last executing test programs:

1.853287598s ago: executing program 1 (id=1310):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)

1.52755915s ago: executing program 1 (id=1311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x40400, 0xa90}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x2c40}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x3}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

1.44308813s ago: executing program 1 (id=1313):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfffffffffffffef7}, 0x90)

1.391404164s ago: executing program 1 (id=1315):
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
splice(r1, 0x0, r0, 0x0, 0x1100000000f336, 0x8)

521.14762ms ago: executing program 1 (id=1347):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1000000, 0xc7)

520.239816ms ago: executing program 1 (id=1349):
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r3=>0x0})
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
close(r0)

450.106203ms ago: executing program 0 (id=1353):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)

392.35839ms ago: executing program 2 (id=1355):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

392.01806ms ago: executing program 0 (id=1356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x34, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x12, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}, @generic='nV']}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

322.645307ms ago: executing program 2 (id=1357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028000080060001000a0000001400020000000000000000000000ffffe000000205000300000000001cbcb47def472350ce00000008000200e0000002050003000000000014000200776730"], 0x104}}, 0x0)

322.307251ms ago: executing program 0 (id=1358):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7})
write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6)
socket(0x0, 0x80000, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56561, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x28, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x80000001}]}}]}, 0x58}}, 0x4040010)
socket(0x23, 0x0, 0xe)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x1, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYBLOB, @ANYRES64=r4], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

216.996039ms ago: executing program 2 (id=1359):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "14bc0615786629f5", "a6c9551de1166e85479c4a99eaf7b7cb90502e8eeabb6016c7598a2a186e5d1a", "fd3d3cef", "b3615ce94cf32b55"}, 0x38)

190.724833ms ago: executing program 2 (id=1360):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

183.373701ms ago: executing program 0 (id=1361):
r0 = socket(0x2a, 0x2, 0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x8})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x1a000201d})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x4})

52.621191ms ago: executing program 0 (id=1362):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0}, 0x94)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6)
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
shutdown(r0, 0x1)

52.249525ms ago: executing program 2 (id=1363):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

346.981µs ago: executing program 0 (id=1364):
socket(0x400000000010, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
shutdown(r1, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

