last executing test programs:

1.099151606s ago: executing program 0 (id=5077):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}}, 0xf0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)

1.098632033s ago: executing program 0 (id=5078):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2805}, 0x80)

1.047430942s ago: executing program 0 (id=5080):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(0x4)
unshare(0x6a040000)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03076844268c", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)

949.574885ms ago: executing program 2 (id=5082):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x6040}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2008004)

860.374006ms ago: executing program 2 (id=5083):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x400)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000380), 0xffffffffffffffff)
socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)

800.805349ms ago: executing program 2 (id=5084):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20)

800.664253ms ago: executing program 2 (id=5085):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8, @any, 0x0, 0x2}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0))

730.751101ms ago: executing program 2 (id=5086):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)

730.435365ms ago: executing program 2 (id=5087):
epoll_create1(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='sched_switch\x00', r3}, 0x18)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
close(0x4)

652.117901ms ago: executing program 0 (id=5088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010)

651.817663ms ago: executing program 0 (id=5089):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff05, 0x0)

589.297151ms ago: executing program 0 (id=5090):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8)
sendto$inet6(r0, &(0x7f00000001c0)="ad", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000180))

184.671452ms ago: executing program 1 (id=5092):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

120.813811ms ago: executing program 1 (id=5093):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20)

64.620072ms ago: executing program 1 (id=5094):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xf7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}]}, 0x34}}, 0x40000)

64.237184ms ago: executing program 1 (id=5095):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18)

248.173µs ago: executing program 1 (id=5096):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0)

0s ago: executing program 1 (id=5097):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

