last executing test programs:

2m28.272861871s ago: executing program 1 (id=269):
r0 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x80000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)

2m28.163480941s ago: executing program 1 (id=270):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8080)

2m28.161144079s ago: executing program 0 (id=271):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0)

2m28.068985143s ago: executing program 2 (id=272):
syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "a874e400"}, @generic={0x1, 0x2}]}}}}}}}}, 0x0)

2m28.068594817s ago: executing program 1 (id=273):
unshare(0x6020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r1, r0, 0x26}, 0x10)

2m27.949901543s ago: executing program 0 (id=274):
close(0x3)
r0 = socket(0x10, 0x3, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}], 0x2, 0x32001, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x20}}, 0x0)

2m27.949615014s ago: executing program 2 (id=275):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

2m27.903256087s ago: executing program 1 (id=276):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0)
pipe(&(0x7f0000002740))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f00000002c0)={0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x1000)
syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xce, 0x3, 0xf, [{@multicast2, 0xfff}, {@rand_addr=0x64010101, 0x2}, {@local, 0x7ff}, {@broadcast, 0x9}]}, @ra={0x94, 0x4}, @rr={0x7, 0x3, 0x5d}]}}, "040086dd0000ffff"}}}}}, 0x0)

2m27.804566097s ago: executing program 2 (id=277):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}]}]}, 0x38}}, 0x0)

2m27.641862549s ago: executing program 2 (id=278):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0xfdfdffff, {0x2, 0x0, @empty}})

2m26.853324239s ago: executing program 0 (id=279):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180100000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000368000d8008000200ffffffff0400030914000400fe88000000000000000000000000000114000380060001"], 0x118}}, 0x0)

2m26.648567765s ago: executing program 0 (id=280):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r3, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004)

2m26.473810964s ago: executing program 0 (id=281):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004)

2m26.405289258s ago: executing program 2 (id=282):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10)
sendmmsg(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

2m26.372559194s ago: executing program 1 (id=283):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bb"], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000), 0x1)

2m26.241437013s ago: executing program 0 (id=284):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000d10ffc), 0x4)

2m23.871403845s ago: executing program 2 (id=285):
clock_gettime(0xfffffffffffffffd, &(0x7f0000000480))

2m23.87109896s ago: executing program 1 (id=286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56c41, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xb}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

2m5.397727618s ago: executing program 32 (id=284):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000d10ffc), 0x4)

1m36.381433158s ago: executing program 33 (id=286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56c41, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xb}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

1m35.879918533s ago: executing program 34 (id=285):
clock_gettime(0xfffffffffffffffd, &(0x7f0000000480))

3.42339231s ago: executing program 4 (id=2411):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5421, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000280), 0x9)
r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12)

2.484465463s ago: executing program 4 (id=2425):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

2.411439154s ago: executing program 4 (id=2426):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x93}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1.573346995s ago: executing program 4 (id=2435):
unshare(0x22020600)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000040), 0x4)

1.51337892s ago: executing program 4 (id=2437):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.327144894s ago: executing program 4 (id=2439):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfbc, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "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"}}, 0xfca)

274.258164ms ago: executing program 3 (id=2466):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @empty, 0x7}}, 0x24)
connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10001}}, 0x24)

274.124694ms ago: executing program 3 (id=2467):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0xc, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
close(r1)

146.365132ms ago: executing program 5 (id=2470):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@fwd={0x3}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @func_proto]}, {0x0, [0x0, 0x61, 0x5f, 0x61, 0x61]}}, 0x0, 0x47, 0x0, 0x1, 0x1}, 0x28)

146.065548ms ago: executing program 3 (id=2471):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$sock_int(r0, 0x1, 0xe, 0x0, &(0x7f0000004d40))

145.934092ms ago: executing program 5 (id=2472):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'pimreg1\x00', {0x2, 0x0, @initdev}})

73.883566ms ago: executing program 3 (id=2473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffa563a52de7fdda", @ANYRES32, @ANYBLOB='\b'], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

73.608054ms ago: executing program 5 (id=2474):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001c40)={0x50, r1, 0x1, 0x70bd27, 0x0, {0x4}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

73.457287ms ago: executing program 3 (id=2475):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x10, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)

72.108079ms ago: executing program 5 (id=2476):
write(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
r0 = socket(0x1, 0x80802, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8)
r3 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)

1.999059ms ago: executing program 5 (id=2477):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d00000000009500000000000000e2981e9e6b3d3f831e9c7e3a6ca629f981c399"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.696764ms ago: executing program 3 (id=2478):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040005"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

