last executing test programs:

1.112214433s ago: executing program 1 (id=904):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r3, 0x4)

1.042902624s ago: executing program 1 (id=906):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
write(r3, &(0x7f00000001c0)="b40ab29f61", 0x5)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

972.533927ms ago: executing program 1 (id=909):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x23, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x84, 0x0, @broadcast}}}}}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1)

853.007862ms ago: executing program 2 (id=911):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)

852.781701ms ago: executing program 2 (id=912):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

119.526584ms ago: executing program 0 (id=914):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003700)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000b6"], 0x44}}, 0x0)

119.335454ms ago: executing program 1 (id=915):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x19, 0x0, 0x7fffffff, 0x2000, 0x440}, 0x50)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f00000004c0)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x20}}], 0x1, 0xc0d0)

119.220617ms ago: executing program 0 (id=916):
r0 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0)

119.095894ms ago: executing program 0 (id=917):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce)
ioctl$SIOCAX25ADDUID(r0, 0x891c, 0x0)

107.669192ms ago: executing program 2 (id=918):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x1000}, &(0x7f0000000240)=0x8)

107.517755ms ago: executing program 1 (id=919):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x200}, "d8"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x2, 0x8, 0xffff}, {0x3, 0x1, 0x4}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)

33.326038ms ago: executing program 2 (id=920):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x2000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)

33.22494ms ago: executing program 0 (id=921):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0xffffffffffffffff, &(0x7f0000000300))

33.077583ms ago: executing program 0 (id=922):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

32.982061ms ago: executing program 2 (id=923):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f00000004c0))

5.476944ms ago: executing program 2 (id=924):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0)

2.553944ms ago: executing program 0 (id=925):
syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0)