ng state
[   66.308634][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.325677][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.328141][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.497079][ T5858] Bluetooth: hci1: command tx timeout
[   66.499752][ T5858] Bluetooth: hci0: command tx timeout
[   66.543356][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.570967][ T5858] Bluetooth: hci2: command tx timeout
[   66.598304][ T5855] veth0_vlan: entered promiscuous mode
[   66.612052][ T5855] veth1_vlan: entered promiscuous mode
[   66.658341][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.673728][ T5855] veth0_macvtap: entered promiscuous mode
[   66.688513][ T5855] veth1_macvtap: entered promiscuous mode
[   66.712723][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.717571][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.726733][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.746493][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.749409][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.770081][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.776783][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.847661][ T5863] veth0_vlan: entered promiscuous mode
[   66.896996][ T5863] veth1_vlan: entered promiscuous mode
[   66.902409][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.917515][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.928855][ T5859] veth0_vlan: entered promiscuous mode
[   66.963037][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.966643][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.978472][ T5859] veth1_vlan: entered promiscuous mode
[   66.984192][ T5863] veth0_macvtap: entered promiscuous mode
[   66.997184][ T5863] veth1_macvtap: entered promiscuous mode
[   67.025369][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.029052][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.063680][ T5859] veth0_macvtap: entered promiscuous mode
[   67.069815][ T5859] veth1_macvtap: entered promiscuous mode
[   67.081695][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.105058][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.163575][ T5888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.187937][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.198978][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.202920][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.204790][ T5927] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4'.
[   67.206267][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.273268][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.276506][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.279801][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.306755][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.352197][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.357039][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.382042][ T5931] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   67.385244][ T5931] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   67.438187][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.447322][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.525933][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.528881][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.592430][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.595381][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.817349][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.909112][ T5953] netlink: 'syz.2.14': attribute type 4 has an invalid length.
[   67.953244][ T5951] Zero length message leads to an empty skb
[   67.958664][ T5951] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET)
[   67.987679][ T5951] smc: net device bond0 applied user defined pnetid SYZ2
[   67.994446][ T5951] smc: net device bond0 erased user defined pnetid SYZ2
[   68.077881][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   68.339085][ T5972] netlink: 'syz.2.23': attribute type 3 has an invalid length.
[   68.453696][ T5979] syzkaller1: entered promiscuous mode
[   68.456351][ T5979] syzkaller1: entered allmulticast mode
[   68.571512][   T55] Bluetooth: hci1: command tx timeout
[   68.573801][ T5858] Bluetooth: hci0: command tx timeout
[   68.650957][ T5858] Bluetooth: hci2: command tx timeout
[   69.482425][ T5994] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.586870][ T6000] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   69.625415][ T5998] erspan0: entered promiscuous mode
[   69.628719][ T5998] erspan0: left promiscuous mode
[   69.647590][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'.
[   69.657658][ T6002] netlink: 'syz.2.36': attribute type 1 has an invalid length.
[   69.660087][ T6002] netlink: 'syz.2.36': attribute type 2 has an invalid length.
[   69.676719][ T6002] syz.2.36 (6002) used greatest stack depth: 20568 bytes left
[   69.727240][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35'.
[   69.769105][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'.
[   69.837745][ T6014] netlink: 'syz.2.38': attribute type 1 has an invalid length.
[   69.846730][ T6014] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.38'.
[   70.435576][ T6043] mac80211_hwsim hwsim6 ": renamed from wlan0 (while UP)
[   70.640862][   T55] Bluetooth: hci1: command tx timeout
[   70.643767][ T5858] Bluetooth: hci0: command tx timeout
[   70.722990][ T5858] Bluetooth: hci2: command tx timeout
[   70.904578][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'.
[   70.911030][ T6058] netlink: 32 bytes leftover after parsing attributes in process `syz.1.59'.
[   71.011172][ T6064] netlink: 52 bytes leftover after parsing attributes in process `syz.2.62'.
[   71.016604][ T6064] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[   71.214691][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.217281][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.337904][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   71.342220][ T6078] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   71.371584][ T6078] nbd: socks must be embedded in a SOCK_ITEM attr
[   71.374782][ T6078] block nbd0: shutting down sockets
[   72.297080][ T6116] __nla_validate_parse: 2 callbacks suppressed
[   72.297095][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'.
[   72.306038][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.84'.
[   72.722000][   T55] Bluetooth: hci0: command tx timeout
[   72.724256][   T55] Bluetooth: hci1: command tx timeout
[   72.800797][ T5239] Bluetooth: hci2: command tx timeout
[   73.084370][ T6158] netlink: 'syz.0.95': attribute type 16 has an invalid length.
[   73.087520][ T6158] netlink: 'syz.0.95': attribute type 17 has an invalid length.
[   73.118087][ T6158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.869261][ T6192] ipvlan2: entered promiscuous mode
[   73.872704][ T6192] bridge0: port 3(ipvlan2) entered blocking state
[   73.875194][ T6192] bridge0: port 3(ipvlan2) entered disabled state
[   73.885659][ T6192] ipvlan2: entered allmulticast mode
[   73.887863][ T6192] bridge0: entered allmulticast mode
[   73.923705][ T6192] ipvlan2: left allmulticast mode
[   73.925677][ T6192] bridge0: left allmulticast mode
[   74.017324][   T56] block nbd0: Receive control failed (result -104)
[   74.148293][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'.
[   74.287951][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'.
[   74.727149][ T6244] tipc: Started in network mode
[   74.734585][ T6244] tipc: Node identity , cluster identity 4711
[   74.736739][ T6244] tipc: Failed to obtain node identity
[   74.738487][ T6244] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   74.890617][ T5239] Bluetooth: hci2: command 0x0405 tx timeout
[   75.191901][ T6280] vlan2: entered allmulticast mode
[   75.194989][ T6280] bond0: entered allmulticast mode
[   75.196819][ T6280] bond_slave_0: entered allmulticast mode
[   75.199919][ T6280] bond_slave_1: entered allmulticast mode
[   75.743280][ T6318] sctp: [Deprecated]: syz.0.166 (pid 6318) Use of int in max_burst socket option.
[   75.743280][ T6318] Use struct sctp_assoc_value instead
[   75.808427][ T6321] ieee802154 phy0 wpan0: encryption failed: -22
[   76.827151][ T6345] tipc: Started in network mode
[   76.828879][ T6345] tipc: Node identity 5af5e1078744, cluster identity 4711
[   76.840704][ T6345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.849620][ T6345] syzkaller0: entered promiscuous mode
[   76.855166][ T6345] syzkaller0: entered allmulticast mode
[   76.878851][ T6345] tipc: Resetting bearer <eth:syzkaller0>
[   76.893335][ T6344] tipc: Resetting bearer <eth:syzkaller0>
[   76.912082][ T6344] tipc: Disabling bearer <eth:syzkaller0>
[   77.046986][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[   77.319028][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'.
[   77.333434][ T6363] netlink: 'syz.0.186': attribute type 30 has an invalid length.
[   77.346953][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'.
[   77.350819][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.359974][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.368646][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.372626][ T6363] netlink: 'syz.0.186': attribute type 30 has an invalid length.
[   77.376520][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.729762][ T6386] netlink: 27 bytes leftover after parsing attributes in process `syz.0.197'.
[   77.749199][ T6390] netlink: 'syz.2.199': attribute type 1 has an invalid length.
[   77.854646][ T6398] netlink: 'syz.0.203': attribute type 303 has an invalid length.
[   77.861365][ T6399] Driver unsupported XDP return value 0 on prog  (id 42) dev N/A, expect packet loss!
[   78.111721][ T6416] netlink: 256 bytes leftover after parsing attributes in process `syz.2.211'.
[   78.117691][ T6405] infiniband syz1: set active
[   78.119742][ T6405] infiniband syz1: added bond0
[   78.192793][ T6405] RDS/IB: syz1: added
[   78.194847][ T6405] smc: adding ib device syz1 with port count 1
[   78.204514][ T6405] smc:    ib device syz1 port 1 has pnetid 
[   78.620679][ T6428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.215'.
[   78.837877][ T6434] netlink: 248 bytes leftover after parsing attributes in process `syz.1.218'.
[   78.894204][ T6436] netlink: 108 bytes leftover after parsing attributes in process `syz.1.219'.
[   78.902443][ T6436] netlink: 108 bytes leftover after parsing attributes in process `syz.1.219'.
[   78.906050][ T6436] netlink: 84 bytes leftover after parsing attributes in process `syz.1.219'.
[   78.954169][ T6438] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.220'.
[   79.005544][ T6405] syz.0.207 (6405) used greatest stack depth: 20264 bytes left
[   79.113348][ T6446] rose0: entered promiscuous mode
[   79.762369][ T6495] netlink: 'syz.1.245': attribute type 21 has an invalid length.
[   79.853526][ T6504] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   79.917516][ T6504] bridge_slave_0: left allmulticast mode
[   79.919324][ T6504] bridge_slave_0: left promiscuous mode
[   79.923448][ T6504] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.949194][ T6504] bridge_slave_1: left allmulticast mode
[   79.962713][ T6504] bridge_slave_1: left promiscuous mode
[   79.964986][ T6504] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.981068][ T6504] bond0: (slave bond_slave_0): Releasing backup interface
[   79.989175][ T6504] bond0: (slave bond_slave_1): Releasing backup interface
[   80.004905][ T6504] team0: Port device team_slave_0 removed
[   80.020197][ T6504] team0: Port device team_slave_1 removed
[   80.025677][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.025708][ T6518] netlink: 'syz.1.248': attribute type 10 has an invalid length.
[   80.028191][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.035897][ T6504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.038993][ T6504] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.059120][ T6518] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   80.066618][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.074938][ T6518] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   80.341118][ T6528] nbd1: detected capacity change from 0 to 875674160
[   80.359687][   T56] block nbd1: Receive control failed (result -104)
[   80.507092][ T6541] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   80.988912][ T6559] netlink: 'syz.0.274': attribute type 2 has an invalid length.
[   81.437375][ T6589] tipc: Cannot configure node identity twice
[   81.577482][ T6596] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[   81.617427][ T6596] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.666040][ T6599] netlink: 'syz.0.293': attribute type 1 has an invalid length.
[   81.844059][ T6606] netlink: 'syz.0.297': attribute type 2 has an invalid length.
[   82.194447][ T5299] udevd[5299]: worker [5856] terminated by signal 33 (Unknown signal 33)
[   82.197824][ T5299] udevd[5299]: worker [5856] failed while handling '/devices/virtual/block/loop2'
[   82.214861][ T5299] udevd[5299]: worker [5866] terminated by signal 33 (Unknown signal 33)
[   82.217771][ T5299] udevd[5299]: worker [5866] failed while handling '/devices/virtual/block/loop0'
[   82.623610][ T6659] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   82.645523][ T6657] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   82.657098][ T6657] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   83.348003][ T6697] TCP: TCP_TX_DELAY enabled
[   83.844030][ T6731] sctp: [Deprecated]: syz.2.353 (pid 6731) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.844030][ T6731] Use struct sctp_sack_info instead
[   83.976814][ T6737] __nla_validate_parse: 9 callbacks suppressed
[   83.976830][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'.
[   84.667260][ T6773] netlink: 'syz.0.370': attribute type 1 has an invalid length.
[   84.722922][ T6773] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.758876][ T6779] sctp: [Deprecated]: syz.1.373 (pid 6779) Use of int in max_burst socket option.
[   84.758876][ T6779] Use struct sctp_assoc_value instead
[   85.012207][ T6794] netlink: 'syz.1.380': attribute type 1 has an invalid length.
[   85.066612][ T6801] netlink: 424 bytes leftover after parsing attributes in process `syz.0.384'.
[   85.069725][ T6801] netlink: 424 bytes leftover after parsing attributes in process `syz.0.384'.
[   85.412999][ T6821] netlink: 830 bytes leftover after parsing attributes in process `syz.0.393'.
[   85.676819][ T6840] syzkaller1: entered promiscuous mode
[   85.676948][ T6844] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.683221][ T6840] syzkaller1: entered allmulticast mode
[   85.694467][ T6840] netlink: 'syz.0.401': attribute type 15 has an invalid length.
[   85.790972][ T6851] netlink: 'syz.2.405': attribute type 8 has an invalid length.
[   85.924425][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[   85.969934][ T6869] netlink: 'syz.2.414': attribute type 29 has an invalid length.
[   85.975111][ T6869] netlink: 'syz.2.414': attribute type 29 has an invalid length.
[   85.978506][ T6869] netlink: 488 bytes leftover after parsing attributes in process `syz.2.414'.
[   86.568395][  T792] cfg80211: failed to load regulatory.db
[   86.617224][ T6929] netlink: 44 bytes leftover after parsing attributes in process `syz.0.435'.
[   86.645250][ T6931] ip6tnl1: entered promiscuous mode
[   86.647097][ T6931] ip6tnl1: entered allmulticast mode
[   87.497917][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.442'.
[   87.894833][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[   88.189074][ T6981] syzkaller0: tun_chr_ioctl cmd 1074812117
[   88.295187][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'.
[   88.395619][ T6991] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.399075][ T6991] syzkaller0: entered promiscuous mode
[   88.404640][ T6991] syzkaller0: entered allmulticast mode
[   88.426514][ T6991] tipc: Resetting bearer <eth:syzkaller0>
[   88.436793][ T6990] tipc: Resetting bearer <eth:syzkaller0>
[   88.465421][ T6990] tipc: Disabling bearer <eth:syzkaller0>
[   88.560900][ T6997] bond0: (slave wlan1): Releasing backup interface
[   88.637710][ T6997] team0: Mode changed to "broadcast"
[   88.647071][ T6997] netlink: 'syz.1.467': attribute type 16 has an invalid length.
[   88.650250][ T6997] vlan0: entered promiscuous mode
[   88.666755][ T6997] tipc: Started in network mode
[   88.668300][ T6997] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   88.672302][ T6997] tipc: Enabled bearer <eth:team0>, priority 0
[   88.756578][ T7017] netlink: 'syz.1.477': attribute type 16 has an invalid length.
[   88.816444][ T7022] netlink: 'syz.1.481': attribute type 32 has an invalid length.
[   88.849418][ T7026] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   88.977178][ T7038] vlan2: entered promiscuous mode
[   88.978993][ T7038] vlan2: entered allmulticast mode
[   88.982193][ T7038] hsr_slave_1: entered allmulticast mode
[   89.034420][ T7038] __nla_validate_parse: 2 callbacks suppressed
[   89.034434][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'.
[   89.607947][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'.
[   89.791428][ T5923] tipc: Node number set to 11578026
[   89.940379][ T7095] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   89.954822][ T7095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   90.016989][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[   90.109918][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'.
[   90.324124][ T7120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.524'.
[   90.433920][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'.
[   90.638320][ T7134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.691338][ T7134] syzkaller0: entered promiscuous mode
[   90.693151][ T7134] syzkaller0: entered allmulticast mode
[   90.695511][ T7134] tipc: Resetting bearer <eth:syzkaller0>
[   90.698293][ T7137] syzkaller1: entered allmulticast mode
[   90.716121][ T7137] syzkaller1: left allmulticast mode
