last executing test programs:

1.068719124s ago: executing program 0 (id=1917):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
unshare(0x6020480)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x1, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

268.64651ms ago: executing program 2 (id=1941):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000020000000000e00000020000000000000000000000000000000000000000000100000000000100000002000000000a"], 0xb8}}, 0x0)

200.21914ms ago: executing program 0 (id=1942):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000600)=""/4096}, 0x20)

200.010665ms ago: executing program 1 (id=1943):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f0000000180))

197.849708ms ago: executing program 2 (id=1944):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@getlink={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8580}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

188.780484ms ago: executing program 0 (id=1945):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x500)

128.792232ms ago: executing program 2 (id=1946):
r0 = socket$l2tp(0x2, 0x2, 0x73)
unshare(0x26020480)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0)
connect$qrtr(r0, &(0x7f0000004d80)={0x2a, 0xffffffffffffffff, 0x3ffe}, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

128.577919ms ago: executing program 1 (id=1947):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r0, 0x607d8000)

128.443084ms ago: executing program 0 (id=1948):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000640)=0xffffffffffffff48)

57.962834ms ago: executing program 1 (id=1949):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
socket(0x1, 0x6, 0x101)
r1 = socket$pppoe(0x18, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x2010, 0xffffffffffffffff, 0x1e9c3000)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x4, @local, 'veth0\x00'}}, 0x1e)
connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @random="cc00", 'veth0_virt_wifi\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
socket$alg(0x26, 0x5, 0x0)

57.750147ms ago: executing program 2 (id=1950):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1c}, [@FRA_DST={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x8894)

57.418959ms ago: executing program 0 (id=1951):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', <r0=>0x0})
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r0, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x2}, 0xc)
bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc)
bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8)
listen(0xffffffffffffffff, 0x6)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0xa, 0x4)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYBLOB='2\x00'/12, @ANYRESOCT, @ANYBLOB="e3", @ANYBLOB="fcab553bb34cd0dadff9be3495bcea65e4b446de9a04e4ab3cbbfdaf95", @ANYBLOB="b534eb6524f511515aa99c65f0a24a87f1122a5a775be1e1cf7f3bc9b986f31e57289a8c84733a3f4264765a9f2e4c7d2454f9f3d4155153fadf1f81dc77a29cdaf75ee51114a26bf381a22c80eeab19cc7ac1a6b08ef3ae274630ec"], 0x20)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={0x0, 0x28}}, 0x20004000)
sendmsg$nl_route_sched(r7, 0x0, 0x2000400c)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf25010000001c000480050003000000000005000300000000000500030006000000080002000200000074000c801c000b80080009004a2b5363080009000c2c5e2e08000a006997000054000b8008000a007707000008000900fe015869080009009dc7780d080009002c77fb2808000900ddd4743808000a00030b000008000a001ac7000008000a00af3b000008000a00f6a8000008000a0007c8000044000480050003000000000005000300000000000500030001000000050003000500000005a2aa211349924cfce8000300060000000500030006000000050003000700000005000300000000000c0004"], 0xfc}}, 0x4)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x34}}, 0x0)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c"], 0x114}], 0x1}, 0x0)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18)

57.301615ms ago: executing program 1 (id=1952):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80)

57.182168ms ago: executing program 2 (id=1953):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

10.95387ms ago: executing program 1 (id=1954):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000004000000000000000100000d0a"], &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x1}, 0x28)

10.815734ms ago: executing program 1 (id=1955):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x18, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x18}}, 0x0)

6.500894ms ago: executing program 0 (id=1956):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x25dfdbff, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x32}, @in6=@empty, {0x0, 0x0, 0x10000000, 0x0, 0x8}, {0x2000000000000000}, {}, 0x0, 0x3505, 0x0, 0x0, 0x0, 0x1}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x2, 0x4}}]}, 0x120}}, 0x0)