0s ago: executing program 5 (id=2479):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x80ff, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}]}, 0x60}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3790' (ED25519) to the list of known hosts.
syzkaller login: [   48.602004][ T5774] cgroup: Unknown subsys name 'net'
[   48.727626][ T5774] cgroup: Unknown subsys name 'cpuset'
[   48.732914][ T5774] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.026401][ T5774] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.575764][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.578632][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.593365][ T5893] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.657573][  T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.661572][  T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.742752][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   58.858843][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.862470][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.866501][ T5894] bridge_slave_0: entered allmulticast mode
[   58.870527][ T5894] bridge_slave_0: entered promiscuous mode
[   58.877539][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.880668][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.883775][ T5894] bridge_slave_1: entered allmulticast mode
[   58.888314][ T5894] bridge_slave_1: entered promiscuous mode
[   58.921505][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.928175][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.962941][ T5894] team0: Port device team_slave_0 added
[   58.967770][ T5894] team0: Port device team_slave_1 added
[   58.994650][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.997886][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.008959][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.013879][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.016350][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.026100][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.053214][ T5894] hsr_slave_0: entered promiscuous mode
[   59.055803][ T5894] hsr_slave_1: entered promiscuous mode
[   59.148397][ T5894] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.154249][ T5894] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.159424][ T5894] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.163723][ T5894] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.185659][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.188659][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.191988][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.195077][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.239196][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.248308][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.251291][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.259658][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   59.268465][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.271027][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.277659][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.280664][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.402922][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.433129][ T5894] veth0_vlan: entered promiscuous mode
[   59.438662][ T5894] veth1_vlan: entered promiscuous mode
[   59.454480][ T5894] veth0_macvtap: entered promiscuous mode
[   59.459288][ T5894] veth1_macvtap: entered promiscuous mode
[   59.470096][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.478056][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.484508][ T5909] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.488591][ T5909] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.492375][ T5909] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.496456][ T5909] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.359033][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.362026][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.368218][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.371908][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.377962][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.393262][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.396724][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.400280][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.403473][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.406755][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.479325][ T5930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.486367][ T5930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.490629][ T5930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.494404][ T5930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.498668][ T5930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.730432][ T5929] chnl_net:caif_netlink_parms(): no params data found
[   60.828574][ T5929] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.831667][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.834335][ T5929] bridge_slave_0: entered allmulticast mode
[   60.838906][ T5929] bridge_slave_0: entered promiscuous mode
[   60.861982][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.865436][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.868517][ T5929] bridge_slave_1: entered allmulticast mode
[   60.872594][ T5929] bridge_slave_1: entered promiscuous mode
[   60.897394][ T5909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.927947][ T5932] chnl_net:caif_netlink_parms(): no params data found
[   60.950470][ T5929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.958763][ T5929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.989858][ T5909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.013752][ T5929] team0: Port device team_slave_0 added
[   61.026689][ T5929] team0: Port device team_slave_1 added
[   61.037694][ T5934] chnl_net:caif_netlink_parms(): no params data found
[   61.083279][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.086659][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.098159][ T5929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.118578][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.121767][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.125439][ T5932] bridge_slave_0: entered allmulticast mode
[   61.129197][ T5932] bridge_slave_0: entered promiscuous mode
[   61.133598][ T5929] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.136849][ T5929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.146637][ T5929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.174402][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.177500][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.180428][ T5932] bridge_slave_1: entered allmulticast mode
[   61.183287][ T5932] bridge_slave_1: entered promiscuous mode
[   61.222559][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.228547][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.283489][ T5929] hsr_slave_0: entered promiscuous mode
[   61.286877][ T5929] hsr_slave_1: entered promiscuous mode
[   61.289440][ T5929] debugfs: 'hsr0' already exists in 'hsr'
[   61.291638][ T5929] Cannot create hsr debugfs directory
[   61.318118][ T5932] team0: Port device team_slave_0 added
[   61.322118][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.324459][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.327849][ T5934] bridge_slave_0: entered allmulticast mode
[   61.330869][ T5934] bridge_slave_0: entered promiscuous mode
[   61.334591][ T5932] team0: Port device team_slave_1 added
[   61.361967][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.365438][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.368410][ T5934] bridge_slave_1: entered allmulticast mode
[   61.372217][ T5934] bridge_slave_1: entered promiscuous mode
[   61.412102][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.414379][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.423002][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.431423][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.435273][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.437625][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.447529][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.458236][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.499542][ T5934] team0: Port device team_slave_0 added
[   61.504386][ T5934] team0: Port device team_slave_1 added
[   61.584147][ T5932] hsr_slave_0: entered promiscuous mode
[   61.587776][ T5932] hsr_slave_1: entered promiscuous mode
[   61.590298][ T5932] debugfs: 'hsr0' already exists in 'hsr'
[   61.592232][ T5932] Cannot create hsr debugfs directory
[   61.594455][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.597520][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.608708][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.629973][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.632700][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.641934][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.733799][ T5934] hsr_slave_0: entered promiscuous mode
[   61.736677][ T5934] hsr_slave_1: entered promiscuous mode
[   61.738885][ T5934] debugfs: 'hsr0' already exists in 'hsr'
[   61.741161][ T5934] Cannot create hsr debugfs directory
[   61.861379][ T5929] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.882165][ T5929] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.899034][ T5929] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.910643][ T5929] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.940977][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.947514][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.953521][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.958806][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.054194][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.067255][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.079565][ T5929] 8021q: adding VLAN 0 to HW filter on device team0
[   62.089054][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.092001][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.098792][ T5932] 8021q: adding VLAN 0 to HW filter on device team0
[   62.106682][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.109330][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.114321][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.117047][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.129060][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.131583][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.283613][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.288657][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.340811][ T5929] veth0_vlan: entered promiscuous mode
[   62.353564][ T5932] veth0_vlan: entered promiscuous mode
[   62.357937][ T5929] veth1_vlan: entered promiscuous mode
[   62.364676][ T5932] veth1_vlan: entered promiscuous mode
[   62.391354][ T5929] veth0_macvtap: entered promiscuous mode
[   62.394999][ T5932] veth0_macvtap: entered promiscuous mode
[   62.400211][ T5929] veth1_macvtap: entered promiscuous mode
[   62.403033][ T5932] veth1_macvtap: entered promiscuous mode
[   62.419968][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.423749][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.437631][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.443144][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.455962][   T55] Bluetooth: hci0: command tx timeout
[   62.458518][ T5930] Bluetooth: hci1: command tx timeout
[   62.461702][ T5676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.473326][ T5676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.477236][ T5676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.480244][ T5676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.486215][ T5676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.498765][ T5676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.514468][ T5676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.518774][ T5676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.525946][ T5930] Bluetooth: hci2: command tx timeout
[   62.565917][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.570776][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.588871][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.591828][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.630203][  T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.638646][  T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.646161][  T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.649007][  T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.678039][ T5909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.319556][ T5909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.479253][ T5909] bridge_slave_1: left allmulticast mode
[   63.483632][ T5909] bridge_slave_1: left promiscuous mode
[   63.493027][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.504368][ T5909] bridge_slave_0: left allmulticast mode
[   63.509911][ T5909] bridge_slave_0: left promiscuous mode
[   63.514556][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.072690][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   64.082576][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   64.087017][ T5909] bond0 (unregistering): Released all slaves
[   64.262622][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'.
[   64.298828][ T5909] hsr_slave_0: left promiscuous mode
[   64.301914][ T5909] hsr_slave_1: left promiscuous mode
[   64.304288][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.308355][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.312367][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.315385][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.323205][ T6087] netlink: 96 bytes leftover after parsing attributes in process `syz.1.53'.
[   64.328279][ T5909] veth1_macvtap: left promiscuous mode
[   64.330431][ T5909] veth0_macvtap: left promiscuous mode
[   64.332242][ T5909] veth1_vlan: left promiscuous mode
[   64.334373][ T5909] veth0_vlan: left promiscuous mode
[   64.336636][ T6087] netlink: 80 bytes leftover after parsing attributes in process `syz.1.53'.