0s ago: executing program 1 (id=926):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8803, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x68ed0000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43244' (ED25519) to the list of known hosts.
syzkaller login: [   40.811564][ T5759] cgroup: Unknown subsys name 'net'
[   40.918453][ T5759] cgroup: Unknown subsys name 'cpuset'
[   40.922619][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.199160][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.522973][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.527332][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.542668][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.545178][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.547947][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.549139][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.553187][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.553569][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.563460][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.568725][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.569241][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.571963][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.575175][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.581861][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.586367][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.771712][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   45.866358][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   45.921207][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   45.932701][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.935639][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.939788][ T5833] bridge_slave_0: entered allmulticast mode
[   45.942967][ T5833] bridge_slave_0: entered promiscuous mode
[   45.947272][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.950164][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.953151][ T5833] bridge_slave_1: entered allmulticast mode
[   45.956888][ T5833] bridge_slave_1: entered promiscuous mode
[   46.011218][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.020325][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.060866][ T5833] team0: Port device team_slave_0 added
[   46.064522][ T5833] team0: Port device team_slave_1 added
[   46.067390][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.069857][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.072244][ T5837] bridge_slave_0: entered allmulticast mode
[   46.075009][ T5837] bridge_slave_0: entered promiscuous mode
[   46.079073][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.081383][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.083775][ T5837] bridge_slave_1: entered allmulticast mode
[   46.086703][ T5837] bridge_slave_1: entered promiscuous mode
[   46.131316][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.133782][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.136309][ T5829] bridge_slave_0: entered allmulticast mode
[   46.139109][ T5829] bridge_slave_0: entered promiscuous mode
[   46.142425][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.145144][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.156048][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.162793][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.167029][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.169466][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.171847][ T5829] bridge_slave_1: entered allmulticast mode
[   46.174581][ T5829] bridge_slave_1: entered promiscuous mode
[   46.183843][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.186927][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.198717][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.204318][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.233191][ T5837] team0: Port device team_slave_0 added
[   46.236483][ T5837] team0: Port device team_slave_1 added
[   46.239751][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.244240][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.275561][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.278043][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.286535][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.309965][ T5829] team0: Port device team_slave_0 added
[   46.312848][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.315094][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.323183][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.330549][ T5833] hsr_slave_0: entered promiscuous mode
[   46.333447][ T5833] hsr_slave_1: entered promiscuous mode
[   46.339626][ T5829] team0: Port device team_slave_1 added
[   46.390104][ T5837] hsr_slave_0: entered promiscuous mode
[   46.392357][ T5837] hsr_slave_1: entered promiscuous mode
[   46.394545][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.397657][ T5837] Cannot create hsr debugfs directory
[   46.399923][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.402281][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.411801][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.422483][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.425018][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.434413][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.490709][ T5829] hsr_slave_0: entered promiscuous mode
[   46.493663][ T5829] hsr_slave_1: entered promiscuous mode
[   46.497144][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.499776][ T5829] Cannot create hsr debugfs directory
[   46.676743][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.684241][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.689520][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.698742][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.727336][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.732729][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.738963][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.744626][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.763079][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.765782][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.768839][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.771266][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.800710][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.803894][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.815618][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.827120][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.832381][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.838795][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.902541][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.914061][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.923384][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   