0s ago: executing program 2 (id=1957):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c00020036e8040ed82e"], 0xb4}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30649' (ED25519) to the list of known hosts.
syzkaller login: [   49.464097][ T5807] cgroup: Unknown subsys name 'net'
[   49.564458][ T5807] cgroup: Unknown subsys name 'cpuset'
[   49.569011][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.984807][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.986515][ T5825] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.191902][ T5208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.202290][ T5208] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.211091][ T5208] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.217746][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.220958][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.229640][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.258402][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.262446][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.266807][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.270177][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.340537][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.345946][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.352349][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.362936][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.366509][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.689571][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   58.760584][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   58.813058][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.815587][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.818277][ T5852] bridge_slave_0: entered allmulticast mode
[   58.823979][ T5852] bridge_slave_0: entered promiscuous mode
[   58.832799][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   58.846894][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.849378][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.852202][ T5852] bridge_slave_1: entered allmulticast mode
[   58.855330][ T5852] bridge_slave_1: entered promiscuous mode
[   58.945474][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.948641][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.951362][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.956851][ T5849] bridge_slave_0: entered allmulticast mode
[   58.960246][ T5849] bridge_slave_0: entered promiscuous mode
[   58.975177][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.978601][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.982338][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.985338][ T5849] bridge_slave_1: entered allmulticast mode
[   58.989291][ T5849] bridge_slave_1: entered promiscuous mode
[   59.038353][ T5852] team0: Port device team_slave_0 added
[   59.042955][ T5852] team0: Port device team_slave_1 added
[   59.058550][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.062209][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.065125][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.067972][ T5856] bridge_slave_0: entered allmulticast mode
[   59.071303][ T5856] bridge_slave_0: entered promiscuous mode
[   59.086714][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.090595][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.094052][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.096788][ T5856] bridge_slave_1: entered allmulticast mode
[   59.099506][ T5856] bridge_slave_1: entered promiscuous mode
[   59.115357][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.117948][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.128068][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.165538][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.168364][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.178936][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.186628][ T5849] team0: Port device team_slave_0 added
[   59.190580][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.203913][ T5849] team0: Port device team_slave_1 added
[   59.208993][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.257680][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.259914][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.269101][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.283787][ T5856] team0: Port device team_slave_0 added
[   59.287273][ T5856] team0: Port device team_slave_1 added
[   59.307019][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.309626][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.319605][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.339569][ T5852] hsr_slave_0: entered promiscuous mode
[   59.343325][ T5852] hsr_slave_1: entered promiscuous mode
[   59.361168][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.364576][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.372960][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.410167][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.413554][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   59.423531][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.435687][ T5849] hsr_slave_0: entered promiscuous mode
[   59.438975][ T5849] hsr_slave_1: entered promiscuous mode
[   59.442480][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   59.444999][ T5849] Cannot create hsr debugfs directory
[   59.560118][ T5856] hsr_slave_0: entered promiscuous mode
[   59.562689][ T5856] hsr_slave_1: entered promiscuous mode
[   59.564820][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   59.566643][ T5856] Cannot create hsr debugfs directory
[   59.776109][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.796422][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.810271][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.821376][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.874929][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.881270][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.896649][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.907757][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.939720][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.948171][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.956121][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.968091][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   60.040326][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.075652][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   60.094339][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.097267][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.110142][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.113134][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.132888][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.174488][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   60.190098][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.192483][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.201322][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.215631][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.218317][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.265741][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   60.289339][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.292478][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.302849][ T5208] Bluetooth: hci0: command tx timeout
[   60.302854][ T5851] Bluetooth: hci1: command tx timeout
[   60.309870][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.312978][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.383846][ T5851] Bluetooth: hci2: command tx timeout
[   60.394958][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.479062][ T5852] veth0_vlan: entered promiscuous mode
[   60.501517][ T5852] veth1_vlan: entered promiscuous mode
[   60.523908][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.559997][ T5852] veth0_macvtap: entered promiscuous mode
[   60.575071][ T5852] veth1_macvtap: entered promiscuous mode
[   60.585262][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.609510][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.629074][ T5849] veth0_vlan: entered promiscuous mode
[   60.637546][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.658463][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.666102][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.675532][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.678763][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.684893][ T5849] veth1_vlan: entered promiscuous mode
[   60.702821][ T5856] veth0_vlan: entered promiscuous mode
[   60.718614][ T5856] veth1_vlan: entered promiscuous mode
[   60.761278][ T5849] veth0_macvtap: entered promiscuous mode
[   60.779696][ T5849] veth1_macvtap: entered promiscuous mode
[   60.811489][ T5856] veth0_macvtap: entered promiscuous mode
[   60.831139][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.836524][ T5856] veth1_macvtap: entered promiscuous mode
[   60.848271][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.856968][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.861052][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.884779][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.897997][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.902509][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.917705][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.939473][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.949090][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.958189][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.973281][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.001779][ T5667] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.006429][ T5667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.042032][ T5667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.044891][ T5667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.060138][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.071687][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.074997][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.160818][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.177229][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.249575][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.259245][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.337951][  T327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.341796][  T327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.382912][ T5851] Bluetooth: hci1: command tx timeout