0s ago: executing program 2 (id=1365):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21909' (ED25519) to the list of known hosts.
syzkaller login: [   49.291134][ T5778] cgroup: Unknown subsys name 'net'
[   49.394166][ T5778] cgroup: Unknown subsys name 'cpuset'
[   49.397908][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.866189][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.846586][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.091359][ T5882] chnl_net:caif_netlink_parms(): no params data found
[   57.135972][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.138721][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.141142][ T5882] bridge_slave_0: entered allmulticast mode
[   57.145187][ T5882] bridge_slave_0: entered promiscuous mode
[   57.149192][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.152029][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.154705][ T5882] bridge_slave_1: entered allmulticast mode
[   57.157588][ T5882] bridge_slave_1: entered promiscuous mode
[   57.196476][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.201049][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.218306][ T5882] team0: Port device team_slave_0 added
[   57.221543][ T5882] team0: Port device team_slave_1 added
[   57.237556][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.239926][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.248925][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.254244][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.256611][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.265195][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.293678][ T5882] hsr_slave_0: entered promiscuous mode
[   57.296062][ T5882] hsr_slave_1: entered promiscuous mode
[   57.380150][ T5882] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.385611][ T5882] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.389923][ T5882] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.394502][ T5882] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.412564][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.415029][ T5882] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.417773][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.420227][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.447917][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.455792][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.458829][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.469242][ T5882] 8021q: adding VLAN 0 to HW filter on device team0
[   57.475477][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.477856][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.483376][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.485789][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.568679][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.592781][ T5882] veth0_vlan: entered promiscuous mode
[   57.598034][ T5882] veth1_vlan: entered promiscuous mode
[   57.616433][ T5882] veth0_macvtap: entered promiscuous mode
[   57.620374][ T5882] veth1_macvtap: entered promiscuous mode
[   57.630541][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.638032][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.645658][ T5892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.648616][ T5892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.651523][ T5892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.656081][ T5892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.436646][ T5911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.440511][ T5911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.444835][ T5911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.448055][ T5911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.450810][ T5911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.481090][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.487793][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.491552][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.496468][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.500471][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.509137][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.514531][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.523994][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.528275][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.532700][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.549803][ T5892] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.634443][ T5892] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.723297][ T5910] chnl_net:caif_netlink_parms(): no params data found
[   58.902614][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.905431][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.907853][ T5910] bridge_slave_0: entered allmulticast mode
[   58.910600][ T5910] bridge_slave_0: entered promiscuous mode
[   58.915532][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.918719][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.922249][ T5910] bridge_slave_1: entered allmulticast mode
[   58.926477][ T5910] bridge_slave_1: entered promiscuous mode
[   59.000436][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.006619][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.009923][ T5913] chnl_net:caif_netlink_parms(): no params data found
[   59.063701][ T5910] team0: Port device team_slave_0 added
[   59.066615][ T5915] chnl_net:caif_netlink_parms(): no params data found
[   59.073355][ T5910] team0: Port device team_slave_1 added
[   59.126802][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.129575][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.140875][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.184839][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.187556][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.197258][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.208776][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.211186][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.214176][ T5913] bridge_slave_0: entered allmulticast mode
[   59.217538][ T5913] bridge_slave_0: entered promiscuous mode
[   59.243804][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.246803][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.249776][ T5913] bridge_slave_1: entered allmulticast mode
[   59.254552][ T5913] bridge_slave_1: entered promiscuous mode
[   59.299291][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.306846][ T5910] hsr_slave_0: entered promiscuous mode
[   59.309426][ T5910] hsr_slave_1: entered promiscuous mode
[   59.312067][ T5910] debugfs: 'hsr0' already exists in 'hsr'
[   59.314432][ T5910] Cannot create hsr debugfs directory
[   59.344483][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.360946][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.364715][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.367286][ T5915] bridge_slave_0: entered allmulticast mode
[   59.370003][ T5915] bridge_slave_0: entered promiscuous mode
[   59.400757][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.405137][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.408223][ T5915] bridge_slave_1: entered allmulticast mode
[   59.412614][ T5915] bridge_slave_1: entered promiscuous mode
[   59.430327][ T5913] team0: Port device team_slave_0 added
[   59.435334][ T5913] team0: Port device team_slave_1 added
[   59.469981][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.487887][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.490668][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.501794][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.511498][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.524627][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.527130][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.538116][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.569529][ T5915] team0: Port device team_slave_0 added
[   59.577335][ T5915] team0: Port device team_slave_1 added
[   59.644658][ T5913] hsr_slave_0: entered promiscuous mode
[   59.647800][ T5913] hsr_slave_1: entered promiscuous mode
[   59.650653][ T5913] debugfs: 'hsr0' already exists in 'hsr'
[   59.655579][ T5913] Cannot create hsr debugfs directory