46.934546][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.941718][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.944391][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.959249][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.961688][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.968726][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   46.973399][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   46.983982][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.986424][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.991819][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.994162][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.005396][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.007961][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.019953][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.022398][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.214563][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.229703][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.244877][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.269397][ T5829] veth0_vlan: entered promiscuous mode
[   47.277297][ T5833] veth0_vlan: entered promiscuous mode
[   47.280926][ T5829] veth1_vlan: entered promiscuous mode
[   47.293852][ T5833] veth1_vlan: entered promiscuous mode
[   47.314355][ T5837] veth0_vlan: entered promiscuous mode
[   47.320874][ T5829] veth0_macvtap: entered promiscuous mode
[   47.328477][ T5829] veth1_macvtap: entered promiscuous mode
[   47.336396][ T5837] veth1_vlan: entered promiscuous mode
[   47.341059][ T5833] veth0_macvtap: entered promiscuous mode
[   47.352005][ T5833] veth1_macvtap: entered promiscuous mode
[   47.361326][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.378822][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.385464][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.389402][ T5837] veth0_macvtap: entered promiscuous mode
[   47.399835][ T5837] veth1_macvtap: entered promiscuous mode
[   47.403075][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.409800][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.414632][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.427845][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.431763][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.445822][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.450775][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.454286][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.459890][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.469104][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.478263][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.501997][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.509692][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.520434][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.537998][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.557710][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.562276][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.572154][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.578212][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.586449][ T5841] Bluetooth: hci1: command tx timeout
[   47.586527][ T5835] Bluetooth: hci0: command tx timeout
[   47.608747][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.619043][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.619972][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.624701][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.658762][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.660271][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.676672][ T5835] Bluetooth: hci2: command tx timeout
[   47.694844][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.739962][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.742720][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.754718][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.767190][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.790898][ T5903] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4'.
[   47.794075][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   47.825249][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.832120][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.849231][ T5905] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET)
[   47.913377][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.918969][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.924955][ T5843] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   47.928183][ T5843] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.931164][ T5843] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   47.934274][ T5843] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.947424][ T5843] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   47.950902][ T5843] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.953878][ T5843] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   47.957167][ T5843] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.206777][ T5945] team0: Port device syz_tun added
[   49.340126][ T5959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.29'.
[   49.667411][ T5835] Bluetooth: hci1: command tx timeout
[   49.667514][ T5223] Bluetooth: hci0: command tx timeout
[   49.713201][ T5986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'.
[   49.726316][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   49.736026][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   49.740765][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   49.743669][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   49.746684][ T5841] Bluetooth: hci2: command tx timeout
[   49.822876][ T6000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.090070][ T6021] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.57'.
[   50.092525][ T6019] veth3: entered promiscuous mode
[   50.463847][ T6050] Bluetooth: MGMT ver 1.23
[   50.508804][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'.
[   50.580314][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.73'.
[   50.583250][ T6059] netlink: 'syz.1.73': attribute type 1 has an invalid length.
[   50.603447][ T6061] netlink: 'syz.2.74': attribute type 1 has an invalid length.
[   50.617167][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'.
[   50.643783][ T6059] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   50.693304][ T6065] netlink: 'syz.1.76': attribute type 32 has an invalid length.
[   50.696367][ T6065] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   50.768961][ T6073] tipc: Can't bind to reserved service type 2
[   50.887747][ T6083] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.247958][ T6127] netlink: 'syz.2.103': attribute type 1 has an invalid length.
[   51.250538][ T6127] netlink: 'syz.2.103': attribute type 4 has an invalid length.
[   51.746080][ T5841] Bluetooth: hci0: command tx timeout
