid length.
[  145.558565][ T9468] netlink: 'syz.2.1566': attribute type 7 has an invalid length.
[  146.460496][ T9499] bond0: (slave netdevsim0): Releasing backup interface
[  148.269913][ T9573] netlink: 'syz.1.1611': attribute type 1 has an invalid length.
[  149.308168][ T9569] netlink: 'syz.0.1609': attribute type 41 has an invalid length.
[  149.323996][ T9582] __nla_validate_parse: 10 callbacks suppressed
[  149.324014][ T9582] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1615'.
[  149.496401][ T9602] net_ratelimit: 13 callbacks suppressed
[  149.496431][ T9602] netlink: zone id is out of range
[  149.500222][ T9602] netlink: zone id is out of range
[  149.502372][ T9602] netlink: zone id is out of range
[  149.507339][ T9602] netlink: zone id is out of range
[  149.509424][ T9602] netlink: zone id is out of range
[  149.511492][ T9602] netlink: zone id is out of range
[  149.513767][ T9602] netlink: zone id is out of range
[  149.521029][ T9602] netlink: zone id is out of range
[  149.523427][ T9602] netlink: zone id is out of range
[  149.527734][ T9602] netlink: zone id is out of range
[  149.827864][ T9630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1637'.
[  149.871833][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'.
[  150.803007][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'.
[  150.822118][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'.
[  151.031458][ T9677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.035113][ T9677] syzkaller0: entered promiscuous mode
[  151.037303][ T9677] syzkaller0: entered allmulticast mode
[  151.056103][ T9677] tipc: Resetting bearer <eth:syzkaller0>
[  151.059768][ T9676] tipc: Resetting bearer <eth:syzkaller0>
[  151.073214][ T9676] tipc: Disabling bearer <eth:syzkaller0>
[  151.178952][ T9682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.182905][ T9682] syzkaller0: entered promiscuous mode
[  151.185208][ T9682] syzkaller0: entered allmulticast mode
[  151.190042][ T9682] tipc: Resetting bearer <eth:syzkaller0>
[  151.195204][ T9680] tipc: Resetting bearer <eth:syzkaller0>
[  151.204875][ T9680] tipc: Disabling bearer <eth:syzkaller0>
[  151.219440][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1662'.
[  151.222561][ T9687] vlan0: entered promiscuous mode
[  151.523888][ T9730] netlink: 'syz.0.1678': attribute type 3 has an invalid length.
[  151.950842][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1696'.
[  151.955253][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1696'.
[  151.986197][ T9769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  152.001939][ T9769] bond0: (slave rose0): Enslaving as an active interface with an up link
[  152.008795][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'.
[  152.401537][ T9734] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  152.406186][ T9734] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  152.422371][ T9734] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  152.426170][ T9734] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  152.668330][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'.
[  152.723363][ T9802] netlink: 'syz.2.1713': attribute type 11 has an invalid length.
[  153.729723][ T9854] lo speed is unknown, defaulting to 1000
[  153.742290][ T9873] pim6reg1: entered promiscuous mode
[  153.743995][ T9873] pim6reg1: entered allmulticast mode
[  153.926472][   T10] IPVS: starting estimator thread 0...
[  154.015443][ T9879] IPVS: using max 54 ests per chain, 129600 per kthread
[  154.336025][ T9901] __nla_validate_parse: 6 callbacks suppressed
[  154.336046][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'.
[  154.362610][ T9901] bridge_slave_1: left allmulticast mode
[  154.371318][ T9901] bridge_slave_1: left promiscuous mode
[  154.375952][ T9901] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.382469][ T9901] bridge_slave_0: left allmulticast mode
[  154.385308][ T9901] bridge_slave_0: left promiscuous mode
[  154.387803][ T9901] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.441122][ T9901] bond0: (slave bridge0): Releasing backup interface
[  154.789361][ T9920] net_ratelimit: 12 callbacks suppressed
[  154.789382][ T9920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.911610][ T9926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1764'.
[  155.245526][ T9946] vlan2: entered promiscuous mode
[  155.247796][ T9946] vlan2: entered allmulticast mode
[  155.258964][ T9946] hsr_slave_1: entered allmulticast mode
[  155.334695][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'.
[  155.770133][   T33] audit: type=1800 audit(1757375825.368:3): pid=9972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1784" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=2742 res=0 errno=0
[  155.926827][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'.
[  155.969817][ T9941] lo speed is unknown, defaulting to 1000
[  156.210461][ T9997] : entered promiscuous mode
[  156.517695][T10015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.530133][T10015] syzkaller0: entered promiscuous mode
[  156.532297][T10015] syzkaller0: entered allmulticast mode
[  156.612611][T10015] tipc: Resetting bearer <eth:syzkaller0>
[  156.621392][T10025] netlink: del zone limit has 4 unknown bytes
[  156.628352][T10014] tipc: Resetting bearer <eth:syzkaller0>
[  156.643935][T10014] tipc: Disabling bearer <eth:syzkaller0>
[  156.778818][T10040] xt_socket: unknown flags 0xd0
[  157.189397][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'.
