last executing test programs:

412.682492ms ago: executing program 1 (id=2306):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}], 0x1, 0x8810)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)

348.608775ms ago: executing program 2 (id=2307):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)={0x58, r2, 0x405, 0x70bd27, 0x25dfdbfa, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080)

345.857623ms ago: executing program 1 (id=2309):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

279.339682ms ago: executing program 0 (id=2310):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

278.872272ms ago: executing program 2 (id=2311):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f2c2", 0x2}], 0x1}}], 0x2, 0x8c4)

278.442154ms ago: executing program 1 (id=2312):
r0 = socket$caif_stream(0x25, 0x1, 0x1)
recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40010140, 0x0)

209.695642ms ago: executing program 0 (id=2313):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000680)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffffff907800000000ffffff"], 0x0)

209.405262ms ago: executing program 2 (id=2314):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

209.294742ms ago: executing program 1 (id=2315):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r0, 0x2, 0x0}, 0x10)

140.009597ms ago: executing program 0 (id=2316):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001440)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40)

139.441454ms ago: executing program 2 (id=2317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x30, r1, 0xc4fc9e906872338b, 0x70bd2a, 0xfffffffd, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c014}, 0x0)

89.551865ms ago: executing program 0 (id=2318):
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94)

89.395496ms ago: executing program 1 (id=2319):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003000)={0x1c, 0x52, 0x1, 0x70bd2a, 0x0, {0xa}, [@generic="76ae529d48"]}, 0x1c}}, 0x20008040)

89.2106ms ago: executing program 2 (id=2320):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r1, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80)

77.631983ms ago: executing program 0 (id=2321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f, 0x1, 0xa9, 0x9, 0x5, 0xfffe, 0x2, 0x100]}}]}]}]}, 0x38}}, 0x0)

355.519µs ago: executing program 2 (id=2322):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

101.359µs ago: executing program 0 (id=2323):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x709d2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3246e}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x2}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20084001}, 0x20040040)