[   64.525724][   T55] Bluetooth: hci0: command tx timeout
[   64.527637][ T5930] Bluetooth: hci1: command tx timeout
[   64.606728][ T5930] Bluetooth: hci2: command tx timeout
[   64.758330][ T5909] team0 (unregistering): Port device team_slave_1 removed
[   64.784287][ T5909] team0 (unregistering): Port device team_slave_0 removed
[   65.141356][ T6121] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   65.359856][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.384137][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.408190][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.420065][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.644490][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.688815][ T5934] 8021q: adding VLAN 0 to HW filter on device team0
[   65.707878][  T978] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.711236][  T978] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.717927][  T978] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.720262][  T978] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.053608][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.109145][ T5934] veth0_vlan: entered promiscuous mode
[   66.119796][ T5934] veth1_vlan: entered promiscuous mode
[   66.173428][ T5934] veth0_macvtap: entered promiscuous mode
[   66.180545][ T5934] veth1_macvtap: entered promiscuous mode
[   66.202415][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.213279][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.246055][ T5954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.264125][ T5954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.278524][ T5954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.295103][ T5954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.400199][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.403444][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.463106][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.466737][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.607251][ T5930] Bluetooth: hci1: command tx timeout
[   66.607290][   T55] Bluetooth: hci0: command tx timeout
[   66.694628][   T55] Bluetooth: hci2: command tx timeout
[   66.746075][ T6203] warning: `syz.2.93' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.318790][ T6243] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   67.554553][ T6256] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.649963][ T6256] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.765626][ T6276] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.766526][ T6256] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.785403][ T6274] tipc: Started in network mode
[   67.787524][ T6274] tipc: Node identity 080211000001, cluster identity 4711
[   67.792234][ T6274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.797684][ T6274] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[   67.800816][ T6274] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[   67.818302][ T6274] tipc: Resetting bearer <eth:syzkaller0>
[   67.828778][ T6278] netlink: 'syz.2.124': attribute type 1 has an invalid length.
[   67.832366][ T6278] netlink: 224 bytes leftover after parsing attributes in process `syz.2.124'.
[   67.858541][ T6256] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.956296][ T5954] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.972146][ T5676] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.993824][ T5676] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.036442][ T5954] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.220706][ T6294] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET)
[   68.264641][ T6296] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.628268][ T6314] delete_channel: no stack
[   68.685361][   T55] Bluetooth: hci0: command tx timeout
[   68.687945][   T55] Bluetooth: hci1: command tx timeout
[   68.766223][   T55] Bluetooth: hci2: command tx timeout
[   68.825782][    T9] tipc: Node number set to 134418688
[   68.842612][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.142'.
[   69.279714][ T6346] netlink: 'syz.2.153': attribute type 4 has an invalid length.
[   69.533212][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.540277][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.560278][ T6377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.168'.
[   69.563281][ T6377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.168'.
[   69.568896][ T6377] netlink: 36 bytes leftover after parsing attributes in process `syz.1.168'.
[   69.638589][ T6381] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   69.695315][ T6387] syzkaller1: entered promiscuous mode
[   69.697409][ T6387] syzkaller1: entered allmulticast mode
[   69.963401][ T6398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.935477][   T55] Bluetooth: hci2: command tx timeout
[   71.331458][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.986195][ T6506] netlink: 'syz.2.196': attribute type 1 has an invalid length.
[   72.023887][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'.
[   72.033878][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   72.053633][ T6506] bond0: (slave bond_slave_1): Releasing backup interface
[   72.543825][ T6533] netlink: 45 bytes leftover after parsing attributes in process `syz.2.207'.
[   72.804396][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[   72.861856][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.212'.
[   72.952597][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'.
[   73.503892][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'.
[   73.562120][ T6566] Zero length message leads to an empty skb
[   74.454010][ T6595] bridge_slave_0: left allmulticast mode
[   74.473014][ T6595] bridge_slave_0: left promiscuous mode
[   74.481736][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.520269][ T6595] bridge_slave_1: left allmulticast mode
[   74.522612][ T6595] bridge_slave_1: left promiscuous mode
[   74.535863][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.565428][ T6595] bond0: (slave bond_slave_0): Releasing backup interface
[   74.581981][ T6595] bond0: (slave bond_slave_1): Releasing backup interface
[   74.693799][ T6595] team0: Port device team_slave_0 removed
[   74.719612][ T6595] team0: Port device team_slave_1 removed
[   74.729618][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.745055][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.759501][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.773108][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.803278][ T6606] __nla_validate_parse: 4 callbacks suppressed
[   74.803299][ T6606] netlink: 152 bytes leftover after parsing attributes in process `syz.1.240'.
[   74.825531][ T6606] block nbd0: not configured, cannot reconfigure
[   74.941671][ T6613] netlink: 'syz.1.243': attribute type 3 has an invalid length.
[   74.954229][ T6613] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.243'.
[   75.376475][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'.
[   75.395671][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'.
[   76.456356][ T6656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.263'.
[   76.947745][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'.
[   77.470824][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.474313][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.848398][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.890673][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.262157][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.279'.
[   78.276214][ T6692] netlink: 48 bytes leftover after parsing attributes in process `syz.0.279'.
[   78.283459][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[   78.506569][ T5909] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.536396][ T5909] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.540519][ T5909] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.544509][ T5909] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.674368][ T6682] syz.1.276 (6682) used greatest stack depth: 19864 bytes left
[   88.395244][   T24] sched: DL replenish lagged too much
[   91.239494][  T790] cfg80211: failed to load regulatory.db
[  129.557518][ T5930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  129.568376][ T5930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  129.572002][ T5930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  129.577828][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  129.581324][ T5930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  129.623694][ T5676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.772911][ T5676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.810615][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  129.813934][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  129.817696][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  129.822294][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  129.825942][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  129.828768][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  129.831321][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  129.834535][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  129.849591][ T5676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  129.877228][ T6723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  129.881632][ T6723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  129.924429][ T5676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.102794][ T6712] chnl_net:caif_netlink_parms(): no params data found
[  130.553370][ T5676] bond0 (unregistering): Released all slaves
[  130.594047][ T6719] chnl_net:caif_netlink_parms(): no params data found
[  130.683181][ T5676] tipc: Disabling bearer <eth:syzkaller0>
[  130.686476][ T5676] tipc: Left network mode
[  130.719477][ T6712] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.722658][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.726291][ T6712] bridge_slave_0: entered allmulticast mode
[  130.730268][ T6712] bridge_slave_0: entered promiscuous mode
[  130.786897][ T6712] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.790038][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.793204][ T6712] bridge_slave_1: entered allmulticast mode
[  130.799873][ T6712] bridge_slave_1: entered promiscuous mode
[  130.823477][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.832219][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.836113][ T6719] bridge_slave_0: entered allmulticast mode
[  130.840069][ T6719] bridge_slave_0: entered promiscuous mode
[  130.875904][ T6712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.884303][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.890586][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.894047][ T6719] bridge_slave_1: entered allmulticast mode
[  130.898550][ T6719] bridge_slave_1: entered promiscuous mode
[  130.933916][ T6712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.001826][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.007926][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.034614][ T6712] team0: Port device team_slave_0 added
[  131.083613][ T6712] team0: Port device team_slave_1 added
[  131.103383][ T6719] team0: Port device team_slave_0 added
[  131.109215][ T6719] team0: Port device team_slave_1 added
[  131.141865][ T5676] hsr_slave_0: left promiscuous mode
[  131.144351][ T5676] hsr_slave_1: left promiscuous mode
[  131.158449][ T5676] veth1_macvtap: left promiscuous mode
[  131.160857][ T5676] veth0_macvtap: left promiscuous mode
[  131.163390][ T5676] veth1_vlan: left promiscuous mode
[  131.165957][ T5676] veth0_vlan: left promiscuous mode
[  131.657883][   T55] Bluetooth: hci0: command tx timeout
[  131.869384][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.872096][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.884642][ T6712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.889520][   T55] Bluetooth: hci1: command tx timeout
[  131.889692][ T6712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.897944][ T6712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.909376][ T6712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.921430][ T6721] chnl_net:caif_netlink_parms(): no params data found
[  131.930533][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.933604][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.946277][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.952934][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.956520][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.967626][   T55] Bluetooth: hci2: command tx timeout
[  131.970636][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.078136][ T6719] hsr_slave_0: entered promiscuous mode
[  132.081467][ T6719] hsr_slave_1: entered promiscuous mode
[  132.117439][ T6712] hsr_slave_0: entered promiscuous mode
[  132.120613][ T6712] hsr_slave_1: entered promiscuous mode
[  132.123548][ T6712] debugfs: 'hsr0' already exists in 'hsr'
[  132.132963][ T6712] Cannot create hsr debugfs directory
[  132.194272][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.197994][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.201007][ T6721] bridge_slave_0: entered allmulticast mode
[  132.203863][ T6721] bridge_slave_0: entered promiscuous mode
[  132.229304][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.231785][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.234202][ T6721] bridge_slave_1: entered allmulticast mode
[  132.237857][ T6721] bridge_slave_1: entered promiscuous mode
[  132.294608][ T6721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.331406][ T6721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.420488][ T6721] team0: Port device team_slave_0 added
[  132.424404][ T6721] team0: Port device team_slave_1 added
[  132.504398][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.510303][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.522396][ T6721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.530992][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.533859][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  132.545948][ T6721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.615519][ T5676] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.650897][ T6712] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  132.660104][ T6712] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  132.680145][ T6721] hsr_slave_0: entered promiscuous mode