[  157.570835][T10105] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1847'.
[  157.947816][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'.
[  157.951373][T10115] netlink: 'syz.2.1852': attribute type 1 has an invalid length.
[  159.136069][T10165] netlink: 'syz.2.1875': attribute type 1 has an invalid length.
[  159.616451][T10173] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.653116][T10173] syzkaller0: entered promiscuous mode
[  159.655257][T10173] syzkaller0: entered allmulticast mode
[  159.657392][T10173] tipc: Resetting bearer <eth:syzkaller0>
[  159.690332][   T40] tipc: Resetting bearer <eth:syzkaller0>
[  159.693305][T10172] tipc: Resetting bearer <eth:syzkaller0>
[  160.149501][T10181] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1881'.
[  161.054291][T10172] tipc: Disabling bearer <eth:syzkaller0>
[  161.569499][T10217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1895'.
[  161.750513][T10225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.971970][T10236] netlink: 'syz.0.1905': attribute type 1 has an invalid length.
[  161.975844][T10236] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1905'.
[  162.229631][T10255] dvmrp1: tun_chr_ioctl cmd 1074025677
[  162.234754][T10255] dvmrp1: linktype set to 805
[  162.480631][T10286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1925'.
[  162.531078][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'.
[  162.538260][T10290] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.551279][T10290] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.630988][T10300] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  162.803414][ T5747] syzkaller0: tun_net_xmit 76
[  162.807885][ T5747] syzkaller0: tun_net_xmit 48
[  162.824519][ T5311] syzkaller0: tun_net_xmit 76
[  162.824893][T10310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.826399][ T5311] syzkaller0: tun_net_xmit 76
[  162.898235][T10309] tipc: Resetting bearer <eth:syzkaller0>
[  163.014677][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'.
[  164.048105][T10309] tipc: Disabling bearer <eth:syzkaller0>
[  164.394903][T10358] syzkaller1: entered promiscuous mode
[  164.396843][T10358] syzkaller1: entered allmulticast mode
[  164.730222][T10362] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  164.849292][T10360] lo speed is unknown, defaulting to 1000
[  166.805076][T10449] block nbd1: server does not support multiple connections per device.
[  166.815089][T10449] block nbd1: shutting down sockets
[  166.923525][T10463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2008'.
[  167.927192][T10506] lo speed is unknown, defaulting to 1000
[  168.032945][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2034'.
[  168.046907][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'.
[  168.137225][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2034'.
[  168.141136][T10526] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  168.144397][T10526] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2036'.
[  168.229967][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'.
[  168.267123][   T56] block nbd1: Receive control failed (result -107)
[  168.314295][T10530] nbd1: detected capacity change from 0 to 32
[  168.482042][T10539] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  168.491539][T10538] IPVS: stopping backup sync thread 10539 ...
[  168.509040][T10538] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2041'.
[  168.520664][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2041'.
[  168.554584][T10538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2041'.
[  168.945888][T10555] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2047'.
[  171.182425][T10701] macvtap2: entered promiscuous mode
[  171.184772][T10701] erspan0: entered promiscuous mode
[  171.186808][T10701] macvtap2: entered allmulticast mode
[  171.188874][T10701] erspan0: entered allmulticast mode
[  172.259823][T10729] __nla_validate_parse: 7 callbacks suppressed
[  172.259839][T10729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2126'.
[  172.417623][T10741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2131'.
[  172.448020][T10741] bond1: entered promiscuous mode
[  172.450869][T10741] 8021q: adding VLAN 0 to HW filter on device bond1
[  172.453790][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'.
[  172.548569][T10741] bond1 (unregistering): Released all slaves
[  172.682388][T10754] bond1: entered promiscuous mode
[  172.686914][T10754] 8021q: adding VLAN 0 to HW filter on device bond1
[  172.721835][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'.
[  172.729995][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'.
[  172.786920][T10766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2142'.
[  172.807778][T10771] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2143'.
[  173.000432][T10786] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2149'.
[  173.446322][   T33] audit: type=1800 audit(1757375843.048:4): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2164" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3407 res=0 errno=0
[  173.469650][   T33] audit: type=1804 audit(1757375843.058:5): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2164" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3407 res=1 errno=0
[  173.733488][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'.
[  173.757750][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'.
[  173.893880][T10853] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  173.979944][T10859] bond0: (slave gretap0): Error: Device type is different from other slaves
[  174.005056][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.008248][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.218745][T10873] netlink: 'syz.1.2188': attribute type 1 has an invalid length.
[  174.221494][T10873] netlink: 'syz.1.2188': attribute type 2 has an invalid length.