[   62.391951][ T5851] Bluetooth: hci0: command tx timeout
[   62.471999][ T5851] Bluetooth: hci2: command tx timeout
[   62.610029][ T5977] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   62.881016][ T6001] sctp: [Deprecated]: syz.1.63 (pid 6001) Use of struct sctp_assoc_value in delayed_ack socket option.
[   62.881016][ T6001] Use struct sctp_sack_info instead
[   62.985670][ T6011] netlink: 256 bytes leftover after parsing attributes in process `syz.2.67'.
[   63.365950][ T6046] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.83'.
[   63.465822][ T6052] tipc: Can't bind to reserved service type 2
[   63.579772][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'.
[   64.468012][ T5851] Bluetooth: hci0: command tx timeout
[   64.468038][ T5208] Bluetooth: hci1: command tx timeout
[   64.545116][ T5208] Bluetooth: hci2: command tx timeout
[   64.568459][ T6076] warning: `syz.2.97' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.784401][ T6098] netlink: 96 bytes leftover after parsing attributes in process `syz.1.107'.
[   64.908819][ T6107] delete_channel: no stack
[   65.206415][ T6138] netlink: 'syz.1.121': attribute type 7 has an invalid length.
[   65.209941][ T6138] netlink: 'syz.1.121': attribute type 8 has an invalid length.
[   65.568477][ T6161] netlink: 'syz.1.131': attribute type 2 has an invalid length.
[   65.571376][ T6161] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[   65.744599][    C1] Illegal XDP return value 16128 on prog  (id 22) dev bond_slave_0, expect packet loss!
[   66.094885][ T6199] netlink: 'syz.0.144': attribute type 1 has an invalid length.
[   66.123973][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'.
[   66.145595][ T6199] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.148794][ T6199] bond1: (slave bond2): making interface the new active one
[   66.153293][ T6199] bond1: (slave bond2): Enslaving as an active interface with an up link
[   66.243352][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'.
[   66.299099][ T6218] bond3: entered promiscuous mode
[   66.301024][ T6218] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.312462][ T6224] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.315638][ T6224] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[   66.319895][ T6224] bond3: (slave vxcan1): Error -95 calling set_mac_address
[   66.351423][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.154'.
[   66.359769][ T6218] 8021q: adding VLAN 0 to HW filter on device bond3
[   66.468047][ T6236] bridge0: entered promiscuous mode
[   66.542350][ T5208] Bluetooth: hci0: command tx timeout
[   66.551737][ T5208] Bluetooth: hci1: command tx timeout
[   66.632110][ T5208] Bluetooth: hci2: command tx timeout
[   67.189984][ T6276] Bluetooth: MGMT ver 1.23
[   67.316532][ T6284] syz.1.184 uses obsolete (PF_INET,SOCK_PACKET)
[   67.970590][ T6336] tipc: Started in network mode
[   67.974560][ T6336] tipc: Node identity caea7649831e, cluster identity 4711
[   67.982257][ T6336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.987684][ T6336] syzkaller0: entered promiscuous mode
[   67.989604][ T6336] syzkaller0: entered allmulticast mode
[   68.016940][ T6336] tipc: Resetting bearer <eth:syzkaller0>
[   68.022581][ T6335] tipc: Resetting bearer <eth:syzkaller0>
[   68.024861][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   68.024918][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   68.059946][ T6335] tipc: Disabling bearer <eth:syzkaller0>
[   68.317650][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.220'.
[   68.410082][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'.
[   68.424009][ T6375] netlink: 'syz.1.224': attribute type 2 has an invalid length.
[   68.433238][ T6373] Zero length message leads to an empty skb
[   68.916123][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'.
[   68.939159][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[   69.485183][ T6469] tipc: Failed to remove unknown binding: 66,1,1/0:890901779/890901781
[   69.488008][ T6469] tipc: Failed to remove unknown binding: 66,1,1/0:890901779/890901781
[   69.519255][ T6474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.582459][ T6481] ipvlan2: entered promiscuous mode
[   69.584275][ T6481] ipvlan2: entered allmulticast mode
[   69.586022][ T6481] batadv0: entered allmulticast mode
[   69.588530][ T6481] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   69.766217][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'.
[   69.772381][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'.
[   69.775516][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.282'.
[   69.806810][ T6508] delete_channel: no stack
[   69.875927][ T6516] netlink: 'syz.1.287': attribute type 1 has an invalid length.
[   70.145506][ T6537] netlink: 'syz.2.297': attribute type 14 has an invalid length.
[   70.436898][ T6554] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.303'.
[   71.115807][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.118887][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   72.708849][ T6669] netlink: 648 bytes leftover after parsing attributes in process `syz.2.356'.
[   72.867346][ T6632] Set syz1 is full, maxelem 65536 reached
[   73.088450][ T6702] netlink: 168 bytes leftover after parsing attributes in process `syz.2.370'.
[   73.431865][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'.
[   73.439333][    C0] vcan0: j1939_session_tx_dat: 0xffff88802134a800: queue data error: -100
[   73.444888][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[   73.447151][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[   73.449348][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[   73.451504][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   73.648678][ T6737] netlink: 'syz.0.382': attribute type 21 has an invalid length.
[   73.654574][ T6737] netlink: 'syz.0.382': attribute type 6 has an invalid length.
[   73.659944][ T6737] netlink: 64 bytes leftover after parsing attributes in process `syz.0.382'.
[   73.716559][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'.
[   73.772161][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'.
[   73.882658][ T6756] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   73.902162][ T6756] bridge_slave_0: left allmulticast mode
[   73.910159][ T6756] bridge_slave_0: left promiscuous mode
[   73.918356][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.934578][ T6756] bridge_slave_1: left allmulticast mode
[   73.936650][ T6756] bridge_slave_1: left promiscuous mode
[   73.938797][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.944586][ T6761] netlink: 'syz.2.389': attribute type 10 has an invalid length.
[   73.951359][ T6756] bond0: (slave bond_slave_0): Releasing backup interface
[   73.963987][ T6756] bond0: (slave bond_slave_1): Releasing backup interface
[   73.974222][ T6756] team0: Port device team_slave_0 removed
[   73.983173][ T6756] team0: Port device team_slave_1 removed
[   73.986602][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.989954][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.996293][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.999459][ T6756] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.014828][ T6761] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   74.020466][ T6761] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   74.112345][ T6756] syzkaller0: entered promiscuous mode
[   74.114634][ T6756] syzkaller0: entered allmulticast mode
[   74.739672][ T6772] netlink: 'syz.0.395': attribute type 2 has an invalid length.
[   74.750496][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'.
[   75.679628][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'.
[   75.697726][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'.
[   75.721833][ T6785] netlink: 'syz.1.400': attribute type 18 has an invalid length.
[   75.747747][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.748494][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'.
[   75.754878][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.754921][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.754936][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.771834][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'.
[   75.775914][ T6785] netlink: 'syz.1.400': attribute type 18 has an invalid length.
[   76.331882][ T6820] sctp: [Deprecated]: syz.2.415 (pid 6820) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.331882][ T6820] Use struct sctp_sack_info instead
[   76.339152][ T6820] sctp: [Deprecated]: syz.2.415 (pid 6820) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.339152][ T6820] Use struct sctp_sack_info instead
[   76.472277][ T6832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.418'.
[   76.965129][ T6864] netlink: 'syz.0.435': attribute type 1 has an invalid length.
[   78.490597][ T6896] 8021q: VLANs not supported on ipvlan1
[   78.758270][ T6914] netlink: 'syz.2.455': attribute type 8 has an invalid length.
[   79.100821][ T6946] __nla_validate_parse: 7 callbacks suppressed
[   79.100839][ T6946] netlink: 256 bytes leftover after parsing attributes in process `syz.1.471'.
[   79.107877][ T6946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.471'.
[   79.214455][ T6953] netlink: 240 bytes leftover after parsing attributes in process `syz.2.469'.
[   79.253261][   T24] cfg80211: failed to load regulatory.db
[   79.356527][ T6969] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.481'.
[   79.404011][ T6975] netlink: 40 bytes leftover after parsing attributes in process `syz.1.484'.
[   79.662202][ T5208] Bluetooth: hci2: command 0x0405 tx timeout
[   80.570115][ T7055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.518'.
[   81.116601][ T7102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.541'.
[   81.163329][ T7108] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.544'.
[   81.241969][ T7116] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.263355][ T7116] syzkaller0: entered promiscuous mode
[   81.265304][ T7116] syzkaller0: entered allmulticast mode