[  132.683705][ T6721] hsr_slave_1: entered promiscuous mode
[  132.687631][ T6721] debugfs: 'hsr0' already exists in 'hsr'
[  132.690092][ T6721] Cannot create hsr debugfs directory
[  132.692911][ T6712] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  132.700615][ T6712] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  132.728729][ T5676] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.860181][ T5676] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.882155][ T6719] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  132.903549][ T6719] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  132.936873][ T5676] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.947281][ T6719] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  132.974271][ T6719] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  133.200614][ T6721] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  133.216572][ T6721] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  133.230178][ T6712] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.237146][ T6721] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  133.243431][ T6721] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  133.308360][ T6712] 8021q: adding VLAN 0 to HW filter on device team0
[  133.319075][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.322145][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.346807][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.350026][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.376768][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.423321][ T6719] 8021q: adding VLAN 0 to HW filter on device team0
[  133.438159][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.441254][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.460689][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.463819][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.563434][ T5676] bridge_slave_1: left allmulticast mode
[  133.568769][ T5676] bridge_slave_1: left promiscuous mode
[  133.571732][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.578994][ T5676] bridge_slave_0: left allmulticast mode
[  133.581832][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.598069][ T5676] bridge_slave_1: left allmulticast mode
[  133.600359][ T5676] bridge_slave_1: left promiscuous mode
[  133.602664][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.610781][ T5676] bridge_slave_0: left allmulticast mode
[  133.612997][ T5676] bridge_slave_0: left promiscuous mode
[  133.615752][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.725148][   T55] Bluetooth: hci0: command tx timeout
[  133.866452][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.871098][ T5676] bond0 (unregistering): Released all slaves
[  133.968638][   T55] Bluetooth: hci1: command tx timeout
[  134.053020][ T5676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.055346][   T55] Bluetooth: hci2: command tx timeout
[  134.060268][ T5676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.063742][ T5676] bond0 (unregistering): Released all slaves
[  134.113979][ T6721] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.156915][ T6721] 8021q: adding VLAN 0 to HW filter on device team0
[  134.184125][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.187399][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.218394][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.221558][ T6050] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.299907][ T6712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.348948][ T6721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  134.353439][ T6721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.390347][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.458360][ T6712] veth0_vlan: entered promiscuous mode
[  134.486650][ T6712] veth1_vlan: entered promiscuous mode
[  134.518792][ T6712] veth0_macvtap: entered promiscuous mode
[  134.533128][ T6712] veth1_macvtap: entered promiscuous mode
[  134.592635][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.600695][ T6712] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.649453][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.653293][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.663720][ T5676] hsr_slave_0: left promiscuous mode
[  134.668344][ T5676] hsr_slave_1: left promiscuous mode
[  134.671148][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.674337][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.686857][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.690060][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.698513][ T5676] hsr_slave_0: left promiscuous mode
[  134.701048][ T5676] hsr_slave_1: left promiscuous mode
[  134.703647][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.708311][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.721064][ T5676] veth1_macvtap: left promiscuous mode
[  134.723258][ T5676] veth0_macvtap: left promiscuous mode
[  134.726354][ T5676] veth1_vlan: left promiscuous mode
[  134.728617][ T5676] veth0_vlan: left promiscuous mode
[  135.040631][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  135.072533][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  135.428239][ T5676] team0 (unregistering): Port device team_slave_1 removed
[  135.452393][ T5676] team0 (unregistering): Port device team_slave_0 removed
[  135.728995][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.740867][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.769697][ T6721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.805101][   T55] Bluetooth: hci0: command tx timeout
[  135.822997][ T6719] veth0_vlan: entered promiscuous mode
[  135.851071][ T6719] veth1_vlan: entered promiscuous mode
[  135.884417][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.892995][ T6719] veth0_macvtap: entered promiscuous mode
[  135.896876][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.920036][ T6719] veth1_macvtap: entered promiscuous mode
[  135.930105][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.933315][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.967974][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.979478][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.011410][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.016259][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.019208][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.022234][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.039453][ T6785] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.287'.
[  136.057427][   T55] Bluetooth: hci1: command tx timeout
[  136.119817][ T6721] veth0_vlan: entered promiscuous mode
[  136.124917][  T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.124956][   T55] Bluetooth: hci2: command tx timeout
[  136.127649][  T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.137347][ T6721] veth1_vlan: entered promiscuous mode
[  136.158232][  T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.161872][  T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.196756][ T6721] veth0_macvtap: entered promiscuous mode
[  136.219268][ T6721] veth1_macvtap: entered promiscuous mode
[  136.251906][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.264608][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.278084][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.283329][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.298573][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.304086][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.379108][  T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.381798][  T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.401914][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.405725][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.470722][ T6808] netlink: 40 bytes leftover after parsing attributes in process `syz.5.298'.
[  136.521994][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.299'.
[  137.457386][ T6817] tipc: Started in network mode
[  137.459799][ T6817] tipc: Node identity e65e782f11ce, cluster identity 4711
[  137.462830][ T6817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.469094][ T6817] syzkaller0: entered promiscuous mode
[  137.471087][ T6817] syzkaller0: entered allmulticast mode
[  137.506921][ T6817] tipc: Resetting bearer <eth:syzkaller0>
[  137.514273][ T6816] tipc: Resetting bearer <eth:syzkaller0>
[  137.539110][ T6816] tipc: Disabling bearer <eth:syzkaller0>
[  137.669934][ T6833] tipc: Started in network mode
[  137.671730][ T6833] tipc: Node identity 225ef3b71b91, cluster identity 4711
[  137.674275][ T6833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.679020][ T6833] syzkaller0: entered promiscuous mode
[  137.681506][ T6833] syzkaller0: entered allmulticast mode
[  137.711953][ T6833] tipc: Resetting bearer <eth:syzkaller0>
[  137.720171][ T6831] tipc: Resetting bearer <eth:syzkaller0>
[  137.733218][ T6831] tipc: Disabling bearer <eth:syzkaller0>
[  137.758439][ T6838] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96
[  137.843547][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'.
[  137.850261][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'.
[  137.885274][   T55] Bluetooth: hci0: command tx timeout
[  138.042639][ T6842] Bluetooth: MGMT ver 1.23
[  138.125138][ T6723] Bluetooth: hci1: command tx timeout
[  138.205068][ T6723] Bluetooth: hci2: command tx timeout
[  138.289667][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.318'.
[  138.568756][ T6129] IPVS: starting estimator thread 0...
[  138.606268][ T6862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.660819][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz.3.326'.
[  138.668481][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'.
[  138.685951][ T6866] IPVS: using max 38 ests per chain, 91200 per kthread
[  139.272894][ T6899] tipc: Started in network mode
[  139.275482][ T6899] tipc: Node identity 76905cf966ad, cluster identity 4711
[  139.278708][ T6899] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.314446][ T6899] syzkaller0: entered promiscuous mode
[  139.317113][ T6899] syzkaller0: entered allmulticast mode
[  139.320011][ T6899] tipc: Resetting bearer <eth:syzkaller0>
[  139.340767][ T6898] tipc: Resetting bearer <eth:syzkaller0>
[  139.427755][ T6129] IPVS: starting estimator thread 0...
[  139.525482][ T6904] IPVS: using max 78 ests per chain, 187200 per kthread
[  140.232433][ T6898] tipc: Disabling bearer <eth:syzkaller0>
[  140.461389][ T6922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.347'.
[  140.566529][ T6933] netlink: 'syz.3.353': attribute type 1 has an invalid length.
[  140.656879][ T6939] netlink: 'syz.4.355': attribute type 1 has an invalid length.
[  140.781562][ T6950] netlink: 132 bytes leftover after parsing attributes in process `syz.5.361'.
[  141.110050][ T6982] netlink: 'syz.3.371': attribute type 1 has an invalid length.
[  141.113231][ T6982] __nla_validate_parse: 1 callbacks suppressed
[  141.113242][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'.
[  141.407282][ T6994] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  142.433690][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'.
[  142.484971][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'.
[  142.936560][ T7038] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[  142.942811][ T7038] macsec1: entered promiscuous mode
[  142.962788][ T7038] mac80211_hwsim hwsim15 wlan1: left promiscuous mode
[  144.974596][ T7112] syzkaller1: entered promiscuous mode
[  144.979388][ T7112] syzkaller1: entered allmulticast mode
[  145.057511][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'.
[  145.061081][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.5.431'.
[  145.309163][ T7134] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  145.414195][ T7141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.441'.
[  145.536168][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.445'.
[  145.704003][ T7160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.707907][ T7160] syzkaller0: entered promiscuous mode
[  145.710386][ T7160] syzkaller0: entered allmulticast mode
[  145.729364][ T7160] tipc: Resetting bearer <eth:syzkaller0>
[  145.733588][ T7159] tipc: Resetting bearer <eth:syzkaller0>
[  145.742467][ T7159] tipc: Disabling bearer <eth:syzkaller0>
[  146.002693][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.453'.
[  146.008947][ T7169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.453'.
[  146.125773][ T7173] block nbd0: server does not support multiple connections per device.
[  146.130226][ T7173] block nbd0: shutting down sockets
[  146.282579][ T7185] openvswitch: netlink: Message has 20 unknown bytes.
[  146.293209][ T7185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.387356][ T7195] ip6gre1: entered promiscuous mode
[  146.895649][ T7256] bond0: Error: Cannot enslave bond to itself.
[  146.969987][ T7264] netlink: 'syz.5.499': attribute type 1 has an invalid length.
[  146.973244][ T7264] netlink: 'syz.5.499': attribute type 2 has an invalid length.
[  146.976904][ T7264] netlink: 'syz.5.499': attribute type 8 has an invalid length.
[  146.980548][ T7264] netlink: 1148 bytes leftover after parsing attributes in process `syz.5.499'.
[  147.289265][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'.
[  147.561587][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.516'.
[  147.565563][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.516'.
[  147.569280][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.516'.
[  147.573661][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.516'.
[  147.580084][ T7302] netlink: 'syz.5.516': attribute type 6 has an invalid length.
[  147.828822][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.528'.
[  147.937382][ T7338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.940549][ T7338] syzkaller0: entered promiscuous mode
[  147.942540][ T7338] syzkaller0: entered allmulticast mode
[  147.963514][ T7338] tipc: Resetting bearer <eth:syzkaller0>