[   90.745704][ T7132] tipc: Resetting bearer <eth:syzkaller0>
[   90.855643][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'.
[   92.201483][ T7132] tipc: Disabling bearer <eth:syzkaller0>
[   92.325574][ T7170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.351031][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'.
[   92.388697][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'.
[   92.556026][ T5909] IPVS: starting estimator thread 0...
[   92.642142][ T7186] IPVS: using max 62 ests per chain, 148800 per kthread
[   92.850223][ T7196] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   92.865493][ T7196] syzkaller0: entered promiscuous mode
[   92.867637][ T7196] syzkaller0: entered allmulticast mode
[   94.479913][   T33] audit: type=1800 audit(1755304537.523:2): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.586" name="memory.events" dev="tmpfs" ino=1096 res=0 errno=0
[   94.504247][   T33] audit: type=1804 audit(1755304537.543:3): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.586" name="/newroot/215/memory.events" dev="tmpfs" ino=1096 res=1 errno=0
[   94.646894][ T7276] netlink: 'syz.0.593': attribute type 1 has an invalid length.
[   94.664920][ T7276] netlink: 228 bytes leftover after parsing attributes in process `syz.0.593'.
[   94.902092][ T7297] lo speed is unknown, defaulting to 1000
[   94.904531][ T7297] lo speed is unknown, defaulting to 1000
[   94.906782][ T7297] lo speed is unknown, defaulting to 1000
[   95.039500][ T7311] netlink: 'syz.0.610': attribute type 25 has an invalid length.
[   95.044141][ T7311] netlink: 'syz.0.610': attribute type 7 has an invalid length.
[   95.052713][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.608'.
[   95.087403][ T7314] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.611'.
[   95.145526][ T7297] infiniband syz0: set active
[   95.147509][   T10] lo speed is unknown, defaulting to 1000
[   95.149995][ T7297] infiniband syz0: added lo
[   95.194834][ T7297] RDS/IB: syz0: added
[   95.198868][ T7297] smc: adding ib device syz0 with port count 1
[   95.205184][ T7297] smc:    ib device syz0 port 1 has pnetid 
[   95.215079][  T792] lo speed is unknown, defaulting to 1000
[   95.218467][ T7297] lo speed is unknown, defaulting to 1000
[   95.291636][ T7327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'.
[   95.294427][ T7327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.615'.
[   95.297187][ T7327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'.
[   95.300016][ T7327] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'.
[   95.397806][ T7297] lo speed is unknown, defaulting to 1000
[   95.546641][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.619'.
[   95.612476][ T7297] lo speed is unknown, defaulting to 1000
[   95.722443][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.722976][ T7336] siw: device registration error -23
[   96.095378][ T2206] hid-generic 0005:16C0:5505.0001: item fetching failed at offset 0/2
[   96.109803][ T2206] hid-generic 0005:16C0:5505.0001: probe with driver hid-generic failed with error -22
[   96.213506][ T7362] netlink: 92 bytes leftover after parsing attributes in process `syz.0.629'.
[   96.281388][ T7366] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   96.543627][ T7399] netlink: 'syz.1.647': attribute type 1 has an invalid length.
[   96.546080][ T7399] netlink: 224 bytes leftover after parsing attributes in process `syz.1.647'.
[   96.586501][ T7402] netlink: 'syz.2.646': attribute type 8 has an invalid length.
[   96.596106][ T7403] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[   96.795281][ T7420] netlink: 'syz.1.657': attribute type 66 has an invalid length.
[   96.923667][ T7432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.928128][ T7432] syzkaller0: entered promiscuous mode
[   96.930388][ T7432] syzkaller0: entered allmulticast mode
[   96.959030][ T7432] tipc: Resetting bearer <eth:syzkaller0>
[   96.963250][ T7430] tipc: Resetting bearer <eth:syzkaller0>
[   97.008500][ T7430] tipc: Disabling bearer <eth:syzkaller0>
[   97.285717][ T7454] netlink: 'syz.0.673': attribute type 15 has an invalid length.
[   97.524531][ T7466] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[   97.750524][ T7477] netlink: 'syz.0.684': attribute type 2 has an invalid length.
[   97.753627][ T7477] netlink: 'syz.0.684': attribute type 1 has an invalid length.
[   97.876448][ T7488] netlink: 'syz.0.690': attribute type 11 has an invalid length.
[   97.960649][ T7493] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1
[   98.055018][ T7493] bond0 (unregistering): Released all slaves
[   98.349389][ T7516] gtp0: entered promiscuous mode
[   98.531483][ T7532] netlink: 'syz.0.709': attribute type 1 has an invalid length.
[   98.837569][ T7556] bond1: entered promiscuous mode
[   98.840127][ T7556] bond1: entered allmulticast mode
[   98.845332][ T7556] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.867295][ T7556] bridge4: entered promiscuous mode
[   98.869077][ T7556] bridge4: entered allmulticast mode
[   98.872970][ T7556] bond1: (slave bridge4): Enslaving as a backup interface with an up link
[   98.941912][ T5718] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   98.955454][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.959624][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.050904][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   99.084620][ T7573] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   99.087409][ T2206] IPVS: starting estimator thread 0...
[   99.109325][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.117218][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.194587][ T7577] IPVS: using max 61 ests per chain, 146400 per kthread
[   99.240292][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.251412][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.259859][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.272309][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.858260][ T7638] rdma_rxe: rxe_newlink: failed to add lo
[  100.419956][ T7630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.668889][ T7778] __nla_validate_parse: 8 callbacks suppressed
[  102.668905][ T7778] netlink: 96 bytes leftover after parsing attributes in process `syz.2.815'.
[  102.684970][ T7780] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  102.729951][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'.
[  102.774528][ T7790] netlink: 84 bytes leftover after parsing attributes in process `syz.0.822'.
[  102.777409][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.822'.
[  102.779898][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'.
[  102.780261][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.822'.
[  102.784002][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'.
[  102.892050][ T7801] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.826'.
[  102.921517][ T7805] netlink: 108 bytes leftover after parsing attributes in process `syz.1.828'.
[  102.955693][ T7807] netlink: 172 bytes leftover after parsing attributes in process `syz.1.829'.
[  103.323670][ T7842] IPVS: length: 49 != 24
[  105.155938][ T7998] validate_nla: 2 callbacks suppressed
[  105.155962][ T7998] netlink: 'syz.1.917': attribute type 1 has an invalid length.
[  105.683561][ T8045] netlink: 'syz.2.936': attribute type 1 has an invalid length.
[  106.128202][ T8093] tipc: Started in network mode
[  106.130212][ T8093] tipc: Node identity ac1414aa, cluster identity 4711
[  106.136137][ T8093] tipc: Enabled bearer <udp:syz0>, priority 10
[  106.383975][ T8119] netlink: 'syz.0.968': attribute type 10 has an invalid length.
[  106.415228][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.433313][ T8119] team0: Port device bond0 added
[  106.733250][ T8151] netlink: 'syz.1.984': attribute type 15 has an invalid length.
[  106.744469][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  106.748359][ T8151] netlink: 'syz.1.984': attribute type 15 has an invalid length.
[  106.756241][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  106.759819][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  106.767545][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.251101][  T792] tipc: Node number set to 2886997162
[  108.105529][ T8242] netlink: 'syz.0.1025': attribute type 8 has an invalid length.
[  108.324373][ T8253] __nla_validate_parse: 21 callbacks suppressed
[  108.324391][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1031'.
[  108.330358][ T8253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1031'.
[  108.377098][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'.
[  108.395883][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'.
[  108.625990][ T8283] openvswitch: netlink: Flow key attribute not present in set flow.
[  108.940082][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'.
[  108.942051][ T5922] IPVS: starting estimator thread 0...
[  108.944454][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'.
[  108.946078][ T8307] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  108.949901][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'.
[  108.958323][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1057'.
[  109.019002][ T8314] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1058'.
[  109.030533][ T8311] IPVS: using max 61 ests per chain, 146400 per kthread
[  109.043702][ T8317] netlink: 'syz.0.1060': attribute type 33 has an invalid length.
[  109.046352][ T8317] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1060'.
[  110.159952][ T8351] lo speed is unknown, defaulting to 1000
[  110.434327][ T8396] netlink: 'syz.0.1094': attribute type 5 has an invalid length.
[  110.570226][ T5239] Bluetooth: hci2: command 0x0405 tx timeout
[  110.880223][ T8418] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  110.884660][   T96] block nbd1: Possible stuck request ffff888020568000: control (read@0,4096B). Runtime 30 seconds
[  111.676160][ T8421] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  112.663477][ T8506] netlink: 'syz.0.1144': attribute type 16 has an invalid length.
[  112.666523][ T8506] netlink: 'syz.0.1144': attribute type 17 has an invalid length.
[  112.765559][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.768104][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.890283][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.893356][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout
[  112.907222][ T8506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.094226][ T5718] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.098515][ T5718] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.104584][ T5718] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.108429][ T5718] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.132907][ T5718] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.136569][ T5718] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.140132][ T5718] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.153806][ T5718] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.413169][ T8543] __nla_validate_parse: 8 callbacks suppressed
[  113.413185][ T8543] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1161'.
[  113.677837][ T8572] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  113.734505][ T8576] netlink: 'syz.0.1177': attribute type 21 has an invalid length.
[  113.737697][ T8576] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1177'.
[  114.137325][ T8609] netlink: 'syz.1.1193': attribute type 10 has an invalid length.
[  114.143364][ T8609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1193'.
[  114.195836][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'.
[  114.199415][ T8615] openvswitch: netlink: Missing key (keys=40, expected=100)
[  114.258213][ T8621] netlink: 'syz.0.1199': attribute type 2 has an invalid length.
[  114.268926][ T8621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  114.447178][ T8632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.458185][ T8632] syzkaller0: entered promiscuous mode
[  114.468648][ T8632] syzkaller0: entered allmulticast mode
[  114.548913][ T8627] tipc: Resetting bearer <eth:syzkaller0>
[  114.575933][ T8627] tipc: Disabling bearer <eth:syzkaller0>
[  114.617552][ T8625] lo speed is unknown, defaulting to 1000
[  114.627794][ T8636] bond0: option xmit_hash_policy: invalid value (8)
[  114.877094][ T8647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.948818][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1212'.
[  114.953769][ T8647] syzkaller0: entered promiscuous mode
[  114.956123][ T8647] syzkaller0: entered allmulticast mode
[  114.966010][ T8652] chnl_net:caif_netlink_parms(): no params data found
[  115.017627][ T8647] tipc: Resetting bearer <eth:syzkaller0>
[  115.040757][ T8645] tipc: Resetting bearer <eth:syzkaller0>
[  115.134442][ T8645] tipc: Disabling bearer <eth:syzkaller0>
[  115.284837][ T8669] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1219'.
[  115.450157][ T8675] tipc: Can't bind to reserved service type 2
[  115.624513][ T8681] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1224'.
[  115.625783][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'.
[  115.672901][ T8689] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  115.725259][ T8693] netlink: 'syz.2.1230': attribute type 1 has an invalid length.
[  115.728481][ T8693] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1230'.
[  115.732553][ T8693] netlink: 'syz.2.1230': attribute type 1 has an invalid length.
[  116.101714][ T8719] tipc: Resetting bearer <eth:team0>
[  116.118097][ T2206] lo speed is unknown, defaulting to 1000
[  116.144408][ T8719] team0: Mode changed to "loadbalance"
[  116.318401][ T8734] vlan3: entered promiscuous mode
[  116.323263][ T8734] bridge0: entered promiscuous mode
[  116.358734][ T8735] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1249'.
[  116.534664][ T8749] syzkaller1: entered promiscuous mode
[  116.536457][ T8749] syzkaller1: entered allmulticast mode
[  116.625511][ T8739] syz.1.1252 (8739) used greatest stack depth: 20064 bytes left
[  116.718851][ T8756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.729379][ T8756] syzkaller0: entered promiscuous mode
[  116.733571][ T8756] syzkaller0: entered allmulticast mode
[  116.766732][ T8756] tipc: Resetting bearer <eth:syzkaller0>
[  116.775488][ T8754] tipc: Resetting bearer <eth:syzkaller0>
[  116.788629][ T8754] tipc: Disabling bearer <eth:syzkaller0>
[  117.067019][ T8780] bridge: RTM_NEWNEIGH with invalid ether address
[  117.184009][ T8792] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  117.274212][ T8802] tipc: Failed to remove unknown binding: 66,1,1/11578026:1679821919/1679821921
[  117.278525][ T8802] tipc: Failed to remove unknown binding: 66,1,1/11578026:1679821919/1679821921
[  117.289768][ T8802] tipc: Failed to remove unknown binding: 66,1,1/11578026:1679821919/1679821921
[  117.937213][ T8864] pim6reg1: entered promiscuous mode
[  117.938836][ T8864] pim6reg1: entered allmulticast mode
[  117.944579][ T8860] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  118.083118][ T8864] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.087498][ T8864] team0: Port device bond2 added
[  118.139027][ T8873] tipc: Resetting bearer <eth:team0>
[  118.365819][ T5895] lo speed is unknown, defaulting to 1000
[  118.368109][ T5895] syz0: Port: 1 Link DOWN
[  118.370305][ T5895] lo speed is unknown, defaulting to 1000
[  118.387420][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.420675][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.424781][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.434458][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.438077][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.460715][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.464867][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  118.468334][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.891780][ T8891] lo speed is unknown, defaulting to 1000
[  119.046484][ T8900] __nla_validate_parse: 5 callbacks suppressed
[  119.046500][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  119.160390][ T8890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.218201][ T8905] tipc: New replicast peer: 255.255.255.255
[  119.222254][ T8905] tipc: Enabled bearer <udp:syz2>, priority 10
[  119.513962][ T8909] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1313'.
[  119.517264][ T8909] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1313'.
[  119.999701][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1323'.
[  120.141266][ T8929] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  120.395387][ T8952] macsec1: entered promiscuous mode
[  120.397097][ T8952] team0: entered promiscuous mode
[  120.398631][ T8952] team_slave_0: entered promiscuous mode
[  120.401190][ T8952] team_slave_1: entered promiscuous mode
[  120.403555][ T8952] bond0: entered promiscuous mode
[  120.405175][ T8952] bond_slave_0: entered promiscuous mode
[  120.407374][ T8952] bond_slave_1: entered promiscuous mode
[  120.409537][ T8952] bond2: entered promiscuous mode
[  120.669711][ T8971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.676489][ T8971] syzkaller0: entered promiscuous mode
[  120.678718][ T8971] syzkaller0: entered allmulticast mode
[  120.706468][ T8971] tipc: Resetting bearer <eth:syzkaller0>
[  120.724040][ T8970] tipc: Resetting bearer <eth:syzkaller0>
[  120.734693][ T8970] tipc: Disabling bearer <eth:syzkaller0>
[  120.838498][ T8986] netlink: 'syz.2.1346': attribute type 2 has an invalid length.
[  120.946334][ T8994] only policy match revision 0 supported
[  120.946347][ T8994] unable to load match
[  120.982783][ T8996] netlink: 'syz.0.1351': attribute type 1 has an invalid length.
[  120.985755][ T8996] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1351'.
[  121.378791][ T9001] lo speed is unknown, defaulting to 1000
[  121.847097][ T9018] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  121.891110][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'.
[  122.088661][ T9034] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1366'.