[   81.267605][ T7116] tipc: Resetting bearer <eth:syzkaller0>
[   81.283017][ T7115] tipc: Resetting bearer <eth:syzkaller0>
[   82.087850][ T7115] tipc: Disabling bearer <eth:syzkaller0>
[   82.149990][ T7132] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.154083][ T7132] batadv_slave_1: entered promiscuous mode
[   82.159661][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'.
[   82.180883][ T7134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.226022][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.557'.
[   82.254238][ T7140] netlink: 'syz.1.558': attribute type 2 has an invalid length.
[   82.258418][ T7140] netlink: 'syz.1.558': attribute type 1 has an invalid length.
[   82.287840][ T7142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.684301][ T7188] wg1 speed is unknown, defaulting to 1000
[   82.686969][ T7188] wg1 speed is unknown, defaulting to 1000
[   82.691162][ T7188] wg1 speed is unknown, defaulting to 1000
[   82.697165][ T7188] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   82.704985][ T7188] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   82.725462][ T7188] wg1 speed is unknown, defaulting to 1000
[   82.733395][ T7188] wg1 speed is unknown, defaulting to 1000
[   82.749166][ T7188] wg1 speed is unknown, defaulting to 1000
[   83.045584][ T7221] netlink: 'syz.2.592': attribute type 3 has an invalid length.
[   83.066338][ T7207] syz.1.589 (7207) used greatest stack depth: 18232 bytes left
[   84.003288][ T7268] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   84.110041][ T7274] sock: sock_timestamping_bind_phc: sock not bind to device
[   84.359300][ T7287] netlink: 'syz.1.623': attribute type 1 has an invalid length.
[   84.362324][ T7287] __nla_validate_parse: 5 callbacks suppressed
[   84.362332][ T7287] netlink: 244 bytes leftover after parsing attributes in process `syz.1.623'.
[   84.516353][ T7303] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.631'.
[   84.575107][ T7308] netlink: 72 bytes leftover after parsing attributes in process `syz.2.633'.
[   84.623414][ T7315] Bluetooth: MGMT ver 1.23
[   84.681341][ T7325] bridge0: entered allmulticast mode
[   84.731933][ T7328] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.890784][ T7352] netlink: 68 bytes leftover after parsing attributes in process `syz.0.656'.
[   85.204850][ T7377] wg1 speed is unknown, defaulting to 1000
[   85.883374][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.675'.
[   85.886688][ T7394] wg1 speed is unknown, defaulting to 1000
[   85.930942][ T7400] openvswitch: netlink: IP tunnel dst address not specified
[   86.624935][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[   86.654049][ T7455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.820825][ T7468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.706'.
[   86.843657][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[   87.170907][ T7488] erspan0: entered promiscuous mode
[   87.625600][ T7528] lo speed is unknown, defaulting to 1000
[   87.627656][ T7528] lo speed is unknown, defaulting to 1000
[   87.630295][ T7528] lo speed is unknown, defaulting to 1000
[   87.653576][ T7528] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   87.654032][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'.
[   87.669244][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.733'.
[   87.670899][ T7528] lo speed is unknown, defaulting to 1000
[   87.675435][ T7528] lo speed is unknown, defaulting to 1000
[   87.678795][ T7528] lo speed is unknown, defaulting to 1000
[   87.692445][ T7528] wg1: entered promiscuous mode
[   87.694553][ T7528] wg1: entered allmulticast mode
[   87.699194][  T791] wg1 speed is unknown, defaulting to 1000
[   87.776447][ T7541] syzkaller1: entered promiscuous mode
[   87.778999][ T7541] syzkaller1: entered allmulticast mode
[   88.668411][ T7578] siw: device registration error -23
[   88.972362][ T7592] bridge_slave_0: left allmulticast mode
[   88.974565][ T7592] bridge_slave_0: left promiscuous mode
[   88.976735][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.984277][ T7592] bridge_slave_1: left allmulticast mode
[   88.986408][ T7592] bridge_slave_1: left promiscuous mode
[   88.988526][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.995214][ T7592] bond0: (slave bond_slave_0): Releasing backup interface
[   88.999627][ T7592] bond0: (slave bond_slave_1): Releasing backup interface
[   89.011159][ T7592] team0: Port device team_slave_0 removed
[   89.020007][ T7592] team0: Port device team_slave_1 removed
[   89.029538][ T7592] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.033293][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.037619][ T7592] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.215329][ T7599] netlink: 'syz.1.764': attribute type 3 has an invalid length.
[   89.377835][ T7609] __nla_validate_parse: 3 callbacks suppressed
[   89.377846][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'.
[   89.384730][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'.
[   89.494715][ T7619] ieee802154 phy0 wpan0: encryption failed: -22
[   89.697797][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.786'.
[   89.698753][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.787'.
[   89.710363][ T7642] vlan2: entered promiscuous mode
[   89.713999][ T7642] bond0: entered promiscuous mode
[   89.716687][ T7642] bridge0: port 1(vlan2) entered blocking state
[   89.718850][ T7642] bridge0: port 1(vlan2) entered disabled state
[   89.721145][ T7642] vlan2: entered allmulticast mode
[   89.723501][ T7642] bond0: entered allmulticast mode
[   89.752763][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'.
[   89.846319][ T7648] wg1 speed is unknown, defaulting to 1000
[   89.849224][ T7648] lo speed is unknown, defaulting to 1000
[   89.974851][ T7661] netlink: 256 bytes leftover after parsing attributes in process `syz.1.792'.
[   90.108097][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'.
[   90.162285][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'.
[   90.165689][ T7674] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   90.354559][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.806'.
[   90.481037][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'.
[   90.748626][ T7703] bridge0: left promiscuous mode
[   90.797122][ T7703] wg1: left promiscuous mode
[   90.808590][ T7703] wg1: left allmulticast mode
[   91.026366][   T47] lo speed is unknown, defaulting to 1000
[   91.027011][    T9] wg1 speed is unknown, defaulting to 1000
[   91.028421][   T47] syz1: Port: 1 Link DOWN
[   91.030595][ T5861] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.035085][ T5861] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.038978][ T5861] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.045968][ T5861] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.049413][    T9] syz0: Port: 1 Link DOWN
[   91.390327][ T7748] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   91.395412][   T47] IPVS: starting estimator thread 0...
[   91.418187][ T7753] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   91.504777][ T7751] IPVS: using max 78 ests per chain, 187200 per kthread
[   91.532665][ T5861] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.538003][ T5861] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.544438][ T5861] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.550420][ T5861] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.568806][ T7770] netlink: 'syz.2.839': attribute type 58 has an invalid length.
[   92.323665][ T7837] netlink: 'syz.1.871': attribute type 20 has an invalid length.
[   92.326405][ T7837] netlink: 'syz.1.871': attribute type 21 has an invalid length.
[   92.386980][ T7843] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[   92.496797][ T7855] trusted_key: syz.2.880 sent an empty control message without MSG_MORE.
[   93.411085][ T7926] wg1 speed is unknown, defaulting to 1000
[   93.416248][ T7926] lo speed is unknown, defaulting to 1000
[   94.043776][ T7959] vlan0: entered promiscuous mode
[   94.054309][ T7959] team0: Port device vlan0 added
[   94.294899][ T7968] batadv_slave_0: entered promiscuous mode
[   94.728927][ T7995] tipc: Started in network mode
[   94.730813][ T7995] tipc: Node identity 02f738c56b85, cluster identity 4711
[   94.733672][ T7995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.737117][ T7995] syzkaller0: entered promiscuous mode
[   94.739299][ T7995] syzkaller0: entered allmulticast mode
[   94.755518][ T7995] tipc: Resetting bearer <eth:syzkaller0>
[   94.760384][ T7994] tipc: Resetting bearer <eth:syzkaller0>
[   94.771531][ T7994] tipc: Disabling bearer <eth:syzkaller0>
[   94.938318][ T8007] netlink: 'syz.2.948': attribute type 10 has an invalid length.
[   94.944208][ T8007] team0: Port device dummy0 added
[   94.948871][ T8007] netlink: 'syz.2.948': attribute type 10 has an invalid length.
[   94.966159][ T8007] team0: Port device dummy0 removed
[   94.969663][ T8007] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.034790][ T8015] __nla_validate_parse: 13 callbacks suppressed
[   95.034801][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'.
[   95.239197][ T8030] pim6reg: entered allmulticast mode
[   95.292299][ T8035] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.295644][ T8035] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   95.303681][  T792] lo speed is unknown, defaulting to 1000
[   95.303750][ T8030] pim6reg: left allmulticast mode
[   95.305930][  T792] syz1: Port: 1 Link ACTIVE
[   95.310587][ T8035] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[   95.674757][ T8070] netlink: 356 bytes leftover after parsing attributes in process `syz.2.974'.
[   95.691307][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'.
[   95.718479][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'.
[   95.722797][ T8074] netlink: 84 bytes leftover after parsing attributes in process `syz.2.976'.
[   96.107434][ T8106] tipc: Started in network mode
[   96.109304][ T8106] tipc: Node identity 92a293dc20e2, cluster identity 4711
[   96.112177][ T8106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.115170][ T8106] syzkaller0: entered promiscuous mode
[   96.117078][ T8106] syzkaller0: entered allmulticast mode
[   96.139036][ T8106] tipc: Resetting bearer <eth:syzkaller0>