[  174.234312][T10873] netlink: 'syz.1.2188': attribute type 1 has an invalid length.
[  174.318635][T10877] nbd: nbd0 already in use
[  174.320878][T10877] block nbd0: NBD_DISCONNECT
[  174.322777][T10877] block nbd0: Send disconnect failed -32
[  174.329048][T10877] block nbd0: shutting down sockets
[  174.399070][T10877] bond2: entered promiscuous mode
[  174.401726][T10877] bond2: entered allmulticast mode
[  174.403980][T10877] 8021q: adding VLAN 0 to HW filter on device bond2
[  175.092397][T10916] netlink: 'syz.1.2209': attribute type 1 has an invalid length.
[  175.159290][T10916] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.175816][T10920] bond1: (slave gretap2): making interface the new active one
[  175.180151][T10920] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  175.311073][T10929] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  176.172797][T10984] bond0: (slave bond1): Error -95 calling ndo_bpf
[  176.256739][T10984] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.260691][T10984] bond0: (slave bond1): Error -95 calling ndo_bpf
[  176.266219][T10984] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  176.399853][T10996] batadv_slave_1: entered promiscuous mode
[  176.402750][T10995] batadv_slave_1: left promiscuous mode
[  176.519903][T11008] macvlan3: entered allmulticast mode
[  176.526415][T11008] syz_tun: entered allmulticast mode
[  176.531346][T11008] team0: Port device macvlan3 added
[  176.838943][T11037] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  177.373092][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  177.384429][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  177.396933][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  177.507949][T11105] netlink: 'syz.2.2296': attribute type 1 has an invalid length.
[  177.510760][T11105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.745845][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  177.784372][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  178.226379][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  178.330352][T11172] netlink: 'syz.2.2327': attribute type 2 has an invalid length.
[  178.334647][T11172] __nla_validate_parse: 8 callbacks suppressed
[  178.334657][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2327'.
[  178.618199][T11200] syzkaller1: entered promiscuous mode
[  178.620359][T11200] syzkaller1: entered allmulticast mode
[  178.793473][T11212] vlan2: entered promiscuous mode
[  178.796395][T11212] team0: entered promiscuous mode
[  178.798720][T11212] team_slave_0: entered promiscuous mode
[  178.801449][T11212] team_slave_1: entered promiscuous mode
[  178.895445][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  178.963605][T11226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2351'.
[  179.185258][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2361'.
[  179.186724][T11246] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2360'.
[  179.579870][T11266] netlink: 'syz.0.2370': attribute type 1 has an invalid length.
[  179.586076][T11266] netlink: 'syz.0.2370': attribute type 4 has an invalid length.
[  179.588904][T11266] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2370'.
[  179.597334][T11266] netlink: 'syz.0.2370': attribute type 1 has an invalid length.
[  179.600426][T11266] netlink: 'syz.0.2370': attribute type 4 has an invalid length.
[  179.603211][T11266] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2370'.
[  179.714018][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'.
[  179.716073][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2378'.
[  179.717723][T11283] netlink: 620 bytes leftover after parsing attributes in process `syz.1.2377'.
[  179.724910][T11283] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2377'.
[  179.929121][T11297] syzkaller0: entered promiscuous mode
[  179.931464][T11297] syzkaller0: entered allmulticast mode
[  181.384340][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  181.545724][ T5747] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  182.987688][T11420] netlink: 'syz.2.2437': attribute type 2 has an invalid length.
[  183.221792][T11434] syzkaller1: entered promiscuous mode
[  183.223579][T11434] syzkaller1: entered allmulticast mode
[  183.488053][T11457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.491463][T11454] __nla_validate_parse: 1 callbacks suppressed
[  183.491480][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'.
[  183.541940][T11457] syzkaller0: entered promiscuous mode
[  183.545062][T11457] syzkaller0: entered allmulticast mode
[  183.548485][T11457] tipc: Resetting bearer <eth:syzkaller0>
[  183.562111][T11456] tipc: Resetting bearer <eth:syzkaller0>
[  184.389264][T11472] Bluetooth: MGMT ver 1.23
[  184.965051][T11456] tipc: Disabling bearer <eth:syzkaller0>
[  185.061967][T11489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.066087][T11489] syzkaller0: entered promiscuous mode
[  185.068399][T11489] syzkaller0: entered allmulticast mode
[  185.108203][T11489] tipc: Resetting bearer <eth:syzkaller0>
[  185.112857][T11487] tipc: Resetting bearer <eth:syzkaller0>
[  185.132730][T11487] tipc: Disabling bearer <eth:syzkaller0>
[  186.135209][T11528] veth11: entered promiscuous mode
[  186.180590][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'.
[  186.199663][T11533] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  186.812316][T11556] netlink: 'syz.2.2498': attribute type 142 has an invalid length.
[  186.971017][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2503'.