[   51.746190][ T5223] Bluetooth: hci1: command tx timeout
[   51.826048][ T5223] Bluetooth: hci2: command tx timeout
[   52.134651][ T6141] netlink: 'syz.2.109': attribute type 1 has an invalid length.
[   52.325650][ T6157] netlink: del zone limit has 4 unknown bytes
[   52.512382][ T6172] syzkaller0: entered promiscuous mode
[   52.536402][ T6172] syzkaller0: entered allmulticast mode
[   52.598893][ T6182] xt_hashlimit: size too large, truncated to 1048576
[   53.475456][ T6211] __nla_validate_parse: 7 callbacks suppressed
[   53.475466][ T6211] netlink: 252 bytes leftover after parsing attributes in process `syz.2.140'.
[   53.681763][ T6217] vxcan2: entered promiscuous mode
[   53.721471][ T6220] IPVS: persistence engine module ip_vs_pe_ not found
[   53.826360][ T5223] Bluetooth: hci1: command tx timeout
[   53.828163][ T5223] Bluetooth: hci0: command tx timeout
[   53.840790][ T6227] syzkaller1: entered promiscuous mode
[   53.842653][ T6227] syzkaller1: entered allmulticast mode
[   53.906161][ T5841] Bluetooth: hci2: command tx timeout
[   54.058237][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'.
[   54.246276][ T6249] netlink: 'syz.2.153': attribute type 9 has an invalid length.
[   54.249302][ T6249] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.153'.
[   54.549720][ T6286] syzkaller1: entered promiscuous mode
[   54.551690][ T6286] syzkaller1: entered allmulticast mode
[   54.884042][ T6320] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.004315][ T6332] netlink: 'syz.2.188': attribute type 1 has an invalid length.
[   55.007780][ T6332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.188'.
[   55.238409][    T9] hid-generic 0005:15C2:1010.0001: item fetching failed at offset 0/1
[   55.241710][    T9] hid-generic 0005:15C2:1010.0001: probe with driver hid-generic failed with error -22
[   55.430487][ T6371] openvswitch: netlink: Message has 4 unknown bytes.
[   55.484929][ T6374] netlink: 14 bytes leftover after parsing attributes in process `syz.0.207'.
[   55.517354][ T6376] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.208'.
[   55.553452][ T6374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   55.559652][ T6374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   55.567967][ T6374] bond0 (unregistering): Released all slaves
[   55.745360][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'.
[   55.828686][ T6330] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   55.909869][ T6405] xt_cgroup: xt_cgroup: no path or classid specified
[   56.648733][ T6472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.726466][ T6477] syzkaller1: entered promiscuous mode
[   56.728327][ T6477] syzkaller1: entered allmulticast mode
[   56.995751][ T6500] netlink: 'syz.1.256': attribute type 1 has an invalid length.
[   56.999570][ T6500] netlink: 'syz.1.256': attribute type 10 has an invalid length.
[   57.002382][ T6500] netlink: 'syz.1.256': attribute type 4 has an invalid length.
[   57.005070][ T6500] netlink: 192 bytes leftover after parsing attributes in process `syz.1.256'.
[   57.265823][ T6515] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'.
[   57.270269][ T6515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.262'.
[   58.313234][ T6616] tipc: Started in network mode
[   58.314968][ T6616] tipc: Node identity 2e9693dbfa92, cluster identity 4711
[   58.340123][ T6616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.349636][ T6616] syzkaller0: entered promiscuous mode
[   58.351505][ T6616] syzkaller0: entered allmulticast mode
[   58.368078][ T6616] tipc: Resetting bearer <eth:syzkaller0>
[   58.372077][ T6615] tipc: Resetting bearer <eth:syzkaller0>
[   58.397220][ T6615] tipc: Disabling bearer <eth:syzkaller0>
[   58.554429][ T6642] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[   58.594982][ T6642] bond0: (slave geneve3): making interface the new active one
[   58.600827][ T6642] bond0: (slave geneve3): Enslaving as an active interface with an up link
[   58.610108][ T6642] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[   58.613580][ T6642] __nla_validate_parse: 5 callbacks suppressed
[   58.613587][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'.
[   58.622571][ T6642] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.755634][ T6666] sock: sock_set_timeout: `syz.2.325' (pid 6666) tries to set negative timeout
[   58.896473][ T6676] netlink: 'syz.1.329': attribute type 1 has an invalid length.
[   58.899741][ T6676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   59.799996][ T6708] netlink: 64 bytes leftover after parsing attributes in process `syz.0.343'.
[   59.865740][ T6714] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   60.048972][ T6739] netlink: 'syz.2.359': attribute type 5 has an invalid length.
[   60.093723][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'.
[   60.128760][ T6747] tap0: tun_chr_ioctl cmd 35108
[   60.234981][ T6759] dummy0: entered promiscuous mode
[   60.241918][ T6759] dummy0: entered allmulticast mode
[   60.373471][ T6777] tipc: Started in network mode
[   60.375164][ T6777] tipc: Node identity 080211, cluster identity 4711
[   60.383687][ T6777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.037918][ T6777] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[   61.040442][ T6777] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[   61.044091][ T6790] tipc: Resetting bearer <eth:syzkaller0>
[   61.090265][ T6796] IPVS: Error connecting to the multicast addr
[   61.287460][ T6816] netlink: 56 bytes leftover after parsing attributes in process `syz.0.397'.
[   61.290590][ T6816] netlink: 56 bytes leftover after parsing attributes in process `syz.0.397'.
[   61.321934][ T6822] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   61.476776][ T5896] tipc: Node number set to 134353152
[   61.514547][ T6845] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[   61.533003][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.537620][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.547875][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.550574][ T6846] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.957559][ T6879] netlink: 312 bytes leftover after parsing attributes in process `syz.1.421'.
[   62.433952][ T6899] Driver unsupported XDP return value 0 on prog  (id 57) dev N/A, expect packet loss!
[   62.959817][ T6922] netlink: 'syz.1.439': attribute type 1 has an invalid length.
[   62.962755][ T6922] netlink: 72 bytes leftover after parsing attributes in process `syz.1.439'.
[   62.966021][ T6922] netlink: 97 bytes leftover after parsing attributes in process `syz.1.439'.
[   63.068653][ T6934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.444'.
[   63.092661][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'.
[   63.489821][ T6979] netlink: 'syz.2.466': attribute type 1 has an invalid length.
[   63.492600][ T6979] netlink: 'syz.2.466': attribute type 4 has an invalid length.