[  122.112689][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'.
[  122.135315][ T9033] smc: removing ib device syz0
[  122.656651][ T9056] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  122.893461][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'.
[  123.361708][   T33] audit: type=1804 audit(1755304566.403:4): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1390" name="/newroot/525/cgroup.controllers" dev="tmpfs" ino=2661 res=1 errno=0
[  123.370337][   T33] audit: type=1800 audit(1755304566.403:5): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1390" name="cgroup.controllers" dev="tmpfs" ino=2661 res=0 errno=0
[  123.530408][ T9098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1395'.
[  124.093597][ T9146] openvswitch: netlink: Flow actions attr not present in new flow.
[  124.437066][ T9165] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1418'.
[  125.246800][ T9171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.256484][ T9171] syzkaller0: entered promiscuous mode
[  125.258657][ T9171] syzkaller0: entered allmulticast mode
[  125.364685][ T9176] tipc: Resetting bearer <eth:syzkaller0>
[  125.384430][ T9170] tipc: Resetting bearer <eth:syzkaller0>
[  125.419040][ T9170] tipc: Disabling bearer <eth:syzkaller0>
[  125.799835][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'.
[  125.875680][ T9211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.886305][ T9211] syzkaller0: entered promiscuous mode
[  125.888480][ T9211] syzkaller0: entered allmulticast mode
[  125.906798][ T9211] tipc: Resetting bearer <eth:syzkaller0>
[  125.916522][ T9209] tipc: Resetting bearer <eth:syzkaller0>
[  125.929114][ T9209] tipc: Disabling bearer <eth:syzkaller0>
[  126.487059][ T9232] netlink: 'syz.2.1447': attribute type 9 has an invalid length.
[  126.717359][ T9244] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.762994][ T9244] syzkaller0: entered promiscuous mode
[  126.765349][ T9244] syzkaller0: entered allmulticast mode
[  126.767565][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1457'.
[  126.768059][ T9244] tipc: Resetting bearer <eth:syzkaller0>
[  126.824109][ T9243] tipc: Resetting bearer <eth:syzkaller0>
[  126.840773][ T9251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1458'.
[  127.997297][ T9243] tipc: Disabling bearer <eth:syzkaller0>
[  128.001552][ T9251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1458'.
[  128.036794][ T9268] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1464'.
[  128.041619][ T9268] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1464'.
[  128.052891][ T9267] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  128.265653][ T9290] netlink: 'syz.2.1475': attribute type 32 has an invalid length.
[  128.340339][ T9300] netlink: 'syz.1.1478': attribute type 21 has an invalid length.
[  128.346274][ T9300] netlink: 'syz.1.1478': attribute type 22 has an invalid length.
[  128.349484][ T9300] netlink: 'syz.1.1478': attribute type 23 has an invalid length.
[  128.354146][ T9300] netlink: 'syz.1.1478': attribute type 25 has an invalid length.
[  128.379542][ T9300] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1478'.
[  128.452661][ T9309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.461656][ T9309] syzkaller0: entered promiscuous mode
[  128.463475][ T9309] syzkaller0: entered allmulticast mode
[  128.482626][ T9309] tipc: Resetting bearer <eth:syzkaller0>
[  128.490685][ T9308] tipc: Resetting bearer <eth:syzkaller0>
[  128.512483][ T9308] tipc: Disabling bearer <eth:syzkaller0>
[  128.897050][ T9357] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  128.946185][ T9363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1507'.
[  128.958967][ T9365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1508'.
[  128.967236][ T9365] bridge_slave_0: left allmulticast mode
[  128.969632][ T9365] bridge_slave_0: left promiscuous mode
[  128.972338][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.985655][ T9365] bridge_slave_1: left allmulticast mode
[  128.987975][ T9365] bridge_slave_1: left promiscuous mode
[  128.990386][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.997094][ T9365] bond0: (slave bond_slave_0): Releasing backup interface
[  129.005649][ T9365] bond0: (slave bond_slave_1): Releasing backup interface
[  129.018303][ T9365] team0: Port device team_slave_0 removed
[  129.026451][ T9365] team0: Port device team_slave_1 removed
[  129.032287][ T9365] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.036325][ T9365] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.043894][ T9365] bond1: (slave bridge4): Removing an active aggregator
[  129.048430][ T9365] bond1: (slave bridge4): Releasing backup interface
[  129.052411][ T9365] bridge4: left promiscuous mode
[  129.054613][ T9365] bridge4: left allmulticast mode
[  129.057691][ T9370] team0: Mode changed to "broadcast"
[  129.073090][ T9365] vlan0: entered promiscuous mode
[  129.095517][ T9365] tipc: Enabled bearer <eth:team0>, priority 0
[  129.142512][ T9369] netlink: 'syz.0.1510': attribute type 1 has an invalid length.
[  129.233541][ T9381] vxlan1: entered promiscuous mode
[  129.235812][ T9381] team0: Port device vxlan1 added
[  129.238895][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.246076][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.249122][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  129.253359][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  129.633324][ T9421] __nla_validate_parse: 5 callbacks suppressed
[  129.633339][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'.
[  130.022580][ T9436] vxcan1: entered allmulticast mode
[  130.454220][ T9460] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  130.519697][ T9468] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1557'.
[  130.681484][ T9472] syzkaller0: entered promiscuous mode
[  130.683633][ T9472] syzkaller0: entered allmulticast mode
[  130.953604][ T9483] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1561'.
[  130.957498][ T9483] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1561'.
[  131.236392][ T9499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1568'.
[  131.491601][ T9514] netlink: 'syz.2.1572': attribute type 83 has an invalid length.
[  131.697665][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'.
[  132.574358][ T9533] x9: renamed from bridge_slave_0
[  132.644527][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.692835][ T9543] netlink: 'syz.1.1584': attribute type 5 has an invalid length.
[  132.794405][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'.
[  132.845973][ T9557] netlink: 'syz.0.1591': attribute type 22 has an invalid length.
[  133.028443][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'.
[  133.812337][ T9609] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  133.816118][ T9609] syzkaller0: entered promiscuous mode
[  133.818121][ T9609] syzkaller0: entered allmulticast mode
[  133.846745][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'.
[  134.028696][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'.
[  134.337782][ T9635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.359784][ T9631] syzkaller0: entered promiscuous mode
[  134.363840][ T9631] syzkaller0: entered allmulticast mode
[  134.909477][ T9635] tipc: Resetting bearer <eth:syzkaller0>
[  134.933309][ T9630] tipc: Resetting bearer <eth:syzkaller0>
[  134.957208][ T9630] tipc: Disabling bearer <eth:syzkaller0>
[  135.125216][ T9653] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1631'.
[  135.152324][ T9654] Bluetooth: MGMT ver 1.23
[  135.195314][ T9653] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  135.466723][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1638'.
[  135.935831][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'.
[  136.404484][ T9725] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.1659:9725
[  136.837782][ T9740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1663'.
[  137.253825][ T9772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.435454][ T9788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1687'.
[  137.745697][ T9811] netlink: 508 bytes leftover after parsing attributes in process `syz.2.1697'.
[  137.829320][ T9818] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  137.847833][ T9818] syzkaller0: entered promiscuous mode
[  137.853529][ T9818] syzkaller0: entered allmulticast mode
[  138.116773][ T9841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1708'.
[  138.120382][ T9841] tc_dump_action: action bad kind
[  138.303282][ T9859] netlink: 'syz.2.1717': attribute type 1 has an invalid length.
[  138.313793][ T9859] netlink: 'syz.2.1717': attribute type 2 has an invalid length.
[  138.316359][ T9859] netlink: 'syz.2.1717': attribute type 8 has an invalid length.
[  138.319509][ T9859] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1717'.
[  138.468402][ T9873] netlink: 'syz.2.1723': attribute type 8 has an invalid length.
[  138.605383][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1727'.
[  138.608973][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'.
[  138.614342][ T9884] netlink: 'syz.2.1727': attribute type 18 has an invalid length.
[  138.754444][ T9894] sock: sock_timestamping_bind_phc: sock not bind to device
[  138.988193][ T9907] netlink: 'syz.2.1738': attribute type 12 has an invalid length.
[  139.628778][ T9962] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  140.485112][T10022] __nla_validate_parse: 3 callbacks suppressed
[  140.485128][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'.
[  140.568267][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'.
[  140.574903][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'.
[  140.815393][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1800'.
[  140.923502][T10045] team0: Device gtp1 is of different type
[  140.972143][   T96] block nbd1: Possible stuck request ffff888020568000: control (read@0,4096B). Runtime 60 seconds
[  141.156337][T10063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.198457][T10063] syzkaller0: entered promiscuous mode
[  141.201157][T10063] syzkaller0: entered allmulticast mode
[  141.203943][T10063] tipc: Resetting bearer <eth:syzkaller0>
[  141.211595][T10062] tipc: Resetting bearer <eth:syzkaller0>
[  141.737573][ T5299] udevd[5299]: worker [5868] /devices/virtual/block/nbd1 is taking a long time
[  141.994467][T10068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1815'.
[  141.997412][T10068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1815'.
[  142.489212][T10062] tipc: Disabling bearer <eth:syzkaller0>
[  142.999779][T10106] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  143.004951][T10106] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  143.121027][T10112] IPv6: Can't replace route, no match found
[  143.317500][T10115] netlink: 'syz.1.1835': attribute type 1 has an invalid length.
[  143.320283][T10115] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1835'.
[  143.329778][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'.
[  143.628626][T10135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1842'.
[  143.785896][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'.
[  144.009542][T10168] netlink: 'syz.0.1857': attribute type 12 has an invalid length.
[  144.390061][T10205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.399537][T10205] team0: Device gtp0 is up. Set it down before adding it as a team port
[  145.672676][T10288] __nla_validate_parse: 2 callbacks suppressed
[  145.672687][T10288] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1910'.
[  145.678002][T10288] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1910'.
[  146.447737][T10329] netlink: 'syz.0.1926': attribute type 13 has an invalid length.
[  146.451407][T10329] netlink: 'syz.0.1926': attribute type 17 has an invalid length.
[  146.530110][T10329] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.537361][T10329] 8021q: adding VLAN 0 to HW filter on device team0
[  146.547529][T10329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.607841][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.664299][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.673208][T10344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  146.719393][T10329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.764634][T10355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1937'.
[  146.860897][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1941'.
[  146.955216][T10371] netlink: 'syz.1.1944': attribute type 9 has an invalid length.
[  146.958675][T10371] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1944'.
[  146.995148][T10373] pimreg: entered allmulticast mode
[  147.006390][T10373] pimreg: left allmulticast mode
[  147.737663][T10435] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  147.913451][T10453] netlink: 'syz.1.1973': attribute type 1 has an invalid length.
[  147.923238][T10453] netlink: 'syz.1.1973': attribute type 2 has an invalid length.
[  148.242263][T10472] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.1978'.
[  148.306280][T10478] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1982'.
[  149.094471][ T5858] Bluetooth: hci2: link tx timeout
[  149.096653][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.100071][ T5858] Bluetooth: hci2: link tx timeout
[  149.103079][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  149.163901][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'.
[  149.185167][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2020'.
[  149.254978][T10567] bpq0: entered promiscuous mode
[  149.256893][T10567] bpq0: entered allmulticast mode
[  149.279701][T10567] bpq0: left promiscuous mode
[  149.283596][T10567] bpq0: left allmulticast mode
[  149.870260][T10626] netlink: 'syz.0.2049': attribute type 32 has an invalid length.
[  150.477068][T10669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'.
[  150.823702][T10697] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  150.827541][T10697] syzkaller0: entered promiscuous mode
[  150.829425][T10697] syzkaller0: entered allmulticast mode
[  151.056441][T10715] __nla_validate_parse: 2 callbacks suppressed
[  151.056457][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'.
[  151.120751][ T5858] Bluetooth: hci2: command 0x0405 tx timeout
[  151.795799][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'.
[  151.799641][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'.
[  151.986213][T10772] netlink: 'syz.2.2115': attribute type 1 has an invalid length.
[  151.989699][T10772] netlink: 'syz.2.2115': attribute type 2 has an invalid length.
[  153.069824][T10833] wg1: entered promiscuous mode
[  153.076360][T10833] wg1: entered allmulticast mode
[  153.227524][T10841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.028237][T10897] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2159'.
[  154.033370][T10897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2159'.
[  154.288661][T10908] netem: change failed
[  154.320794][ T5239] Bluetooth: hci2: command 0x0405 tx timeout
[  154.755484][T10924] netlink: 'syz.1.2170': attribute type 5 has an invalid length.
[  154.932134][T10943] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  154.940804][T10943] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  154.943646][T10943] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  155.069345][T10961] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2190'.
[  155.123086][T10967] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  155.208001][T10961] bond0 (unregistering): Released all slaves
[  155.332823][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2202'.
[  155.346576][T10985] netlink: 'syz.1.2201': attribute type 1 has an invalid length.
[  155.349503][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'.
[  155.357692][T10985] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.373458][T10985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2201'.
[  155.659536][T11012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2215'.
[  156.069616][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2232'.
[  156.072863][T11050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2232'.
[  156.239640][T11057] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2235'.
[  156.242793][T11057] 0: renamed from hsr0
[  156.245969][T11057] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  156.249086][T11057] 0: entered allmulticast mode
[  156.251171][T11057] hsr_slave_0: entered allmulticast mode
[  156.253974][T11057] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  156.860100][T11088] netlink: 11382 bytes leftover after parsing attributes in process `syz.0.2250'.
[  156.916287][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2251'.
[  156.946217][T11091] macvlan2: entered promiscuous mode
[  156.948017][T11091] macvlan2: entered allmulticast mode
[  156.951175][T11091] bond4: (slave macvlan2): Opening slave failed
[  157.039499][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2254'.
[  157.126568][T11106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2258'.
[  157.137483][T11061] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  157.139424][T11061] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  157.282986][T11109] netlink: 'syz.2.2261': attribute type 21 has an invalid length.
[  157.286147][T11109] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2261'.
[  157.289777][T11109] netlink: 'syz.2.2261': attribute type 5 has an invalid length.
[  157.299776][T11109] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2261'.
[  157.302042][T11112] netlink: 'syz.1.2260': attribute type 10 has an invalid length.
[  157.530579][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2270'.
[  158.100588][T11185] openvswitch: netlink: Missing key (keys=40, expected=80)
[  158.293687][T11201] netem: invalid attributes len -24
[  159.457544][T11294] syzkaller0: entered promiscuous mode
[  159.459734][T11294] syzkaller0: entered allmulticast mode
[  160.151544][T11334] trusted_key: syz.0.2358 sent an empty control message without MSG_MORE.