[   96.145048][ T8105] tipc: Resetting bearer <eth:syzkaller0>
[   96.158164][ T8105] tipc: Disabling bearer <eth:syzkaller0>
[   96.941179][ T8127] netlink: 'syz.0.999': attribute type 9 has an invalid length.
[   97.150169][ T8140] tipc: Enabled bearer <udp:syz0>, priority 10
[   97.206526][ T8138] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.300922][ T8151] netlink: 'syz.2.1012': attribute type 4 has an invalid length.
[   97.309350][ T5901] lo speed is unknown, defaulting to 1000
[   97.313921][ T8151] netlink: 'syz.2.1012': attribute type 4 has an invalid length.
[   97.316921][ T5901] syz1: Port: 1 Link DOWN
[   97.320571][ T5901] lo speed is unknown, defaulting to 1000
[   97.325348][ T5901] syz1: Port: 1 Link ACTIVE
[   97.395299][ T8161] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1017'.
[   97.447454][ T8165] openvswitch: netlink: Missing key (keys=40, expected=80)
[   97.838204][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'.
[   97.847887][ T8195] wg1 speed is unknown, defaulting to 1000
[   97.853247][ T8195] lo speed is unknown, defaulting to 1000
[   97.938430][ T8210] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   97.942163][ T8209] IPVS: stopping backup sync thread 8210 ...
[   97.955126][ T8209] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1037'.
[   97.973023][ T8209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1037'.
[   97.977365][ T8209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1037'.
[   98.027213][ T8201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.033317][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.152844][ T5901] tipc: Node number set to 2990576604
[   98.323001][   T47] tipc: Node number set to 1769093317
[   98.977716][ T8259] tipc: Enabled bearer <eth:wg0>, priority 14
[   99.167123][ T8277] wg1 speed is unknown, defaulting to 1000
[   99.170181][ T8277] lo speed is unknown, defaulting to 1000
[   99.421425][ T8300] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   99.510324][ T8305] netlink: 'syz.1.1080': attribute type 1 has an invalid length.
[   99.623169][ T8316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.626891][ T8316] syzkaller0: entered promiscuous mode
[   99.628761][ T8316] syzkaller0: entered allmulticast mode
[   99.655264][ T8316] tipc: Resetting bearer <eth:syzkaller0>
[   99.660448][ T8315] tipc: Resetting bearer <eth:syzkaller0>
[   99.678042][ T8315] tipc: Disabling bearer <eth:syzkaller0>
[   99.761218][ T8326] bridge2: entered allmulticast mode
[  100.091752][  T792] tipc: Node number set to 1240757833
[  100.131454][ T8351] netlink: 'syz.0.1103': attribute type 1 has an invalid length.
[  100.133280][ T8350] netlink: 'syz.2.1102': attribute type 10 has an invalid length.
[  100.135958][ T8351] __nla_validate_parse: 10 callbacks suppressed
[  100.135967][ T8351] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1103'.
[  100.740867][ T8396] netlink: 'syz.1.1125': attribute type 1 has an invalid length.
[  100.744776][ T8396] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1125'.
[  100.748950][ T8396] NCSI netlink: No device for ifindex 0
[  100.768459][ T8398] syz_tun: entered promiscuous mode
[  100.908125][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'.
[  100.917043][ T8414] geneve0: entered promiscuous mode
[  100.918849][ T8414] geneve0: entered allmulticast mode
[  101.062745][ T8428] tipc: Invalid UDP bearer configuration
[  101.062777][ T8428] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  101.181082][ T8446] openvswitch: netlink: EtherType 0 is less than min 600
[  102.431425][ T8493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.434969][ T8493] syzkaller0: entered promiscuous mode
[  102.437341][ T8493] syzkaller0: entered allmulticast mode
[  102.456879][ T8493] tipc: Resetting bearer <eth:syzkaller0>
[  102.468500][ T8492] tipc: Resetting bearer <eth:syzkaller0>
[  102.486364][ T8492] tipc: Disabling bearer <eth:syzkaller0>
[  102.619727][ T8508] sctp: [Deprecated]: syz.1.1179 (pid 8508) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.619727][ T8508] Use struct sctp_sack_info instead
[  102.620410][ T8507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1180'.
[  102.681492][ T8510] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  102.793519][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1188'.
[  102.940558][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'.
[  103.034592][ T8545] syzkaller1: entered promiscuous mode
[  103.037184][ T8545] syzkaller1: entered allmulticast mode
[  103.109970][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'.
[  103.120295][ T8552] netlink: 'syz.2.1201': attribute type 1 has an invalid length.
[  103.165485][ T8552] bond1: entered promiscuous mode
[  103.167389][ T8552] bond1: entered allmulticast mode
[  103.169649][ T8552] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.175711][ T8555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.188247][ T8552] bridge1: entered promiscuous mode
[  103.190141][ T8552] bridge1: entered allmulticast mode
[  103.192843][ T8552] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  103.195851][ T8555] syzkaller0: entered promiscuous mode
[  103.197765][ T8555] syzkaller0: entered allmulticast mode
[  103.268660][  T792] lo speed is unknown, defaulting to 1000
[  103.270020][ T8555] tipc: Resetting bearer <eth:syzkaller0>
[  103.271788][  T792] syz1: Port: 1 Link DOWN
[  103.278453][ T8554] tipc: Resetting bearer <eth:syzkaller0>
[  103.292457][ T8554] tipc: Disabling bearer <eth:syzkaller0>
[  103.435113][ T8565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1207'.
[  103.638562][ T8578] : entered promiscuous mode
[  103.698257][ T8582] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  103.700723][ T8582] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1213'.
[  103.717096][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1213'.
[  103.746612][ T8588] netlink: 'syz.2.1216': attribute type 1 has an invalid length.
[  103.886376][ T8604] wg1 speed is unknown, defaulting to 1000
[  103.889236][ T8604] lo speed is unknown, defaulting to 1000
[  103.987457][ T8615] netlink: 'syz.0.1228': attribute type 11 has an invalid length.
[  104.164812][ T8625] netlink: 'syz.2.1233': attribute type 4 has an invalid length.
[  104.377701][ T8634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.383213][ T8634] syzkaller0: entered promiscuous mode
[  104.385512][ T8634] syzkaller0: entered allmulticast mode
[  104.427571][ T8634] tipc: Resetting bearer <eth:syzkaller0>
[  104.443441][ T8633] tipc: Resetting bearer <eth:syzkaller0>
[  104.457513][ T8633] tipc: Disabling bearer <eth:syzkaller0>
[  104.497002][ T8647] syzkaller1: entered promiscuous mode
[  104.498943][ T8647] syzkaller1: entered allmulticast mode
[  105.263654][ T8699] pimreg3: entered allmulticast mode
[  105.290093][ T8701] __nla_validate_parse: 8 callbacks suppressed
[  105.290106][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'.
[  105.366848][ T8704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.737818][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'.
[  105.774585][ T8722] team0: Mode changed to "loadbalance"
[  105.928696][ T8738] netlink: 'syz.1.1285': attribute type 10 has an invalid length.
[  105.931327][ T8738] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1285'.
[  105.934457][ T8738] team0: entered promiscuous mode
[  105.937276][ T8738] 8021q: adding VLAN 0 to HW filter on device team0
[  105.939656][ T8738] bridge0: port 2(team0) entered blocking state
[  105.948267][ T8738] bridge0: port 2(team0) entered disabled state
[  105.950622][ T8738] team0: entered allmulticast mode
[  105.964471][ T8738] bridge0: port 2(team0) entered blocking state
[  105.967844][ T8738] bridge0: port 2(team0) entered forwarding state
[  106.058811][ T8756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.061550][ T8756] syzkaller0: entered promiscuous mode
[  106.065757][ T8756] syzkaller0: entered allmulticast mode
[  106.079346][ T8756] tipc: Resetting bearer <eth:syzkaller0>
[  106.082567][ T8755] tipc: Resetting bearer <eth:syzkaller0>
[  106.093293][ T8755] tipc: Disabling bearer <eth:syzkaller0>
[  106.141733][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  106.319167][ T8773] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1301'.
[  106.420685][ T8773] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  106.426622][ T8773] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  106.430164][ T8773] bond0 (unregistering): Released all slaves
[  106.824013][ T8809] netlink: 'syz.2.1316': attribute type 2 has an invalid length.
[  107.053561][ T8827] netlink: 'syz.0.1323': attribute type 1 has an invalid length.
[  107.079829][ T8827] bond4: entered promiscuous mode
[  107.082560][ T8827] bond4: entered allmulticast mode
[  107.084556][ T8827] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.100559][ T8827] bridge3: entered promiscuous mode
[  107.104373][ T8827] bridge3: entered allmulticast mode
[  107.106730][ T8827] bond4: (slave bridge3): Enslaving as a backup interface with an up link
[  107.147495][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.151197][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.171136][ T8827] tipc: Resetting bearer <eth:wg0>
[  107.184080][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  107.204531][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.210256][ T8827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.285977][ T5861] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.288944][ T5861] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.295293][ T5861] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.298220][ T5861] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.301158][ T5861] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.304457][ T5861] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.307308][ T5861] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.311526][ T5861] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.366611][ T8846] 8021q: adding VLAN 0 to HW filter on device team0
[  107.375904][ T8846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.385142][   T47] lo speed is unknown, defaulting to 1000
[  107.387112][   T47] syz1: Port: 1 Link ACTIVE