[   63.542511][ T6986] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[   63.712847][ T7002] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   63.724844][ T7002] bridge_slave_0: left allmulticast mode
[   63.729102][ T7002] bridge_slave_0: left promiscuous mode
[   63.731066][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.737411][ T7002] bridge_slave_1: left allmulticast mode
[   63.746222][ T7002] bridge_slave_1: left promiscuous mode
[   63.748195][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.766392][ T7002] bond0: (slave bond_slave_0): Releasing backup interface
[   63.800134][ T7002] bond0: (slave bond_slave_1): Releasing backup interface
[   63.807633][ T7002] team0: Port device team_slave_0 removed
[   63.811920][ T7002] team0: Port device team_slave_1 removed
[   63.814613][ T7002] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.819238][ T7002] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.835644][ T7002] netlink: 'syz.1.478': attribute type 10 has an invalid length.
[   63.846938][ T7002] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   63.852413][ T7002] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   63.925637][ T7016] xt_CT: You must specify a L4 protocol and not use inversions on it
[   64.500103][ T7040] __nla_validate_parse: 2 callbacks suppressed
[   64.500112][ T7040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.493'.
[   64.546815][   T47] cfg80211: failed to load regulatory.db
[   64.998075][ T7056] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   65.000825][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.499'.
[   65.003853][ T7056] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   65.071105][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'.
[   65.548763][ T7078] xt_ecn: cannot match TCP bits for non-tcp packets
[   66.150578][ T7138] netlink: 'syz.1.529': attribute type 13 has an invalid length.
[   66.162091][ T7138] netlink: 'syz.1.529': attribute type 17 has an invalid length.
[   66.184392][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.2.532'.
[   66.227437][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'.
[   66.233773][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.237304][ T7138] 8021q: adding VLAN 0 to HW filter on device team0
[   66.242300][ T7138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   66.253617][ T7142] vlan0: entered promiscuous mode
[   66.259957][ T7142] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   66.310761][ T7138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.375012][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.248740][ T7167] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.542'.
[   67.423190][ T7138] syz.1.529 (7138) used greatest stack depth: 20032 bytes left
[   67.604223][ T7197] ipvlan2: entered promiscuous mode
[   67.663688][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.546'.
[   67.832299][ T7212] veth1: entered promiscuous mode
[   67.843182][ T7212] netlink: 'syz.2.562': attribute type 8 has an invalid length.
[   67.845742][ T7212] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   67.855360][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.168840][ T7248] veth0: entered promiscuous mode
[   68.171129][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'.
[   68.193623][ T7248] veth0 (unregistering): left promiscuous mode
[   68.372890][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'.
[   68.474536][ T7276] xt_CT: No such helper "syz0"
[   68.592045][ T7288] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   68.675514][ T7296] netlink: 'syz.2.596': attribute type 1 has an invalid length.
[   68.680259][ T7296] netlink: 208 bytes leftover after parsing attributes in process `syz.2.596'.
[   68.812640][ T7307] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   68.825450][ T7307] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   69.017210][ T7315] veth1: entered promiscuous mode
[   69.111094][ T7332] netlink: 'syz.0.613': attribute type 27 has an invalid length.
[   69.130439][ T7330] Zero length message leads to an empty skb
[   69.259712][   T47] IPVS: starting estimator thread 0...
[   69.340172][ T7358] netlink: 'syz.2.624': attribute type 4 has an invalid length.
[   69.356425][ T7350] IPVS: using max 79 ests per chain, 189600 per kthread
[   69.601715][ T7381] bridge_slave_0: left allmulticast mode
[   69.603749][ T7381] bridge_slave_0: left promiscuous mode
[   69.605690][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.615636][ T7381] bridge_slave_1: left allmulticast mode
[   69.620196][ T7381] bridge_slave_1: left promiscuous mode
[   69.622216][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.632838][ T7381] team0: Port device team_slave_0 removed
[   69.644626][ T7381] team0: Port device team_slave_1 removed
[   69.671742][ T7381] bond0: (slave geneve3): Releasing active interface
[   69.673930][ T7381] bond0: (slave geneve3): the permanent HWaddr of slave - 5a:f8:ac:94:63:f4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   69.681037][ T7381] bond0: (slave ip6gretap1): making interface the new active one
[   69.707560][ T7381] bond0: (slave ip6gretap1): Releasing active interface
[   69.708291][ T7396] __nla_validate_parse: 3 callbacks suppressed
[   69.708325][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[   69.757115][ T7388] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   69.769195][ T7396] netlink: 452 bytes leftover after parsing attributes in process `syz.2.640'.
[   70.220160][ T7425] netlink: 'syz.2.651': attribute type 1 has an invalid length.
[   70.222807][ T7425] netlink: 224 bytes leftover after parsing attributes in process `syz.2.651'.
[   70.322396][ T7425] xt_CT: No such helper "snmp"
[   70.328289][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'.
[   70.331485][ T7425] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   70.336392][ T7425] tipc: Enabled bearer <udp:syz1>, priority 10
[   70.337502][ T7433] netlink: 56 bytes leftover after parsing attributes in process `syz.0.654'.
[   70.342433][ T7433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.654'.
[   70.424389][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.657'.
[   70.537235][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'.
[   70.754590][ T7468] netlink: 32 bytes leftover after parsing attributes in process `syz.0.671'.
[   70.847928][ T7475] block nbd0: NBD_DISCONNECT
[   71.041683][ T7493] netlink: 176 bytes leftover after parsing attributes in process `syz.1.686'.
[   71.044617][ T7493] ip6gretap0: entered promiscuous mode
[   71.056538][   T47] IPVS: starting estimator thread 0...
[   71.146148][ T7496] IPVS: using max 40 ests per chain, 96000 per kthread
[   71.446456][    T9] tipc: Node number set to 3557069787
[   71.941794][ T7557] openvswitch: netlink: Unknown nsh attribute 0
[   71.943927][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.000703][ T7561] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[   72.120728][ T7571] syzkaller0: entered promiscuous mode