[  187.286575][T11584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2510'.
[  187.541003][T11596] ieee802154 phy1 wpan1: encryption failed: -22
[  187.916414][T11595] lo speed is unknown, defaulting to 1000
[  188.213391][T11607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2518'.
[  188.697207][T11629] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2530'.
[  188.700342][T11629] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  188.703534][T11629] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  188.779583][T11634] netlink: 'syz.1.2532': attribute type 10 has an invalid length.
[  188.788845][T11634] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  188.893281][T11644] netlink: 'syz.1.2537': attribute type 3 has an invalid length.
[  188.987048][T11654] netlink: del zone limit has 8 unknown bytes
[  189.098723][T11657] netlink: 'syz.1.2544': attribute type 12 has an invalid length.
[  189.491538][T11693] IPv6: NLM_F_CREATE should be specified when creating new route
[  189.662612][T11711] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  189.668900][T11711] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  189.757306][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'.
[  189.760453][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'.
[  189.771310][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.771324][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'.
[  189.771347][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'.
[  189.775038][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  189.776875][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  189.790565][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  189.794733][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  189.984113][T11729] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.227214][T11743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.234260][T11743] syzkaller0: entered promiscuous mode
[  190.236339][T11743] syzkaller0: entered allmulticast mode
[  190.258975][T11743] tipc: Resetting bearer <eth:syzkaller0>
[  190.264026][T11741] tipc: Resetting bearer <eth:syzkaller0>
[  190.277833][T11745] netlink: 'syz.1.2584': attribute type 21 has an invalid length.
[  190.280613][T11745] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2584'.
[  190.281099][T11741] tipc: Disabling bearer <eth:syzkaller0>
[  190.319889][T11747] netlink: 'syz.1.2585': attribute type 3 has an invalid length.
[  190.322599][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'.
[  190.392606][T11751] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  190.511292][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2591'.
[  190.555423][T11759] batman_adv: batadv0: Adding interface: ipvlan2
[  190.558052][T11759] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.574318][T11759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.579321][T11759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.586608][T11759] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  190.678194][T11771] sock: sock_timestamping_bind_phc: sock not bind to device
[  190.925607][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'.
[  191.008294][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2611'.
[  191.753261][T11814] netlink: 'syz.2.2618': attribute type 3 has an invalid length.
[  192.132427][T11841] netlink: 'syz.1.2631': attribute type 26 has an invalid length.
[  192.586299][T11868] tipc: Disabling bearer <eth:vlan0>
[  193.077504][T11909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.167816][T11919] netlink: 'syz.2.2667': attribute type 21 has an invalid length.
[  193.312880][T11929] vlan2: entered promiscuous mode
[  193.317593][T11929] macvtap0: entered promiscuous mode
[  193.612747][T11947] tun0: tun_chr_ioctl cmd 2147767520
[  194.256689][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.306141][T11958] __nla_validate_parse: 9 callbacks suppressed
[  194.306157][T11958] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2684'.
[  194.312463][T11958] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2684'.
[  194.317097][T11958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2684'.
[  194.747937][T11988] netlink: 'syz.1.2698': attribute type 7 has an invalid length.
[  194.751278][T11988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2698'.
[  195.506887][T12024] netlink: set zone limit has 4 unknown bytes
[  196.969715][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'.
[  197.229979][T12097] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  197.251877][T12099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2749'.
[  197.261036][T12099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2749'.
[  198.082258][T12142] netlink: 'syz.0.2770': attribute type 7 has an invalid length.
[  198.087569][T12142] netlink: 'syz.0.2770': attribute type 8 has an invalid length.
[  198.090808][T12142] netlink: 'syz.0.2770': attribute type 4 has an invalid length.
[  198.093931][T12142] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2770'.
[  198.127696][T12145] rdma_rxe: rxe_newlink: failed to add lo
[  198.162373][T12145] syz_tun: entered promiscuous mode
[  198.187843][T12145] 8021q: adding VLAN 0 to HW filter on device team0
[  198.208019][T12145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.308335][T12160] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2777'.
[  198.320928][T12158] rdma_rxe: rxe_newlink: failed to add veth0_vlan
[  200.200366][T12217] netlink: 'syz.1.2800': attribute type 31 has an invalid length.
[  200.352298][T12202] lo speed is unknown, defaulting to 1000
[  200.377812][T12222] netlink: 'syz.1.2803': attribute type 4 has an invalid length.
[  200.390749][T12222] netlink: 'syz.1.2803': attribute type 4 has an invalid length.
[  200.552170][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[  200.665148][T12236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.988778][T12252] wg1: entered promiscuous mode
[  200.990712][T12252] wg1: entered allmulticast mode
[  201.253156][T12265] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2822'.
[  201.740298][T12294] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2835'.
[  202.021761][T12321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2848'.
[  202.035469][T12321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2848'.