[  147.967272][ T7337] tipc: Resetting bearer <eth:syzkaller0>
[  147.979995][ T7337] tipc: Disabling bearer <eth:syzkaller0>
[  148.648527][ T5976] IPVS: starting estimator thread 0...
[  148.768134][ T7384] IPVS: using max 52 ests per chain, 124800 per kthread
[  148.959146][   T12] IPVS: stop unused estimator thread 0...
[  148.972693][ T7409] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  149.405078][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.024545][ T7435] netlink: 'syz.4.576': attribute type 5 has an invalid length.
[  150.186342][ T7444] GUP no longer grows the stack in syz.5.580 (7444): 200000006000-20000000a000 (200000005000)
[  150.191858][ T7444] CPU: 1 UID: 0 PID: 7444 Comm: syz.5.580 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  150.191880][ T7444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.191888][ T7444] Call Trace:
[  150.191894][ T7444]  <TASK>
[  150.191900][ T7444]  dump_stack_lvl+0x189/0x250
[  150.191924][ T7444]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.191939][ T7444]  ? __pfx__printk+0x10/0x10
[  150.191956][ T7444]  ? find_vma+0xe7/0x160
[  150.191984][ T7444]  __get_user_pages+0x24d0/0x2ce0
[  150.192030][ T7444]  ? __lock_acquire+0xab9/0xd20
[  150.192065][ T7444]  ? __gup_longterm_locked+0xc68/0x1660
[  150.192086][ T7444]  __gup_longterm_locked+0xde9/0x1660
[  150.192106][ T7444]  ? try_grab_folio_fast+0x1be/0x4f0
[  150.192129][ T7444]  ? gup_fast_fallback+0x195f/0x2010
[  150.192146][ T7444]  gup_fast_fallback+0x1e6a/0x2010
[  150.192185][ T7444]  ? __pfx_gup_fast_fallback+0x10/0x10
[  150.192198][ T7444]  ? __mutex_lock+0x335/0x1360
[  150.192218][ T7444]  ? futex_unqueue+0x22/0x240
[  150.192233][ T7444]  ? futex_unqueue+0x22/0x240
[  150.192244][ T7444]  ? futex_unqueue+0x22/0x240
[  150.192255][ T7444]  ? is_valid_gup_args+0x11f/0x200
[  150.192271][ T7444]  ? get_user_pages_fast+0x4d/0xb0
[  150.192288][ T7444]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  150.192313][ T7444]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  150.192334][ T7444]  ? wait_for_space+0x24d/0x2d0
[  150.192354][ T7444]  iov_iter_get_pages2+0x5e/0xa0
[  150.192377][ T7444]  __se_sys_vmsplice+0x548/0x10d0
[  150.192407][ T7444]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  150.192425][ T7444]  ? __pfx_futex_wait+0x10/0x10
[  150.192453][ T7444]  ? __lock_acquire+0xab9/0xd20
[  150.192505][ T7444]  ? do_pipe2+0xf7/0x170
[  150.192528][ T7444]  ? rcu_is_watching+0x15/0xb0
[  150.192546][ T7444]  ? do_syscall_64+0xbe/0x3b0
[  150.192567][ T7444]  do_syscall_64+0xfa/0x3b0
[  150.192582][ T7444]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.192597][ T7444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.192610][ T7444]  ? exc_page_fault+0x9f/0xf0
[  150.192627][ T7444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.192638][ T7444] RIP: 0033:0x7f36b258ebe9
[  150.192651][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  150.192662][ T7444] RSP: 002b:00007f36b33ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  150.192677][ T7444] RAX: ffffffffffffffda RBX: 00007f36b27b5fa0 RCX: 00007f36b258ebe9
[  150.192685][ T7444] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  150.192693][ T7444] RBP: 00007f36b2611e19 R08: 0000000000000000 R09: 0000000000000000
[  150.192700][ T7444] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  150.192707][ T7444] R13: 00007f36b27b6038 R14: 00007f36b27b5fa0 R15: 00007ffea5753258
[  150.192729][ T7444]  </TASK>
[  150.391645][ T7452] tap0: tun_chr_ioctl cmd 1074025677
[  150.394299][ T7452] tap0: linktype set to 825
[  150.457219][ T7457] netlink: 'syz.3.587': attribute type 1 has an invalid length.
[  150.968846][ T7498] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  151.028642][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.609'.
[  151.076370][ T7508] netlink: 'syz.4.612': attribute type 1 has an invalid length.
[  151.638876][ T7570] netlink: 104 bytes leftover after parsing attributes in process `syz.5.639'.
[  151.682831][ T7574] netlink: 40 bytes leftover after parsing attributes in process `syz.5.640'.
[  151.821618][ T7583] syzkaller1: entered promiscuous mode
[  151.824032][ T7583] syzkaller1: entered allmulticast mode
[  152.831489][ T7638] netlink: 'syz.4.663': attribute type 12 has an invalid length.
[  152.878509][ T7641] __nla_validate_parse: 1 callbacks suppressed
[  152.878526][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.665'.
[  153.120042][ T7658] smc: net device bond0 applied user defined pnetid SYZ2
[  153.134073][ T7658] netlink: 14 bytes leftover after parsing attributes in process `syz.4.673'.
[  153.249402][ T7658] smc: removing net device bond0 with user defined pnetid SYZ2
[  153.254567][ T7658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.280721][ T7658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.290264][ T7658] bond0 (unregistering): Released all slaves
[  153.569544][ T7685] netlink: 'syz.4.685': attribute type 1 has an invalid length.
[  153.697668][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.690'.
[  153.900320][ T7706] delete_channel: no stack
[  154.029309][ T7714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.699'.
[  154.042262][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'.
[  154.332455][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'.
[  154.336704][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'.
[  154.444191][ T7742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.712'.
[  155.166298][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.727'.
[  155.383864][ T7797] netlink: 'syz.3.740': attribute type 21 has an invalid length.
[  155.390840][ T7797] netlink: 132 bytes leftover after parsing attributes in process `syz.3.740'.
[  155.639683][ T7818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.654485][ T7818] team0: Device gtp0 is of different type
[  156.209790][ T7853] trusted_key: syz.3.764 sent an empty control message without MSG_MORE.
[  156.654690][ T7881] vlan2: entered allmulticast mode
[  156.659979][ T7881] bond0: entered allmulticast mode
[  156.661879][ T7881] bond_slave_0: entered allmulticast mode
[  156.664241][ T7881] bond_slave_1: entered allmulticast mode
[  156.989239][ T7895] hsr_slave_0: left promiscuous mode
[  156.992594][ T7895] hsr_slave_1: left promiscuous mode
[  157.171723][ T7898] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  157.176809][ T7898] gretap1: entered promiscuous mode
[  157.179236][ T7898] gretap1: entered allmulticast mode
[  157.419558][ T7912] netlink: 'syz.5.793': attribute type 3 has an invalid length.
[  157.507002][ T7918] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.517744][ T7918] syzkaller0: entered promiscuous mode
[  157.520112][ T7918] syzkaller0: entered allmulticast mode
[  157.560143][ T7918] tipc: Resetting bearer <eth:syzkaller0>
[  157.572598][ T7915] tipc: Resetting bearer <eth:syzkaller0>
[  157.596090][ T7915] tipc: Disabling bearer <eth:syzkaller0>
[  157.648652][ T7928] team0: Port device vxlan0 added
[  157.652008][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.658777][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.672441][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.676862][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.878784][ T7943] syzkaller0: entered promiscuous mode
[  157.881218][ T7943] syzkaller0: entered allmulticast mode
[  158.854365][ T7950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.591073][ T7997] __nla_validate_parse: 7 callbacks suppressed
[  159.591277][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'.
[  160.399724][ T8027] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  160.478548][ T8027] bridge_slave_0: left allmulticast mode
[  160.481072][ T8027] bridge_slave_0: left promiscuous mode
[  160.483452][ T8027] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.507116][ T8027] bridge_slave_1: left allmulticast mode
[  160.509695][ T8027] bridge_slave_1: left promiscuous mode
[  160.512496][ T8027] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.521400][ T8027] bond0: (slave bond_slave_0): Releasing backup interface
[  160.530459][ T8027] bond0: (slave bond_slave_1): Releasing backup interface
[  160.551553][ T8027] team0: Port device team_slave_0 removed
[  160.556561][ T8039] netlink: 'syz.3.839': attribute type 10 has an invalid length.
[  160.568408][ T8027] team0: Port device team_slave_1 removed
[  160.572792][ T8027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.577767][ T8027] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.582285][ T8027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.588243][ T8027] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.608990][ T8036] batadv_slave_0: entered promiscuous mode
[  160.611784][ T8039] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  160.637618][ T8039] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.647381][ T8039] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  160.657906][ T8033] batadv_slave_0: left promiscuous mode
[  160.679717][ T8027] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  160.683824][ T8027] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.720033][ T5922] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  161.025135][ T5922] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  161.432720][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.861'.
[  161.619820][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.863'.
[  161.630885][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  161.633571][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  161.636426][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.639435][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.642544][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  161.645634][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  161.937766][ T8101] netlink: 32 bytes leftover after parsing attributes in process `syz.4.868'.
[  161.943552][ T8101] netlink: 204 bytes leftover after parsing attributes in process `syz.4.868'.
[  161.948958][ T8101] netlink: 204 bytes leftover after parsing attributes in process `syz.4.868'.
[  161.991789][ T8103] netlink: 'syz.5.869': attribute type 5 has an invalid length.
[  162.130080][ T8120] netlink: 'syz.4.877': attribute type 1 has an invalid length.
[  162.135026][ T8120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.877'.
[  162.205377][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  162.722142][ T8173] netlink: 'syz.5.900': attribute type 1 has an invalid length.
[  162.725613][ T8173] netlink: 'syz.5.900': attribute type 3 has an invalid length.
[  162.728935][ T8173] netlink: 132 bytes leftover after parsing attributes in process `syz.5.900'.
[  162.992440][ T8194] netlink: 'syz.5.911': attribute type 21 has an invalid length.
[  162.998798][ T8194] netlink: 'syz.5.911': attribute type 22 has an invalid length.
[  163.001973][ T8194] netlink: 'syz.5.911': attribute type 23 has an invalid length.
[  163.006457][ T8194] netlink: 'syz.5.911': attribute type 25 has an invalid length.
[  163.009757][ T8194] netlink: 'syz.5.911': attribute type 26 has an invalid length.
[  163.012335][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.911'.
[  163.347819][ T8225] netlink: 32 bytes leftover after parsing attributes in process `syz.5.919'.
[  163.650795][ T8244] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  163.658886][ T8244] syzkaller0: entered promiscuous mode
[  163.660708][ T8244] syzkaller0: entered allmulticast mode
[  164.726946][ T8248] vlan0: entered promiscuous mode
[  164.835849][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'.
[  164.866864][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'.
[  165.020881][ T8275] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.940'.
[  165.025719][ T8270] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.940'.
[  165.089888][ T8281] bridge0: entered promiscuous mode
[  165.092348][ T8281] vlan1: entered promiscuous mode
[  165.335096][ T8296] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.951'.
[  165.378844][ T8299] bridge0: entered allmulticast mode
[  165.390113][ T8299] pim6reg: entered allmulticast mode
[  165.570638][ T8308] netlink: 'syz.4.956': attribute type 10 has an invalid length.
[  165.574684][ T8308] netlink: 152 bytes leftover after parsing attributes in process `syz.4.956'.
[  165.581951][ T8308] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  165.783197][ T8312] syzkaller0: entered promiscuous mode
[  165.786345][ T8312] syzkaller0: entered allmulticast mode
[  165.788316][ T8321] netlink: 'syz.3.961': attribute type 3 has an invalid length.
[  165.911365][ T8327] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  166.258646][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'.
[  166.262315][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'.
[  166.266307][ T8354] netlink: 'syz.3.976': attribute type 1 has an invalid length.
[  166.269607][ T8354] netlink: 10 bytes leftover after parsing attributes in process `syz.3.976'.
[  166.295484][ T8354] nbd: socks must be embedded in a SOCK_ITEM attr
[  166.298654][ T8354] block nbd0: shutting down sockets
[  166.508903][ T8374] netlink: 'syz.5.985': attribute type 4 has an invalid length.
[  167.016423][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  167.108820][ T8421] batadv_slave_1: entered promiscuous mode
[  167.111625][ T8420] batadv_slave_1: left promiscuous mode
[  167.325235][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.539201][ T8447] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  167.574691][ T8447] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1018'.
[  167.667869][ T8460] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  167.678445][ T8460] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  167.681095][ T8460] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  168.559359][ T8500] Driver unsupported XDP return value 0 on prog  (id 168) dev N/A, expect packet loss!
[  169.169078][ T8527] gretap0: entered promiscuous mode
[  169.287283][ T8527] gretap0: left promiscuous mode
[  169.574608][ T8556] pimreg: entered allmulticast mode