[   59.665884][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.668969][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.679317][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.684604][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.687126][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.697699][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.777014][ T5915] hsr_slave_0: entered promiscuous mode
[   59.779369][ T5915] hsr_slave_1: entered promiscuous mode
[   59.781586][ T5915] debugfs: 'hsr0' already exists in 'hsr'
[   59.784778][ T5915] Cannot create hsr debugfs directory
[   59.859276][ T5910] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.865879][ T5910] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.884278][ T5910] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.900594][ T5910] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   60.011152][ T5913] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   60.022679][ T5913] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   60.033470][ T5913] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   60.053171][ T5892] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.064567][ T5913] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   60.109171][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.112408][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.115709][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.118568][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.128055][ T3576] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.132490][ T3576] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.170958][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.190769][ T5910] 8021q: adding VLAN 0 to HW filter on device team0
[   60.206173][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.208977][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.215996][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.218654][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.248616][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.273354][ T5913] 8021q: adding VLAN 0 to HW filter on device team0
[   60.303442][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.306465][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.324727][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.327090][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.333857][ T5910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.470464][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.516532][ T5910] veth0_vlan: entered promiscuous mode
[   60.525173][ T5910] veth1_vlan: entered promiscuous mode
[   60.532678][ T5911] Bluetooth: hci0: command tx timeout
[   60.533129][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.553803][ T5910] veth0_macvtap: entered promiscuous mode
[   60.558566][ T5910] veth1_macvtap: entered promiscuous mode
[   60.573619][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.577818][ T5913] veth0_vlan: entered promiscuous mode
[   60.580992][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.589071][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.592889][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.599247][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.603030][ T5911] Bluetooth: hci1: command tx timeout
[   60.607849][ T5913] veth1_vlan: entered promiscuous mode
[   60.611182][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.612017][ T5911] Bluetooth: hci2: command tx timeout
[   60.646046][ T5913] veth0_macvtap: entered promiscuous mode
[   60.651068][ T5913] veth1_macvtap: entered promiscuous mode
[   60.669647][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.673989][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.678363][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.688969][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.706863][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.710876][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.715344][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.718480][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.723136][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.726708][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.766167][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.819825][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.825428][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.853270][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.857562][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.275238][ T5998] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   61.278528][ T5998] netlink: 236 bytes leftover after parsing attributes in process `syz.1.40'.
[   61.325023][ T6000] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   61.643477][ T5892] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.789331][ T5892] bridge_slave_1: left allmulticast mode
[   61.793177][ T5892] bridge_slave_1: left promiscuous mode
[   61.795706][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.801301][ T5892] bridge_slave_0: left allmulticast mode
[   61.807702][ T5892] bridge_slave_0: left promiscuous mode
[   61.810355][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.011779][ T5892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.017159][ T5892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.021660][ T5892] bond0 (unregistering): Released all slaves
[   62.158406][ T5892] hsr_slave_0: left promiscuous mode
[   62.167176][ T5892] hsr_slave_1: left promiscuous mode
[   62.169863][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.174769][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.181298][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.185008][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.195647][ T5892] veth1_macvtap: left promiscuous mode
[   62.198051][ T5892] veth0_macvtap: left promiscuous mode
[   62.200662][ T5892] veth1_vlan: left promiscuous mode
[   62.209199][ T5892] veth0_vlan: left promiscuous mode
[   62.269053][ T6033] netlink: 'syz.0.54': attribute type 15 has an invalid length.
[   62.577945][ T5892] team0 (unregistering): Port device team_slave_1 removed
[   62.596923][ T5892] team0 (unregistering): Port device team_slave_0 removed
[   62.604142][ T5911] Bluetooth: hci0: command tx timeout
[   62.682136][ T5911] Bluetooth: hci2: command tx timeout
[   62.684676][ T5911] Bluetooth: hci1: command tx timeout
[   62.834652][ T6042] tap0: tun_chr_ioctl cmd 1074025677
[   62.839028][ T6042] tap0: linktype set to 804
[   63.003210][ T6051] netlink: 'syz.0.61': attribute type 1 has an invalid length.
[   63.008597][ T6052] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET)
[   63.111236][ T5915] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.123514][ T5915] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.152741][ T5915] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.187117][ T5915] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.266221][ T6065] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[   63.386961][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.410555][ T5915] 8021q: adding VLAN 0 to HW filter on device team0
[   63.433812][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.436684][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.444332][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.447223][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.655486][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.706544][ T5915] veth0_vlan: entered promiscuous mode
[   63.719062][ T5915] veth1_vlan: entered promiscuous mode
[   63.754552][ T5915] veth0_macvtap: entered promiscuous mode
[   63.772519][ T5915] veth1_macvtap: entered promiscuous mode
[   63.793771][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.799907][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.809717][ T5892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.820094][ T5892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.839171][ T5892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.854574][ T5892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.970656][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.976101][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.030853][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.034310][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.301077][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'.
[   64.354698][ T6132] netlink: del zone limit has 4 unknown bytes
[   64.417648][ T6138] netlink: 27 bytes leftover after parsing attributes in process `syz.2.94'.
[   64.494078][ T6144] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[   64.692519][ T5911] Bluetooth: hci0: command tx timeout