0s ago: executing program 1 (id=2324):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80"], 0x24}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32981' (ED25519) to the list of known hosts.
syzkaller login: [   56.664967][ T5778] cgroup: Unknown subsys name 'net'
[   56.774482][ T5778] cgroup: Unknown subsys name 'cpuset'
[   56.779327][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.060833][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.197161][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.201825][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.206293][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.209962][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.214155][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.217607][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.220703][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.223902][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.228482][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.264932][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.268792][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.271991][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.275266][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.277982][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.282185][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.615293][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   65.712853][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   65.757100][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   65.854231][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.857079][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.860520][ T5861] bridge_slave_0: entered allmulticast mode
[   65.867050][ T5861] bridge_slave_0: entered promiscuous mode
[   65.899784][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.903534][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.906583][ T5861] bridge_slave_1: entered allmulticast mode
[   65.910787][ T5861] bridge_slave_1: entered promiscuous mode
[   65.984527][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.987661][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.990703][ T5855] bridge_slave_0: entered allmulticast mode
[   65.995526][ T5855] bridge_slave_0: entered promiscuous mode
[   66.000858][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.004824][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.007851][ T5855] bridge_slave_1: entered allmulticast mode
[   66.012505][ T5855] bridge_slave_1: entered promiscuous mode
[   66.019122][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.038935][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.042403][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.045616][ T5852] bridge_slave_0: entered allmulticast mode
[   66.052034][ T5852] bridge_slave_0: entered promiscuous mode
[   66.072239][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.075783][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.078662][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.083172][ T5852] bridge_slave_1: entered allmulticast mode
[   66.087035][ T5852] bridge_slave_1: entered promiscuous mode
[   66.104426][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.133392][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.183824][ T5861] team0: Port device team_slave_0 added
[   66.188411][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.194910][ T5855] team0: Port device team_slave_0 added
[   66.199805][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.205168][ T5861] team0: Port device team_slave_1 added
[   66.208624][ T5855] team0: Port device team_slave_1 added
[   66.279611][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.283479][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.294012][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.316157][ T5852] team0: Port device team_slave_0 added
[   66.319499][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.322682][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.333522][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.339045][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.342327][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.353428][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.359736][ T5852] team0: Port device team_slave_1 added
[   66.364354][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.367085][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.377078][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.423220][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.426339][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.436202][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.486920][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.489903][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.501243][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.512803][ T5855] hsr_slave_0: entered promiscuous mode
[   66.516473][ T5855] hsr_slave_1: entered promiscuous mode
[   66.557331][ T5861] hsr_slave_0: entered promiscuous mode
[   66.561628][ T5861] hsr_slave_1: entered promiscuous mode
[   66.564024][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   66.566107][ T5861] Cannot create hsr debugfs directory
[   66.635262][ T5852] hsr_slave_0: entered promiscuous mode
[   66.638504][ T5852] hsr_slave_1: entered promiscuous mode
[   66.641605][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   66.643605][ T5852] Cannot create hsr debugfs directory
[   66.982972][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.992284][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.999264][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.017710][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.078367][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.087475][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.102797][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.110434][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.205837][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.218673][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.236175][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.245290][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.262821][ T5853] Bluetooth: hci0: command tx timeout