[   72.123746][ T7571] syzkaller0: entered allmulticast mode
[   72.277916][ T7588] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   72.349612][ T7595] netlink: 'syz.1.720': attribute type 1 has an invalid length.
[   72.398668][ T5896] IPVS: starting estimator thread 0...
[   72.415252][ T7599] syzkaller1: entered promiscuous mode
[   72.417542][ T7599] syzkaller1: entered allmulticast mode
[   72.487948][ T7600] IPVS: using max 79 ests per chain, 189600 per kthread
[   72.605848][ T7623] netlink: 'syz.0.736': attribute type 10 has an invalid length.
[   72.623932][ T7626] tipc: Started in network mode
[   72.637779][ T7626] tipc: Node identity , cluster identity 4711
[   72.640302][ T7626] tipc: Failed to obtain node identity
[   72.642516][ T7626] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   72.658327][ T7626] syzkaller0: entered promiscuous mode
[   72.660503][ T7626] syzkaller0: entered allmulticast mode
[   73.235840][ T7685] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   73.407193][ T7703] IPVS: Unknown mcast interface: pimreg0
[   73.481071][ T7713] lo speed is unknown, defaulting to 1000
[   73.483067][ T7713] lo speed is unknown, defaulting to 1000
[   73.495161][ T7713] lo speed is unknown, defaulting to 1000
[   73.504531][ T7713] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.512038][ T7713] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   73.553243][ T7713] lo speed is unknown, defaulting to 1000
[   73.560564][ T7713] lo speed is unknown, defaulting to 1000
[   73.563101][ T7713] lo speed is unknown, defaulting to 1000
[   73.975202][ T7761] netlink: 'syz.1.800': attribute type 2 has an invalid length.
[   74.049716][ T7770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.095813][ T7775] netlink: 'syz.0.808': attribute type 3 has an invalid length.
[   74.147982][ T7783] netlink: 'syz.0.810': attribute type 1 has an invalid length.
[   74.280627][ T7802] tap0: tun_chr_ioctl cmd 1074025677
[   74.282448][ T7802] tap0: linktype set to 270
[   74.292387][ T7804] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   74.318731][ T7803] lo speed is unknown, defaulting to 1000
[   74.371746][ T7813] bond0: invalid ARP target 0.0.0.0 specified for addition
[   74.374305][ T7813] bond0: option arp_ip_target: invalid value (0)
[   74.477450][ T7819] delete_channel: no stack
[   74.496656][ T7823] xt_TCPMSS: Only works on TCP SYN packets
[   74.882211][ T7865] __nla_validate_parse: 20 callbacks suppressed
[   74.882221][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.849'.
[   75.177698][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'.
[   75.633843][ T7919] netlink: 'syz.0.874': attribute type 2 has an invalid length.
[   75.637188][ T7919] netlink: 119 bytes leftover after parsing attributes in process `syz.0.874'.
[   75.758548][ T7928] netlink: 830 bytes leftover after parsing attributes in process `syz.0.878'.
[   75.878386][ T7941] sctp: [Deprecated]: syz.2.883 (pid 7941) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.878386][ T7941] Use struct sctp_sack_info instead
[   76.157344][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.893'.
[   76.160118][ T7963] netlink: 'syz.0.893': attribute type 20 has an invalid length.
[   76.161574][ T7962] netlink: 52 bytes leftover after parsing attributes in process `syz.1.894'.
[   76.162535][ T7963] netlink: 'syz.0.893': attribute type 21 has an invalid length.
[   76.167135][ T7962] netlink: 52 bytes leftover after parsing attributes in process `syz.1.894'.
[   76.174684][ T7962] netlink: 52 bytes leftover after parsing attributes in process `syz.1.894'.
[   76.198244][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.894'.
[   76.452978][ T7987] sctp: [Deprecated]: syz.1.904 (pid 7987) Use of int in maxseg socket option.
[   76.452978][ T7987] Use struct sctp_assoc_value instead
[   76.479136][ T7989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.905'.
[   76.581296][ T7998] tipc: Started in network mode
[   76.586408][ T7998] tipc: Node identity 7676f52fa49, cluster identity 4711
[   76.589349][ T7998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.618789][ T7998] syzkaller0: entered promiscuous mode
[   76.621069][ T7998] syzkaller0: entered allmulticast mode
[   76.623740][ T7998] tipc: Resetting bearer <eth:syzkaller0>
[   76.633131][ T7997] tipc: Resetting bearer <eth:syzkaller0>
[   76.796197][ T5223] Bluetooth: hci2: command 0x0405 tx timeout
[   77.345625][ T7997] tipc: Disabling bearer <eth:syzkaller0>
[   77.353299][ T8006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.356570][ T8016] netlink: 'syz.0.913': attribute type 1 has an invalid length.
[   77.356669][ T8007] syzkaller0: entered promiscuous mode
[   77.360869][ T8007] syzkaller0: entered allmulticast mode
[   77.364345][ T8017] tipc: Resetting bearer <eth:syzkaller0>
[   77.368813][ T8003] tipc: Resetting bearer <eth:syzkaller0>
[   77.376781][ T8003] tipc: Disabling bearer <eth:syzkaller0>
[   77.509665][ T8037] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   77.561227][ T8042] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.593845][ T8042] bond1: (slave batadv1): Opening slave failed
[   77.599281][ T8050] ==================================================================
[   77.602318][ T8050] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[   77.605096][ T8050] Read of size 2 at addr ffff8881109ec142 by task syz.1.928/8050
[   77.608824][ T8050] 
[   77.609622][ T8050] CPU: 0 UID: 0 PID: 8050 Comm: syz.1.928 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[   77.609633][ T8050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.609637][ T8050] Call Trace:
[   77.609642][ T8050]  <TASK>
[   77.609647][ T8050]  dump_stack_lvl+0x189/0x250
[   77.609660][ T8050]  ? __kasan_check_byte+0x12/0x40
[   77.609673][ T8050]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.609683][ T8050]  ? lock_release+0x4b/0x3e0
[   77.609693][ T8050]  ? __virt_addr_valid+0x4a5/0x5c0
[   77.609704][ T8050]  print_report+0xca/0x230
[   77.609713][ T8050]  ? __xfrm_state_lookup+0x6ad/0x8d0
[   77.609725][ T8050]  kasan_report+0x118/0x150
[   77.609735][ T8050]  ? __xfrm_state_lookup+0x6ad/0x8d0
[   77.609747][ T8050]  __xfrm_state_lookup+0x6ad/0x8d0
[   77.609758][ T8050]  ? __pfx___xfrm_state_lookup+0x10/0x10
[   77.609771][ T8050]  xfrm_state_add+0x27d/0xc40
[   77.609779][ T8050]  xfrm_add_sa+0x35a1/0x4070
[   77.609788][ T8050]  ? __pfx_xfrm_add_sa+0x10/0x10
[   77.609795][ T8050]  ? apparmor_capable+0x137/0x1b0
[   77.609807][ T8050]  ? __nla_parse+0x40/0x60
[   77.609817][ T8050]  xfrm_user_rcv_msg+0x7a3/0xab0
[   77.609825][ T8050]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   77.609838][ T8050]  ? __mutex_trylock_common+0x153/0x260
[   77.609848][ T8050]  ? __pfx___mutex_trylock_common+0x10/0x10
[   77.609858][ T8050]  ? rcu_is_watching+0x15/0xb0