[   64.762170][ T5911] Bluetooth: hci1: command tx timeout
[   64.764404][   T55] Bluetooth: hci2: command tx timeout
[   65.493933][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[   65.499036][ T6186] batadv_slave_0: entered promiscuous mode
[   65.514774][ T6187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.114'.
[   65.524044][ T6185] batadv_slave_0: left promiscuous mode
[   65.534583][ T6180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.114'.
[   65.667412][ T6200] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   65.690756][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'.
[   65.775569][ T6206] batadv0: entered promiscuous mode
[   65.783504][ T6206] vlan2: entered promiscuous mode
[   65.843200][ T6214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.129'.
[   65.932593][ T6220] netlink: 'syz.2.133': attribute type 21 has an invalid length.
[   65.935819][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'.
[   65.966957][ T6223] netlink: 'syz.1.134': attribute type 178 has an invalid length.
[   66.321965][ T6246] Bluetooth: MGMT ver 1.23
[   66.477569][ T6265] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[   66.492929][ T6267] dvmrp8: entered allmulticast mode
[   66.498007][ T6266] dvmrp8: left allmulticast mode
[   66.842337][   T55] Bluetooth: hci2: command tx timeout
[   66.843328][ T5911] Bluetooth: hci1: command tx timeout
[   67.198980][ T6291] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[   67.236763][ T6291] bond1: (slave geneve2): making interface the new active one
[   67.240986][ T6291] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   67.247080][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   67.252317][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   67.256188][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   67.260086][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   67.268279][ T6291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.168'.
[   67.275148][ T6291] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.005205][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.179'.
[   68.306119][ T6324] bridge0: port 3(erspan0) entered blocking state
[   68.309128][ T6324] bridge0: port 3(erspan0) entered disabled state
[   68.315771][ T6324] erspan0: entered allmulticast mode
[   68.335010][ T6324] erspan0: entered promiscuous mode
[   68.338712][ T6324] bridge0: port 3(erspan0) entered blocking state
[   68.341622][ T6324] bridge0: port 3(erspan0) entered forwarding state
[   68.371136][ T6329] erspan0: left allmulticast mode
[   68.389797][ T6329] erspan0: left promiscuous mode
[   68.402382][ T6329] bridge0: port 3(erspan0) entered disabled state
[   68.906006][ T6357] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.197'.
[   68.938502][ T5911] Bluetooth: hci2: command tx timeout
[   69.651661][ T6404] xt_limit: Overflow, try lower: 604147548/4200216962
[   69.683634][ T6408] netlink: 'syz.1.222': attribute type 4 has an invalid length.
[   69.697998][ T6408] netlink: 'syz.1.222': attribute type 4 has an invalid length.
[   69.888644][ T6424] netlink: 'syz.1.229': attribute type 3 has an invalid length.
[   69.930400][ T6426] ip6tnl1: entered promiscuous mode
[   69.945278][ T6426] ip6tnl1: entered allmulticast mode
[   69.957789][ T6426] team0: Device ip6tnl1 is of different type
[   70.024859][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'.
[   70.035455][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'.
[   70.044219][ T6432] netlink: 'syz.0.232': attribute type 1 has an invalid length.
[   70.053753][ T6432] netlink: 10 bytes leftover after parsing attributes in process `syz.0.232'.
[   70.092500][ T6432] nbd: socks must be embedded in a SOCK_ITEM attr
[   70.095007][ T6432] block nbd0: shutting down sockets
[   70.574159][ T6466] tipc: Can't bind to reserved service type 2
[   70.647485][ T6470] warning: `syz.2.251' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.730335][ T6474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.253'.
[   70.836595][ T6480] delete_channel: no stack
[   71.027293][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'.
[   71.086150][ T6451] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   71.156416][ T6504] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   71.199810][ T6508] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[   71.261556][ T6513] delete_channel: no stack
[   71.302081][ T6518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   71.304650][ T6518] IPv6: NLM_F_CREATE should be set when creating new route
[   71.307107][ T6518] IPv6: NLM_F_CREATE should be set when creating new route
[   71.325603][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.328108][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.341320][ T6523] tipc: Started in network mode
[   71.344862][ T6523] tipc: Node identity 8eb36153fb9, cluster identity 4711
[   71.350567][ T6523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.372957][ T6523] syzkaller0: entered promiscuous mode
[   71.375571][ T6523] syzkaller0: entered allmulticast mode
[   71.416271][ T6523] tipc: Resetting bearer <eth:syzkaller0>
[   71.430331][ T6521] tipc: Resetting bearer <eth:syzkaller0>
[   71.457114][ T6521] tipc: Disabling bearer <eth:syzkaller0>
[   71.877988][ T6572] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.301'.
[   71.927017][ T6577] netlink: 'syz.1.302': attribute type 3 has an invalid length.
[   72.008634][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'.
[   72.038186][ T5939] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.044368][ T6587] Zero length message leads to an empty skb
[   72.048546][ T5939] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.057469][ T5939] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.060852][ T5939] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.364008][ T6621] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.405952][ T6623] tipc: Started in network mode
[   72.407703][ T6623] tipc: Node identity 7af5afec0632, cluster identity 4711
[   72.410128][ T6623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.416773][ T6623] syzkaller0: entered promiscuous mode
[   72.419011][ T6623] syzkaller0: entered allmulticast mode
[   72.451071][ T6623] tipc: Resetting bearer <eth:syzkaller0>
[   72.454964][ T6622] tipc: Resetting bearer <eth:syzkaller0>
[   72.474626][ T6622] tipc: Disabling bearer <eth:syzkaller0>
[   72.569989][ T6633] batman_adv: batadv0: Adding interface: gretap1
[   72.585302][ T6633] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.609165][ T6633] batman_adv: batadv0: Interface activated: gretap1
[   72.687504][ T6649] __nla_validate_parse: 3 callbacks suppressed
[   72.687513][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'.
[   72.803774][ T6655] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   72.916849][ T6661] tipc: Cannot configure node identity twice
[   73.646254][ T6700] netlink: 104 bytes leftover after parsing attributes in process `syz.2.364'.
[   74.082455][ T6719] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.373'.
[   74.089119][ T6721] netlink: 156 bytes leftover after parsing attributes in process `syz.1.374'.
[   74.094083][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.374'.
[   74.674735][ T6754] netlink: 'syz.1.391': attribute type 4 has an invalid length.
[   75.244091][ T6788] netlink: 'syz.1.402': attribute type 13 has an invalid length.
[   75.247013][ T6788] netlink: 'syz.1.402': attribute type 17 has an invalid length.
[   75.354302][ T6788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.380455][   T24] IPVS: starting estimator thread 0...
[   75.384210][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.387757][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'.
[   75.445669][ T6788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.492685][ T6806] IPVS: using max 43 ests per chain, 103200 per kthread
[   75.501033][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.708813][ T6829] netlink: 'syz.0.421': attribute type 9 has an invalid length.
[   75.716388][ T6829] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.421'.
[   75.959989][ T6838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.425'.
[   76.921290][ T6893] netlink: 'syz.1.443': attribute type 2 has an invalid length.
[   77.282994][ T6922] delete_channel: no stack
[   77.399457][ T6934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.461'.