[  107.552275][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.554902][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.564442][ T8867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.999367][ T8914] netlink: 'syz.1.1364': attribute type 21 has an invalid length.
[  108.002948][ T8914] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1364'.
[  108.006662][ T8914] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1364'.
[  108.025424][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'.
[  108.034176][ T8917] delete_channel: no stack
[  108.363477][ T8949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.366139][ T8949] syzkaller0: entered promiscuous mode
[  108.367878][ T8949] syzkaller0: entered allmulticast mode
[  108.449172][ T8949] tipc: Resetting bearer <eth:syzkaller0>
[  108.505163][ T8948] tipc: Resetting bearer <eth:syzkaller0>
[  108.590245][ T8948] tipc: Disabling bearer <eth:syzkaller0>
[  108.626425][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'.
[  109.286679][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'.
[  109.316308][ T9007] netlink: 'syz.0.1408': attribute type 1 has an invalid length.
[  109.321171][ T9007] netlink: 'syz.0.1408': attribute type 3 has an invalid length.
[  109.325288][ T9007] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1408'.
[  109.432287][ T9020] tun0: tun_chr_ioctl cmd 1074812117
[  110.031426][ T9090] nbd: couldn't find device at index 536870912
[  111.237542][ T6190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.241417][ T6190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.251356][ T9139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.654909][ T9156] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  111.679927][ T9158] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  111.731060][ T9162] __nla_validate_parse: 3 callbacks suppressed
[  111.731071][ T9162] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1473'.
[  111.991488][ T9182] macvlan1: entered promiscuous mode
[  112.013649][ T9182] macvlan1: left promiscuous mode
[  112.357209][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'.
[  112.736336][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'.
[  113.561485][ T9291] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1531'.
[  113.729003][ T9307] batadv_slave_1: entered promiscuous mode
[  113.737970][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1539'.
[  113.750952][ T9305] batadv_slave_1: left promiscuous mode
[  113.823867][ T9319] netlink: 'syz.0.1545': attribute type 3 has an invalid length.
[  114.101161][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'.
[  114.235086][ T9368] netlink: 'syz.1.1563': attribute type 30 has an invalid length.
[  114.238085][ T9368] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  114.241363][ T9368] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  114.299969][ T9374] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1565'.
[  114.331054][ T9380] netlink: 'syz.0.1567': attribute type 1 has an invalid length.
[  114.341871][ T9380] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1567'.
[  114.420139][ T9392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1572'.
[  114.426595][ T9392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  114.429442][ T9392] IPv6: NLM_F_CREATE should be set when creating new route
[  114.543238][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1581'.
[  114.643555][ T9422] netlink: 'syz.2.1586': attribute type 1 has an invalid length.
[  114.646313][ T9422] netlink: 'syz.2.1586': attribute type 22 has an invalid length.
[  115.234235][ T9471] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  115.819423][ T5286] IPVS: starting estimator thread 0...
[  115.865971][ T9518] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  115.913251][ T9514] IPVS: using max 48 ests per chain, 115200 per kthread
[  116.055576][ T9534] macvtap1: entered promiscuous mode
[  116.057865][ T9534] batadv0: entered promiscuous mode
[  116.061391][ T9534] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  116.067173][ T9534] batadv0: left promiscuous mode
[  116.216292][ T9541] dvmrp1: entered allmulticast mode
[  116.685725][ T9562] netlink: 'syz.1.1650': attribute type 3 has an invalid length.
[  116.956809][ T9571] __nla_validate_parse: 11 callbacks suppressed
[  116.956828][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'.
[  117.091101][ T9579] netlink: 'syz.0.1658': attribute type 2 has an invalid length.
[  117.094716][ T9579] netlink: 'syz.0.1658': attribute type 8 has an invalid length.
[  117.097662][ T9579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1658'.
[  117.266000][ T9589] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1663'.
[  117.726759][ T9624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.754430][ T9624] syzkaller0: entered promiscuous mode
[  117.756349][ T9624] syzkaller0: entered allmulticast mode
[  117.758933][ T9624] tipc: Resetting bearer <eth:syzkaller0>
[  117.767178][ T9623] tipc: Resetting bearer <eth:syzkaller0>
[  118.675460][ T5208] Bluetooth: hci2: link tx timeout
[  118.680469][ T5208] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.685141][ T5208] Bluetooth: hci2: link tx timeout
[  118.687369][ T5208] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.690986][ T5208] Bluetooth: hci2: link tx timeout
[  118.693334][ T5208] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  118.753860][ T9623] tipc: Disabling bearer <eth:syzkaller0>
[  118.771976][ T9633] wg1 speed is unknown, defaulting to 1000
[  118.779208][ T9633] lo speed is unknown, defaulting to 1000
[  118.818650][ T9636] netlink: 'syz.0.1683': attribute type 1 has an invalid length.
[  118.821442][ T9636] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1683'.
[  118.825892][ T9636] netlink: 'syz.0.1683': attribute type 2 has an invalid length.
[  118.826970][ T9639] syz_tun: entered promiscuous mode
[  118.828582][ T9636] netlink: 'syz.0.1683': attribute type 1 has an invalid length.
[  118.830696][ T9639] vlan2: entered promiscuous mode
[  118.977218][ T9649] netlink: 'syz.2.1689': attribute type 30 has an invalid length.
[  119.641281][ T9666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.645671][ T9666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.723984][ T9666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.727999][ T9666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.816034][ T9666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.819957][ T9666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.875820][ T9666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.880405][ T9666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.999786][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.003485][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.019570][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.023217][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.044849][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.050207][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.060450][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.064854][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.165070][ T9691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.167938][ T9691] syzkaller0: entered promiscuous mode
[  120.169821][ T9691] syzkaller0: entered allmulticast mode
[  120.204958][ T9691] tipc: Resetting bearer <eth:syzkaller0>
[  120.216911][ T9690] tipc: Resetting bearer <eth:syzkaller0>
[  120.234522][ T9690] tipc: Disabling bearer <eth:syzkaller0>
[  120.348450][ T9703] netlink: 'syz.2.1714': attribute type 1 has an invalid length.
[  120.353736][ T9703] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1714'.
[  120.490088][ T9710] team0: left allmulticast mode
[  120.492464][ T9710] bridge0: port 2(team0) entered disabled state
[  120.509737][ T9710] vlan2: left allmulticast mode
[  120.514534][ T9710] bond0: left allmulticast mode
[  120.516924][ T9710] bridge0: port 1(vlan2) entered disabled state
[  120.590556][ T9705] netlink: 'syz.1.1715': attribute type 10 has an invalid length.
[  120.658213][ T9705] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.671917][ T9705] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.703771][ T5208] Bluetooth: hci2: command 0x0405 tx timeout
[  120.748958][ T9729] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1723'.
[  120.754871][ T9729] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1723'.
[  120.919598][ T9746] raw_sendmsg: syz.0.1731 forgot to set AF_INET. Fix it!
[  121.007073][ T9754] syzkaller0: entered promiscuous mode
[  121.009181][ T9754] syzkaller0: entered allmulticast mode
[  121.017395][ T9754] netlink: 'syz.0.1734': attribute type 11 has an invalid length.
[  121.765215][ T9793] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  121.877387][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'.
[  122.002976][ T9819] netlink: 'syz.1.1765': attribute type 1 has an invalid length.
[  122.005562][ T9819] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1765'.
[  122.064545][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'.
[  122.086364][ T9825] macvlan2: entered promiscuous mode
[  122.088369][ T9825] bond0: entered promiscuous mode
[  122.090006][ T9825] bond_slave_0: entered promiscuous mode
[  122.092662][ T9825] bond_slave_1: entered promiscuous mode
[  122.097281][ T9825] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  122.236658][ T9834] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  122.487031][ T9855] bridge: RTM_NEWNEIGH with invalid ether address
[  122.576456][ T9858] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  122.835288][ T9874] wg1 speed is unknown, defaulting to 1000
[  122.839421][ T9874] lo speed is unknown, defaulting to 1000
[  123.002921][ T9879] netlink: 'syz.1.1790': attribute type 9 has an invalid length.
[  123.006105][ T9879] netlink: 'syz.1.1790': attribute type 9 has an invalid length.
[  123.330026][ T9895] tipc: Enabled bearer <eth:team0>, priority 0
[  123.585821][ T9926] netlink: 'syz.0.1813': attribute type 1 has an invalid length.
[  123.588546][ T9926] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1813'.
[  123.623759][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1814'.
[  123.626811][ T9928] netlink: 'syz.0.1814': attribute type 4 has an invalid length.
[  123.689710][ T9936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1818'.