[   67.333141][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.342653][ T5853] Bluetooth: hci2: command tx timeout
[   67.343576][ T5237] Bluetooth: hci1: command tx timeout
[   67.387884][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   67.407857][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.411093][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.432916][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.435875][ T4942] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.457342][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.490988][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   67.514990][ T4942] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.517505][ T4942] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.526294][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.543030][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.545824][ T4942] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.580487][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   67.623138][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.625517][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.654152][ T4942] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.656777][ T4942] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.754093][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.793754][ T5861] veth0_vlan: entered promiscuous mode
[   67.805727][ T5861] veth1_vlan: entered promiscuous mode
[   67.859450][ T5861] veth0_macvtap: entered promiscuous mode
[   67.872643][ T5861] veth1_macvtap: entered promiscuous mode
[   67.919056][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.937304][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.942582][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.950450][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.967379][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.976734][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.980479][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.990159][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.076527][ T5852] veth0_vlan: entered promiscuous mode
[   68.090639][ T5855] veth0_vlan: entered promiscuous mode
[   68.119693][ T5852] veth1_vlan: entered promiscuous mode
[   68.125426][ T5855] veth1_vlan: entered promiscuous mode
[   68.132123][ T4942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.142570][ T4942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.196193][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.202588][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.204777][ T5855] veth0_macvtap: entered promiscuous mode
[   68.225225][ T5855] veth1_macvtap: entered promiscuous mode
[   68.244108][ T5852] veth0_macvtap: entered promiscuous mode
[   68.250474][ T5852] veth1_macvtap: entered promiscuous mode
[   68.283598][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.303535][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.311606][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.321466][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.327229][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.328783][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.338887][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.342744][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.346088][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.378079][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.399996][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.406296][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.409507][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.516992][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.524668][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.557802][  T384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.563843][  T384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.584191][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.588023][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.628357][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.636728][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.800688][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'.
[   68.820679][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7'.
[   69.010445][ T5940] netlink: 156260 bytes leftover after parsing attributes in process `syz.1.8'.
[   69.317758][ T5940] Zero length message leads to an empty skb
[   69.343858][ T5237] Bluetooth: hci0: command tx timeout
[   69.422075][ T5237] Bluetooth: hci2: command tx timeout
[   69.424410][ T5237] Bluetooth: hci1: command tx timeout
[   69.450844][ T5961] netlink: 'syz.1.16': attribute type 21 has an invalid length.
[   69.455218][ T5961] netlink: 128 bytes leftover after parsing attributes in process `syz.1.16'.
[   69.458988][ T5961] netlink: 'syz.1.16': attribute type 4 has an invalid length.
[   69.463460][ T5961] netlink: 'syz.1.16': attribute type 5 has an invalid length.
[   69.466859][ T5961] netlink: 3 bytes leftover after parsing attributes in process `syz.1.16'.
[   70.854329][ T6046] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET)
[   70.857203][ T6046] syzkaller1: entered allmulticast mode
[   70.939569][ T6054] sctp: [Deprecated]: syz.0.56 (pid 6054) Use of int in max_burst socket option.
[   70.939569][ T6054] Use struct sctp_assoc_value instead
[   70.939597][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'.
[   71.247373][ T6069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.63'.
[   71.434182][ T5853] Bluetooth: hci0: command tx timeout
[   71.501743][ T5853] Bluetooth: hci1: command tx timeout
[   71.504097][ T5853] Bluetooth: hci2: command tx timeout
[   71.587827][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.590130][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.738165][ T6103] netlink: 'syz.0.79': attribute type 10 has an invalid length.
[   71.754847][ T6103] team0: Cannot enslave team device to itself
[   71.893751][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.84'.
[   71.897242][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.84'.
[   72.147207][ T6129] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   72.589549][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'.
[   73.203408][ T6166] unsupported nlmsg_type 40
[   73.246923][ T6171] netlink: 'syz.1.110': attribute type 2 has an invalid length.