[   77.544639][ T6947] geneve2: entered promiscuous mode
[   77.606395][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'.
[   78.009562][ T7000] __nla_validate_parse: 1 callbacks suppressed
[   78.009576][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.487'.
[   78.016848][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.487'.
[   78.076160][ T7005] netlink: 'syz.1.489': attribute type 23 has an invalid length.
[   78.147294][ T7012] delete_channel: no stack
[   78.438881][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.505'.
[   78.900870][ T7051] raw_sendmsg: syz.2.511 forgot to set AF_INET. Fix it!
[   79.117405][ T7063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.517'.
[   79.179117][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'.
[   79.317623][ T7078] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   79.469277][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'.
[   79.472934][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.535'.
[   79.522094][   T24] IPVS: starting estimator thread 0...
[   79.611936][ T7107] IPVS: using max 83 ests per chain, 199200 per kthread
[   80.537727][ T7171] netlink: 52 bytes leftover after parsing attributes in process `syz.1.567'.
[   80.649646][ T7185] netlink: 'syz.1.575': attribute type 8 has an invalid length.
[   80.670123][ T7181] vxcan2: entered promiscuous mode
[   80.800217][ T7196] netlink: 96 bytes leftover after parsing attributes in process `syz.1.580'.
[   80.813019][ T7196] vlan2: entered allmulticast mode
[   80.815390][ T7196] gretap0: entered allmulticast mode
[   80.980369][ T7208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.988226][ T7208] syzkaller0: entered promiscuous mode
[   80.990735][ T7208] syzkaller0: entered allmulticast mode
[   81.013449][ T7208] tipc: Resetting bearer <eth:syzkaller0>
[   81.019706][ T7205] tipc: Resetting bearer <eth:syzkaller0>
[   81.037733][ T7205] tipc: Disabling bearer <eth:syzkaller0>
[   81.573898][  T973] cfg80211: failed to load regulatory.db
[   81.844504][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'.
[   82.148626][ T7253] netlink: zone id is out of range
[   82.150933][ T7253] netlink: zone id is out of range
[   82.207149][ T7257] syzkaller0: entered promiscuous mode
[   82.209199][ T7257] syzkaller0: entered allmulticast mode
[   83.154015][ T7273] netlink: 'syz.0.615': attribute type 83 has an invalid length.
[   83.223416][ T7277] netlink: 'syz.0.617': attribute type 2 has an invalid length.
[   83.227047][ T7277] __nla_validate_parse: 1 callbacks suppressed
[   83.227056][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[   83.402913][ T7284] netlink: 'syz.0.620': attribute type 12 has an invalid length.
[   83.406315][ T7284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.620'.
[   83.507977][ T7286] tipc: Enabled bearer <eth:team0>, priority 0
[   83.652483][ T7296] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   83.701151][ T7302] netlink: 'syz.0.629': attribute type 15 has an invalid length.
[   83.898409][ T7310] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[   83.928146][ T7310] bridge_slave_0: left allmulticast mode
[   83.930760][ T7310] bridge_slave_0: left promiscuous mode
[   83.934052][ T7310] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.995751][ T7310] bridge_slave_1: left allmulticast mode
[   83.998128][ T7310] bridge_slave_1: left promiscuous mode
[   84.000697][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.030780][ T7310] bond0: (slave bond_slave_0): Releasing backup interface
[   84.074356][ T7315] netlink: 'syz.2.633': attribute type 10 has an invalid length.
[   84.075738][ T7310] bond0: (slave bond_slave_1): Releasing backup interface
[   84.098332][ T7310] team0: Port device team_slave_0 removed
[   84.124505][ T7310] team0: Port device team_slave_1 removed
[   84.130888][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.140355][ T7310] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.161501][ T7310] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.166968][ T7310] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.211982][ T7315] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[   84.236733][ T7315] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.260185][ T7315] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.275482][ T7317] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   84.279079][ T7317] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   84.622675][   T24] tipc: Node number set to 2093461484
[   84.864809][ T7328] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   85.762790][ T7271] Set syz1 is full, maxelem 65536 reached
[   85.853861][ T7374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.858376][ T7374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.863204][ T7374] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   85.915545][ T7374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.919639][ T7374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.923830][ T7374] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   85.996091][ T7374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.000147][ T7374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.004913][ T7374] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   86.073241][ T7374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.077438][ T7374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.081456][ T7374] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[   86.153306][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.156579][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[   86.159817][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   86.181043][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.184413][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[   86.187624][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   86.190776][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.199210][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[   86.203069][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   86.216369][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.219628][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[   86.223330][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   86.485772][ T7392] macvtap0: refused to change device tx_queue_len
[   86.526313][ T7394] netlink: 'syz.1.669': attribute type 1 has an invalid length.
[   86.532110][ T7394] netlink: 184 bytes leftover after parsing attributes in process `syz.1.669'.
[   86.537238][ T7394] netlink: 'syz.1.669': attribute type 1 has an invalid length.
[   87.304451][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.692'.
[   87.366330][ T7445] netlink: 'syz.0.690': attribute type 83 has an invalid length.
[   87.624723][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'.
[   87.628604][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'.
[   88.095128][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'.
[   88.469571][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[   88.705911][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'.
[   88.856132][   T33] audit: type=1800 audit(1755306856.495:2): pid=7531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.731" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1166 res=0 errno=0
[   89.197072][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.737'.
[   89.379361][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'.
[   89.835712][ T7588] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[   89.887987][ T7588] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.894925][ T7588] bond2: (slave bond3): making interface the new active one
[   89.898468][ T7588] bond2: (slave bond3): Enslaving as an active interface with an up link
[   89.956093][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.756'.
[   90.319106][ T7594] syz_tun: entered allmulticast mode
[   90.324491][ T7593] syz_tun: left allmulticast mode
[   91.367112][ T7618] netlink: 168 bytes leftover after parsing attributes in process `syz.2.767'.
[   91.428292][ T7626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.486352][ T7633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.775'.
[   91.759791][ T7658] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   91.765724][ T7658] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   91.828857][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   92.049316][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.794'.