[  169.782409][ T8578] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.785926][ T8578] syzkaller0: entered promiscuous mode
[  169.787739][ T8578] syzkaller0: entered allmulticast mode
[  169.806886][ T8578] tipc: Resetting bearer <eth:syzkaller0>
[  169.824176][ T8577] tipc: Resetting bearer <eth:syzkaller0>
[  169.833466][ T8577] tipc: Disabling bearer <eth:syzkaller0>
[  169.942533][ T8588] netlink: 'syz.5.1084': attribute type 15 has an invalid length.
[  170.040582][ T8598] openvswitch: netlink: IPv6 tunnel dst address is zero
[  170.677588][ T6129] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  170.689820][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.742688][ T8668] __nla_validate_parse: 2 callbacks suppressed
[  170.742700][ T8668] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1119'.
[  170.748865][ T8668] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1119'.
[  170.751923][ T8668] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1119'.
[  170.761611][ T8668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'.
[  170.768968][  T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.771585][  T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.853000][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'.
[  170.866561][ T6129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.192259][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'.
[  171.249156][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1132'.
[  171.309488][ T8706] geneve3: entered promiscuous mode
[  171.406509][ T5922] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  171.573165][ T8717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.577285][ T8717] syzkaller0: entered promiscuous mode
[  171.579784][ T8717] syzkaller0: entered allmulticast mode
[  171.588550][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.592377][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.594662][ T8717] tipc: Resetting bearer <eth:syzkaller0>
[  171.600504][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.603947][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.611872][ T8716] tipc: Resetting bearer <eth:syzkaller0>
[  171.622304][ T8716] tipc: Disabling bearer <eth:syzkaller0>
[  171.802068][ T8723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1142'.
[  172.129601][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1143'.
[  172.284604][ T8727] syzkaller0: entered promiscuous mode
[  172.289057][ T8727] syzkaller0: entered allmulticast mode
[  173.299266][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1153'.
[  173.689380][ T8775] netlink: 'syz.5.1168': attribute type 3 has an invalid length.
[  173.715079][ T8776] netlink: 'syz.4.1167': attribute type 10 has an invalid length.
[  173.717742][ T8776] team0: entered promiscuous mode
[  173.719547][ T8776] team_slave_0: entered promiscuous mode
[  173.721611][ T8776] team_slave_1: entered promiscuous mode
[  173.723567][ T8776] vxlan0: entered promiscuous mode
[  173.727027][ T8776] bridge0: port 3(team0) entered blocking state
[  173.729243][ T8776] bridge0: port 3(team0) entered disabled state
[  173.731436][ T8776] team0: entered allmulticast mode
[  173.733214][ T8776] team_slave_0: entered allmulticast mode
[  173.741574][ T8776] team_slave_1: entered allmulticast mode
[  173.744157][ T8776] vxlan0: entered allmulticast mode
[  173.748043][ T8776] bridge0: port 3(team0) entered blocking state
[  173.750480][ T8776] bridge0: port 3(team0) entered forwarding state
[  173.883644][ T8778] netlink: 'syz.5.1170': attribute type 13 has an invalid length.
[  173.891407][ T8778] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  174.628548][ T8830] netlink: 'syz.3.1191': attribute type 1 has an invalid length.
[  174.645518][ T8830] netlink: 'syz.3.1191': attribute type 1 has an invalid length.
[  174.648771][ T8830] netlink: 'syz.3.1191': attribute type 2 has an invalid length.
[  176.137617][ T8920] __nla_validate_parse: 11 callbacks suppressed
[  176.137627][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1228'.
[  176.326852][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1237'.
[  176.332833][ T8942] netlink: 'syz.4.1238': attribute type 1 has an invalid length.
[  176.554263][ T8959] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  176.581168][ T8968] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1250'.
[  176.672146][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  176.691745][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'.
[  176.771093][ T8984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.967591][ T8995] netlink: 'syz.3.1260': attribute type 1 has an invalid length.
[  176.971093][ T8995] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1260'.
[  177.312883][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'.
[  178.027024][ T9063] batadv_slave_1: entered promiscuous mode
[  178.526324][ T9101] syzkaller1: entered promiscuous mode
[  178.528726][ T9101] syzkaller1: entered allmulticast mode
[  178.578373][ T9105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1308'.
[  178.800170][ T9125] tipc: Can't bind to reserved service type 2
[  178.876921][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1322'.
[  178.992310][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.995373][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.120978][ T9141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.147341][ T9141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.455283][ T9141] ip6gre1: left promiscuous mode
[  179.462162][ T9141] vlan2: left allmulticast mode
[  179.464624][ T9141] bond0: left allmulticast mode
[  179.469733][ T9141] bond_slave_0: left allmulticast mode
[  179.471701][ T9141] bond_slave_1: left allmulticast mode
[  179.473739][ T9141] gretap1: left promiscuous mode
[  179.476239][ T9141] gretap1: left allmulticast mode
[  179.497728][ T9147] gre1: entered allmulticast mode
[  179.500329][ T5921] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.504161][ T5921] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.508728][ T5921] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.512308][ T5921] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.618431][ T9156] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1332'.
[  179.622215][ T9156] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  179.625504][ T9156] openvswitch: netlink: Message has 1 unknown bytes.
[  180.437812][ T9191] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  180.805464][ T9207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.972417][ T9143] Set syz1 is full, maxelem 65536 reached
[  181.057474][ T9228] netlink: 'syz.3.1368': attribute type 3 has an invalid length.
[  182.073823][ T9255] __nla_validate_parse: 1 callbacks suppressed
[  182.073841][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1380'.
[  182.084570][ T9253] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1379'.
[  182.119262][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'.
[  182.348387][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1386'.
[  183.426403][ T9340] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  183.435576][ T9340] netlink: 'syz.5.1419': attribute type 4 has an invalid length.
[  183.445978][ T9349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1423'.
[  183.646629][ T9365] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.1431'.
[  183.858890][ T9373] tipc: Enabled bearer <udp:syz2>, priority 10
[  183.977947][ T9385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1441'.
[  184.132259][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'.
[  184.181212][ T9399] bond1: (slave geneve4): Enslaving as an active interface with an up link
[  184.191436][ T5921] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  184.207526][ T5921] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  184.211517][ T5921] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  184.221260][ T5921] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  184.295303][ T9411] lo: entered allmulticast mode
[  184.297474][ T9410] lo: left allmulticast mode
[  184.366473][ T9420] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1458'.
[  184.370286][ T9420] netlink: zone id is out of range
[  184.372849][ T9420] netlink: zone id is out of range
[  184.375651][ T9420] netlink: zone id is out of range
[  184.382256][ T9420] netlink: get zone limit has 8 unknown bytes
[  184.661151][ T9455] netlink: 'syz.3.1473': attribute type 8 has an invalid length.
[  184.859220][ T5916] tipc: Node number set to 272456953
[  185.140269][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'.
[  185.741665][ T9529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  185.833901][ T9535] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  187.145192][ T9613] nbd4: detected capacity change from 0 to 63
[  187.150298][ T9618] block nbd4: NBD_DISCONNECT
[  187.155421][ T9618] block nbd4: Disconnected due to user request.
[  187.158228][ T9618] block nbd4: shutting down sockets
[  187.339422][ T9629] 8021q: adding VLAN 0 to HW filter on device bond2
[  187.343523][ T9629] team0: Port device bond2 added
[  187.353985][ T9630] netlink: 'syz.4.1542': attribute type 1 has an invalid length.
[  187.373740][ T9630] __nla_validate_parse: 4 callbacks suppressed
[  187.373760][ T9630] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1542'.
[  187.385273][ T9630] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.900559][ T9645] netlink: 'syz.4.1550': attribute type 13 has an invalid length.
[  187.903339][ T9645] netlink: 'syz.4.1550': attribute type 17 has an invalid length.
[  187.916951][ T9645] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  188.499300][ T9735] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  188.502612][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1593'.
[  188.990125][ T9790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.168265][ T9804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1619'.
[  189.371151][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'.
[  189.710041][ T9839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1635'.
[  189.817629][ T9847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1639'.
[  190.190140][ T9874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1652'.
[  190.733746][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1679'.
[  190.927325][ T9946] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1687'.
[  190.942552][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'.
[  191.073574][ T9961] syzkaller0: entered promiscuous mode
[  191.076380][ T9961] syzkaller0: entered allmulticast mode
[  191.115736][ T9965] netlink: 'syz.5.1695': attribute type 23 has an invalid length.
[  191.653472][T10010] netlink: 'syz.3.1716': attribute type 1 has an invalid length.
[  191.658646][T10010] netlink: 'syz.3.1716': attribute type 3 has an invalid length.
[  191.917355][T10031] syzkaller0: entered promiscuous mode
[  191.919620][T10031] syzkaller0: entered allmulticast mode
[  193.073950][T10061] _Z`Ԁ@: entered promiscuous mode
[  193.110954][T10065] __nla_validate_parse: 3 callbacks suppressed
[  193.110970][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1742'.
[  193.208620][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1745'.
[  193.315120][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1750'.
[  193.348334][T10085] netlink: 'syz.4.1751': attribute type 7 has an invalid length.
[  193.479223][T10101] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1759'.
[  193.651837][T10116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.660058][T10116] syzkaller0: entered promiscuous mode
[  193.661935][T10116] syzkaller0: entered allmulticast mode
[  193.690768][T10116] tipc: Resetting bearer <eth:syzkaller0>
[  193.698018][T10115] tipc: Resetting bearer <eth:syzkaller0>
[  193.713192][T10115] tipc: Disabling bearer <eth:syzkaller0>
[  193.794650][T10123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.798281][T10123] syzkaller0: entered promiscuous mode
[  193.806912][T10123] syzkaller0: entered allmulticast mode
[  193.819148][T10123] tipc: Resetting bearer <eth:syzkaller0>
[  193.822020][T10122] tipc: Resetting bearer <eth:syzkaller0>
[  193.832968][T10122] tipc: Disabling bearer <eth:syzkaller0>
[  193.939237][T10135] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf
[  193.965939][ T6723] Bluetooth: hci2: command 0x0405 tx timeout
[  193.982337][T10135] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.989941][T10135] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf
[  193.993301][T10135] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  194.210765][T10160] bond0: entered promiscuous mode
[  194.212814][T10160] bond_slave_0: entered promiscuous mode
[  194.215924][T10160] bond_slave_1: entered promiscuous mode
[  194.220355][T10160] batadv0: entered promiscuous mode
[  194.223668][T10160] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  194.231975][T10160] hsr0: entered allmulticast mode
[  194.236776][T10160] bond0: entered allmulticast mode
[  194.239184][T10160] bond_slave_0: entered allmulticast mode
[  194.241512][T10160] bond_slave_1: entered allmulticast mode
[  194.243860][T10160] batadv0: entered allmulticast mode
[  194.247260][T10160] 8021q: adding VLAN 0 to HW filter on device hsr0
[  194.251738][T10160] bond0: left promiscuous mode
[  194.253635][T10160] bond_slave_0: left promiscuous mode
[  194.256880][T10160] bond_slave_1: left promiscuous mode
[  194.260079][T10160] batadv0: left promiscuous mode
[  194.451249][T10174] openvswitch: netlink: Message has 4 unknown bytes.
[  194.478631][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1794'.
[  194.639563][T10187] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  194.816657][T10202] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1803'.
[  194.824628][T10202] syzkaller1: entered promiscuous mode
[  194.830248][T10202] syzkaller1: entered allmulticast mode
[  194.911615][T10210] dummy0: mtu less than device minimum
[  194.955836][ T5976] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.375524][ T5976] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  195.561712][T10230] syzkaller1: entered promiscuous mode
[  195.563691][T10230] syzkaller1: entered allmulticast mode