[  202.475998][T12359] ipvlan0: entered promiscuous mode
[  202.703402][T12373] ieee802154 phy1 wpan1: encryption failed: -90
[  203.062826][T12396] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2884'.
[  203.076501][T12396] vlan2: entered allmulticast mode
[  203.078649][T12396] gretap0: entered allmulticast mode
[  203.125725][T12398] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.2885'.
[  203.296382][T12407] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2889'.
[  203.305469][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'.
[  203.311113][T12407] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  203.400958][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2892'.
[  203.848167][T12449] syzkaller0: entered promiscuous mode
[  203.850312][T12449] syzkaller0: entered allmulticast mode
[  204.586746][    C0] TC_ACT_REPEAT abuse ?
[  204.589747][    C0] TC_ACT_REPEAT abuse ?
[  205.339208][T12455] pim6reg: entered allmulticast mode
[  205.341943][T12456] pim6reg: left allmulticast mode
[  205.703585][T12494] netlink: zone id is out of range
[  205.709829][T12494] netlink: zone id is out of range
[  205.792798][T12494] netlink: set zone limit has 4 unknown bytes
[  205.802581][T12499] netlink: del zone limit has 4 unknown bytes
[  206.424786][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  206.702479][T12559] __nla_validate_parse: 1 callbacks suppressed
[  206.702500][T12559] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2946'.
[  207.936618][T12598] netlink: 'syz.1.2961': attribute type 1 has an invalid length.
[  207.963925][T12598] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2961'.
[  208.124025][T12614] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  208.184622][T12620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.212691][T12624] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2975'.
[  208.269381][T12631] ==================================================================
[  208.271924][T12631] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  208.274293][T12631] Read of size 4 at addr ffff888026b1c0c4 by task syz.2.2977/12631
[  208.277453][T12631] 
[  208.278695][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.2.2977 Not tainted syzkaller #0 PREEMPT(full) 
[  208.278711][T12631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.278718][T12631] Call Trace:
[  208.278724][T12631]  <TASK>
[  208.278730][T12631]  dump_stack_lvl+0x189/0x250
[  208.278747][T12631]  ? __kasan_check_byte+0x12/0x40
[  208.278760][T12631]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.278769][T12631]  ? lock_release+0x4b/0x3e0
[  208.278784][T12631]  ? __virt_addr_valid+0x4a5/0x5c0
[  208.278796][T12631]  print_report+0xca/0x240
[  208.278804][T12631]  ? xfrm_alloc_spi+0x570/0xf30
[  208.278815][T12631]  kasan_report+0x118/0x150
[  208.278826][T12631]  ? xfrm_alloc_spi+0x570/0xf30
[  208.278838][T12631]  xfrm_alloc_spi+0x570/0xf30
[  208.278849][T12631]  ? xfrm_alloc_spi+0x2a0/0xf30
[  208.278862][T12631]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  208.278871][T12631]  ? xfrm_find_acq+0x87/0xa0
[  208.278881][T12631]  xfrm_alloc_userspi+0x70b/0xc90
[  208.278897][T12631]  ? apparmor_capable+0x137/0x1b0
[  208.278907][T12631]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  208.278918][T12631]  ? __nla_parse+0x40/0x60
[  208.278926][T12631]  xfrm_user_rcv_msg+0x7a3/0xab0
[  208.278938][T12631]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  208.278955][T12631]  ? __pfx___mutex_trylock_common+0x10/0x10
[  208.278964][T12631]  ? rcu_is_watching+0x15/0xb0
[  208.278972][T12631]  ? trace_contention_end+0x39/0x120
[  208.278981][T12631]  ? __mutex_lock+0x335/0x1350
[  208.278991][T12631]  netlink_rcv_skb+0x208/0x470
[  208.279000][T12631]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  208.279011][T12631]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  208.279022][T12631]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.279030][T12631]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.279038][T12631]  xfrm_netlink_rcv+0x79/0x90
[  208.279048][T12631]  netlink_unicast+0x82f/0x9e0
[  208.279061][T12631]  ? __pfx_netlink_unicast+0x10/0x10
[  208.279072][T12631]  ? netlink_sendmsg+0x642/0xb30
[  208.279079][T12631]  ? skb_put+0x11b/0x210
[  208.279088][T12631]  netlink_sendmsg+0x805/0xb30
[  208.279097][T12631]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.279105][T12631]  ? aa_sock_msg_perm+0xf1/0x1d0