[   77.609867][ T8050]  ? trace_contention_end+0x39/0x120
[   77.609877][ T8050]  netlink_rcv_skb+0x208/0x470
[   77.609885][ T8050]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   77.609893][ T8050]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   77.609902][ T8050]  ? netlink_deliver_tap+0x2e/0x1b0
[   77.609908][ T8050]  ? netlink_deliver_tap+0x2e/0x1b0
[   77.609916][ T8050]  xfrm_netlink_rcv+0x79/0x90
[   77.609923][ T8050]  netlink_unicast+0x82f/0x9e0
[   77.609935][ T8050]  ? __pfx_netlink_unicast+0x10/0x10
[   77.609946][ T8050]  ? netlink_sendmsg+0x642/0xb30
[   77.609952][ T8050]  ? skb_put+0x11b/0x210
[   77.609961][ T8050]  netlink_sendmsg+0x805/0xb30
[   77.609969][ T8050]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.609977][ T8050]  ? aa_sock_msg_perm+0x94/0x160
[   77.609985][ T8050]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   77.609995][ T8050]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.610004][ T8050]  __sock_sendmsg+0x21c/0x270
[   77.610015][ T8050]  ____sys_sendmsg+0x505/0x830
[   77.610024][ T8050]  ? __pfx_____sys_sendmsg+0x10/0x10
[   77.610035][ T8050]  ? import_iovec+0x74/0xa0
[   77.610045][ T8050]  ___sys_sendmsg+0x21f/0x2a0
[   77.610053][ T8050]  ? __pfx____sys_sendmsg+0x10/0x10
[   77.610068][ T8050]  ? __fget_files+0x2a/0x420
[   77.610074][ T8050]  ? __fget_files+0x3a0/0x420
[   77.610082][ T8050]  __x64_sys_sendmsg+0x19b/0x260
[   77.610091][ T8050]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   77.610102][ T8050]  ? do_syscall_64+0xbe/0x3b0
[   77.610111][ T8050]  do_syscall_64+0xfa/0x3b0
[   77.610119][ T8050]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.610126][ T8050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.610133][ T8050]  ? exc_page_fault+0x9f/0xf0
[   77.610140][ T8050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.610146][ T8050] RIP: 0033:0x7f579b78e9a9
[   77.610154][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.610161][ T8050] RSP: 002b:00007f579c596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.610169][ T8050] RAX: ffffffffffffffda RBX: 00007f579b9b5fa0 RCX: 00007f579b78e9a9
[   77.610175][ T8050] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004
[   77.610179][ T8050] RBP: 00007f579b810d69 R08: 0000000000000000 R09: 0000000000000000
[   77.610184][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.610188][ T8050] R13: 0000000000000000 R14: 00007f579b9b5fa0 R15: 00007fffc130b9b8
[   77.610196][ T8050]  </TASK>
[   77.610198][ T8050] 
[   77.741476][ T8050] Allocated by task 7519:
[   77.743345][ T8050]  kasan_save_track+0x3e/0x80
[   77.745356][ T8050]  __kasan_slab_alloc+0x6c/0x80
[   77.747445][ T8050]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   77.749768][ T8050]  xfrm_state_alloc+0x24/0x2f0
[   77.751797][ T8050]  __find_acq_core+0x8a7/0x1c00
[   77.753841][ T8050]  xfrm_find_acq+0x78/0xa0
[   77.755723][ T8050]  xfrm_alloc_userspi+0x6b3/0xc90
[   77.757849][ T8050]  xfrm_user_rcv_msg+0x7a3/0xab0
[   77.759969][ T8050]  netlink_rcv_skb+0x208/0x470
[   77.762080][ T8050]  xfrm_netlink_rcv+0x79/0x90
[   77.763839][ T8050]  netlink_unicast+0x82f/0x9e0
[   77.765408][ T8050]  netlink_sendmsg+0x805/0xb30
[   77.766963][ T8050]  __sock_sendmsg+0x21c/0x270
[   77.768503][ T8050]  ____sys_sendmsg+0x505/0x830
[   77.770031][ T8050]  ___sys_sendmsg+0x21f/0x2a0
[   77.771839][ T8050]  __x64_sys_sendmsg+0x19b/0x260
[   77.773929][ T8050]  do_syscall_64+0xfa/0x3b0
[   77.775871][ T8050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.778031][ T8050] 
[   77.778916][ T8050] Freed by task 5896:
[   77.780318][ T8050]  kasan_save_track+0x3e/0x80
[   77.782074][ T8050]  kasan_save_free_info+0x46/0x50
[   77.784202][ T8050]  __kasan_slab_free+0x62/0x70
[   77.786291][ T8050]  kmem_cache_free+0x18f/0x400
[   77.788353][ T8050]  xfrm_state_gc_task+0x518/0x6a0
[   77.790494][ T8050]  process_scheduled_works+0xae1/0x17b0
[   77.792317][ T8050]  worker_thread+0x8a0/0xda0
[   77.793906][ T8050]  kthread+0x711/0x8a0
[   77.795264][ T8050]  ret_from_fork+0x3fc/0x770
[   77.796763][ T8050]  ret_from_fork_asm+0x1a/0x30
[   77.798349][ T8050] 
[   77.799213][ T8050] The buggy address belongs to the object at ffff8881109ec000
[   77.799213][ T8050]  which belongs to the cache xfrm_state of size 928
[   77.804300][ T8050] The buggy address is located 322 bytes inside of
[   77.804300][ T8050]  freed 928-byte region [ffff8881109ec000, ffff8881109ec3a0)
[   77.808617][ T8050] 
[   77.809431][ T8050] The buggy address belongs to the physical page:
[   77.811506][ T8050] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881109ecd80 pfn:0x1109ec
[   77.814733][ T8050] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   77.817447][ T8050] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   77.819923][ T8050] page_type: f5(slab)
[   77.821310][ T8050] raw: 057ff00000000040 ffff888104a59780 dead000000000122 0000000000000000
[   77.824134][ T8050] raw: ffff8881109ecd80 00000000800e000c 00000000f5000000 0000000000000000
[   77.826960][ T8050] head: 057ff00000000040 ffff888104a59780 dead000000000122 0000000000000000
[   77.829761][ T8050] head: ffff8881109ecd80 00000000800e000c 00000000f5000000 0000000000000000
[   77.832555][ T8050] head: 057ff00000000002 ffffea0004427b01 00000000ffffffff 00000000ffffffff
[   77.835321][ T8050] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   77.838893][ T8050] page dumped because: kasan: bad access detected
[   77.841539][ T8050] page_owner tracks the page as allocated
[   77.843533][ T8050] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7383, tgid 7382 (syz.2.635), ts 69598598829, free_ts 69515372885
[   77.850430][ T8050]  post_alloc_hook+0x240/0x2a0
[   77.852321][ T8050]  get_page_from_freelist+0x21e4/0x22c0
[   77.854592][ T8050]  __alloc_frozen_pages_noprof+0x181/0x370
[   77.856815][ T8050]  alloc_pages_mpol+0x232/0x4a0
[   77.858661][ T8050]  allocate_slab+0x8a/0x3b0
[   77.860413][ T8050]  ___slab_alloc+0xbfc/0x1480
[   77.862123][ T8050]  kmem_cache_alloc_noprof+0x283/0x3c0
[   77.864010][ T8050]  xfrm_state_alloc+0x24/0x2f0
[   77.865680][ T8050]  xfrm_add_sa+0x17d1/0x4070
[   77.867261][ T8050]  xfrm_user_rcv_msg+0x7a3/0xab0
[   77.868900][ T8050]  netlink_rcv_skb+0x208/0x470
[   77.870489][ T8050]  xfrm_netlink_rcv+0x79/0x90
[   77.871984][ T8050]  netlink_unicast+0x82f/0x9e0
[   77.873470][ T8050]  netlink_sendmsg+0x805/0xb30
[   77.874970][ T8050]  __sock_sendmsg+0x21c/0x270
[   77.876537][ T8050]  ____sys_sendmsg+0x505/0x830
[   77.878070][ T8050] page last free pid 7374 tgid 7373 stack trace:
[   77.880040][ T8050]  __free_frozen_pages+0xc71/0xe70
[   77.881669][ T8050]  stack_depot_save_flags+0x445/0x900
[   77.883571][ T8050]  kasan_save_track+0x4f/0x80
[   77.885343][ T8050]  __kasan_slab_alloc+0x6c/0x80
[   77.886989][ T8050]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[   77.888972][ T8050]  kmalloc_reserve+0xbd/0x290
[   77.890530][ T8050]  __alloc_skb+0x142/0x2d0