[   73.252715][ T6166] tipc: Can't bind to reserved service type 2
[   73.322573][ T6175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.505969][ T5237] Bluetooth: hci0: command tx timeout
[   73.588992][ T5237] Bluetooth: hci2: command tx timeout
[   73.592729][ T5853] Bluetooth: hci1: command tx timeout
[   73.956428][ T6194] bridge0: entered promiscuous mode
[   74.054021][ T6214] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.214368][ T6229] __nla_validate_parse: 4 callbacks suppressed
[   74.214386][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'.
[   74.264380][ T6231] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.318218][ T6235] netlink: 'syz.1.137': attribute type 3 has an invalid length.
[   74.388181][ T6237] tipc: Started in network mode
[   74.390555][ T6237] tipc: Node identity a6981adda10b, cluster identity 4711
[   74.401582][ T6237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.409262][ T6237] syzkaller0: entered promiscuous mode
[   74.414627][ T6237] syzkaller0: entered allmulticast mode
[   74.442281][ T6237] tipc: Resetting bearer <eth:syzkaller0>
[   74.459607][ T6236] tipc: Resetting bearer <eth:syzkaller0>
[   74.476043][ T6236] tipc: Disabling bearer <eth:syzkaller0>
[   74.664977][ T6254] warning: `syz.1.144' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.674610][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'.
[   74.695599][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'.
[   74.796680][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'.
[   74.946625][ T6274] delete_channel: no stack
[   75.097055][ T6291] netlink: 'syz.1.161': attribute type 23 has an invalid length.
[   75.146200][ T6293] netlink: 248 bytes leftover after parsing attributes in process `syz.1.163'.
[   75.149571][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'.
[   75.153699][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'.
[   75.159788][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'.
[   75.352573][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'.
[   75.362484][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'.
[   75.366520][ T6310] netlink: 'syz.1.169': attribute type 12 has an invalid length.
[   77.538379][ T6466] tipc: Started in network mode
[   77.540152][ T6466] tipc: Node identity 7688c6c5b85a, cluster identity 4711
[   77.543169][ T6466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.560573][ T6466] syzkaller0: entered promiscuous mode
[   77.578619][ T6466] syzkaller0: entered allmulticast mode
[   77.621662][ T6466] tipc: Resetting bearer <eth:syzkaller0>
[   77.626030][ T6463] tipc: Resetting bearer <eth:syzkaller0>
[   77.657606][ T6463] tipc: Disabling bearer <eth:syzkaller0>
[   78.301948][ T6522] IPVS: Unknown mcast interface: vetN1_macvtap
[   78.461731][ T6536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.018341][ T6574] block nbd0: not configured, cannot reconfigure
[   79.049214][ T6576] netlink: 'syz.2.276': attribute type 10 has an invalid length.
[   79.322211][ T6591] netlink: 'syz.1.283': attribute type 21 has an invalid length.
[   79.325083][ T6591] __nla_validate_parse: 6 callbacks suppressed
[   79.325092][ T6591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.283'.
[   79.340620][ T6593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.351813][ T6593] syzkaller0: entered promiscuous mode
[   79.354251][ T6593] syzkaller0: entered allmulticast mode
[   79.370719][ T6593] tipc: Resetting bearer <eth:syzkaller0>
[   79.374905][ T6592] tipc: Resetting bearer <eth:syzkaller0>
[   79.397769][ T6592] tipc: Disabling bearer <eth:syzkaller0>
[   79.793949][ T6608] openvswitch: netlink: IPv4 tun info is not correct
[   80.167079][ T5903] IPVS: starting estimator thread 0...
[   80.261992][ T6633] IPVS: using max 44 ests per chain, 105600 per kthread
[   80.630989][ T6668] syzkaller1: entered promiscuous mode
[   80.635809][ T6668] syzkaller1: entered allmulticast mode
[   80.694395][ T6672] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   80.711861][ T6674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.039380][ T6687] bridge0: entered promiscuous mode
[   81.186903][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[   82.031497][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.343'.
[   82.195818][ T6733] netlink: 'syz.1.347': attribute type 3 has an invalid length.
[   82.407322][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[   82.412118][ T6748] netlink: 348 bytes leftover after parsing attributes in process `syz.1.354'.
[   82.415166][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[   82.418801][ T6748] netlink: 348 bytes leftover after parsing attributes in process `syz.1.354'.
[   82.423656][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'.
[   82.447116][ T6749] delete_channel: no stack
[   82.605684][ T6758] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   82.610114][ T6758] macsec1: entered promiscuous mode
[   82.612761][ T6758] macsec1: entered allmulticast mode
[   82.614388][ T6758] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   82.932059][ T6768] xt_policy: neither incoming nor outgoing policy selected
[   83.088432][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[   83.094385][ T6776] netlink: 620 bytes leftover after parsing attributes in process `syz.2.367'.
[   83.100791][ T6776] netlink: 68 bytes leftover after parsing attributes in process `syz.2.367'.
[   83.215837][ T6786] netlink: 'syz.2.371': attribute type 1 has an invalid length.
[   83.218701][ T6784] netdevsim netdevsim0: Direct firmware load for ./bus failed with error -2
[   83.224969][ T6784] netdevsim netdevsim0: Falling back to sysfs fallback for: ./bus
[   83.923049][ T6824] macsec1: left promiscuous mode
[   83.938329][ T6824] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   84.086656][ T6832] tipc: MTU too low for tipc bearer
[   84.330413][ T6855] netlink: 'syz.1.399': attribute type 5 has an invalid length.
[   84.453057][ T6864] unknown channel width for channel at 909000KHz?
[   84.455943][ T6864] unknown channel width for channel at 909000KHz?
[   84.458043][ T6864] unknown channel width for channel at 909000KHz?
[   84.683581][ T6870] __nla_validate_parse: 2 callbacks suppressed
[   84.683601][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'.
[   85.254515][ T6914] netlink: 71 bytes leftover after parsing attributes in process `syz.1.426'.