[  195.725358][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  196.081737][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'.
[  196.105852][T10253] smc: adding net device bond0 with user defined pnetid SYZ2
[  196.109204][T10253] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.120623][T10253] bond0: (slave batadv1): Opening slave failed
[  196.242657][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1832'.
[  196.247502][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1832'.
[  196.287940][T10268] netlink: 'syz.3.1834': attribute type 7 has an invalid length.
[  196.699648][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1841'.
[  196.769200][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  196.773822][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.065093][ T5916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  197.517669][T10340] @: renamed from bond_slave_0
[  197.628246][T10350] openvswitch: netlink: IPv4 tun info is not correct
[  197.820628][T10366] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.057382][T10361] netlink: 'syz.5.1877': attribute type 12 has an invalid length.
[  199.410232][T10455] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) !
[  200.685203][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  200.830749][T10497] syz.5.1940 uses old SIOCAX25GETINFO
[  200.894642][T10502] __nla_validate_parse: 3 callbacks suppressed
[  200.894656][T10502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1942'.
[  200.961320][T10509] sctp: [Deprecated]: syz.5.1946 (pid 10509) Use of int in maxseg socket option.
[  200.961320][T10509] Use struct sctp_assoc_value instead
[  201.247506][ T5916] IPVS: rr: FWM 3 0x00000003 - no destination available
[  202.732790][T10574] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  203.070139][T10579] netlink: 'syz.5.1978': attribute type 3 has an invalid length.
[  203.178278][ T6050] IPVS: rr: FWM 3 0x00000003 - no destination available
[  203.333056][T10597] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1987'.
[  203.396654][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1989'.
[  203.407985][T10604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1990'.
[  203.411233][T10604] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1990'.
[  203.455057][T10607] Bluetooth: MGMT ver 1.23
[  203.524498][T10617] team0: entered promiscuous mode
[  203.527791][T10617] team_slave_0: entered promiscuous mode
[  203.530061][T10617] team_slave_1: entered promiscuous mode
[  203.558078][T10619] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1998'.
[  203.561756][T10619] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1998'.
[  203.584296][T10621] openvswitch: netlink: IPv4 tun info is not correct
[  204.416299][T10628] netlink: 'syz.5.2001': attribute type 1 has an invalid length.
[  204.422658][T10632] netlink: 'syz.4.2002': attribute type 1 has an invalid length.
[  204.445821][T10632] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2002'.
[  204.489967][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'.
[  204.667031][T10652] netlink: 'syz.5.2012': attribute type 2 has an invalid length.
[  204.670119][T10652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2012'.
[  204.734777][T10657] erspan0: entered promiscuous mode
[  204.740379][T10657] macvtap1: entered promiscuous mode
[  204.743215][T10657] macvtap1: entered allmulticast mode
[  204.753365][T10657] erspan0: entered allmulticast mode
[  204.809963][T10663] netlink: 'syz.4.2017': attribute type 1 has an invalid length.
[  205.403843][T10703] netlink: 'syz.4.2035': attribute type 1 has an invalid length.
[  205.495117][T10709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.499378][T10709] syzkaller0: entered promiscuous mode
[  205.501425][T10709] syzkaller0: entered allmulticast mode
[  205.525412][T10709] tipc: Resetting bearer <eth:syzkaller0>
[  205.529771][T10708] tipc: Resetting bearer <eth:syzkaller0>
[  205.548826][T10708] tipc: Disabling bearer <eth:syzkaller0>
[  205.710859][T10723] bpq0: entered promiscuous mode
[  205.713546][T10723] bpq0: entered allmulticast mode
[  205.731398][T10723] bpq0: left promiscuous mode
[  205.733328][T10723] bpq0: left allmulticast mode
[  206.489206][T10748] IPVS: length: 209 != 24
[  206.518498][T10750] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  206.521427][T10750] macvlan2: entered allmulticast mode
[  206.524222][T10750] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  206.531373][T10750] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  206.534403][T10750] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  206.673183][T10762] __nla_validate_parse: 4 callbacks suppressed
[  206.673194][T10762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2058'.
[  206.678980][T10762] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2058'.
[  206.896366][T10772] netlink: 'syz.3.2063': attribute type 1 has an invalid length.
[  206.899705][T10772] nbd: error processing sock list
[  206.903077][T10772] block nbd0: shutting down sockets
[  206.927152][T10778] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  206.967944][ T6723] Bluetooth: hci2: link tx timeout
[  206.970456][ T6723] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  207.129086][T10788] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  207.148904][T10788] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  207.497967][T10827] netlink: 'syz.3.2088': attribute type 1 has an invalid length.
[  207.504085][T10827] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2088'.
[  208.256454][T10870] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2106'.
[  208.320377][T10874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.324602][T10874] syzkaller0: entered promiscuous mode
[  208.327858][T10874] syzkaller0: entered allmulticast mode
[  208.350815][T10874] tipc: Resetting bearer <eth:syzkaller0>
[  208.358050][T10873] tipc: Resetting bearer <eth:syzkaller0>
[  208.372019][T10873] tipc: Disabling bearer <eth:syzkaller0>
[  208.540894][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'.
[  208.609799][T10895] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  208.912577][T10923] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2127'.
[  208.925238][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  208.930046][   T28] IPVS: rr: FWM 3 0x00000003 - no destination available
[  208.993676][T10927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2129'.
[  209.006344][ T6723] Bluetooth: hci2: command 0x0405 tx timeout
[  209.067308][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2132'.
[  209.134132][T10938] batadv_slave_0: entered promiscuous mode
[  209.370835][T10959] netlink: 'syz.4.2144': attribute type 21 has an invalid length.
[  209.374242][T10959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2144'.
[  209.890642][T11005] team0: left allmulticast mode
[  209.892578][T11005] team_slave_0: left allmulticast mode
[  209.915996][T11005] team_slave_1: left allmulticast mode
[  209.918164][T11005] vxlan0: left allmulticast mode
[  209.923941][T11005] bridge0: port 3(team0) entered disabled state
[  209.948696][T11005] bridge_slave_0: left allmulticast mode
[  209.951359][T11005] bridge_slave_0: left promiscuous mode
[  209.954280][T11005] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.970635][T11005] bridge_slave_1: left allmulticast mode
[  209.973222][T11005] bridge_slave_1: left promiscuous mode
[  209.982152][T11005] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.001553][T11005] team_slave_0: left promiscuous mode
[  210.011852][T11005] team0: Port device team_slave_0 removed
[  210.020426][T11005] team_slave_1: left promiscuous mode
[  210.030465][T11005] team0: Port device team_slave_1 removed
[  210.034072][T11005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.038486][T11005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.043221][T11005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.046480][T11005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.062173][T11005] vxlan0: left promiscuous mode
[  210.069678][T11005] team0: Port device vxlan0 removed
[  210.098719][   T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.102166][   T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.106105][   T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.110014][   T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.097411][ T6723] Bluetooth: hci2: command 0x0405 tx timeout
[  212.503989][T11073] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  212.557165][T11071] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  212.741428][T11091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2204'.
[  212.748297][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2203'.
[  212.752882][T11093] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  212.760305][T11093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.348144][T11113] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  213.360412][T11115] macsec1: entered allmulticast mode
[  213.362346][T11115] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  213.366187][T11115] batman_adv: batadv0: Adding interface: macsec1
[  213.368837][T11115] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.379928][T11115] batman_adv: batadv0: Interface activated: macsec1
[  213.389048][T11112] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  213.573435][T11129] netlink: 'syz.4.2221': attribute type 15 has an invalid length.
[  213.577508][T11129] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2221'.
[  213.597741][T11130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2220'.
[  213.759036][T11149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  213.870458][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'.
[  213.980278][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2236'.
[  214.182226][T11179] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2241'.
[  214.638252][T11207] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  214.652857][T11207] syzkaller1: entered promiscuous mode
[  214.658395][T11207] syzkaller1: entered allmulticast mode
[  214.661319][T11210] netlink: 'syz.5.2255': attribute type 49 has an invalid length.
[  214.695614][   T28] IPVS: rr: FWM 3 0x00000003 - no destination available
[  214.706517][T11206] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  214.988930][T11231] ipvlan3: entered promiscuous mode
[  215.522568][T11266] netlink: 'syz.3.2277': attribute type 99 has an invalid length.
[  215.647018][T11277] bridge0: port 3(veth0_to_bridge) entered blocking state
[  215.650986][T11277] bridge0: port 3(veth0_to_bridge) entered disabled state
[  215.654343][T11277] veth0_to_bridge: entered allmulticast mode
[  215.662445][T11277] veth0_to_bridge: entered promiscuous mode
[  215.809010][T11286] IPVS: rr: FWM 3 0x00000003 - no destination available
[  215.949655][T11298] tipc: Cannot configure node identity twice
[  215.957538][T11298] netlink: 'syz.3.2293': attribute type 1 has an invalid length.
[  216.292049][T11319] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2302'.
[  217.245763][T11368] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  217.644435][T11394] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2335'.
[  218.068445][T11428] netlink: 'syz.4.2352': attribute type 10 has an invalid length.
[  218.071313][T11428] team0: left promiscuous mode
[  218.078592][T11428] team0: Cannot enslave team device to itself
[  219.228057][T11461] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2366'.
[  219.281993][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2368'.
[  219.398308][T11471] openvswitch: netlink: Multiple metadata blocks provided
[  219.859095][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2377'.
[  220.161272][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2387'.
[  220.281849][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  220.531315][ T5676] nci: nci_rx_work: unknown MT 0x1
[  220.803073][ T5676] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.809085][ T5676] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  220.813458][ T5676] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.817938][ T5676] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  220.821675][ T5676] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.828985][ T5676] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  220.832808][ T5676] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  220.836977][ T5676] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  221.533508][T11551] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2401'.
[  221.813288][T11586] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2416'.
[  221.888320][T11589] ip6tnl3: entered promiscuous mode
[  221.890655][T11589] ip6tnl3: entered allmulticast mode
[  222.212412][T11600] netlink: 'syz.3.2422': attribute type 1 has an invalid length.
[  222.219382][T11600] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2422'.
[  222.975932][T11626] netlink: 'syz.3.2432': attribute type 1 has an invalid length.
[  222.982596][T11626] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2432'.
[  223.211208][T11614] erspan0: left allmulticast mode
[  223.221145][ T5921] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.224596][ T5921] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.235363][ T5921] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.245014][ T5921] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  223.699073][T11640] syzkaller1: entered promiscuous mode
[  223.701464][T11640] syzkaller1: entered allmulticast mode
[  223.816299][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2442'.
[  223.841339][T11646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2441'.
[  223.908274][T11654] sit0: entered promiscuous mode
[  223.922446][T11654] netlink: 'syz.5.2446': attribute type 1 has an invalid length.
[  223.927842][T11652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.931138][T11652] syzkaller0: entered promiscuous mode
[  223.932975][T11652] syzkaller0: entered allmulticast mode
[  223.965658][T11652] tipc: Resetting bearer <eth:syzkaller0>
[  223.973168][T11651] tipc: Resetting bearer <eth:syzkaller0>
[  223.983982][T11651] tipc: Disabling bearer <eth:syzkaller0>