[   77.892043][ T8050]  ip_frag_next+0xd1/0xa60
[   77.893536][ T8050]  ip_do_fragment+0x76d/0x1770
[   77.895198][ T8050]  iptunnel_xmit+0x592/0xa40
[   77.896735][ T8050]  udp_tunnel_xmit_skb+0x26e/0x3c0
[   77.898368][ T8050]  geneve_xmit+0x207d/0x2b70
[   77.899907][ T8050]  dev_hard_start_xmit+0x2d7/0x830
[   77.901627][ T8050]  __dev_queue_xmit+0x1b8d/0x3b50
[   77.903322][ T8050]  packet_sendmsg+0x3e16/0x5060
[   77.904971][ T8050]  __sock_sendmsg+0x21c/0x270
[   77.906557][ T8050] 
[   77.907376][ T8050] Memory state around the buggy address:
[   77.909259][ T8050]  ffff8881109ec000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.911901][ T8050]  ffff8881109ec080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.914497][ T8050] >ffff8881109ec100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.917128][ T8050]                                            ^
[   77.919182][ T8050]  ffff8881109ec180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.921847][ T8050]  ffff8881109ec200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   77.924508][ T8050] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   77.927364][ T8050] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   77.930096][ T8050] CPU: 0 UID: 0 PID: 8050 Comm: syz.1.928 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[   77.935211][ T8050] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.939520][ T8050] Call Trace:
[   77.940921][ T8050]  <TASK>
[   77.942164][ T8050]  dump_stack_lvl+0x99/0x250
[   77.944096][ T8050]  ? __asan_memcpy+0x40/0x70
[   77.945769][ T8050]  ? __pfx_dump_stack_lvl+0x10/0x10
[   77.947522][ T8050]  ? __pfx__printk+0x10/0x10
[   77.949082][ T8050]  panic+0x2db/0x790
[   77.950430][ T8050]  ? __pfx_panic+0x10/0x10
[   77.951965][ T8050]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   77.954000][ T8050]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   77.956000][ T8050]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   77.958129][ T8050]  ? print_memory_metadata+0x314/0x400
[   77.959958][ T8050]  ? __xfrm_state_lookup+0x6ad/0x8d0
[   77.961755][ T8050]  check_panic_on_warn+0x89/0xb0
[   77.963432][ T8050]  ? __xfrm_state_lookup+0x6ad/0x8d0
[   77.965202][ T8050]  end_report+0x78/0x160
[   77.966665][ T8050]  kasan_report+0x129/0x150
[   77.968215][ T8050]  ? __xfrm_state_lookup+0x6ad/0x8d0
[   77.970119][ T8050]  __xfrm_state_lookup+0x6ad/0x8d0
[   77.971789][ T8050]  ? __pfx___xfrm_state_lookup+0x10/0x10
[   77.973606][ T8050]  xfrm_state_add+0x27d/0xc40
[   77.975261][ T8050]  xfrm_add_sa+0x35a1/0x4070
[   77.976849][ T8050]  ? __pfx_xfrm_add_sa+0x10/0x10
[   77.978634][ T8050]  ? apparmor_capable+0x137/0x1b0
[   77.980412][ T8050]  ? __nla_parse+0x40/0x60
[   77.981924][ T8050]  xfrm_user_rcv_msg+0x7a3/0xab0
[   77.983710][ T8050]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   77.985701][ T8050]  ? __mutex_trylock_common+0x153/0x260
[   77.987903][ T8050]  ? __pfx___mutex_trylock_common+0x10/0x10
[   77.989980][ T8050]  ? rcu_is_watching+0x15/0xb0
[   77.991820][ T8050]  ? trace_contention_end+0x39/0x120
[   77.993747][ T8050]  netlink_rcv_skb+0x208/0x470
[   77.995530][ T8050]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[   77.997438][ T8050]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   77.999202][ T8050]  ? netlink_deliver_tap+0x2e/0x1b0
[   78.000954][ T8050]  ? netlink_deliver_tap+0x2e/0x1b0
[   78.002697][ T8050]  xfrm_netlink_rcv+0x79/0x90
[   78.004294][ T8050]  netlink_unicast+0x82f/0x9e0
[   78.005882][ T8050]  ? __pfx_netlink_unicast+0x10/0x10
[   78.007965][ T8050]  ? netlink_sendmsg+0x642/0xb30
[   78.010058][ T8050]  ? skb_put+0x11b/0x210
[   78.011830][ T8050]  netlink_sendmsg+0x805/0xb30
[   78.013596][ T8050]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.015610][ T8050]  ? aa_sock_msg_perm+0x94/0x160
[   78.017506][ T8050]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   78.019549][ T8050]  ? __pfx_netlink_sendmsg+0x10/0x10
[   78.021695][ T8050]  __sock_sendmsg+0x21c/0x270
[   78.023533][ T8050]  ____sys_sendmsg+0x505/0x830
[   78.025367][ T8050]  ? __pfx_____sys_sendmsg+0x10/0x10
[   78.027391][ T8050]  ? import_iovec+0x74/0xa0
[   78.029096][ T8050]  ___sys_sendmsg+0x21f/0x2a0
[   78.030765][ T8050]  ? __pfx____sys_sendmsg+0x10/0x10
[   78.032937][ T8050]  ? __fget_files+0x2a/0x420
[   78.034786][ T8050]  ? __fget_files+0x3a0/0x420
[   78.036684][ T8050]  __x64_sys_sendmsg+0x19b/0x260
[   78.038414][ T8050]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   78.040262][ T8050]  ? do_syscall_64+0xbe/0x3b0
[   78.041866][ T8050]  do_syscall_64+0xfa/0x3b0
[   78.043413][ T8050]  ? lockdep_hardirqs_on+0x9c/0x150
[   78.045257][ T8050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.047281][ T8050]  ? exc_page_fault+0x9f/0xf0
[   78.048883][ T8050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.051006][ T8050] RIP: 0033:0x7f579b78e9a9
[   78.052553][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   78.058954][ T8050] RSP: 002b:00007f579c596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   78.062264][ T8050] RAX: ffffffffffffffda RBX: 00007f579b9b5fa0 RCX: 00007f579b78e9a9
[   78.065053][ T8050] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000004
[   78.067692][ T8050] RBP: 00007f579b810d69 R08: 0000000000000000 R09: 0000000000000000
[   78.070258][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   78.072892][ T8050] R13: 0000000000000000 R14: 00007f579b9b5fa0 R15: 00007fffc130b9b8
[   78.075535][ T8050]  </TASK>
[   78.077203][ T8050] Kernel Offset: disabled
[   78.078640][ T8050] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:28:49  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001b0d RDI=0000000000001b0e RBP=00000000000003f8 RSP=ffffc90004be69d0
R8 =ffff88801f9b8237 R9 =1ffff11003f37046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99aff8a7 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f579c5966c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30618ff8 CR3=000000002390a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f579b986478 00007f579b986450 XMM03=00007f579b986488 00007f579b986480
XMM04=00007f579c4ed100 00007f579b986440 XMM05=00007f579b986458 00007f579b9864a0
XMM06=00007f579b986498 00007f579b986490 XMM07=00007f579b986488 00007f579b986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f579b811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fffffffffffffff0 RBX=ffffc900001e04b0 RCX=0000000000000000 RDX=ffffc900001e04e8
RSI=dffffc0000000000 RDI=ffffc900001e04a8 RBP=dffffc0000000000 RSP=ffffc900001e0380
R8 =ffffc900001e0a70 R9 =0000000000000000 R10=ffffc900001e04f8 R11=fffff5200003c0a1
R12=1ffff9200003c096 R13=ffffc900001e04f8 R14=ffffc900001e04a8 R15=ffffc900001e04a8
RIP=ffffffff8172d083 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdeb85ce800 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f81bd6e56c0 CR3=000000001f0aa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