[   92.053391][ T7682] openvswitch: netlink: EtherType 0 is less than min 600
[   92.663548][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'.
[   92.739483][ T7718] netlink: 'syz.1.806': attribute type 21 has an invalid length.
[   92.751032][ T7718] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[   92.801024][ T7725] netlink: 68 bytes leftover after parsing attributes in process `syz.0.810'.
[   93.042722][ T7748] sctp: [Deprecated]: syz.0.820 (pid 7748) Use of int in max_burst socket option deprecated.
[   93.042722][ T7748] Use struct sctp_assoc_value instead
[   93.143398][ T7754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.697141][ T7785] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   93.700340][ T7785] team0: Device macvtap1 is already an upper device of the team interface
[   93.805033][ T7793] __nla_validate_parse: 2 callbacks suppressed
[   93.805055][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'.
[   93.829532][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[   93.930539][ T7804] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.847'.
[   93.977006][ T7810] netlink: 'syz.0.850': attribute type 96 has an invalid length.
[   94.231172][ T7834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.860'.
[   94.471073][ T7860] netlink: 'syz.0.872': attribute type 1 has an invalid length.
[   94.476056][ T7860] netlink: 'syz.0.872': attribute type 3 has an invalid length.
[   94.479093][ T7860] netlink: 224 bytes leftover after parsing attributes in process `syz.0.872'.
[   94.482499][ T7860] NCSI netlink: No device for ifindex 246
[   94.710072][ T7885] netlink: 'syz.0.885': attribute type 1 has an invalid length.
[   94.714497][ T7885] netlink: 'syz.0.885': attribute type 1 has an invalid length.
[   95.128195][ T7933] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   95.240835][ T7942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.268191][ T7942] syzkaller0: entered promiscuous mode
[   95.270520][ T7942] syzkaller0: entered allmulticast mode
[   95.273642][ T7942] tipc: Resetting bearer <eth:syzkaller0>
[   95.280703][ T7942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.910'.
[   95.286922][ T7941] tipc: Resetting bearer <eth:syzkaller0>
[   95.582606][ T7956] netlink: 168 bytes leftover after parsing attributes in process `syz.1.913'.
[   95.730356][ T7962] netlink: 'syz.0.914': attribute type 16 has an invalid length.
[   95.734211][ T7962] netlink: 'syz.0.914': attribute type 17 has an invalid length.
[   96.176988][ T7941] tipc: Disabling bearer <eth:syzkaller0>
[   96.199421][ T7962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.450982][ T7974] netlink: 324 bytes leftover after parsing attributes in process `syz.2.920'.
[   96.527739][ T7984] syzkaller1: entered promiscuous mode
[   96.531314][ T7984] syzkaller1: entered allmulticast mode
[   96.962849][ T7990] tipc: Started in network mode
[   96.965134][ T7990] tipc: Node identity b2f468521df4, cluster identity 4711
[   96.968465][ T7990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.986114][ T7990] tipc: Resetting bearer <eth:syzkaller0>
[   97.006142][ T7989] tipc: Disabling bearer <eth:syzkaller0>
[   98.150552][ T8059] netlink: 'syz.2.958': attribute type 11 has an invalid length.
[   98.250350][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'.
[   98.346692][ T8080] Bluetooth: hci1: Opcode 0x080f failed: -4
[   99.459414][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'.
[   99.777155][ T8127] team0: Port device vxlan0 added
[   99.783731][ T5892] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.787694][ T5892] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.791480][ T5892] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.838516][ T5892] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.957023][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.996'.
[  100.163855][ T8170] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1006'.
[  100.363939][ T5911] Bluetooth: hci1: command 0x080f tx timeout
[  100.572361][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'.
[  100.744286][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'.
[  100.747883][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'.
[  100.754856][ T8218] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1028'.
[  100.795907][ T8222] tap0: tun_chr_ioctl cmd 2148553947
[  100.876173][ T8232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1035'.
[  101.011141][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'.
[  101.015547][ T8253] tipc: Enabled bearer <eth:vlan0>, priority 18
[  101.150808][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  101.159256][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  101.221510][ T8277] netlink: 'syz.2.1056': attribute type 1 has an invalid length.
[  101.229812][ T8277] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1056'.
[  102.076344][ T8306] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  102.141952][   T24] tipc: Node number set to 1965252947
[  103.089547][ T8338] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  103.094898][ T8338] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  103.242114][ T8354] openvswitch: netlink: Message has 5 unknown bytes.
[  103.479719][ T8381] netlink: 'syz.0.1103': attribute type 5 has an invalid length.
[  103.669541][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  103.719736][ T8406] bond0: Unable to set down delay as MII monitoring is disabled
[  103.837851][ T8412] team0: Device gtp0 is of different type
[  104.447794][ T8419] netlink: 'syz.0.1119': attribute type 1 has an invalid length.
[  104.539444][ T8425] __nla_validate_parse: 9 callbacks suppressed
[  104.539457][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'.
[  104.547486][ T8425] veth1_macvtap: left promiscuous mode
[  104.552388][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'.
[  104.606588][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'.
[  104.717758][ T8428] bridge_slave_1: left allmulticast mode
[  104.721052][ T8428] bridge_slave_1: left promiscuous mode
[  104.721181][ T8431] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1124'.
[  104.723882][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.735873][ T8428] bridge_slave_0: left allmulticast mode
[  104.738422][ T8428] bridge_slave_0: left promiscuous mode
[  104.740982][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.852541][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'.
[  105.056373][ T8448] netlink: 'syz.1.1131': attribute type 1 has an invalid length.
[  105.105726][ T8450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.109239][ T8450] syzkaller0: entered promiscuous mode
[  105.114044][ T8450] syzkaller0: entered allmulticast mode
[  105.124709][ T8450] tipc: Resetting bearer <eth:syzkaller0>
[  105.128279][ T8449] tipc: Resetting bearer <eth:syzkaller0>
[  105.137347][ T8449] tipc: Disabling bearer <eth:syzkaller0>
[  105.288435][ T8464] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  105.667064][ T8502] smc: net device bond0 applied user defined pnetid SYZ2
[  105.725736][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'.
[  106.050856][ T8545] ieee802154 phy0 wpan0: encryption failed: -22
[  106.133277][ T8554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1179'.
[  106.620696][ T8592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1194'.
[  106.625690][ T8592] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  106.874836][ T8613] openvswitch: netlink: Missing key (keys=40, expected=80)
[  107.239663][ T8650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1222'.
[  107.341259][ T8650] syz_tun: entered allmulticast mode
[  107.376642][ T8650] dvmrp1: entered allmulticast mode
[  107.388997][ T8649] syz_tun: left allmulticast mode
[  107.909996][ T8702] netlink: 'syz.1.1240': attribute type 16 has an invalid length.
[  107.915544][ T8702] netlink: 'syz.1.1240': attribute type 17 has an invalid length.
[  107.936329][ T8702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.979118][ T8704] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1245'.
[  107.996371][ T8704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.747585][ T8740] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  108.751484][ T5952] IPVS: starting estimator thread 0...
[  108.862002][ T8753] IPVS: using max 83 ests per chain, 199200 per kthread