[  123.927651][ T9971] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  123.943516][ T9971] bridge_slave_0: left allmulticast mode
[  123.945683][ T9971] bridge_slave_0: left promiscuous mode
[  123.949013][ T9971] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.965170][ T9971] bridge_slave_1: left allmulticast mode
[  123.969605][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'.
[  123.970464][ T9971] bridge_slave_1: left promiscuous mode
[  123.983443][ T9971] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.993942][ T9971] bond0: (slave bond_slave_0): Releasing backup interface
[  124.003433][ T9971] bond_slave_0: left promiscuous mode
[  124.007019][ T9971] bond0: (slave bond_slave_1): Releasing backup interface
[  124.010762][ T9971] bond_slave_1: left promiscuous mode
[  124.019107][ T9971] team0: Port device team_slave_0 removed
[  124.025026][ T9971] team0: Port device team_slave_1 removed
[  124.028310][ T9971] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.034159][ T9971] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.044827][ T9971] team0: Port device vlan0 removed
[  124.049096][ T9971] bond1: (slave bond2): Releasing backup interface
[  124.054219][ T9971] bond4: (slave bridge3): Removing an active aggregator
[  124.057114][ T9971] bond4: (slave bridge3): Releasing backup interface
[  124.061128][ T9971] bridge3: left promiscuous mode
[  124.064087][ T9971] bridge3: left allmulticast mode
[  124.069603][ T9988] netlink: 'syz.0.1832': attribute type 10 has an invalid length.
[  124.074250][ T9988] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  124.079854][ T9988] bond0: (slave wlan1): refused to change device type
[  124.101491][ T9971] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.105442][ T9971] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.138929][ T9994] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1838'.
[  124.691536][T10022] bridge_slave_0: invalid flags given to default FDB implementation
[  124.820772][T10034] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1858'.
[  124.883247][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1861'.
[  125.152118][T10070] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  125.224747][T10076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.227772][T10076] syzkaller0: entered promiscuous mode
[  125.229628][T10076] syzkaller0: entered allmulticast mode
[  125.269127][T10076] tipc: Resetting bearer <eth:syzkaller0>
[  125.273806][T10075] tipc: Resetting bearer <eth:syzkaller0>
[  125.288902][T10075] tipc: Disabling bearer <eth:syzkaller0>
[  125.403413][T10090] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1884'.
[  125.701108][T10133] netlink: 'syz.1.1905': attribute type 2 has an invalid length.
[  126.395426][T10154] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  126.405659][T10154] bond1: (slave bridge1): Releasing backup interface
[  126.408375][T10154] bridge1: left promiscuous mode
[  126.410273][T10154] bridge1: left allmulticast mode
[  126.452095][T10154] netlink: 'syz.2.1913': attribute type 10 has an invalid length.
[  126.455164][T10154] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  126.462913][T10154] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.469550][T10154] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  126.788967][T10180] tap0: tun_chr_ioctl cmd 1074025680
[  126.797751][T10180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.802603][T10180] D: renamed from syzkaller0
[  126.806887][T10180] tipc: Disabling bearer <eth:syzkaller0>
[  127.002616][T10184] wg1 speed is unknown, defaulting to 1000
[  127.006660][T10184] lo speed is unknown, defaulting to 1000
[  127.240150][T10197] __nla_validate_parse: 3 callbacks suppressed
[  127.240161][T10197] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1933'.
[  127.414516][T10214] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1941'.
[  127.526160][   T33] audit: type=1800 audit(1754006016.350:2): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1947" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3205 res=0 errno=0
[  127.616855][T10236] netlink: 'syz.0.1951': attribute type 7 has an invalid length.
[  127.620494][T10236] netlink: 'syz.0.1951': attribute type 8 has an invalid length.
[  127.625202][T10236] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1951'.
[  127.673876][T10246] ==================================================================
[  127.676706][T10246] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  127.677740][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1957'.
[  127.679312][T10246] Read of size 4 at addr ffff8881128652c4 by task syz.0.1956/10246
[  127.679323][T10246] 
[  127.679330][T10246] CPU: 0 UID: 0 PID: 10246 Comm: syz.0.1956 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  127.679341][T10246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.679346][T10246] Call Trace:
[  127.679352][T10246]  <TASK>
[  127.679357][T10246]  dump_stack_lvl+0x189/0x250
[  127.679370][T10246]  ? __kasan_check_byte+0x12/0x40
[  127.679384][T10246]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.679392][T10246]  ? lock_release+0x4b/0x3e0
[  127.679404][T10246]  ? __virt_addr_valid+0x4a5/0x5c0
[  127.679415][T10246]  print_report+0xca/0x240
[  127.679428][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  127.679436][T10246]  kasan_report+0x118/0x150
[  127.679447][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  127.679456][T10246]  xfrm_alloc_spi+0x570/0xf30
[  127.679463][T10246]  ? xfrm_alloc_spi+0x2a0/0xf30
[  127.679473][T10246]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  127.679480][T10246]  ? xfrm_find_acq+0x87/0xa0
[  127.679489][T10246]  xfrm_alloc_userspi+0x70b/0xc90
[  127.679499][T10246]  ? __pfx_aa_get_newest_label+0x10/0x10
[  127.679510][T10246]  ? apparmor_capable+0x137/0x1b0
[  127.679517][T10246]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  127.679526][T10246]  ? __nla_parse+0x40/0x60
[  127.679535][T10246]  xfrm_user_rcv_msg+0x7a3/0xab0
[  127.679544][T10246]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  127.679558][T10246]  ? __pfx___mutex_trylock_common+0x10/0x10
[  127.679566][T10246]  ? rcu_is_watching+0x15/0xb0
[  127.679577][T10246]  ? trace_contention_end+0x39/0x120
[  127.679584][T10246]  ? __mutex_lock+0x335/0x1340
[  127.679598][T10246]  netlink_rcv_skb+0x208/0x470
[  127.679630][T10246]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  127.679642][T10246]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  127.679655][T10246]  ? netlink_deliver_tap+0x2e/0x1b0
[  127.679671][T10246]  ? netlink_deliver_tap+0x2e/0x1b0
[  127.679683][T10246]  xfrm_netlink_rcv+0x79/0x90
[  127.679691][T10246]  netlink_unicast+0x82f/0x9e0
[  127.679702][T10246]  ? __pfx_netlink_unicast+0x10/0x10
[  127.679713][T10246]  ? netlink_sendmsg+0x642/0xb30
[  127.679724][T10246]  ? skb_put+0x11b/0x210
[  127.679732][T10246]  netlink_sendmsg+0x805/0xb30
[  127.679746][T10246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.679757][T10246]  ? aa_sock_msg_perm+0x94/0x160
[  127.679768][T10246]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  127.679779][T10246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  127.679790][T10246]  __sock_sendmsg+0x21c/0x270
[  127.679801][T10246]  ____sys_sendmsg+0x505/0x830
[  127.679810][T10246]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.679818][T10246]  ? import_iovec+0x74/0xa0
[  127.679829][T10246]  ___sys_sendmsg+0x21f/0x2a0
[  127.679836][T10246]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.679849][T10246]  ? __fget_files+0x2a/0x420
[  127.679856][T10246]  ? __fget_files+0x3a0/0x420
[  127.679864][T10246]  __x64_sys_sendmsg+0x19b/0x260
[  127.679871][T10246]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  127.679880][T10246]  ? rcu_is_watching+0x15/0xb0
[  127.679892][T10246]  ? do_syscall_64+0xbe/0x3b0
[  127.679903][T10246]  do_syscall_64+0xfa/0x3b0
[  127.679913][T10246]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.679922][T10246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.679929][T10246]  ? exc_page_fault+0x9f/0xf0
[  127.679939][T10246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.679946][T10246] RIP: 0033:0x7f077258eb69
[  127.679953][T10246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.679960][T10246] RSP: 002b:00007f077333b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.679969][T10246] RAX: ffffffffffffffda RBX: 00007f07727b5fa0 RCX: 00007f077258eb69
[  127.679975][T10246] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[  127.679979][T10246] RBP: 00007f0772611df1 R08: 0000000000000000 R09: 0000000000000000
[  127.679984][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  127.679988][T10246] R13: 0000000000000000 R14: 00007f07727b5fa0 R15: 00007ffcda1481c8
[  127.679995][T10246]  </TASK>
[  127.679998][T10246] 
[  127.685088][T10248] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1957'.
[  127.685757][T10246] Allocated by task 7689:
[  127.822074][T10246]  kasan_save_track+0x3e/0x80
[  127.823632][T10246]  __kasan_slab_alloc+0x6c/0x80
[  127.825220][T10246]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  127.827060][T10246]  xfrm_state_alloc+0x24/0x2f0
[  127.828638][T10246]  __find_acq_core+0x8a7/0x1c00
[  127.830199][T10246]  xfrm_find_acq+0x78/0xa0
[  127.831702][T10246]  xfrm_alloc_userspi+0x6b3/0xc90
[  127.833384][T10246]  xfrm_user_rcv_msg+0x7a3/0xab0
[  127.835091][T10246]  netlink_rcv_skb+0x208/0x470
[  127.836680][T10246]  xfrm_netlink_rcv+0x79/0x90
[  127.838219][T10246]  netlink_unicast+0x82f/0x9e0
[  127.839787][T10246]  netlink_sendmsg+0x805/0xb30
[  127.841414][T10246]  __sock_sendmsg+0x21c/0x270
[  127.843012][T10246]  ____sys_sendmsg+0x505/0x830
[  127.844631][T10246]  ___sys_sendmsg+0x21f/0x2a0
[  127.846225][T10246]  __x64_sys_sendmsg+0x19b/0x260
[  127.847913][T10246]  do_syscall_64+0xfa/0x3b0
[  127.849426][T10246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.851357][T10246] 
[  127.852171][T10246] Freed by task 5286:
[  127.853556][T10246]  kasan_save_track+0x3e/0x80
[  127.855150][T10246]  kasan_save_free_info+0x46/0x50
[  127.856809][T10246]  __kasan_slab_free+0x62/0x70
[  127.858449][T10246]  kmem_cache_free+0x18f/0x400
[  127.860018][T10246]  xfrm_state_gc_task+0x518/0x6a0
[  127.861684][T10246]  process_scheduled_works+0xae1/0x17b0