[  160.482894][T11367] netlink: 'syz.1.2375': attribute type 1 has an invalid length.
[  160.485422][T11367] netlink: 'syz.1.2375': attribute type 11 has an invalid length.
[  160.560255][T11376] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  162.060617][ T5239] Bluetooth: hci1: link tx timeout
[  162.062985][ T5239] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.067635][ T5858] Bluetooth: hci1: link tx timeout
[  162.069829][ T5858] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.078626][ T5858] Bluetooth: hci1: link tx timeout
[  162.081613][ T5858] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.084820][ T5858] Bluetooth: hci1: link tx timeout
[  162.086963][ T5858] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  162.186804][T11405] __nla_validate_parse: 11 callbacks suppressed
[  162.186823][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'.
[  162.291563][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'.
[  163.105440][T11441] syzkaller0: entered promiscuous mode
[  163.107710][T11441] syzkaller0: entered allmulticast mode
[  163.363465][T11449] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.2409'.
[  163.689677][T11474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2418'.
[  163.779791][T11477] syzkaller0: entered promiscuous mode
[  163.782246][T11477] syzkaller0: entered allmulticast mode
[  164.090689][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  164.148196][T11506] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2431'.
[  164.208279][T11509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'.
[  164.381313][T11523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2439'.
[  165.886825][T11597] netlink: 'syz.0.2472': attribute type 12 has an invalid length.
[  166.322123][T11631] netlink: 'syz.1.2483': attribute type 1 has an invalid length.
[  166.399617][T11631] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.406925][T11631] bond0: (slave bond1): making interface the new active one
[  166.411507][T11631] bond0: (slave bond1): Enslaving as an active interface with an up link
[  166.538438][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2486'.
[  166.765638][T11661] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2491'.
[  166.775795][T11662] netlink: 'syz.2.2492': attribute type 4 has an invalid length.
[  167.085158][T11685] netlink: 'syz.0.2501': attribute type 4 has an invalid length.
[  167.103831][T11685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.134968][T11683] tipc: Disabling bearer <eth:syzkaller0>
[  167.303457][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'.
[  167.315561][T11706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2508'.
[  167.767630][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2529'.
[  167.982116][T11774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'.
[  168.043326][T11782] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2543'.
[  168.162166][T11785] netlink: 'syz.2.2544': attribute type 1 has an invalid length.
[  168.165414][T11785] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2544'.
[  168.994174][   T33] audit: type=1107 audit(1755304612.043:6): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  169.058055][T11804] tipc: Enabling of bearer <et:g> rejected, media not registered
[  169.372588][T11829] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  169.382432][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2565'.
[  169.397057][T11829] bridge5: entered promiscuous mode
[  169.399248][T11829] bridge5: entered allmulticast mode
[  169.410367][T11829] team0: Port device bridge5 added
[  169.848704][T11858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.875021][T11858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  169.953666][T11862] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  170.215077][T11877] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2587'.
[  170.389526][T11890] netlink: 'syz.2.2592': attribute type 13 has an invalid length.
[  170.395282][T11890] netlink: 'syz.2.2592': attribute type 17 has an invalid length.
[  170.477954][T11890] 8021q: adding VLAN 0 to HW filter on device team0
[  170.485436][T11890] tipc: Resetting bearer <eth:team0>
[  170.498321][T11890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.505449][ T5923] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.611267][T11890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.671065][T11890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.732384][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.742558][ T5888] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.811935][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.816422][T11910] netlink: 'syz.1.2601': attribute type 1 has an invalid length.
[  170.819938][T11910] netlink: 'syz.1.2601': attribute type 2 has an invalid length.
[  170.827634][T11910] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.2601'.
[  171.045138][   T96] block nbd1: Possible stuck request ffff888020568000: control (read@0,4096B). Runtime 90 seconds
[  171.051150][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2607'.
[  171.087846][T11925] sctp: [Deprecated]: syz.1.2608 (pid 11925) Use of int in maxseg socket option.
[  171.087846][T11925] Use struct sctp_assoc_value instead
[  171.291073][ T5923] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  171.373808][T11937] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  171.378791][T11937] netlink: 'syz.1.2614': attribute type 4 has an invalid length.
[  172.205350][T11995] Bluetooth: MGMT ver 1.23
[  172.479918][T12011] __nla_validate_parse: 1 callbacks suppressed
[  172.479934][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2645'.
[  172.491068][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2645'.
[  172.494296][T12011] netlink: 'syz.0.2645': attribute type 19 has an invalid length.
[  173.063851][T12046] nbd: nbd1 already in use
[  173.066083][T12046] block nbd0: NBD_DISCONNECT
[  173.067949][T12046] block nbd0: Send disconnect failed -32
[  173.071892][T12046] block nbd0: shutting down sockets
[  173.321226][T12068] sctp: [Deprecated]: syz.0.2666 (pid 12068) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.321226][T12068] Use struct sctp_sack_info instead
[  173.352994][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'.
[  173.575463][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  173.643205][T12104] syzkaller1: entered promiscuous mode
[  173.645475][T12104] syzkaller1: entered allmulticast mode
[  173.692487][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'.
[  174.019304][T12125] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2692'.
[  174.409132][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2697'.
[  174.589174][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'.
[  174.622086][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2710'.
[  174.640581][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.654832][T12165] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2709'.
[  175.057402][T12203] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  175.112447][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2730'.
[  175.723840][T12235] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  176.497425][T12284] netlink: 'syz.0.2764': attribute type 1 has an invalid length.
[  176.533836][T12284] 8021q: adding VLAN 0 to HW filter on device bond6
[  176.562918][T12284] bond6: (slave gretap1): making interface the new active one
[  176.567041][T12284] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  177.049272][T12330] netlink: 'syz.2.2784': attribute type 1 has an invalid length.
[  177.056397][T12330] netlink: 'syz.2.2784': attribute type 2 has an invalid length.
[  177.059646][T12330] netlink: 'syz.2.2784': attribute type 1 has an invalid length.
[  177.238777][T12348] tap0: tun_chr_ioctl cmd 1074025678
[  177.242319][T12348] tap0: group set to 0
[  177.473119][T12374] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  177.508735][T12375] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  177.601502][T12380] __nla_validate_parse: 10 callbacks suppressed
[  177.601512][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'.
[  177.647612][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2810'.
[  177.749631][T12392] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  178.079554][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'.
[  178.149255][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2819'.
[  178.231594][T12421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2821'.
[  178.279305][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2822'.
[  178.283122][T12423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2822'.
[  178.427467][T12430] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2825'.
[  178.738157][T12443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.766855][T12443] syzkaller0: entered promiscuous mode
[  178.769188][T12443] syzkaller0: entered allmulticast mode
[  178.789316][T12443] tipc: Resetting bearer <eth:syzkaller0>
[  178.794369][T12442] tipc: Resetting bearer <eth:syzkaller0>
[  178.811529][T12442] tipc: Disabling bearer <eth:syzkaller0>
[  179.013312][T12463] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2839'.
[  179.029955][T12463] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.393709][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2846'.
[  179.747374][T12513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.751944][T12513] syzkaller0: entered promiscuous mode
[  179.754173][T12513] syzkaller0: entered allmulticast mode
[  179.773716][T12513] tipc: Resetting bearer <eth:syzkaller0>
[  179.783924][T12512] tipc: Resetting bearer <eth:syzkaller0>
[  179.806356][T12512] tipc: Disabling bearer <eth:syzkaller0>
[  180.050291][T12532] macsec1: entered promiscuous mode
[  180.055806][T12532] macsec1: entered allmulticast mode
[  180.058017][T12532] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  180.515581][T12576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.597958][T12583] bond0: entered promiscuous mode
[  180.600094][T12583] bond1: entered promiscuous mode
[  180.604655][T12583] bond0: left promiscuous mode
[  180.606722][T12583] bond1: left promiscuous mode
[  180.646739][T12585] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  181.822309][T12650] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  181.826591][T12648] pimreg: entered allmulticast mode
[  182.005606][T12666] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  182.545498][T12697] netlink: 'syz.1.2941': attribute type 10 has an invalid length.
[  182.560819][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  182.563404][T12697] team0: Port device geneve0 added
[  182.566697][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.580806][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.584332][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.587861][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.604509][T12701] bridge_slave_1: default FDB implementation only supports local addresses
[  182.637200][T12703] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  182.832950][T12723] __nla_validate_parse: 7 callbacks suppressed
[  182.832965][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2952'.
[  183.454004][T12767] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2969'.
[  183.457867][T12767] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2969'.
[  183.463306][T12767] netlink: 'syz.2.2969': attribute type 6 has an invalid length.
[  183.466588][T12767] netlink: 'syz.2.2969': attribute type 5 has an invalid length.
[  183.469813][T12767] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2969'.
[  183.517570][T12769] netlink: 'syz.2.2970': attribute type 1 has an invalid length.
[  183.547526][T12769] bond3: (slave bridge7): making interface the new active one
[  183.556010][T12769] bond3: (slave bridge7): Enslaving as an active interface with an up link
[  183.615842][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'.
[  183.619846][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'.
[  183.625938][T12773] netlink: 'syz.2.2972': attribute type 6 has an invalid length.
[  183.679578][T12779] netlink: 'syz.2.2974': attribute type 2 has an invalid length.
[  183.944484][T12801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2984'.
[  183.947670][T12801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2984'.
[  184.084646][T12813] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  184.175473][T12820] netlink: 'syz.2.2993': attribute type 7 has an invalid length.
[  184.178755][T12820] netlink: 'syz.2.2993': attribute type 8 has an invalid length.
[  184.488469][T12838] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  184.569047][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'.
[  186.612445][T12899] netlink: 'syz.0.3029': attribute type 39 has an invalid length.
[  186.669369][T12897] tipc: Resetting bearer <eth:team0>
[  186.694078][T12897] vlan0: left promiscuous mode
[  186.699056][T12897] ip6tnl1: left promiscuous mode
[  186.704640][T12897] ip6tnl1: left allmulticast mode
[  186.707534][T12897] bond1: left promiscuous mode
[  186.709592][T12897] bond1: left allmulticast mode
[  186.989466][T12916] netlink: 'syz.2.3035': attribute type 5 has an invalid length.
[  186.992646][T12916] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3035'.
[  187.446370][T12938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.455777][T12938] syzkaller0: entered promiscuous mode
[  187.462392][T12938] syzkaller0: entered allmulticast mode
[  187.502307][T12938] tipc: Resetting bearer <eth:syzkaller0>
[  187.509224][T12937] tipc: Resetting bearer <eth:syzkaller0>
[  187.543122][T12937] tipc: Disabling bearer <eth:syzkaller0>
[  187.647154][T12957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.655591][T12957] syzkaller0: entered promiscuous mode
[  187.664340][T12957] syzkaller0: entered allmulticast mode
[  187.699640][T12957] tipc: Resetting bearer <eth:syzkaller0>
[  187.711747][T12956] tipc: Resetting bearer <eth:syzkaller0>
[  187.731412][T12956] tipc: Disabling bearer <eth:syzkaller0>
[  187.927765][T12980] IPVS: Error connecting to the multicast addr
[  188.104531][T12996] syzkaller0: entered promiscuous mode
[  188.106532][T12996] syzkaller0: entered allmulticast mode
[  188.109383][T13000] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3075'.
[  188.442696][T13013] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3078'.
[  188.446478][T13013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3078'.
[  189.540227][T13014] lo speed is unknown, defaulting to 1000
[  189.568539][T13015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.578113][T13014] lo speed is unknown, defaulting to 1000
[  189.583179][T13014] lo speed is unknown, defaulting to 1000
[  189.685345][T13022] ipvlan2: entered promiscuous mode
[  189.772871][T13014] infiniband syz0: set active
[  189.775018][ T5860] lo speed is unknown, defaulting to 1000
[  189.777324][T13014] infiniband syz0: added lo
[  189.779529][T13014] syz0: rxe_create_cq: returned err = -12
[  189.781863][T13014] infiniband syz0: Couldn't create ib_mad CQ
[  189.784080][T13014] infiniband syz0: Couldn't open port 1
[  189.813671][T13029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  189.816666][T13029] IPv6: NLM_F_CREATE should be set when creating new route
[  189.820343][T13029] IPv6: NLM_F_CREATE should be set when creating new route
[  189.835429][T13014] RDS/IB: syz0: added
[  189.837153][T13014] smc: adding ib device syz0 with port count 1
[  189.841650][T13014] smc:    ib device syz0 port 1 has pnetid 
[  189.844123][ T5923] lo speed is unknown, defaulting to 1000
[  189.847340][T13014] lo speed is unknown, defaulting to 1000
[  190.042380][T13039] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3090'.
[  190.049292][T13014] lo speed is unknown, defaulting to 1000
[  190.168816][T13047] netlink: set zone limit has 4 unknown bytes
[  190.266580][T13053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.295404][T13014] lo speed is unknown, defaulting to 1000
[  190.332944][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'.
[  190.505440][T13069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3104'.
[  190.739124][T13082] ip6gre1: entered allmulticast mode
[  191.109152][T13120] netlink: 'syz.0.3127': attribute type 1 has an invalid length.
[  191.153838][T13120] bond7: (slave gretap3): making interface the new active one
[  191.157253][T13120] bond7: (slave gretap3): Enslaving as an active interface with an up link
[  191.208207][T13120] syz.0.3127 (13120) used greatest stack depth: 19944 bytes left
[  191.429951][T13150] netlink: 'syz.1.3141': attribute type 21 has an invalid length.
[  191.452071][T13150] netlink: 'syz.1.3141': attribute type 4 has an invalid length.
[  191.455042][T13150] netlink: 14453 bytes leftover after parsing attributes in process `syz.1.3141'.
[  191.539139][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3143'.
[  191.582341][T13156] bridge6: port 1(veth11) entered blocking state
[  191.585229][T13156] bridge6: port 1(veth11) entered disabled state
[  191.588109][T13156] veth11: entered allmulticast mode
[  191.594916][T13156] veth11: entered promiscuous mode
[  191.609522][T13156] bridge6: port 2(veth0_to_bond) entered blocking state
[  191.612728][T13156] bridge6: port 2(veth0_to_bond) entered disabled state
[  191.615268][T13156] veth0_to_bond: entered allmulticast mode
[  191.620381][T13156] veth0_to_bond: entered promiscuous mode
[  191.697943][T13160] vlan2: entered allmulticast mode
[  191.700107][T13160] veth1: entered allmulticast mode
[  191.702511][T13160] bridge6: port 3(vlan2) entered blocking state
[  191.704849][T13160] bridge6: port 3(vlan2) entered disabled state
[  191.708538][T13160] vlan2: entered promiscuous mode
[  191.713331][T13160] veth1: entered promiscuous mode
[  192.408918][T13180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3153'.
[  192.589677][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'.