[  109.017397][ T8778] netlink: del zone limit has 4 unknown bytes
[  109.415385][ T8807] syz_tun: entered allmulticast mode
[  109.428066][ T8806] syz_tun: left allmulticast mode
[  110.129832][ T8865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.172475][ T8955] lo speed is unknown, defaulting to 1000
[  111.175419][ T8955] lo speed is unknown, defaulting to 1000
[  111.181030][ T8955] lo speed is unknown, defaulting to 1000
[  111.190359][ T8955] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  111.202093][ T8955] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  111.240063][ T8955] lo speed is unknown, defaulting to 1000
[  111.244417][ T8955] lo speed is unknown, defaulting to 1000
[  111.251466][ T8955] lo speed is unknown, defaulting to 1000
[  111.545613][ T8983] __nla_validate_parse: 5 callbacks suppressed
[  111.545627][ T8983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'.
[  111.560113][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'.
[  111.574622][ T8985] veth1: entered promiscuous mode
[  111.580704][ T8985] netlink: 'syz.2.1342': attribute type 1 has an invalid length.
[  111.585668][ T8985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1342'.
[  111.589343][ T8985] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  111.827696][ T9013] netlink: 'syz.0.1356': attribute type 1 has an invalid length.
[  111.830618][ T9013] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1356'.
[  111.966595][ T9025] tls_set_device_offload: netdev not found
[  111.983323][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1358'.
[  112.237377][ T9039] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1365'.
[  112.241488][ T9039] ==================================================================
[  112.245020][ T9039] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  112.248164][ T9039] Read of size 4 at addr ffff88811fdfc0c4 by task syz.2.1365/9039
[  112.251971][ T9039] 
[  112.252969][ T9039] CPU: 1 UID: 0 PID: 9039 Comm: syz.2.1365 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  112.252985][ T9039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.252993][ T9039] Call Trace:
[  112.253000][ T9039]  <TASK>
[  112.253007][ T9039]  dump_stack_lvl+0x189/0x250
[  112.253025][ T9039]  ? __kasan_check_byte+0x12/0x40
[  112.253045][ T9039]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.253058][ T9039]  ? lock_release+0x4b/0x3e0
[  112.253076][ T9039]  ? __virt_addr_valid+0x4a5/0x5c0
[  112.253091][ T9039]  print_report+0xca/0x240
[  112.253102][ T9039]  ? xfrm_alloc_spi+0x570/0xf30
[  112.253114][ T9039]  kasan_report+0x118/0x150
[  112.253132][ T9039]  ? xfrm_alloc_spi+0x570/0xf30
[  112.253146][ T9039]  xfrm_alloc_spi+0x570/0xf30
[  112.253158][ T9039]  ? xfrm_alloc_spi+0x2a0/0xf30
[  112.253200][ T9039]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  112.253209][ T9039]  ? xfrm_find_acq+0x87/0xa0
[  112.253217][ T9039]  xfrm_alloc_userspi+0x70b/0xc90
[  112.253230][ T9039]  ? apparmor_capable+0x137/0x1b0
[  112.253238][ T9039]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  112.253247][ T9039]  ? __nla_parse+0x40/0x60
[  112.253260][ T9039]  xfrm_user_rcv_msg+0x7a3/0xab0
[  112.253270][ T9039]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  112.253284][ T9039]  ? __pfx___mutex_trylock_common+0x10/0x10
[  112.253293][ T9039]  ? rcu_is_watching+0x15/0xb0
[  112.253300][ T9039]  ? trace_contention_end+0x39/0x120
[  112.253307][ T9039]  ? __mutex_lock+0x335/0x1360
[  112.253317][ T9039]  netlink_rcv_skb+0x208/0x470
[  112.253327][ T9039]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  112.253335][ T9039]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  112.253346][ T9039]  ? netlink_deliver_tap+0x2e/0x1b0
[  112.253355][ T9039]  xfrm_netlink_rcv+0x79/0x90
[  112.253363][ T9039]  netlink_unicast+0x82f/0x9e0
[  112.253372][ T9039]  ? __pfx_netlink_unicast+0x10/0x10
[  112.253380][ T9039]  ? netlink_sendmsg+0x642/0xb30
[  112.253389][ T9039]  ? skb_put+0x11b/0x210
[  112.253395][ T9039]  netlink_sendmsg+0x805/0xb30
[  112.253405][ T9039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.253415][ T9039]  ? aa_sock_msg_perm+0xf1/0x1d0
[  112.253425][ T9039]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  112.253433][ T9039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.253441][ T9039]  __sock_sendmsg+0x21c/0x270
[  112.253451][ T9039]  ____sys_sendmsg+0x505/0x830
[  112.253458][ T9039]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.253466][ T9039]  ? import_iovec+0x74/0xa0
[  112.253474][ T9039]  ___sys_sendmsg+0x21f/0x2a0
[  112.253480][ T9039]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.253493][ T9039]  ? __fget_files+0x2a/0x420
[  112.253498][ T9039]  ? __fget_files+0x3a0/0x420
[  112.253505][ T9039]  __x64_sys_sendmsg+0x19b/0x260
[  112.253512][ T9039]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  112.253520][ T9039]  ? rcu_is_watching+0x15/0xb0
[  112.253527][ T9039]  ? do_syscall_64+0xbe/0x3b0
[  112.253537][ T9039]  do_syscall_64+0xfa/0x3b0
[  112.253546][ T9039]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.253554][ T9039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.253561][ T9039]  ? exc_page_fault+0x9f/0xf0
[  112.253569][ T9039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.253576][ T9039] RIP: 0033:0x7f5d2838ebe9
[  112.253584][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.253589][ T9039] RSP: 002b:00007f5d29179038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.253598][ T9039] RAX: ffffffffffffffda RBX: 00007f5d285b5fa0 RCX: 00007f5d2838ebe9
[  112.253602][ T9039] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  112.253606][ T9039] RBP: 00007f5d28411e19 R08: 0000000000000000 R09: 0000000000000000
[  112.253611][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.253614][ T9039] R13: 00007f5d285b6038 R14: 00007f5d285b5fa0 R15: 00007ffedc09e508
[  112.253622][ T9039]  </TASK>
[  112.253624][ T9039] 
[  112.392339][ T9039] Allocated by task 7256:
[  112.393794][ T9039]  kasan_save_track+0x3e/0x80
[  112.395439][ T9039]  __kasan_slab_alloc+0x6c/0x80
[  112.397491][ T9039]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  112.399754][ T9039]  xfrm_state_alloc+0x24/0x2f0
[  112.401717][ T9039]  __find_acq_core+0x8a7/0x1c00
[  112.403461][ T9039]  xfrm_find_acq+0x78/0xa0
[  112.404984][ T9039]  xfrm_alloc_userspi+0x6b3/0xc90
[  112.406770][ T9039]  xfrm_user_rcv_msg+0x7a3/0xab0
[  112.408481][ T9039]  netlink_rcv_skb+0x208/0x470
[  112.410132][ T9039]  xfrm_netlink_rcv+0x79/0x90
[  112.412007][ T9039]  netlink_unicast+0x82f/0x9e0
[  112.414022][ T9039]  netlink_sendmsg+0x805/0xb30
[  112.416028][ T9039]  __sock_sendmsg+0x21c/0x270
[  112.417902][ T9039]  ____sys_sendmsg+0x505/0x830
[  112.419867][ T9039]  ___sys_sendmsg+0x21f/0x2a0
[  112.421513][ T9039]  __x64_sys_sendmsg+0x19b/0x260
[  112.423386][ T9039]  do_syscall_64+0xfa/0x3b0
[  112.424955][ T9039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.427029][ T9039] 
[  112.427921][ T9039] Freed by task 24:
[  112.429228][ T9039]  kasan_save_track+0x3e/0x80
[  112.430852][ T9039]  kasan_save_free_info+0x46/0x50
[  112.432591][ T9039]  __kasan_slab_free+0x5b/0x80
[  112.434265][ T9039]  kmem_cache_free+0x18f/0x400
[  112.436041][ T9039]  xfrm_state_gc_task+0x52d/0x6b0
[  112.437924][ T9039]  process_scheduled_works+0xae1/0x17b0
[  112.439848][ T9039]  worker_thread+0x8a0/0xda0
[  112.441667][ T9039]  kthread+0x711/0x8a0
[  112.443230][ T9039]  ret_from_fork+0x3fc/0x770
[  112.445101][ T9039]  ret_from_fork_asm+0x1a/0x30
[  112.447106][ T9039] 
[  112.448122][ T9039] The buggy address belongs to the object at ffff88811fdfc000
[  112.448122][ T9039]  which belongs to the cache xfrm_state of size 928
[  112.453782][ T9039] The buggy address is located 196 bytes inside of
[  112.453782][ T9039]  freed 928-byte region [ffff88811fdfc000, ffff88811fdfc3a0)
[  112.459066][ T9039] 
[  112.460075][ T9039] The buggy address belongs to the physical page:
[  112.462642][ T9039] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11fdfc
[  112.465972][ T9039] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  112.469426][ T9039] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  112.472519][ T9039] page_type: f5(slab)
[  112.474200][ T9039] raw: 057ff00000000040 ffff888104d87640 dead000000000122 0000000000000000
[  112.477292][ T9039] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  112.480265][ T9039] head: 057ff00000000040 ffff888104d87640 dead000000000122 0000000000000000