[  127.863534][T10246]  worker_thread+0x8a0/0xda0
[  127.865092][T10246]  kthread+0x711/0x8a0
[  127.866411][T10246]  ret_from_fork+0x3fc/0x770
[  127.867929][T10246]  ret_from_fork_asm+0x1a/0x30
[  127.869490][T10246] 
[  127.870310][T10246] The buggy address belongs to the object at ffff888112865200
[  127.870310][T10246]  which belongs to the cache xfrm_state of size 928
[  127.874732][T10246] The buggy address is located 196 bytes inside of
[  127.874732][T10246]  freed 928-byte region [ffff888112865200, ffff8881128655a0)
[  127.879101][T10246] 
[  127.879911][T10246] The buggy address belongs to the physical page:
[  127.882055][T10246] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888112864480 pfn:0x112864
[  127.885373][T10246] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  127.888178][T10246] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  127.890699][T10246] page_type: f5(slab)
[  127.892056][T10246] raw: 057ff00000000040 ffff888104e278c0 dead000000000122 0000000000000000
[  127.894857][T10246] raw: ffff888112864480 00000000800e0009 00000000f5000000 0000000000000000
[  127.897636][T10246] head: 057ff00000000040 ffff888104e278c0 dead000000000122 0000000000000000
[  127.900392][T10246] head: ffff888112864480 00000000800e0009 00000000f5000000 0000000000000000
[  127.903255][T10246] head: 057ff00000000002 ffffea00044a1901 00000000ffffffff 00000000ffffffff
[  127.906048][T10246] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  127.908905][T10246] page dumped because: kasan: bad access detected
[  127.911010][T10246] page_owner tracks the page as allocated
[  127.912886][T10246] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5983, tgid 5981 (syz.2.53), ts 62686767520, free_ts 62628013739
[  127.919031][T10246]  post_alloc_hook+0x240/0x2a0
[  127.920637][T10246]  get_page_from_freelist+0x21e4/0x22c0
[  127.922425][T10246]  __alloc_frozen_pages_noprof+0x181/0x370
[  127.924305][T10246]  alloc_pages_mpol+0x232/0x4a0
[  127.925988][T10246]  allocate_slab+0x8a/0x3b0
[  127.927471][T10246]  ___slab_alloc+0xbfc/0x1480
[  127.929062][T10246]  kmem_cache_alloc_noprof+0x283/0x3c0
[  127.930908][T10246]  xfrm_state_alloc+0x24/0x2f0
[  127.932546][T10246]  xfrm_add_acquire+0xf7/0xb20
[  127.934186][T10246]  xfrm_user_rcv_msg+0x7a3/0xab0
[  127.935891][T10246]  netlink_rcv_skb+0x208/0x470
[  127.937541][T10246]  xfrm_netlink_rcv+0x79/0x90
[  127.939166][T10246]  netlink_unicast+0x82f/0x9e0
[  127.940722][T10246]  netlink_sendmsg+0x805/0xb30
[  127.942257][T10246]  __sock_sendmsg+0x21c/0x270
[  127.943835][T10246]  ____sys_sendmsg+0x505/0x830
[  127.945429][T10246] page last free pid 5975 tgid 5975 stack trace:
[  127.947496][T10246]  __free_frozen_pages+0xc71/0xe70
[  127.949224][T10246]  stack_depot_save_flags+0x445/0x900
[  127.950996][T10246]  ref_tracker_free+0xfe/0x7d0
[  127.952569][T10246]  __sk_destruct+0x3c3/0x660
[  127.954125][T10246]  unix_release_sock+0xa57/0xd30
[  127.955776][T10246]  unix_release+0x92/0xd0
[  127.957205][T10246]  sock_close+0xc3/0x240
[  127.958589][T10246]  __fput+0x44c/0xa70
[  127.959921][T10246]  task_work_run+0x1d4/0x260
[  127.961427][T10246]  exit_to_user_mode_loop+0xec/0x110
[  127.963164][T10246]  do_syscall_64+0x2bd/0x3b0
[  127.964711][T10246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.966687][T10246] 
[  127.967494][T10246] Memory state around the buggy address:
[  127.969311][T10246]  ffff888112865180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  127.971977][T10246]  ffff888112865200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.974578][T10246] >ffff888112865280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.977195][T10246]                                            ^
[  127.979195][T10246]  ffff888112865300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.981860][T10246]  ffff888112865380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  127.984450][T10246] ==================================================================
[  127.987267][T10246] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  127.989597][T10246] CPU: 0 UID: 0 PID: 10246 Comm: syz.0.1956 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  127.993640][T10246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.996947][T10246] Call Trace:
[  127.998052][T10246]  <TASK>
[  127.999043][T10246]  dump_stack_lvl+0x99/0x250
[  128.000585][T10246]  ? __asan_memcpy+0x40/0x70
[  128.002138][T10246]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.003864][T10246]  ? __pfx__printk+0x10/0x10
[  128.005382][T10246]  panic+0x2db/0x790
[  128.006712][T10246]  ? __pfx_panic+0x10/0x10
[  128.008250][T10246]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  128.010266][T10246]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.012296][T10246]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.014435][T10246]  ? print_memory_metadata+0x314/0x400
[  128.016451][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  128.018529][T10246]  check_panic_on_warn+0x89/0xb0
[  128.020642][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  128.022718][T10246]  end_report+0x78/0x160
[  128.024484][T10246]  kasan_report+0x129/0x150
[  128.026418][T10246]  ? xfrm_alloc_spi+0x570/0xf30
[  128.028371][T10246]  xfrm_alloc_spi+0x570/0xf30
[  128.030281][T10246]  ? xfrm_alloc_spi+0x2a0/0xf30
[  128.032255][T10246]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  128.034326][T10246]  ? xfrm_find_acq+0x87/0xa0
[  128.036196][T10246]  xfrm_alloc_userspi+0x70b/0xc90
[  128.038250][T10246]  ? __pfx_aa_get_newest_label+0x10/0x10
[  128.040535][T10246]  ? apparmor_capable+0x137/0x1b0
[  128.042694][T10246]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  128.044906][T10246]  ? __nla_parse+0x40/0x60
[  128.046733][T10246]  xfrm_user_rcv_msg+0x7a3/0xab0
[  128.048795][T10246]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.050972][T10246]  ? __pfx___mutex_trylock_common+0x10/0x10
[  128.053374][T10246]  ? rcu_is_watching+0x15/0xb0
[  128.055399][T10246]  ? trace_contention_end+0x39/0x120
[  128.057572][T10246]  ? __mutex_lock+0x335/0x1340
[  128.059569][T10246]  netlink_rcv_skb+0x208/0x470
[  128.061585][T10246]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  128.063832][T10246]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  128.065985][T10246]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.068147][T10246]  ? netlink_deliver_tap+0x2e/0x1b0
[  128.070225][T10246]  xfrm_netlink_rcv+0x79/0x90
[  128.072178][T10246]  netlink_unicast+0x82f/0x9e0
[  128.073949][T10246]  ? __pfx_netlink_unicast+0x10/0x10
[  128.075682][T10246]  ? netlink_sendmsg+0x642/0xb30
[  128.077341][T10246]  ? skb_put+0x11b/0x210
[  128.078799][T10246]  netlink_sendmsg+0x805/0xb30
[  128.080427][T10246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.082174][T10246]  ? aa_sock_msg_perm+0x94/0x160
[  128.083857][T10246]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  128.086002][T10246]  ? __pfx_netlink_sendmsg+0x10/0x10
[  128.088194][T10246]  __sock_sendmsg+0x21c/0x270
[  128.090152][T10246]  ____sys_sendmsg+0x505/0x830
[  128.092042][T10246]  ? __pfx_____sys_sendmsg+0x10/0x10
[  128.094261][T10246]  ? import_iovec+0x74/0xa0
[  128.096092][T10246]  ___sys_sendmsg+0x21f/0x2a0
[  128.097926][T10246]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.099824][T10246]  ? __fget_files+0x2a/0x420
[  128.101420][T10246]  ? __fget_files+0x3a0/0x420
[  128.103051][T10246]  __x64_sys_sendmsg+0x19b/0x260
[  128.104774][T10246]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  128.106647][T10246]  ? rcu_is_watching+0x15/0xb0
[  128.108236][T10246]  ? do_syscall_64+0xbe/0x3b0
[  128.109795][T10246]  do_syscall_64+0xfa/0x3b0
[  128.111308][T10246]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.113057][T10246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.115119][T10246]  ? exc_page_fault+0x9f/0xf0
[  128.116733][T10246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.118753][T10246] RIP: 0033:0x7f077258eb69
[  128.120244][T10246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.126638][T10246] RSP: 002b:00007f077333b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  128.129534][T10246] RAX: ffffffffffffffda RBX: 00007f07727b5fa0 RCX: 00007f077258eb69
[  128.132713][T10246] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[  128.135883][T10246] RBP: 00007f0772611df1 R08: 0000000000000000 R09: 0000000000000000
[  128.139108][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.142320][T10246] R13: 0000000000000000 R14: 00007f07727b5fa0 R15: 00007ffcda1481c8
[  128.145545][T10246]  </TASK>
[  128.147539][T10246] Kernel Offset: disabled
[  128.149295][T10246] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:53:36  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a037c5 RBX=ffffffff81a03784 RCX=ffff88801f9a0000 RDX=ffffc90003c51000
RSI=000000000001daf0 RDI=000000000001daf0 RBP=ffffc90007ba6f10 RSP=ffffc90007ba6df8
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c260d9
R12=dffffc0000000000 R13=1ffff92000f74dc4 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81bfb0f6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f077333b6c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=000000011f746000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0772787498 00007f0772787470 XMM03=00007f07727874a8 00007f07727874a0
XMM04=00007f07732ed100 00007f0772787460 XMM05=00007f0772787478 00007f07727874c0
XMM06=00007f07727874b8 00007f07727874b0 XMM07=00007f07727874a8 00007f07727874a0
XMM08=0000000000000000 00007f0772612eab XMM09=0000000000000000 00007f0772612f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000012fe9 RDI=0000000000012fea RBP=00000000000003f8 RSP=ffffc90007a167b0
R8 =ffff8880206c8237 R9 =1ffff110040d9046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9591b R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f152e8ab6c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000300 CR3=000000011120e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f152db87498 00007f152db87470 XMM03=00007f152db874a8 00007f152db874a0
XMM04=00007f152e6ed100 00007f152db87460 XMM05=00007f152db87478 00007f152db874c0
XMM06=00007f152db874b8 00007f152db874b0 XMM07=00007f152db874a8 00007f152db874a0
XMM08=0000000000000000 00007f152da12eab XMM09=0000000000000000 00007f152da12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