[  192.595838][T13192] bridge_slave_1: left allmulticast mode
[  192.597757][T13192] bridge_slave_1: left promiscuous mode
[  192.600753][T13192] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.613949][T13192] x9: left allmulticast mode
[  192.615485][T13192] x9: left promiscuous mode
[  192.621350][T13192] bridge0: port 1(1x9) entered disabled state
[  192.688309][T13195] netlink: 'syz.0.3160': attribute type 15 has an invalid length.
[  193.086819][T13218] netlink: 'syz.0.3172': attribute type 1 has an invalid length.
[  193.089881][T13218] netlink: 'syz.0.3172': attribute type 1 has an invalid length.
[  193.096891][T13218] netlink: 'syz.0.3172': attribute type 2 has an invalid length.
[  193.443303][ T5858] Bluetooth: hci1: command 0x0406 tx timeout
[  193.448450][T13241] __nla_validate_parse: 4 callbacks suppressed
[  193.448465][T13241] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3182'.
[  194.033113][T13271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.036036][T13271] syzkaller0: entered promiscuous mode
[  194.038310][T13271] syzkaller0: entered allmulticast mode
[  194.074183][T13271] tipc: Resetting bearer <eth:syzkaller0>
[  194.077821][T13270] tipc: Resetting bearer <eth:syzkaller0>
[  194.084228][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.110188][T13270] tipc: Disabling bearer <eth:syzkaller0>
[  194.182199][T13278] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3199'.
[  194.406993][T13288] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  194.539888][T13296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3206'.
[  194.617637][T13297] netlink: 'syz.2.3207': attribute type 4 has an invalid length.
[  194.923546][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'.
[  195.191018][T13323] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.194212][T13323] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  195.198895][T13323] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  195.269924][T13330] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  195.275974][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'.
[  195.606700][T13350] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  196.267194][T13396] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  196.719714][T13428] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3263'.
[  196.729009][T13428] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3263'.
[  196.748649][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3263'.
[  197.519878][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.525806][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.529022][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.535945][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.538665][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.541892][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.544543][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.547398][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.550171][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.556665][T13466] netlink: 'syz.0.3279': attribute type 29 has an invalid length.
[  197.623954][T13474] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3283'.
[  197.627609][T13474] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3283'.
[  198.359535][T13512] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  198.363457][T13512] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.845478][T13544] __nla_validate_parse: 3 callbacks suppressed
[  198.845494][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'.
[  199.185845][T13569] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3329'.
[  199.584035][T13588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3338'.
[  200.013762][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3342'.
[  201.135888][   T96] block nbd1: Possible stuck request ffff888020568000: control (read@0,4096B). Runtime 120 seconds
[  201.274555][T13656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.356903][T13656] syzkaller0: entered promiscuous mode
[  201.358688][T13656] syzkaller0: entered allmulticast mode
[  201.375575][T13659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3368'.
[  201.378312][T13659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3368'.
[  201.386022][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3369'.
[  201.389533][T13661] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3369'.
[  201.391427][T13656] tipc: Resetting bearer <eth:syzkaller0>
[  201.402532][T13659] gretap0: entered promiscuous mode
[  201.406199][T13659] gretap0: left promiscuous mode
[  201.413688][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3369'.
[  201.417729][T13655] tipc: Resetting bearer <eth:syzkaller0>
[  201.523255][T13665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3371'.
[  202.394309][ T5923] tipc: Node number set to 3719422215
[  202.770754][T13655] tipc: Disabling bearer <eth:syzkaller0>
[  204.785245][T13744] lo speed is unknown, defaulting to 1000
[  205.986330][T13863] __nla_validate_parse: 1 callbacks suppressed
[  205.986342][T13863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'.
[  206.301493][T13879] pim6reg: entered allmulticast mode
[  206.306348][T13879] pim6reg: left allmulticast mode
[  206.409142][T13881] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3449'.
[  206.648769][T13901] validate_nla: 25 callbacks suppressed
[  206.648786][T13901] netlink: 'syz.1.3458': attribute type 23 has an invalid length.
[  206.915169][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3466'.
[  206.919059][T13917] netlink: 'syz.0.3466': attribute type 30 has an invalid length.
[  206.923641][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'.
[  207.013663][T13926] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3471'.
[  207.017397][T13926] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  207.767327][T13976] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  207.773493][T13976] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  207.824079][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3494'.
[  207.887076][T13980] netlink: 'syz.1.3495': attribute type 4 has an invalid length.
[  207.939755][T13982] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  208.141712][T13992] x_tables: ip_tables: udp match: only valid for protocol 17
[  208.162639][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'.
[  208.165636][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'.
[  208.168675][T13994] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3501'.
[  208.308587][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3505'.
[  208.412065][   T33] audit: type=1800 audit(1755304651.463:7): pid=14014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3509" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5846 res=0 errno=0
[  208.424111][   T33] audit: type=1804 audit(1755304651.463:8): pid=14014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3509" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5846 res=1 errno=0
[  209.011192][T14040] openvswitch: netlink: Key type 30 is not supported
[  209.083358][T14046] xt_policy: too many policy elements
[  209.248807][T14064] bond0: option mode: unable to set because the bond device has slaves
[  209.255288][T14066] netlink: 'syz.1.3534': attribute type 10 has an invalid length.
[  209.289691][T14068] raw_sendmsg: syz.0.3535 forgot to set AF_INET. Fix it!
[  209.380745][T14070] nbd2: detected capacity change from 0 to 127
[  209.384628][   T57] block nbd2: Receive control failed (result -104)
[  209.385524][ T6641] block nbd2: Send control failed (result -32)
[  209.394522][ T6641] block nbd2: Request send failed, requeueing
[  209.399100][   T96] block nbd2: Dead connection, failed to find a fallback
[  209.402101][   T96] block nbd2: shutting down sockets
[  209.404269][ T6641] Buffer I/O error on dev nbd2, logical block 3, async page read
[  209.405646][   T96] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  209.411352][   T96] Buffer I/O error on dev nbd2, logical block 2, async page read
[  209.634002][T14077] lo speed is unknown, defaulting to 1000
[  211.640294][T14168] netlink: 'syz.1.3578': attribute type 1 has an invalid length.
[  211.657698][T14168] 8021q: adding VLAN 0 to HW filter on device bond3
[  211.702449][T14168] ipvlan2: entered allmulticast mode
[  211.704579][T14168] bond3: entered allmulticast mode
[  211.735366][T14168] bond3: (slave gretap1): making interface the new active one
[  211.743823][T14168] gretap1: entered allmulticast mode
[  211.747319][T14168] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  212.053239][T14201] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  212.309486][T14221] __nla_validate_parse: 1 callbacks suppressed
[  212.309502][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3604'.
[  212.317795][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3604'.
[  212.445509][T14232] batadv_slave_1: entered promiscuous mode
[  212.617275][T14234] lo speed is unknown, defaulting to 1000
[  212.721267][   T96] block nbd2: Connection timed out, retrying (0/1 alive)
[  212.724919][   T96] block nbd2: Connection timed out, retrying (0/1 alive)
[  212.727807][   T96] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.731979][   T96] Buffer I/O error on dev nbd2, logical block 1, async page read
[  212.735283][   T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.739072][   T96] Buffer I/O error on dev nbd2, logical block 0, async page read
[  212.743806][ T6641] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.754370][ T6641] Buffer I/O error on dev nbd2, logical block 0, async page read
[  212.759434][ T6641] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.767090][ T6641] Buffer I/O error on dev nbd2, logical block 1, async page read
[  212.774276][ T6641] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.781992][ T6641] Buffer I/O error on dev nbd2, logical block 2, async page read
[  212.788975][ T6641] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.793584][ T6641] Buffer I/O error on dev nbd2, logical block 3, async page read
[  212.796470][ T6641] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.802048][ T6641] Buffer I/O error on dev nbd2, logical block 0, async page read
[  212.809231][ T6641] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.820878][ T6641] Buffer I/O error on dev nbd2, logical block 1, async page read
[  212.825682][ T6641] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  212.840053][ T6641] ldm_validate_partition_table(): Disk read failed.
[  212.847121][ T6641] Dev nbd2: unable to read RDB block 0
[  212.851992][ T6641]  nbd2: unable to read partition table
[  212.879262][ T6641] ldm_validate_partition_table(): Disk read failed.
[  212.894587][ T6641] Dev nbd2: unable to read RDB block 0
[  212.927797][ T6641]  nbd2: unable to read partition table
[  213.031305][T14259] gretap2: entered promiscuous mode
[  213.034753][T14259] gretap2: entered allmulticast mode
[  213.787150][T14304] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3641'.
[  213.852624][T14308] netlink: 'syz.1.3643': attribute type 1 has an invalid length.
[  213.897795][T14308] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  213.905291][T14308] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  213.915855][T14308] bond4: (slave vti0): making interface the new active one
[  213.919767][T14308] bond4: (slave vti0): Enslaving as an active interface with an up link
[  213.932582][T14311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3644'.
[  214.128104][T14321] sctp: [Deprecated]: syz.1.3649 (pid 14321) Use of struct sctp_assoc_value in delayed_ack socket option.
[  214.128104][T14321] Use struct sctp_sack_info instead
[  214.269870][T14327] syzkaller1: entered promiscuous mode
[  214.280814][T14327] syzkaller1: entered allmulticast mode
[  214.329873][T14331] netlink: 'syz.2.3654': attribute type 4 has an invalid length.
[  214.834164][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3677'.
[  214.837131][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3677'.
[  214.946474][T14376] lo speed is unknown, defaulting to 1000
[  214.987402][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3681'.
[  215.009010][T14390] 8021q: adding VLAN 0 to HW filter on device bond5
[  215.031869][T14390] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  215.094582][T14392] netlink: 'syz.1.3681': attribute type 1 has an invalid length.
[  215.584114][T14420] vxcan0: entered promiscuous mode
[  215.837062][T14435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3700'.
[  215.889969][T14435] bond4: entered promiscuous mode
[  215.892742][T14435] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.935729][T14438] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3698'.
[  216.010101][T14435] bond4 (unregistering): Released all slaves
[  216.024578][T14437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3698'.
[  216.027515][T14437] netlink: 'syz.1.3698': attribute type 4 has an invalid length.
[  216.675490][T14484] netlink: 'syz.0.3720': attribute type 1 has an invalid length.
[  216.833554][T14499] netlink: 'syz.1.3728': attribute type 6 has an invalid length.
[  216.991983][T14513] syzkaller1: entered promiscuous mode
[  216.994232][T14513] syzkaller1: entered allmulticast mode
[  217.145942][T14524] netlink: 'syz.0.3739': attribute type 21 has an invalid length.
[  217.151612][T14524] netlink: 'syz.0.3739': attribute type 5 has an invalid length.
[  217.414022][T14549] __nla_validate_parse: 6 callbacks suppressed
[  217.414038][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3751'.
[  217.420151][T14549] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3751'.
[  218.252716][T14560] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  218.357737][T14575] delete_channel: no stack
[  218.368553][T14579] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  218.935399][T14626] C: renamed from team_slave_0
[  218.939750][T14626] netlink: 'syz.1.3782': attribute type 1 has an invalid length.
[  218.963299][T14626] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3782'.
[  218.966881][T14626] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  219.609133][T14673] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3802'.
[  219.827181][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'.
[  219.834553][T14685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3806'.
[  220.088916][T14701] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3814'.
[  220.323505][T14720] netlink: 'syz.2.3823': attribute type 21 has an invalid length.
[  220.330830][T14720] netlink: 'syz.2.3823': attribute type 22 has an invalid length.
[  220.333959][T14720] netlink: 'syz.2.3823': attribute type 23 has an invalid length.
[  220.337719][T14720] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3823'.
[  220.494352][T14739] veth1: mtu greater than device maximum
[  220.595412][T14746] netem: incorrect ge model size
[  220.598811][T14746] netem: change failed
[  220.658741][T14733] lo speed is unknown, defaulting to 1000
[  220.683868][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'.
[  220.686686][T14752] netlink: 'syz.2.3839': attribute type 20 has an invalid length.
[  220.689169][T14752] netlink: 'syz.2.3839': attribute type 21 has an invalid length.
[  220.828630][T14760] delete_channel: no stack
[  220.887119][T14766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3843'.
[  221.021196][T14774] netlink: 'syz.2.3848': attribute type 30 has an invalid length.
[  221.180809][T14784] vlan4: entered promiscuous mode
[  221.182591][T14784] gretap0: entered promiscuous mode
[  221.275390][T14795] netlink: 'syz.2.3858': attribute type 7 has an invalid length.
[  221.278536][T14795] netlink: 'syz.2.3858': attribute type 8 has an invalid length.
[  221.349880][T14799] bond8: entered promiscuous mode
[  221.359161][T14799] bond8: entered allmulticast mode
[  221.361393][T14799] 8021q: adding VLAN 0 to HW filter on device bond8
[  221.443121][ T5888] syzkaller0: tun_net_xmit 76
[  221.445040][ T5888] syzkaller0: tun_net_xmit 48
[  221.473106][ T5923] syzkaller0: tun_net_xmit 76
[  221.475564][T14806] netlink: 'syz.0.3863': attribute type 4 has an invalid length.
[  221.483616][T14802] syzkaller0: create flow: hash 4267942208 index 1
[  221.582214][T14809] syzkaller0: delete flow: hash 4267942208 index 1
[  223.509183][T14845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.513513][T14845] syzkaller0: entered promiscuous mode
[  223.515178][T14845] syzkaller0: entered allmulticast mode
[  223.521457][T14845] tipc: Resetting bearer <eth:syzkaller0>
[  223.529004][T14844] tipc: Resetting bearer <eth:syzkaller0>
[  223.540268][T14844] tipc: Disabling bearer <eth:syzkaller0>
[  223.656365][T14854] tipc: Enabling of bearer <eth:ipvlan1> rejected, max 3 bearers permitted
[  223.707396][T14862] __nla_validate_parse: 7 callbacks suppressed
[  223.707407][T14862] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3888'.
[  223.945715][T14885] validate_nla: 1 callbacks suppressed
[  223.945727][T14885] netlink: 'syz.2.3899': attribute type 1 has an invalid length.
[  223.950041][T14885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.989526][T14889] netlink: 'syz.2.3901': attribute type 1 has an invalid length.
[  223.997393][T14889] NCSI netlink: No device for ifindex 0
[  224.347134][T14911] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3911'.
[  224.350000][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'.
[  224.562673][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3917'.
[  224.566010][T14926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3917'.
[  224.569439][T14926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3917'.
[  224.647658][T14915] lo speed is unknown, defaulting to 1000
[  224.829403][T14938] netlink: 'syz.1.3923': attribute type 1 has an invalid length.
[  224.832109][T14938] netlink: 'syz.1.3923': attribute type 3 has an invalid length.
[  224.834648][T14938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3923'.
[  224.840408][T14938] NCSI netlink: No device for ifindex 246