[  112.483706][ T9039] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  112.487257][ T9039] head: 057ff00000000002 ffffea00047f7f01 00000000ffffffff 00000000ffffffff
[  112.490719][ T9039] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  112.494115][ T9039] page dumped because: kasan: bad access detected
[  112.496469][ T9039] page_owner tracks the page as allocated
[  112.498562][ T9039] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7256, tgid 7254 (syz.2.606), ts 82191960563, free_ts 82113434022
[  112.505243][ T9039]  post_alloc_hook+0x240/0x2a0
[  112.507212][ T9039]  get_page_from_freelist+0x21e4/0x22c0
[  112.509530][ T9039]  __alloc_frozen_pages_noprof+0x181/0x370
[  112.511512][ T9039]  alloc_pages_mpol+0x232/0x4a0
[  112.513148][ T9039]  allocate_slab+0x8a/0x370
[  112.514693][ T9039]  ___slab_alloc+0xbeb/0x1410
[  112.516305][ T9039]  kmem_cache_alloc_noprof+0x283/0x3c0
[  112.518139][ T9039]  xfrm_state_alloc+0x24/0x2f0
[  112.520096][ T9039]  __find_acq_core+0x8a7/0x1c00
[  112.522160][ T9039]  xfrm_find_acq+0x78/0xa0
[  112.524051][ T9039]  xfrm_alloc_userspi+0x6b3/0xc90
[  112.526200][ T9039]  xfrm_user_rcv_msg+0x7a3/0xab0
[  112.528281][ T9039]  netlink_rcv_skb+0x208/0x470
[  112.530109][ T9039]  xfrm_netlink_rcv+0x79/0x90
[  112.531718][ T9039]  netlink_unicast+0x82f/0x9e0
[  112.533688][ T9039]  netlink_sendmsg+0x805/0xb30
[  112.535331][ T9039] page last free pid 7248 tgid 7248 stack trace:
[  112.537458][ T9039]  __free_frozen_pages+0xbc4/0xd30
[  112.539100][ T9039]  __slab_free+0x303/0x3c0
[  112.540920][ T9039]  qlist_free_all+0x97/0x140
[  112.542698][ T9039]  kasan_quarantine_reduce+0x148/0x160
[  112.544834][ T9039]  __kasan_slab_alloc+0x22/0x80
[  112.546696][ T9039]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  112.548960][ T9039]  ptlock_alloc+0x20/0x70
[  112.550648][ T9039]  pte_alloc_one+0x7d/0x170
[  112.552332][ T9039]  __handle_mm_fault+0x2795/0x5440
[  112.554215][ T9039]  handle_mm_fault+0x40a/0x8e0
[  112.555976][ T9039]  do_user_addr_fault+0xa81/0x1390
[  112.557750][ T9039]  exc_page_fault+0x76/0xf0
[  112.559352][ T9039]  asm_exc_page_fault+0x26/0x30
[  112.561032][ T9039] 
[  112.561890][ T9039] Memory state around the buggy address:
[  112.563884][ T9039]  ffff88811fdfbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  112.566641][ T9039]  ffff88811fdfc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.569438][ T9039] >ffff88811fdfc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.572334][ T9039]                                            ^
[  112.574498][ T9039]  ffff88811fdfc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.577335][ T9039]  ffff88811fdfc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  112.580152][ T9039] ==================================================================
[  112.583267][ T9039] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  112.585792][ T9039] CPU: 1 UID: 0 PID: 9039 Comm: syz.2.1365 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  112.590091][ T9039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.593651][ T9039] Call Trace:
[  112.594949][ T9039]  <TASK>
[  112.596077][ T9039]  dump_stack_lvl+0x99/0x250
[  112.598130][ T9039]  ? __asan_memcpy+0x40/0x70
[  112.600554][ T9039]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.602618][ T9039]  ? __pfx__printk+0x10/0x10
[  112.604377][ T9039]  vpanic+0x281/0x750
[  112.605847][ T9039]  ? __pfx_vpanic+0x10/0x10
[  112.607397][ T9039]  ? irqentry_exit+0x74/0x90
[  112.609139][ T9039]  panic+0xb9/0xc0
[  112.610491][ T9039]  ? __pfx_panic+0x10/0x10
[  112.612280][ T9039]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  112.614644][ T9039]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.616658][ T9039]  ? xfrm_alloc_spi+0x570/0xf30
[  112.618317][ T9039]  check_panic_on_warn+0x89/0xb0
[  112.620017][ T9039]  ? xfrm_alloc_spi+0x570/0xf30
[  112.621783][ T9039]  end_report+0x78/0x160
[  112.623384][ T9039]  kasan_report+0x129/0x150
[  112.625016][ T9039]  ? xfrm_alloc_spi+0x570/0xf30
[  112.626866][ T9039]  xfrm_alloc_spi+0x570/0xf30
[  112.628593][ T9039]  ? xfrm_alloc_spi+0x2a0/0xf30
[  112.630427][ T9039]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  112.632443][ T9039]  ? xfrm_find_acq+0x87/0xa0
[  112.634282][ T9039]  xfrm_alloc_userspi+0x70b/0xc90
[  112.636054][ T9039]  ? apparmor_capable+0x137/0x1b0
[  112.637816][ T9039]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  112.639897][ T9039]  ? __nla_parse+0x40/0x60
[  112.641630][ T9039]  xfrm_user_rcv_msg+0x7a3/0xab0
[  112.643549][ T9039]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  112.645468][ T9039]  ? __pfx___mutex_trylock_common+0x10/0x10
[  112.647692][ T9039]  ? rcu_is_watching+0x15/0xb0
[  112.649532][ T9039]  ? trace_contention_end+0x39/0x120
[  112.651619][ T9039]  ? __mutex_lock+0x335/0x1360
[  112.653519][ T9039]  netlink_rcv_skb+0x208/0x470
[  112.655312][ T9039]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  112.657220][ T9039]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  112.659066][ T9039]  ? netlink_deliver_tap+0x2e/0x1b0
[  112.661069][ T9039]  xfrm_netlink_rcv+0x79/0x90
[  112.662851][ T9039]  netlink_unicast+0x82f/0x9e0
[  112.664538][ T9039]  ? __pfx_netlink_unicast+0x10/0x10
[  112.666429][ T9039]  ? netlink_sendmsg+0x642/0xb30
[  112.668226][ T9039]  ? skb_put+0x11b/0x210
[  112.669977][ T9039]  netlink_sendmsg+0x805/0xb30
[  112.671839][ T9039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.673908][ T9039]  ? aa_sock_msg_perm+0xf1/0x1d0
[  112.675751][ T9039]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  112.677803][ T9039]  ? __pfx_netlink_sendmsg+0x10/0x10
[  112.679705][ T9039]  __sock_sendmsg+0x21c/0x270
[  112.681333][ T9039]  ____sys_sendmsg+0x505/0x830
[  112.682968][ T9039]  ? __pfx_____sys_sendmsg+0x10/0x10
[  112.684761][ T9039]  ? import_iovec+0x74/0xa0
[  112.686370][ T9039]  ___sys_sendmsg+0x21f/0x2a0
[  112.687973][ T9039]  ? __pfx____sys_sendmsg+0x10/0x10
[  112.689767][ T9039]  ? __fget_files+0x2a/0x420
[  112.691377][ T9039]  ? __fget_files+0x3a0/0x420
[  112.692995][ T9039]  __x64_sys_sendmsg+0x19b/0x260
[  112.694704][ T9039]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  112.696597][ T9039]  ? rcu_is_watching+0x15/0xb0
[  112.698252][ T9039]  ? do_syscall_64+0xbe/0x3b0
[  112.699909][ T9039]  do_syscall_64+0xfa/0x3b0
[  112.701489][ T9039]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.703346][ T9039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.705650][ T9039]  ? exc_page_fault+0x9f/0xf0
[  112.707466][ T9039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.709867][ T9039] RIP: 0033:0x7f5d2838ebe9
[  112.711392][ T9039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.717839][ T9039] RSP: 002b:00007f5d29179038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  112.720923][ T9039] RAX: ffffffffffffffda RBX: 00007f5d285b5fa0 RCX: 00007f5d2838ebe9
[  112.724035][ T9039] RDX: 0000000000000000 RSI: 0000200000001680 RDI: 0000000000000003
[  112.726666][ T9039] RBP: 00007f5d28411e19 R08: 0000000000000000 R09: 0000000000000000
[  112.729373][ T9039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  112.732307][ T9039] R13: 00007f5d285b6038 R14: 00007f5d285b5fa0 R15: 00007ffedc09e508
[  112.735256][ T9039]  </TASK>
[  112.737163][ T9039] Kernel Offset: disabled
[  112.738900][ T9039] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:14:40  Registers:
info registers vcpu 0

CPU#0
RAX=edbd54fe75724c00 RBX=ffffffff81968308 RCX=edbd54fe75724c00 RDX=0000000000000001
RSI=ffffffff8d9b6e8f RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001680 CR3=00000000270a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f3c6c012e53
XMM06=0000000000000000 00007f3c6c012e4d XMM07=0000000000000000 00007f3c6c012e61
XMM08=0000000000000000 00007f3c6c012ee7 XMM09=0000000000000000 00007f3c6c012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015f7 RDI=00000000000015f8 RBP=00000000000003f8 RSP=ffffc90002e7e9f0
R8 =ffff88801f1c8237 R9 =1ffff11003e39046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9905 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5d291796c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5d29178fc8 CR3=0000000126160000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f5d28412e53
XMM06=0000000000000000 00007f5d28412e4d XMM07=0000000000000000 00007f5d28412e61
XMM08=0000000000000000 00007f5d28412ee7 XMM09=0000000000000000 00007f5d28412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