[  224.095805][T11660] netdevsim0: mtu less than device minimum
[  224.369779][T11671] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  224.527607][T11679] __nla_validate_parse: 1 callbacks suppressed
[  224.527627][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2457'.
[  224.772215][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'.
[  225.008527][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2478'.
[  225.012413][T11725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.018738][T11727] ==================================================================
[  225.021587][T11727] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  225.024564][T11727] Read of size 4 at addr ffff88812c6e40c4 by task syz.5.2479/11727
[  225.028397][T11727] 
[  225.029239][T11727] CPU: 0 UID: 0 PID: 11727 Comm: syz.5.2479 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  225.029251][T11727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.029256][T11727] Call Trace:
[  225.029262][T11727]  <TASK>
[  225.029266][T11727]  dump_stack_lvl+0x189/0x250
[  225.029281][T11727]  ? __kasan_check_byte+0x12/0x40
[  225.029293][T11727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.029303][T11727]  ? lock_release+0x4b/0x3e0
[  225.029316][T11727]  ? __virt_addr_valid+0x4a5/0x5c0
[  225.029328][T11727]  print_report+0xca/0x240
[  225.029338][T11727]  ? xfrm_alloc_spi+0x570/0xf30
[  225.029345][T11727]  kasan_report+0x118/0x150
[  225.029354][T11727]  ? xfrm_alloc_spi+0x570/0xf30
[  225.029362][T11727]  xfrm_alloc_spi+0x570/0xf30
[  225.029368][T11727]  ? xfrm_alloc_spi+0x2a0/0xf30
[  225.029374][T11727]  ? __local_bh_enable_ip+0x62/0x1c0
[  225.029383][T11727]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  225.029394][T11727]  ? xfrm_find_acq+0x87/0xa0
[  225.029406][T11727]  pfkey_getspi+0x7a8/0xee0
[  225.029419][T11727]  pfkey_sendmsg+0xbfe/0x1090
[  225.029430][T11727]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  225.029444][T11727]  ? aa_sock_msg_perm+0xf1/0x1d0
[  225.029454][T11727]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  225.029462][T11727]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  225.029471][T11727]  __sock_sendmsg+0x21c/0x270
[  225.029480][T11727]  ____sys_sendmsg+0x505/0x830
[  225.029491][T11727]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.029502][T11727]  ? import_iovec+0x74/0xa0
[  225.029510][T11727]  ___sys_sendmsg+0x21f/0x2a0
[  225.029519][T11727]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.029552][T11727]  ? __fget_files+0x2a/0x420
[  225.029565][T11727]  ? __fget_files+0x3a0/0x420
[  225.029577][T11727]  __x64_sys_sendmsg+0x19b/0x260
[  225.029588][T11727]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.029601][T11727]  ? rcu_is_watching+0x15/0xb0
[  225.029610][T11727]  ? do_syscall_64+0xbe/0x3b0
[  225.029620][T11727]  do_syscall_64+0xfa/0x3b0
[  225.029628][T11727]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.029636][T11727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.029643][T11727]  ? exc_page_fault+0x9f/0xf0
[  225.029651][T11727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.029658][T11727] RIP: 0033:0x7f36b258ebe9
[  225.029666][T11727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.029672][T11727] RSP: 002b:00007f36b33ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.029682][T11727] RAX: ffffffffffffffda RBX: 00007f36b27b5fa0 RCX: 00007f36b258ebe9
[  225.029687][T11727] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  225.029692][T11727] RBP: 00007f36b2611e19 R08: 0000000000000000 R09: 0000000000000000
[  225.029696][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.029700][T11727] R13: 00007f36b27b6038 R14: 00007f36b27b5fa0 R15: 00007ffea5753258
[  225.029708][T11727]  </TASK>
[  225.029711][T11727] 
[  225.134296][T11727] Allocated by task 10148:
[  225.136047][T11727]  kasan_save_track+0x3e/0x80
[  225.138015][T11727]  __kasan_slab_alloc+0x6c/0x80
[  225.140036][T11727]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  225.142279][T11727]  xfrm_state_alloc+0x24/0x2f0
[  225.144273][T11727]  __find_acq_core+0x8a7/0x1c00
[  225.145992][T11727]  xfrm_find_acq+0x78/0xa0
[  225.147669][T11727]  xfrm_alloc_userspi+0x6b3/0xc90
[  225.149582][T11727]  xfrm_user_rcv_msg+0x7a3/0xab0
[  225.151175][T11727]  netlink_rcv_skb+0x208/0x470
[  225.152822][T11727]  xfrm_netlink_rcv+0x79/0x90
[  225.154697][T11727]  netlink_unicast+0x82f/0x9e0
[  225.156687][T11727]  netlink_sendmsg+0x805/0xb30
[  225.158471][T11727]  __sock_sendmsg+0x21c/0x270
[  225.159956][T11727]  ____sys_sendmsg+0x505/0x830
[  225.161570][T11727]  ___sys_sendmsg+0x21f/0x2a0
[  225.163398][T11727]  __x64_sys_sendmsg+0x19b/0x260
[  225.165454][T11727]  do_syscall_64+0xfa/0x3b0
[  225.167306][T11727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.169686][T11727] 
[  225.170687][T11727] Freed by task 6129:
[  225.172306][T11727]  kasan_save_track+0x3e/0x80
[  225.174219][T11727]  kasan_save_free_info+0x46/0x50
[  225.176312][T11727]  __kasan_slab_free+0x5b/0x80
[  225.178268][T11727]  kmem_cache_free+0x18f/0x400
[  225.179994][T11727]  xfrm_state_gc_task+0x52d/0x6b0
[  225.181730][T11727]  process_scheduled_works+0xae1/0x17b0
[  225.183629][T11727]  worker_thread+0x8a0/0xda0
[  225.185443][T11727]  kthread+0x711/0x8a0
[  225.187147][T11727]  ret_from_fork+0x3fc/0x770
[  225.189046][T11727]  ret_from_fork_asm+0x1a/0x30
[  225.190814][T11727] 
[  225.191637][T11727] The buggy address belongs to the object at ffff88812c6e4000
[  225.191637][T11727]  which belongs to the cache xfrm_state of size 928
[  225.196130][T11727] The buggy address is located 196 bytes inside of
[  225.196130][T11727]  freed 928-byte region [ffff88812c6e4000, ffff88812c6e43a0)
[  225.200760][T11727] 
[  225.201730][T11727] The buggy address belongs to the physical page:
[  225.204339][T11727] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88812c6e4900 pfn:0x12c6e4
[  225.208450][T11727] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  225.211680][T11727] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  225.214580][T11727] page_type: f5(slab)
[  225.215926][T11727] raw: 057ff00000000040 ffff88801c34e8c0 dead000000000122 0000000000000000
[  225.218757][T11727] raw: ffff88812c6e4900 00000000800e000c 00000000f5000000 0000000000000000
[  225.221830][T11727] head: 057ff00000000040 ffff88801c34e8c0 dead000000000122 0000000000000000
[  225.224594][T11727] head: ffff88812c6e4900 00000000800e000c 00000000f5000000 0000000000000000
[  225.227424][T11727] head: 057ff00000000002 ffffea0004b1b901 00000000ffffffff 00000000ffffffff
[  225.230300][T11727] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  225.233139][T11727] page dumped because: kasan: bad access detected
[  225.235252][T11727] page_owner tracks the page as allocated
[  225.237602][T11727] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8723, tgid 8722 (syz.3.1142), ts 172203063963, free_ts 160784030530
[  225.245029][T11727]  post_alloc_hook+0x240/0x2a0
[  225.246716][T11727]  get_page_from_freelist+0x21e4/0x22c0
[  225.248916][T11727]  __alloc_frozen_pages_noprof+0x181/0x370
[  225.251161][T11727]  alloc_pages_mpol+0x232/0x4a0
[  225.253173][T11727]  allocate_slab+0x8a/0x370
[  225.254910][T11727]  ___slab_alloc+0xbeb/0x1410
[  225.256953][T11727]  kmem_cache_alloc_noprof+0x283/0x3c0
[  225.259145][T11727]  xfrm_state_alloc+0x24/0x2f0
[  225.261028][T11727]  xfrm_state_find+0x37d4/0x5400
[  225.262912][T11727]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  225.265052][T11727]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  225.267334][T11727]  xfrm_lookup_route+0x3c/0x1c0
[  225.269150][T11727]  udp_sendmsg+0x142e/0x2170
[  225.270739][T11727]  __sock_sendmsg+0x19c/0x270
[  225.272407][T11727]  ____sys_sendmsg+0x52d/0x830
[  225.274110][T11727]  ___sys_sendmsg+0x21f/0x2a0
[  225.275694][T11727] page last free pid 8054 tgid 8054 stack trace:
[  225.278035][T11727]  __free_frozen_pages+0xbc4/0xd30
[  225.280099][T11727]  __slab_free+0x303/0x3c0
[  225.281859][T11727]  qlist_free_all+0x97/0x140
[  225.283707][T11727]  kasan_quarantine_reduce+0x148/0x160
[  225.285936][T11727]  __kasan_slab_alloc+0x22/0x80
[  225.287948][T11727]  __kmalloc_noprof+0x224/0x4f0
[  225.289964][T11727]  tomoyo_realpath_from_path+0xe3/0x5d0
[  225.292287][T11727]  tomoyo_path_perm+0x213/0x4b0
[  225.294272][T11727]  tomoyo_path_symlink+0xa3/0xe0
[  225.296163][T11727]  security_path_symlink+0x177/0x380
[  225.298200][T11727]  do_symlinkat+0x107/0x3f0
[  225.299804][T11727]  __x64_sys_symlinkat+0x95/0xb0
[  225.301830][T11727]  do_syscall_64+0xfa/0x3b0
[  225.303511][T11727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.305721][T11727] 
[  225.306695][T11727] Memory state around the buggy address:
[  225.308687][T11727]  ffff88812c6e3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  225.311692][T11727]  ffff88812c6e4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.314925][T11727] >ffff88812c6e4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.317792][T11727]                                            ^
[  225.319877][T11727]  ffff88812c6e4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.323013][T11727]  ffff88812c6e4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  225.325457][T11727] ==================================================================
[  225.329019][T11727] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  225.332022][T11727] CPU: 0 UID: 0 PID: 11727 Comm: syz.5.2479 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  225.336997][T11727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.340983][T11727] Call Trace:
[  225.342296][T11727]  <TASK>
[  225.343537][T11727]  dump_stack_lvl+0x99/0x250
[  225.345532][T11727]  ? __asan_memcpy+0x40/0x70
[  225.347507][T11727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.349706][T11727]  ? __pfx__printk+0x10/0x10
[  225.351645][T11727]  vpanic+0x281/0x750
[  225.353264][T11727]  ? __pfx_vpanic+0x10/0x10
[  225.355143][T11727]  ? irqentry_exit+0x74/0x90
[  225.357124][T11727]  panic+0xb9/0xc0
[  225.358628][T11727]  ? __pfx_panic+0x10/0x10
[  225.360561][T11727]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  225.363098][T11727]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  225.365576][T11727]  ? xfrm_alloc_spi+0x570/0xf30
[  225.367667][T11727]  check_panic_on_warn+0x89/0xb0
[  225.369730][T11727]  ? xfrm_alloc_spi+0x570/0xf30
[  225.371667][T11727]  end_report+0x78/0x160
[  225.373487][T11727]  kasan_report+0x129/0x150
[  225.375473][T11727]  ? xfrm_alloc_spi+0x570/0xf30
[  225.377511][T11727]  xfrm_alloc_spi+0x570/0xf30
[  225.379435][T11727]  ? xfrm_alloc_spi+0x2a0/0xf30
[  225.381466][T11727]  ? __local_bh_enable_ip+0x62/0x1c0
[  225.383725][T11727]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  225.385976][T11727]  ? xfrm_find_acq+0x87/0xa0
[  225.387904][T11727]  pfkey_getspi+0x7a8/0xee0
[  225.389852][T11727]  pfkey_sendmsg+0xbfe/0x1090
[  225.391891][T11727]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  225.394107][T11727]  ? aa_sock_msg_perm+0xf1/0x1d0
[  225.396249][T11727]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  225.398476][T11727]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  225.400648][T11727]  __sock_sendmsg+0x21c/0x270
[  225.402677][T11727]  ____sys_sendmsg+0x505/0x830
[  225.404723][T11727]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.406958][T11727]  ? import_iovec+0x74/0xa0
[  225.408929][T11727]  ___sys_sendmsg+0x21f/0x2a0
[  225.410955][T11727]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.413195][T11727]  ? __fget_files+0x2a/0x420
[  225.415234][T11727]  ? __fget_files+0x3a0/0x420
[  225.417274][T11727]  __x64_sys_sendmsg+0x19b/0x260
[  225.419408][T11727]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.421695][T11727]  ? rcu_is_watching+0x15/0xb0
[  225.423771][T11727]  ? do_syscall_64+0xbe/0x3b0
[  225.425822][T11727]  do_syscall_64+0xfa/0x3b0
[  225.427788][T11727]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.429970][T11727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.432426][T11727]  ? exc_page_fault+0x9f/0xf0
[  225.434333][T11727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.436834][T11727] RIP: 0033:0x7f36b258ebe9
[  225.438639][T11727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.446451][T11727] RSP: 002b:00007f36b33ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.449868][T11727] RAX: ffffffffffffffda RBX: 00007f36b27b5fa0 RCX: 00007f36b258ebe9
[  225.453469][T11727] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  225.456829][T11727] RBP: 00007f36b2611e19 R08: 0000000000000000 R09: 0000000000000000
[  225.460151][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.463474][T11727] R13: 00007f36b27b6038 R14: 00007f36b27b5fa0 R15: 00007ffea5753258
[  225.466777][T11727]  </TASK>
[  225.468859][T11727] Kernel Offset: disabled
[  225.470714][T11727] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:12:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000eca RDI=0000000000000ecb RBP=00000000000003f8 RSP=ffffc900042beeb0
R8 =ffff888020178237 R9 =1ffff1100402f046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f5 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f36b33ed6c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=0000000032aea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f36b2787498 00007f36b2787470 XMM03=00007f36b27874a8 00007f36b27874a0
XMM04=00007f36b32ed100 00007f36b2787460 XMM05=00007f36b2787478 00007f36b27874c0
XMM06=00007f36b27874b8 00007f36b27874b0 XMM07=00007f36b27874a8 00007f36b27874a0
XMM08=0000000000000000 00007f36b2612ee7 XMM09=0000000000000000 00007f36b2612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff888136639f98 RBP=ffffffff818ff9da RSP=ffffc9000440f928
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=0000000000000000 R13=ffff888136639f98 R14=0000000000000000 R15=0000000000000001
RIP=ffffffff819d5b18 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=00005555951c3add 00005555951c3980 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=00005555951c7455 00005555951c7170
XMM06=0000000000000000 0000000000000000 XMM07=01c00302100001b0 0301c010000d9003
XMM08=06080004b0030200 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