[  225.075464][T14955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3931'.
[  225.511343][T15001] netlink: 'syz.2.3954': attribute type 6 has an invalid length.
[  225.860167][T15037] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3971'.
[  225.876069][T15037] batadv1: entered promiscuous mode
[  225.877909][T15037] batadv1: entered allmulticast mode
[  225.995510][T15037] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3971'.
[  226.085005][T15062] xt_socket: unknown flags 0x50
[  226.509842][T15086] netlink: 'syz.2.3990': attribute type 6 has an invalid length.
[  227.365905][T15182] delete_channel: no stack
[  227.397751][T15180] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  227.570711][T15199] pimreg3: entered allmulticast mode
[  227.742712][   T56] block nbd3: Receive control failed (result -32)
[  228.161582][T15250] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  228.609354][T15297] openvswitch: netlink: Message has 20 unknown bytes.
[  228.612801][T15297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.332866][T15344] __nla_validate_parse: 8 callbacks suppressed
[  229.332877][T15344] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4100'.
[  229.672879][T15381] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4117'.
[  229.802454][T15391] pim6reg1: entered promiscuous mode
[  229.804718][T15391] pim6reg1: entered allmulticast mode
[  230.034088][T15407] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4131'.
[  230.189074][T15425] netlink: 'syz.2.4140': attribute type 30 has an invalid length.
[  230.657920][T15469] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  230.864293][T15496] netlink: 'syz.1.4171': attribute type 3 has an invalid length.
[  230.866876][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4171'.
[  230.869744][T15496] netlink: 'syz.1.4171': attribute type 3 has an invalid length.
[  230.873977][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4171'.
[  230.899149][T15499] openvswitch: netlink: IP tunnel dst address not specified
[  231.043375][T15513] tipc: Enabled bearer <eth:gre0>, priority 10
[  231.128798][T15521] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4184'.
[  231.174379][T15526] netlink: 'syz.1.4185': attribute type 10 has an invalid length.
[  231.205098][   T96] block nbd1: Possible stuck request ffff888020568000: control (read@0,4096B). Runtime 150 seconds
[  231.424558][T15545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4193'.
[  231.663335][T15574] netlink: 'syz.0.4205': attribute type 1 has an invalid length.
[  231.767802][T15579] netdevsim netdevsim0: Direct firmware load for /. failed with error -2
[  231.772049][T15579] netdevsim netdevsim0: Falling back to sysfs fallback for: /.
[  231.825030][T15566] lo speed is unknown, defaulting to 1000
[  232.178508][T15586] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  232.192355][T15586] syzkaller0: entered promiscuous mode
[  232.196356][T15586] syzkaller0: entered allmulticast mode
[  232.566698][T15597] netlink: 'syz.1.4214': attribute type 1 has an invalid length.
[  232.758429][T15611] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4221'.
[  232.866129][T15619] veth3: entered promiscuous mode
[  233.154980][T15642] sit0: entered promiscuous mode
[  233.166795][T15642] netlink: 'syz.0.4236': attribute type 1 has an invalid length.
[  233.169907][T15642] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4236'.
[  233.400221][T15661] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4245'.
[  233.739528][T15696] netlink: 'syz.0.4262': attribute type 30 has an invalid length.
[  234.159353][T15734] syzkaller0: entered promiscuous mode
[  234.163577][T15734] syzkaller0: entered allmulticast mode
[  234.168217][T15734] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  234.383769][T15753] netlink: 'syz.1.4289': attribute type 9 has an invalid length.
[  234.386269][T15753] __nla_validate_parse: 1 callbacks suppressed
[  234.386279][T15753] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.4289'.
[  234.415323][T15756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4291'.
[  234.530549][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4294'.
[  234.682531][T15784] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4299'.
[  234.703412][T15786] netlink: 'syz.0.4303': attribute type 1 has an invalid length.
[  234.797156][T15775] lo speed is unknown, defaulting to 1000
[  235.569606][T15803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4308'.
[  235.612898][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4310'.
[  235.855217][T15829] syzkaller0: entered promiscuous mode
[  235.857146][T15829] syzkaller0: entered allmulticast mode
[  235.861947][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4322'.
[  235.871488][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4322'.
[  235.899084][T15827] netlink: 'syz.2.4322': attribute type 12 has an invalid length.
[  235.909471][T15827] netlink: 'syz.2.4322': attribute type 11 has an invalid length.
[  236.028731][T15845] netem: incorrect gi model size
[  236.030859][T15845] netem: change failed
[  236.587715][T15903] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4357'.
[  236.595238][T15903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4357'.
[  237.137545][T15948] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  237.393832][T15956] pim6reg: entered allmulticast mode
[  237.397621][T15956] pim6reg: left allmulticast mode
[  237.759403][T15935] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  237.974586][T15982] netlink: 'syz.1.4392': attribute type 21 has an invalid length.
[  238.295723][T16008] netlink: 'syz.2.4403': attribute type 1 has an invalid length.
[  238.298611][T16005] syzkaller0: entered promiscuous mode
[  238.300947][T16005] syzkaller0: entered allmulticast mode
[  238.322250][T16004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.589993][T16011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  239.606792][T16004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.630310][ T5860] lo speed is unknown, defaulting to 1000
[  239.669189][T16004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.789512][T16004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  239.913394][ T5887] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  239.932229][ T5887] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  239.948368][ T5887] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  239.972873][ T5718] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.182339][ T5239] Bluetooth: hci1: link tx timeout
[  240.184532][ T5239] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  240.233824][T16052] __nla_validate_parse: 1 callbacks suppressed
[  240.233841][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4421'.
[  240.255766][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4421'.
[  240.259297][ T5887] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  240.268331][ T5887] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  240.275097][ T5887] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  240.283693][ T5887] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.405240][T16063] netlink: 'syz.1.4426': attribute type 1 has an invalid length.
[  240.469901][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4429'.
[  240.797142][T16093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4440'.
[  241.139148][T16118] netlink: 'syz.0.4452': attribute type 11 has an invalid length.
[  241.187702][T16121] 8021q: VLANs not supported on team0
[  241.353105][T16134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4459'.
[  241.735650][T16161] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  241.741849][T16161] syzkaller0: entered promiscuous mode
[  241.744078][T16161] syzkaller0: entered allmulticast mode
[  241.994739][T16183] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4483'.
[  241.997677][T16183] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4483'.
[  242.156312][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4489'.
[  242.251200][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  242.766636][T16228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.993169][T16239] Bluetooth: MGMT ver 1.23
[  243.333985][T16255] syzkaller0: entered promiscuous mode
[  243.336286][T16255] syzkaller0: entered allmulticast mode
[  243.547082][T16264] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4514'.
[  243.608524][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4516'.
[  244.128056][T16294] netlink: zone id is out of range
[  244.129968][T16294] netlink: zone id is out of range
[  244.133395][T16294] netlink: zone id is out of range
[  244.135236][T16294] netlink: zone id is out of range
[  244.136940][T16294] netlink: zone id is out of range
[  244.138563][T16294] netlink: zone id is out of range
[  244.140291][T16294] netlink: zone id is out of range
[  244.142772][T16294] netlink: zone id is out of range
[  244.144581][T16294] netlink: zone id is out of range
[  244.203410][T16298] netlink: 'syz.0.4530': attribute type 2 has an invalid length.
[  244.207655][T16298] netlink: 'syz.0.4530': attribute type 2 has an invalid length.
[  244.504672][T16312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.508189][T16312] syzkaller0: entered promiscuous mode
[  244.512890][T16312] syzkaller0: entered allmulticast mode
[  244.527891][T16312] tipc: Resetting bearer <eth:syzkaller0>
[  244.534864][T16311] tipc: Resetting bearer <eth:syzkaller0>
[  244.545031][T16311] tipc: Disabling bearer <eth:syzkaller0>
[  244.759148][T16314] lo speed is unknown, defaulting to 1000
[  245.138237][T16318] lo speed is unknown, defaulting to 1000
[  245.453077][T16373] __nla_validate_parse: 5 callbacks suppressed
[  245.453089][T16373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4547'.
[  246.936510][T16427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4567'.
[  247.542714][T16457] netlink: 'syz.2.4582': attribute type 13 has an invalid length.
[  247.545424][T16457] netlink: 'syz.2.4582': attribute type 17 has an invalid length.
[  247.578450][T16457] 8021q: adding VLAN 0 to HW filter on device team0
[  247.581485][T16457] tipc: Resetting bearer <eth:team0>
[  247.583445][T16457] tipc: Resetting bearer <eth:team0>
[  247.601564][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  247.663371][T16457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  247.670809][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  247.728210][T16460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  247.808930][T16456] lo speed is unknown, defaulting to 1000
[  248.238798][T16476] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4588'.
[  248.244863][ T5718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  248.248148][ T5718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  248.317585][T16478] netlink: 'syz.0.4589': attribute type 7 has an invalid length.
[  248.324302][T16478] netlink: 'syz.0.4589': attribute type 8 has an invalid length.
[  248.331280][T16478] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4589'.
[  248.665427][T16480] netlink: 'syz.2.4590': attribute type 4 has an invalid length.
[  248.669809][T16480] rdma_rxe: rxe_newlink: failed to add lo
[  248.689530][T16480] tipc: Resetting bearer <eth:team0>
[  248.707635][T16480] tipc: Resetting bearer <eth:team0>
[  248.711280][ T5860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  248.722705][T16480] net_ratelimit: 6 callbacks suppressed
[  248.722730][T16480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.126661][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  249.261997][ T5718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  249.264545][ T5718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  249.291243][ T5860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  249.320714][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4599'.
[  250.000636][ T5860] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  250.016228][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4618'.
[  250.019269][T16549] nbd: couldn't find a device at index 0
[  250.051255][T16534] lo speed is unknown, defaulting to 1000
[  250.262014][T16561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.313256][ T5895] lo speed is unknown, defaulting to 1000
[  250.315858][ T5895] syz0: Port: 1 Link DOWN
[  250.341894][ T5895] lo speed is unknown, defaulting to 1000
[  250.548737][T16574] team0: Device gtp1 is of different type
[  250.576673][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4632'.
[  250.974590][T16606] netlink: 'syz.1.4645': attribute type 10 has an invalid length.
[  250.977370][T16606] veth1_macvtap: left promiscuous mode
[  250.980192][T16606] team0: Device veth1_macvtap failed to register rx_handler
[  251.048297][T16616] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4650'.
[  251.109457][T16622] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  252.214488][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4667'.
[  252.218958][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4667'.
[  252.378687][T16670] syzkaller0: entered promiscuous mode
[  252.380567][T16670] syzkaller0: entered allmulticast mode
[  252.468245][T16676] netlink: 'syz.0.4670': attribute type 10 has an invalid length.
[  253.360656][    C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  253.360687][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  253.770063][T16676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.775819][T16676] batadv0: entered promiscuous mode
[  253.777604][T16676] batadv0: entered allmulticast mode
[  253.780220][T16676] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  253.836678][T16681] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4677'.
[  254.179439][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4689'.
[  254.453498][T16733] netlink: 'syz.1.4705': attribute type 21 has an invalid length.
[  254.456735][T16733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4705'.
[  254.803246][T16757] netlink: 'syz.0.4713': attribute type 4 has an invalid length.
[  255.524036][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.658445][T16829] pim6reg1: entered promiscuous mode
[  255.663486][T16829] pim6reg1: entered allmulticast mode
[  256.573269][T16853] netlink: 'syz.1.4751': attribute type 13 has an invalid length.
[  257.057842][T16879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4761'.
[  257.103959][T16882] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  257.278821][T16896] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  257.287227][T16896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4770'.
[  257.290101][T16896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4770'.
[  258.294989][T16925] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  258.298890][T16925] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  258.605036][T16938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.775985][T16958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4797'.
[  259.209826][T16985] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.546505][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4823'.
[  259.761058][T17023] netlink: 'syz.0.4828': attribute type 1 has an invalid length.
[  259.764176][T17023] nbd: error processing sock list
[  259.767452][T17023] block nbd4: shutting down sockets
[  259.974565][T17050] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4839'.
[  260.133400][T17062] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  260.136498][T17062] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  260.317901][T17076] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  260.325515][T17076] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  260.356722][T17076] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  260.630203][T17100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4860'.
[  260.683429][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4862'.
[  260.745944][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4864'.
[  260.755347][T17112] openvswitch: netlink: Message has 4 unknown bytes.
[  260.807944][T17116] netlink: 'syz.1.4867': attribute type 1 has an invalid length.
[  261.233424][T17160] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  261.296734][   T96] block nbd1: Possible stuck request ffff888020568000: control (read@0,4096B). Runtime 180 seconds
[  261.920625][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.125777][ T5299] udevd[5299]: worker [5868] /devices/virtual/block/nbd1 timeout; kill it
[  262.141088][ T5299] udevd[5299]: seq 10717 '/devices/virtual/block/nbd1' killed
[  262.248021][T17197] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4898'.
[  262.307407][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4899'.
[  262.340920][T17200] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4899'.
[  262.365717][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4900'.
[  262.903746][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4920'.
[  262.907227][T17242] netlink: 'syz.2.4920': attribute type 1 has an invalid length.
[  262.910136][T17242] netlink: 'syz.2.4920': attribute type 2 has an invalid length.
[  262.918500][T17242] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4920'.
[  262.994134][T17246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4922'.
[  263.015906][T17246] netlink: 'syz.2.4922': attribute type 1 has an invalid length.
[  263.071278][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a412400: rx timeout, send abort
[  263.076586][    C0] vcan0: j1939_tp_rxtimer: 0xffff88811a413800: rx timeout, send abort
[  263.080532][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a412400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  263.086118][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a413800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  263.221773][T17262] syzkaller1: entered promiscuous mode
[  263.223536][T17262] syzkaller1: entered allmulticast mode
[  263.384018][T17275] netlink: 'syz.2.4936': attribute type 3 has an invalid length.