[  208.279112][T12631]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.279121][T12631]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.279129][T12631]  __sock_sendmsg+0x21c/0x270
[  208.279175][T12631]  ____sys_sendmsg+0x505/0x830
[  208.279187][T12631]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.279197][T12631]  ? import_iovec+0x74/0xa0
[  208.279209][T12631]  ___sys_sendmsg+0x21f/0x2a0
[  208.279219][T12631]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.279236][T12631]  ? __fget_files+0x2a/0x420
[  208.279245][T12631]  ? __fget_files+0x3a0/0x420
[  208.279253][T12631]  __x64_sys_sendmsg+0x19b/0x260
[  208.279262][T12631]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.279273][T12631]  ? rcu_is_watching+0x15/0xb0
[  208.279281][T12631]  ? do_syscall_64+0xbe/0x3b0
[  208.279291][T12631]  do_syscall_64+0xfa/0x3b0
[  208.279299][T12631]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.279306][T12631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.279314][T12631]  ? exc_page_fault+0x9f/0xf0
[  208.279323][T12631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.279331][T12631] RIP: 0033:0x7f1eaff8ebe9
[  208.279341][T12631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.279348][T12631] RSP: 002b:00007f1eb0e33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.279357][T12631] RAX: ffffffffffffffda RBX: 00007f1eb01c5fa0 RCX: 00007f1eaff8ebe9
[  208.279363][T12631] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  208.279368][T12631] RBP: 00007f1eb0011e19 R08: 0000000000000000 R09: 0000000000000000
[  208.279373][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.279378][T12631] R13: 00007f1eb01c6038 R14: 00007f1eb01c5fa0 R15: 00007ffec57ba068
[  208.279387][T12631]  </TASK>
[  208.279390][T12631] 
[  208.421181][T12631] Allocated by task 10600:
[  208.423015][T12631]  kasan_save_track+0x3e/0x80
[  208.424929][T12631]  __kasan_slab_alloc+0x6c/0x80
[  208.426880][T12631]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  208.429063][T12631]  xfrm_state_alloc+0x24/0x2f0
[  208.430964][T12631]  __find_acq_core+0x8a7/0x1c00
[  208.432931][T12631]  xfrm_find_acq+0x78/0xa0
[  208.434738][T12631]  xfrm_alloc_userspi+0x6b3/0xc90
[  208.436772][T12631]  xfrm_user_rcv_msg+0x7a3/0xab0
[  208.438781][T12631]  netlink_rcv_skb+0x208/0x470
[  208.440746][T12631]  xfrm_netlink_rcv+0x79/0x90
[  208.442646][T12631]  netlink_unicast+0x82f/0x9e0
[  208.444633][T12631]  netlink_sendmsg+0x805/0xb30
[  208.446562][T12631]  __sock_sendmsg+0x21c/0x270
[  208.448441][T12631]  ____sys_sendmsg+0x505/0x830
[  208.450355][T12631]  ___sys_sendmsg+0x21f/0x2a0
[  208.452254][T12631]  __x64_sys_sendmsg+0x19b/0x260
[  208.454257][T12631]  do_syscall_64+0xfa/0x3b0
[  208.455993][T12631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.458374][T12631] 
[  208.459356][T12631] Freed by task 5961:
[  208.460981][T12631]  kasan_save_track+0x3e/0x80
[  208.462862][T12631]  kasan_save_free_info+0x46/0x50
[  208.464867][T12631]  __kasan_slab_free+0x5b/0x80
[  208.466737][T12631]  kmem_cache_free+0x18f/0x400
[  208.468675][T12631]  xfrm_state_gc_task+0x52d/0x6b0
[  208.470652][T12631]  process_scheduled_works+0xae1/0x17b0
[  208.472809][T12631]  worker_thread+0x8a0/0xda0
[  208.474624][T12631]  kthread+0x711/0x8a0
[  208.476253][T12631]  ret_from_fork+0x3fc/0x770
[  208.478081][T12631]  ret_from_fork_asm+0x1a/0x30
[  208.480024][T12631] 
[  208.481004][T12631] The buggy address belongs to the object at ffff888026b1c000
[  208.481004][T12631]  which belongs to the cache xfrm_state of size 928
[  208.486542][T12631] The buggy address is located 196 bytes inside of
[  208.486542][T12631]  freed 928-byte region [ffff888026b1c000, ffff888026b1c3a0)
[  208.492003][T12631] 
[  208.492984][T12631] The buggy address belongs to the physical page:
[  208.495543][T12631] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026b1c480 pfn:0x26b1c
[  208.499585][T12631] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  208.502976][T12631] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  208.505965][T12631] page_type: f5(slab)
[  208.507579][T12631] raw: 00fff00000000040 ffff88801b3e8640 dead000000000122 0000000000000000
[  208.510913][T12631] raw: ffff888026b1c480 00000000800e000b 00000000f5000000 0000000000000000
[  208.514283][T12631] head: 00fff00000000040 ffff88801b3e8640 dead000000000122 0000000000000000
[  208.517703][T12631] head: ffff888026b1c480 00000000800e000b 00000000f5000000 0000000000000000