[   85.257266][ T6915] netlink: 'syz.0.429': attribute type 6 has an invalid length.
[   85.273723][ T6914] netlink: 'syz.1.426': attribute type 39 has an invalid length.
[   85.275444][ T6915] netlink: 'syz.0.429': attribute type 6 has an invalid length.
[   85.404401][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.432'.
[   85.407637][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'.
[   85.410841][ T6923] netlink: 31 bytes leftover after parsing attributes in process `syz.0.432'.
[   85.416952][ T6923] netlink: 'syz.0.432': attribute type 3 has an invalid length.
[   85.420069][ T6923] netlink: 'syz.0.432': attribute type 2 has an invalid length.
[   85.424120][ T6923] netlink: 31 bytes leftover after parsing attributes in process `syz.0.432'.
[   85.427390][ T6923] netlink: 'syz.0.432': attribute type 2 has an invalid length.
[   85.815662][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'.
[   86.253069][ T6967] netlink: 'syz.1.453': attribute type 9 has an invalid length.
[   86.460356][ T6979] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.570050][ T6990] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   86.588097][ T6991] 8021q: VLANs not supported on ip6tnl0
[   86.611911][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'.
[   86.625313][ T6992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.460'.
[   86.665264][ T6994] netlink: 224 bytes leftover after parsing attributes in process `syz.1.460'.
[   86.960696][    T9] cfg80211: failed to load regulatory.db
[   88.427486][ T7055] IPVS: Scheduler module ip_vs_sip not found
[   88.533208][ T7064] trusted_key: syz.2.492 sent an empty control message without MSG_MORE.
[   88.563792][ T7064] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   88.578662][ T7064] bridge1: entered promiscuous mode
[   88.582042][ T7064] bridge1: entered allmulticast mode
[   88.590513][ T7064] team0: Port device bridge1 added
[   89.067696][ T7082] syzkaller0: entered promiscuous mode
[   89.070165][ T7082] syzkaller0: entered allmulticast mode
[   90.256541][ T7113] __nla_validate_parse: 4 callbacks suppressed
[   90.256559][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'.
[   90.377334][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.396050][ T7113] bond0: (slave rose0): Enslaving as an active interface with an up link
[   91.249672][ T7173] openvswitch: netlink: IPv6 tunnel dst address is zero
[   91.270812][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'.
[   91.394244][ T7183] syzkaller0: entered promiscuous mode
[   91.396076][ T7183] syzkaller0: entered allmulticast mode
[   91.553450][ T7196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'.
[   91.653262][ T7204] netlink: 56 bytes leftover after parsing attributes in process `syz.1.548'.
[   91.694514][ T7208] validate_nla: 3 callbacks suppressed
[   91.694544][ T7208] netlink: 'syz.0.549': attribute type 10 has an invalid length.
[   91.699831][ T7208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.549'.
[   91.700324][ T7207] xt_l2tp: missing protocol rule (udp|l2tpip)
[   91.704684][ T7208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.841934][ T7219] netlink: 'syz.2.556': attribute type 1 has an invalid length.
[   91.849480][ T7220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.555'.
[   91.987167][   T33] audit: type=1804 audit(1758641879.183:2): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.559" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=838 res=1 errno=0
[   92.008173][   T33] audit: type=1800 audit(1758641879.183:3): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.559" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=838 res=0 errno=0
[   92.019437][ T7235] netlink: 'syz.0.562': attribute type 41 has an invalid length.
[   92.415277][ T7266] netlink: 'syz.2.575': attribute type 21 has an invalid length.
[   92.419261][ T7266] netlink: 132 bytes leftover after parsing attributes in process `syz.2.575'.
[   92.510697][ T7275] netlink: 'syz.0.579': attribute type 15 has an invalid length.
[   92.635429][ T7283] netlink: 'syz.2.582': attribute type 1 has an invalid length.
[   92.639193][ T7283] netlink: 232 bytes leftover after parsing attributes in process `syz.2.582'.
[   92.705939][ T7290] batman_adv: batadv0: Adding interface: dummy0
[   92.708091][ T7290] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.719068][ T7290] batman_adv: batadv0: Interface activated: dummy0
[   92.749760][ T7290] batadv0: mtu less than device minimum
[   92.755409][ T7290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.759920][ T7290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.764238][ T7290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.768442][ T7290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.772570][ T7290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.777001][ T7290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   92.990510][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'.
[   93.032880][ T7305] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.038717][ T7305] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   93.088921][ T7309] macvlan2: entered promiscuous mode
[   93.102334][ T7309] macvlan2: entered allmulticast mode
[   93.104948][ T7309] bond1: (slave macvlan2): Error -98 calling set_mac_address
[   94.553159][ T7368] netlink: 44 bytes leftover after parsing attributes in process `syz.0.618'.
[   94.557146][ T7370] netlink: 'syz.2.620': attribute type 1 has an invalid length.
[   94.560242][ T7370] netlink: 'syz.2.620': attribute type 1 has an invalid length.
[   96.633798][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[   96.999914][ T7458] syzkaller0: entered promiscuous mode
[   97.002633][ T7458] syzkaller0: entered allmulticast mode
[   97.289890][ T7482] netlink: 'syz.0.663': attribute type 4 has an invalid length.
[   97.298967][ T7481] vxcan1 speed is unknown, defaulting to 1000
[   97.311714][ T7481] vxcan1 speed is unknown, defaulting to 1000
[   97.323964][ T7481] vxcan1 speed is unknown, defaulting to 1000
[   97.516591][ T7481] infiniband syz2: set active
[   97.519789][   T47] vxcan1 speed is unknown, defaulting to 1000
[   97.523297][ T7481] infiniband syz2: added vxcan1
[   97.563988][ T7481] RDS/IB: syz2: added
[   97.567476][ T7481] smc: adding ib device syz2 with port count 1