[  263.395709][T17275] netlink: 'syz.2.4936': attribute type 3 has an invalid length.
[  263.505741][T17283] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  263.618846][T17295] netlink: 'syz.0.4946': attribute type 29 has an invalid length.
[  263.766029][T17307] netlink: 'syz.1.4953': attribute type 16 has an invalid length.
[  263.768996][T17307] netlink: 'syz.1.4953': attribute type 3 has an invalid length.
[  263.773865][T17307] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.4953'.
[  264.099078][T17313] lo speed is unknown, defaulting to 1000
[  264.148973][   T33] audit: type=1804 audit(1755304707.193:9): pid=17327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4962" name="/newroot/1705/cgroup.controllers" dev="tmpfs" ino=8597 res=1 errno=0
[  264.180892][   T33] audit: type=1800 audit(1755304707.193:10): pid=17327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4962" name="cgroup.controllers" dev="tmpfs" ino=8597 res=0 errno=0
[  264.488899][T17346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  264.751056][T17349] lo speed is unknown, defaulting to 1000
[  264.847294][T17358] netlink: 'syz.1.4974': attribute type 1 has an invalid length.
[  264.850230][T17358] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4974'.
[  264.854463][T17358] netlink: 'syz.1.4974': attribute type 1 has an invalid length.
[  265.003571][T17362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4976'.
[  265.192144][T17371] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  265.454243][T17384] netlink: 'syz.2.4985': attribute type 4 has an invalid length.
[  265.501928][T17388] netlink: 'syz.2.4987': attribute type 21 has an invalid length.
[  265.542355][T17379] lo speed is unknown, defaulting to 1000
[  265.760041][T17407] veth0_to_bridge: entered promiscuous mode
[  265.834404][T17407] veth0_to_bridge: left promiscuous mode
[  266.558029][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.563613][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.901254][T17462] geneve2: entered promiscuous mode
[  267.079729][T17478] lo speed is unknown, defaulting to 1000
[  267.086238][T17478] lo speed is unknown, defaulting to 1000
[  267.094397][T17478] lo speed is unknown, defaulting to 1000
[  267.113188][T17478] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  267.135563][T17478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  267.167138][T17478] lo speed is unknown, defaulting to 1000
[  267.172636][T17478] lo speed is unknown, defaulting to 1000
[  267.179605][T17478] lo speed is unknown, defaulting to 1000
[  267.353667][T17497] __nla_validate_parse: 3 callbacks suppressed
[  267.353677][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5036'.
[  267.360271][T17496] netlink: 'syz.2.5037': attribute type 6 has an invalid length.
[  267.583654][T17526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5049'.
[  267.669021][T17539] netlink: 'syz.0.5054': attribute type 21 has an invalid length.
[  267.678050][T17539] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5054'.
[  268.049980][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5073'.
[  268.053432][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5073'.
[  268.057693][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5073'.
[  268.061408][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5073'.
[  268.064479][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5073'.
[  268.067613][T17575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5073'.
[  268.222241][T17592] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5081'.
[  268.244900][T17593] netlink: 'syz.0.5080': attribute type 13 has an invalid length.
[  268.256279][T17593] netlink: 'syz.0.5080': attribute type 17 has an invalid length.
[  268.278215][T17593] sit0: left promiscuous mode
[  268.302357][T17596] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  268.310272][T17593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  268.318461][ T5895] lo speed is unknown, defaulting to 1000
[  268.322677][ T5895] syz0: Port: 1 Link ACTIVE
[  268.325962][ T5895] lo speed is unknown, defaulting to 1000
[  268.338648][T17590] lo speed is unknown, defaulting to 1000
[  268.468859][T17590] lo speed is unknown, defaulting to 1000
[  269.356400][T17630] ==================================================================
[  269.358901][T17630] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  269.361590][T17630] Read of size 2 at addr ffff888026d6f742 by task syz.1.5097/17630
[  269.364673][T17630] 
[  269.365828][T17630] CPU: 0 UID: 0 PID: 17630 Comm: syz.1.5097 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  269.365841][T17630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.365848][T17630] Call Trace:
[  269.365853][T17630]  <TASK>
[  269.365858][T17630]  dump_stack_lvl+0x189/0x250
[  269.365873][T17630]  ? __kasan_check_byte+0x12/0x40
[  269.365887][T17630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.365897][T17630]  ? lock_release+0x4b/0x3e0
[  269.365911][T17630]  ? __virt_addr_valid+0x4a5/0x5c0
[  269.365922][T17630]  print_report+0xca/0x240
[  269.365930][T17630]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  269.365941][T17630]  kasan_report+0x118/0x150
[  269.365953][T17630]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  269.365966][T17630]  __xfrm_state_lookup+0x6ad/0x8d0
[  269.365989][T17630]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  269.366004][T17630]  xfrm_state_add+0x27d/0xc40
[  269.366018][T17630]  pfkey_add+0x1edd/0x2e00
[  269.366034][T17630]  ? __pfx_pfkey_add+0x10/0x10
[  269.366045][T17630]  ? kmem_cache_free+0x18f/0x400
[  269.366059][T17630]  pfkey_sendmsg+0xbfe/0x1090
[  269.366069][T17630]  ? trace_sched_exit_tp+0x36/0x110
[  269.366082][T17630]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  269.366097][T17630]  ? aa_sock_msg_perm+0xf1/0x1d0
[  269.366109][T17630]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  269.366118][T17630]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  269.366128][T17630]  __sock_sendmsg+0x21c/0x270
[  269.366139][T17630]  ____sys_sendmsg+0x505/0x830
[  269.366151][T17630]  ? __pfx_____sys_sendmsg+0x10/0x10
[  269.366165][T17630]  ? import_iovec+0x74/0xa0
[  269.366173][T17630]  ___sys_sendmsg+0x21f/0x2a0
[  269.366185][T17630]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.366228][T17630]  ? __fget_files+0x2a/0x420
[  269.366241][T17630]  ? __fget_files+0x3a0/0x420
[  269.366255][T17630]  __x64_sys_sendmsg+0x19b/0x260
[  269.366267][T17630]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  269.366283][T17630]  ? do_syscall_64+0xbe/0x3b0
[  269.366295][T17630]  do_syscall_64+0xfa/0x3b0
[  269.366304][T17630]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.366314][T17630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.366323][T17630]  ? exc_page_fault+0x9f/0xf0
[  269.366332][T17630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.366341][T17630] RIP: 0033:0x7f34f358ebe9
[  269.366363][T17630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.366377][T17630] RSP: 002b:00007f34f43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.366393][T17630] RAX: ffffffffffffffda RBX: 00007f34f37b5fa0 RCX: 00007f34f358ebe9
[  269.366402][T17630] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  269.366411][T17630] RBP: 00007f34f3611e19 R08: 0000000000000000 R09: 0000000000000000
[  269.366419][T17630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.366426][T17630] R13: 00007f34f37b6038 R14: 00007f34f37b5fa0 R15: 00007ffdd00d9978
[  269.366441][T17630]  </TASK>
[  269.366447][T17630] 
[  269.458607][T17630] Allocated by task 11143:
[  269.460006][T17630]  kasan_save_track+0x3e/0x80
[  269.461500][T17630]  __kasan_slab_alloc+0x6c/0x80
[  269.463057][T17630]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  269.464743][T17630]  xfrm_state_alloc+0x24/0x2f0
[  269.466348][T17630]  __find_acq_core+0x8a7/0x1c00
[  269.467855][T17630]  xfrm_find_acq+0x78/0xa0
[  269.469176][T17630]  xfrm_alloc_userspi+0x6b3/0xc90
[  269.470720][T17630]  xfrm_user_rcv_msg+0x7a3/0xab0
[  269.472462][T17630]  netlink_rcv_skb+0x208/0x470
[  269.474034][T17630]  xfrm_netlink_rcv+0x79/0x90
[  269.475502][T17630]  netlink_unicast+0x82f/0x9e0
[  269.477002][T17630]  netlink_sendmsg+0x805/0xb30
[  269.478505][T17630]  __sock_sendmsg+0x21c/0x270
[  269.479972][T17630]  ____sys_sendmsg+0x505/0x830
[  269.481524][T17630]  ___sys_sendmsg+0x21f/0x2a0
[  269.483018][T17630]  __x64_sys_sendmsg+0x19b/0x260
[  269.484528][T17630]  do_syscall_64+0xfa/0x3b0
[  269.485967][T17630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.487806][T17630] 
[  269.488570][T17630] Freed by task 5895:
[  269.489837][T17630]  kasan_save_track+0x3e/0x80
[  269.491339][T17630]  kasan_save_free_info+0x46/0x50
[  269.492942][T17630]  __kasan_slab_free+0x5b/0x80
[  269.494500][T17630]  kmem_cache_free+0x18f/0x400
[  269.496114][T17630]  xfrm_state_gc_task+0x52d/0x6b0
[  269.497709][T17630]  process_scheduled_works+0xae1/0x17b0
[  269.499771][T17630]  worker_thread+0x8a0/0xda0
[  269.501426][T17630]  kthread+0x711/0x8a0
[  269.502714][T17630]  ret_from_fork+0x3fc/0x770
[  269.504169][T17630]  ret_from_fork_asm+0x1a/0x30
[  269.505686][T17630] 
[  269.506521][T17630] The buggy address belongs to the object at ffff888026d6f600
[  269.506521][T17630]  which belongs to the cache xfrm_state of size 928
[  269.510619][T17630] The buggy address is located 322 bytes inside of
[  269.510619][T17630]  freed 928-byte region [ffff888026d6f600, ffff888026d6f9a0)
[  269.514688][T17630] 
[  269.515449][T17630] The buggy address belongs to the physical page:
[  269.517502][T17630] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026d6cd80 pfn:0x26d6c
[  269.520690][T17630] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  269.523317][T17630] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  269.525621][T17630] page_type: f5(slab)
[  269.526870][T17630] raw: 00fff00000000040 ffff888104e02780 dead000000000122 0000000000000000
[  269.529499][T17630] raw: ffff888026d6cd80 00000000800e0003 00000000f5000000 0000000000000000
[  269.532162][T17630] head: 00fff00000000040 ffff888104e02780 dead000000000122 0000000000000000
[  269.534863][T17630] head: ffff888026d6cd80 00000000800e0003 00000000f5000000 0000000000000000
[  269.537580][T17630] head: 00fff00000000002 ffffea00009b5b01 00000000ffffffff 00000000ffffffff
[  269.540616][T17630] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  269.544031][T17630] page dumped because: kasan: bad access detected
[  269.546626][T17630] page_owner tracks the page as allocated
[  269.548394][T17630] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6251, tgid 6249 (syz.0.139), ts 74793968357, free_ts 74403304644
[  269.554201][T17630]  post_alloc_hook+0x240/0x2a0
[  269.555792][T17630]  get_page_from_freelist+0x21e4/0x22c0
[  269.557543][T17630]  __alloc_frozen_pages_noprof+0x181/0x370
[  269.559378][T17630]  alloc_pages_mpol+0x232/0x4a0
[  269.561271][T17630]  allocate_slab+0x8a/0x370
[  269.563109][T17630]  ___slab_alloc+0xbeb/0x1410
[  269.564785][T17630]  kmem_cache_alloc_noprof+0x283/0x3c0
[  269.566575][T17630]  xfrm_state_alloc+0x24/0x2f0
[  269.568056][T17630]  __find_acq_core+0x8a7/0x1c00
[  269.569576][T17630]  xfrm_find_acq+0x78/0xa0
[  269.570958][T17630]  xfrm_alloc_userspi+0x6b3/0xc90
[  269.572540][T17630]  xfrm_user_rcv_msg+0x7a3/0xab0
[  269.574067][T17630]  netlink_rcv_skb+0x208/0x470
[  269.575566][T17630]  xfrm_netlink_rcv+0x79/0x90
[  269.577103][T17630]  netlink_unicast+0x82f/0x9e0
[  269.578607][T17630]  netlink_sendmsg+0x805/0xb30
[  269.580081][T17630] page last free pid 6214 tgid 6214 stack trace:
[  269.582198][T17630]  __free_frozen_pages+0xbc4/0xd30
[  269.583775][T17630]  free_large_kmalloc+0x13a/0x1f0
[  269.585327][T17630]  device_release+0x9c/0x1c0
[  269.586747][T17630]  kobject_put+0x22b/0x480
[  269.588132][T17630]  netdev_run_todo+0xd2e/0xea0
[  269.589622][T17630]  tun_chr_close+0x13c/0x1c0
[  269.591067][T17630]  __fput+0x44c/0xa70
[  269.592288][T17630]  task_work_run+0x1d4/0x260
[  269.593649][T17630]  exit_to_user_mode_loop+0xec/0x110
[  269.595230][T17630]  do_syscall_64+0x2bd/0x3b0
[  269.596639][T17630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.598458][T17630] 
[  269.599228][T17630] Memory state around the buggy address:
[  269.600949][T17630]  ffff888026d6f600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  269.603501][T17630]  ffff888026d6f680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  269.605968][T17630] >ffff888026d6f700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  269.608466][T17630]                                            ^
[  269.610277][T17630]  ffff888026d6f780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  269.612768][T17630]  ffff888026d6f800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  269.615291][T17630] ==================================================================
[  269.617883][T17630] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  269.620121][T17630] CPU: 0 UID: 0 PID: 17630 Comm: syz.1.5097 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  269.623851][T17630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.626925][T17630] Call Trace:
[  269.627956][T17630]  <TASK>
[  269.628844][T17630]  dump_stack_lvl+0x99/0x250
[  269.630278][T17630]  ? __asan_memcpy+0x40/0x70
[  269.631768][T17630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.633425][T17630]  ? __pfx__printk+0x10/0x10
[  269.634887][T17630]  vpanic+0x281/0x750
[  269.636149][T17630]  ? __pfx_vpanic+0x10/0x10
[  269.637598][T17630]  ? irqentry_exit+0x74/0x90
[  269.639053][T17630]  panic+0xb9/0xc0
[  269.640259][T17630]  ? __pfx_panic+0x10/0x10
[  269.641746][T17630]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  269.643700][T17630]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  269.645551][T17630]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  269.647299][T17630]  check_panic_on_warn+0x89/0xb0
[  269.649299][T17630]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  269.651422][T17630]  end_report+0x78/0x160
[  269.653098][T17630]  kasan_report+0x129/0x150
[  269.654926][T17630]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  269.656792][T17630]  __xfrm_state_lookup+0x6ad/0x8d0
[  269.658524][T17630]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  269.660445][T17630]  xfrm_state_add+0x27d/0xc40
[  269.662353][T17630]  pfkey_add+0x1edd/0x2e00
[  269.664153][T17630]  ? __pfx_pfkey_add+0x10/0x10
[  269.665885][T17630]  ? kmem_cache_free+0x18f/0x400
[  269.667476][T17630]  pfkey_sendmsg+0xbfe/0x1090
[  269.668959][T17630]  ? trace_sched_exit_tp+0x36/0x110
[  269.670593][T17630]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  269.672244][T17630]  ? aa_sock_msg_perm+0xf1/0x1d0
[  269.673919][T17630]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  269.675561][T17630]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  269.677520][T17630]  __sock_sendmsg+0x21c/0x270
[  269.679447][T17630]  ____sys_sendmsg+0x505/0x830
[  269.681409][T17630]  ? __pfx_____sys_sendmsg+0x10/0x10
[  269.683562][T17630]  ? import_iovec+0x74/0xa0
[  269.685403][T17630]  ___sys_sendmsg+0x21f/0x2a0
[  269.687325][T17630]  ? __pfx____sys_sendmsg+0x10/0x10
[  269.689445][T17630]  ? __fget_files+0x2a/0x420
[  269.691320][T17630]  ? __fget_files+0x3a0/0x420
[  269.693092][T17630]  __x64_sys_sendmsg+0x19b/0x260
[  269.694648][T17630]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  269.696353][T17630]  ? do_syscall_64+0xbe/0x3b0
[  269.697822][T17630]  do_syscall_64+0xfa/0x3b0
[  269.699285][T17630]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.700929][T17630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.702888][T17630]  ? exc_page_fault+0x9f/0xf0
[  269.704358][T17630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.706327][T17630] RIP: 0033:0x7f34f358ebe9
[  269.708109][T17630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.715176][T17630] RSP: 002b:00007f34f43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.717966][T17630] RAX: ffffffffffffffda RBX: 00007f34f37b5fa0 RCX: 00007f34f358ebe9
[  269.721192][T17630] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  269.724233][T17630] RBP: 00007f34f3611e19 R08: 0000000000000000 R09: 0000000000000000
[  269.727400][T17630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.730281][T17630] R13: 00007f34f37b6038 R14: 00007f34f37b5fa0 R15: 00007ffdd00d9978
[  269.732734][T17630]  </TASK>
[  269.734372][T17630] Kernel Offset: disabled
[  269.735736][T17630] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:38:32  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000002788 RDI=0000000000002789 RBP=00000000000003f8 RSP=ffffc90007036d90
R8 =ffff88801f398237 R9 =1ffff11003e73046 R10=dffffc0000000000 R11=ffffffff854e7250
R12=dffffc0000000000 R13=ffffffff99af4912 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e72cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f34f43f66c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe420801440 CR3=0000000108a6c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003172 656c6c616b7a7973
XMM02=00007fd37e187498 00007fd37e187470 XMM03=00007fd37e1874a8 00007fd37e1874a0
XMM04=00007fd37eced100 00007fd37e187460 XMM05=00007fd37e187478 00007fd37e1874c0
XMM06=00007fd37e1874b8 00007fd37e1874b0 XMM07=00007fd37e1874a8 00007fd37e1874a0
XMM08=a3920e8695a7ba3c f1ebd4b7c9c453d8 XMM09=0000000000000000 00007fd37e012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=22cd6a574a1ab800 RBX=ffffffff81968308 RCX=22cd6a574a1ab800 RDX=0000000000000001
RSI=ffffffff8d9b4938 RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe420a81108 CR3=0000000108a6c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=55acfd9b6e3ed0a9 38955b3d007787c5
XMM02=00007f34f3787498 ffffffff8168893f XMM03=00007f34f37874a8 00007f34f37874a0
XMM04=00007f34f42ed100 00007f34f3787460 XMM05=00007f34f3787478 00007f34f37874c0
XMM06=00007f34f37874b8 00007f34f37874b0 XMM07=00007f34f37874a8 00007f34f37874a0
XMM08=0000000000000000 00007f34f3612ee7 XMM09=0000000000000000 00007f34f3612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