[  208.520712][T12631] head: 00fff00000000002 ffffea00009ac701 00000000ffffffff 00000000ffffffff
[  208.523701][T12631] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  208.526608][T12631] page dumped because: kasan: bad access detected
[  208.528656][T12631] page_owner tracks the page as allocated
[  208.530876][T12631] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10600, tgid 10599 (syz.2.2068), ts 169508629964, free_ts 169060661251
[  208.537563][T12631]  post_alloc_hook+0x240/0x2a0
[  208.539159][T12631]  get_page_from_freelist+0x21e4/0x22c0
[  208.541071][T12631]  __alloc_frozen_pages_noprof+0x181/0x370
[  208.543421][T12631]  alloc_pages_mpol+0x232/0x4a0
[  208.545373][T12631]  allocate_slab+0x8a/0x370
[  208.547208][T12631]  ___slab_alloc+0xbeb/0x1420
[  208.549095][T12631]  kmem_cache_alloc_noprof+0x283/0x3c0
[  208.551323][T12631]  xfrm_state_alloc+0x24/0x2f0
[  208.553252][T12631]  __find_acq_core+0x8a7/0x1c00
[  208.555192][T12631]  xfrm_find_acq+0x78/0xa0
[  208.556968][T12631]  xfrm_alloc_userspi+0x6b3/0xc90
[  208.558976][T12631]  xfrm_user_rcv_msg+0x7a3/0xab0
[  208.560954][T12631]  netlink_rcv_skb+0x208/0x470
[  208.562899][T12631]  xfrm_netlink_rcv+0x79/0x90
[  208.564795][T12631]  netlink_unicast+0x82f/0x9e0
[  208.566751][T12631]  netlink_sendmsg+0x805/0xb30
[  208.568695][T12631] page last free pid 10524 tgid 10524 stack trace:
[  208.571277][T12631]  __free_frozen_pages+0xbc4/0xd30
[  208.573369][T12631]  free_large_kmalloc+0x13a/0x1f0
[  208.575436][T12631]  free_netdev+0x3e2/0x700
[  208.577276][T12631]  netdev_run_todo+0xd0c/0xea0
[  208.579194][T12631]  tun_chr_close+0x13c/0x1c0
[  208.581040][T12631]  __fput+0x44c/0xa70
[  208.582669][T12631]  task_work_run+0x1d4/0x260
[  208.584560][T12631]  exit_to_user_mode_loop+0xec/0x110
[  208.586673][T12631]  do_syscall_64+0x2bd/0x3b0
[  208.588552][T12631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.590864][T12631] 
[  208.591822][T12631] Memory state around the buggy address:
[  208.594040][T12631]  ffff888026b1bf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  208.597215][T12631]  ffff888026b1c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  208.600306][T12631] >ffff888026b1c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  208.603496][T12631]                                            ^
[  208.605971][T12631]  ffff888026b1c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  208.609154][T12631]  ffff888026b1c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  208.612335][T12631] ==================================================================
[  208.615907][T12631] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  208.618767][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.2.2977 Not tainted syzkaller #0 PREEMPT(full) 
[  208.622374][T12631] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.626335][T12631] Call Trace:
[  208.627651][T12631]  <TASK>
[  208.628834][T12631]  dump_stack_lvl+0x99/0x250
[  208.630738][T12631]  ? __asan_memcpy+0x40/0x70
[  208.632620][T12631]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.634686][T12631]  ? __pfx__printk+0x10/0x10
[  208.636518][T12631]  vpanic+0x281/0x750
[  208.638087][T12631]  ? __pfx_vpanic+0x10/0x10
[  208.639893][T12631]  ? irqentry_exit+0x74/0x90
[  208.641760][T12631]  panic+0xb9/0xc0
[  208.643264][T12631]  ? __pfx_panic+0x10/0x10
[  208.644979][T12631]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  208.647267][T12631]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  208.649676][T12631]  ? xfrm_alloc_spi+0x570/0xf30
[  208.651679][T12631]  check_panic_on_warn+0x89/0xb0
[  208.653712][T12631]  ? xfrm_alloc_spi+0x570/0xf30
[  208.655709][T12631]  end_report+0x78/0x160
[  208.657453][T12631]  kasan_report+0x129/0x150
[  208.659338][T12631]  ? xfrm_alloc_spi+0x570/0xf30
[  208.661315][T12631]  xfrm_alloc_spi+0x570/0xf30
[  208.663248][T12631]  ? xfrm_alloc_spi+0x2a0/0xf30
[  208.665220][T12631]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  208.667328][T12631]  ? xfrm_find_acq+0x87/0xa0
[  208.669242][T12631]  xfrm_alloc_userspi+0x70b/0xc90
[  208.671295][T12631]  ? apparmor_capable+0x137/0x1b0
[  208.673320][T12631]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  208.675544][T12631]  ? __nla_parse+0x40/0x60
[  208.677357][T12631]  xfrm_user_rcv_msg+0x7a3/0xab0
[  208.679334][T12631]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  208.681474][T12631]  ? __pfx___mutex_trylock_common+0x10/0x10
[  208.683824][T12631]  ? rcu_is_watching+0x15/0xb0
[  208.685749][T12631]  ? trace_contention_end+0x39/0x120
[  208.687662][T12631]  ? __mutex_lock+0x335/0x1350
[  208.689203][T12631]  netlink_rcv_skb+0x208/0x470
[  208.690697][T12631]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  208.692408][T12631]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  208.694046][T12631]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.695683][T12631]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.697325][T12631]  xfrm_netlink_rcv+0x79/0x90
[  208.698852][T12631]  netlink_unicast+0x82f/0x9e0
[  208.700371][T12631]  ? __pfx_netlink_unicast+0x10/0x10
[  208.702014][T12631]  ? netlink_sendmsg+0x642/0xb30
[  208.703567][T12631]  ? skb_put+0x11b/0x210
[  208.704891][T12631]  netlink_sendmsg+0x805/0xb30
[  208.706395][T12631]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.708038][T12631]  ? aa_sock_msg_perm+0xf1/0x1d0
[  208.709676][T12631]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.711325][T12631]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.712967][T12631]  __sock_sendmsg+0x21c/0x270
[  208.714592][T12631]  ____sys_sendmsg+0x505/0x830
[  208.716549][T12631]  ? __pfx_____sys_sendmsg+0x10/0x10
[  208.718589][T12631]  ? import_iovec+0x74/0xa0
[  208.720038][T12631]  ___sys_sendmsg+0x21f/0x2a0
[  208.721573][T12631]  ? __pfx____sys_sendmsg+0x10/0x10
[  208.723281][T12631]  ? __fget_files+0x2a/0x420
[  208.724935][T12631]  ? __fget_files+0x3a0/0x420
[  208.726413][T12631]  __x64_sys_sendmsg+0x19b/0x260
[  208.727970][T12631]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  208.729730][T12631]  ? rcu_is_watching+0x15/0xb0
[  208.731701][T12631]  ? do_syscall_64+0xbe/0x3b0
[  208.733474][T12631]  do_syscall_64+0xfa/0x3b0
[  208.735204][T12631]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.737258][T12631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.739610][T12631]  ? exc_page_fault+0x9f/0xf0
[  208.741478][T12631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.743629][T12631] RIP: 0033:0x7f1eaff8ebe9
[  208.745382][T12631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.752260][T12631] RSP: 002b:00007f1eb0e33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  208.754869][T12631] RAX: ffffffffffffffda RBX: 00007f1eb01c5fa0 RCX: 00007f1eaff8ebe9
[  208.757965][T12631] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  208.761023][T12631] RBP: 00007f1eb0011e19 R08: 0000000000000000 R09: 0000000000000000
[  208.763541][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.766028][T12631] R13: 00007f1eb01c6038 R14: 00007f1eb01c5fa0 R15: 00007ffec57ba068
[  208.768534][T12631]  </TASK>
[  208.770223][T12631] Kernel Offset: disabled
[  208.771590][T12631] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:57:58  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82110c01 RBX=ffffea00045eb240 RCX=ffffffff82110c1b RDX=0000000000000001
RSI=0000000000000004 RDI=ffffea00045eb270 RBP=0000000000000001 RSP=ffffc90004df7548
R8 =ffffea00045eb273 R9 =1ffffd40008bd64e R10=dffffc0000000000 R11=fffff940008bd64f
R12=ffffea00045eb240 R13=ffff88803b75de00 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff82230b7d RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555811c3500 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2e923ffc CR3=000000011c8ba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688a3f ffffffff816889ad
XMM02=00007f85fe997498 ffffffff81688a3f XMM03=00007f85fe9974a8 00007f85fe9974a0
XMM04=00007f85ff4fd100 00007f85fe997460 XMM05=00007f85fe997478 00007f85fe9974c0
XMM06=00007f85fe9974b8 00007f85fe9974b0 XMM07=00007f85fe9974a8 00007f85fe9974a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f85fe812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000014b2 RDI=00000000000014b3 RBP=00000000000003f8 RSP=ffffc900049ee9f0
R8 =ffff8881088d0237 R9 =1ffff1102111a046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018d6 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1eb0e336c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001540 CR3=0000000115d00000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f1eb0197498 00007f1eb0197470 XMM03=00007f1eb01974a8 00007f1eb01974a0
XMM04=00007f1eb0cfd100 00007f1eb0197460 XMM05=00007f1eb0197478 00007f1eb01974c0
XMM06=00007f1eb01974b8 00007f1eb01974b0 XMM07=00007f1eb01974a8 00007f1eb01974a0
XMM08=0000000000000000 00007f1eb0012ee7 XMM09=0000000000000000 00007f1eb0012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