[   97.570062][ T7481] smc:    ib device syz2 port 1 has no pnetid
[   97.574727][   T47] vxcan1 speed is unknown, defaulting to 1000
[   97.583653][ T7481] vxcan1 speed is unknown, defaulting to 1000
[   97.755069][ T7481] vxcan1 speed is unknown, defaulting to 1000
[   97.888306][ T7481] vxcan1 speed is unknown, defaulting to 1000
[   98.569684][ T7535] netlink: 'syz.1.688': attribute type 2 has an invalid length.
[   98.578914][ T7535] netlink: 'syz.1.688': attribute type 2 has an invalid length.
[   98.635271][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[   98.640734][ T7538] bridge_slave_1: left allmulticast mode
[   98.643031][ T7538] bridge_slave_1: left promiscuous mode
[   98.646609][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.658417][ T7538] bridge_slave_0: left allmulticast mode
[   98.660372][ T7538] bridge_slave_0: left promiscuous mode
[   98.665288][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.925567][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[   99.194818][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'.
[   99.222205][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.225323][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.352175][ T7558] batman_adv: batadv0: Interface deactivated: dummy0
[   99.593934][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.636312][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.073585][ T7558] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  100.076701][ T7558] macsec1: left allmulticast mode
[  100.097003][ T7566] hsr_slave_0: left promiscuous mode
[  100.111077][ T7566] hsr_slave_1: left promiscuous mode
[  100.205154][ T5721] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.211584][ T5721] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.222104][ T5721] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.229194][ T5721] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.908011][ T7617] syzkaller1: entered promiscuous mode
[  100.910458][ T7617] syzkaller1: entered allmulticast mode
[  101.287654][ T7644] net_ratelimit: 14 callbacks suppressed
[  101.287685][ T7644] sock: sock_set_timeout: `syz.0.734' (pid 7644) tries to set negative timeout
[  101.438678][ T7654] vxcan1 speed is unknown, defaulting to 1000
[  101.590085][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.743'.
[  101.648453][ T7664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  101.714938][ T7673] netlink: 'syz.2.746': attribute type 11 has an invalid length.
[  102.304196][ T7691] netlink: 'syz.1.753': attribute type 1 has an invalid length.
[  102.533252][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'.
[  102.840343][ T7707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.845954][ T7707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.854078][ T7707] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  102.858060][ T7707] bond0 (unregistering): Released all slaves
[  103.282733][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'.
[  103.336818][ T7755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.775'.
[  103.952653][ T7798] Unsupported ieee802154 address type: 0
[  104.568946][ T7800] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  104.750033][ T7810] netlink: 36 bytes leftover after parsing attributes in process `syz.2.803'.
[  104.867856][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.809'.
[  105.245311][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'.
[  105.305777][ T7859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.309752][ T7859] syzkaller0: entered promiscuous mode
[  105.312208][ T7859] syzkaller0: entered allmulticast mode
[  105.317074][ T7860] pim6reg1: entered promiscuous mode
[  105.318983][ T7860] pim6reg1: entered allmulticast mode
[  105.343770][ T7862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'.
[  105.359642][ T7859] tipc: Resetting bearer <eth:syzkaller0>
[  105.367480][ T7858] tipc: Resetting bearer <eth:syzkaller0>
[  105.384655][ T7858] tipc: Disabling bearer <eth:syzkaller0>
[  105.455748][ T7866] syzkaller1: entered promiscuous mode
[  105.457916][ T7866] syzkaller1: entered allmulticast mode
[  105.566224][ T7874] netlink: 'syz.1.832': attribute type 9 has an invalid length.
[  105.567976][ T7876] netlink: 'syz.0.833': attribute type 11 has an invalid length.
[  105.569104][ T7874] netlink: 'syz.1.832': attribute type 6 has an invalid length.
[  105.569132][ T7874] netlink: 'syz.1.832': attribute type 7 has an invalid length.
[  105.569139][ T7874] netlink: 'syz.1.832': attribute type 8 has an invalid length.
[  105.681127][ T7886] netlink: 308 bytes leftover after parsing attributes in process `syz.1.838'.
[  105.685234][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'.
[  106.305281][ T7934] netlink: 'syz.2.853': attribute type 5 has an invalid length.
[  106.400964][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'.
[  106.962641][ T7984] netlink: 'syz.1.872': attribute type 21 has an invalid length.
[  107.101511][ T7988] nbd2: detected capacity change from 0 to 63
[  107.112524][ T7999] block nbd2: NBD_DISCONNECT
[  107.188709][ T7999] block nbd2: Disconnected due to user request.
[  107.193436][ T7999] block nbd2: shutting down sockets
[  107.210370][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.214364][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  107.219857][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.223759][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  107.227373][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.231179][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  107.235239][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.239051][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  107.245712][   T98] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  107.249515][   T98] Buffer I/O error on dev nbd2, logical block 0, async page read
[  107.252897][   T98] Buffer I/O error on dev nbd2, logical block 1, async page read
[  107.256347][   T98] Buffer I/O error on dev nbd2, logical block 2, async page read
[  107.259721][   T98] Buffer I/O error on dev nbd2, logical block 3, async page read
[  107.267967][ T5864] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.272877][ T5864] Buffer I/O error on dev nbd2, logical block 0, async page read
[  107.277473][ T5864] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.280750][ T5864] Buffer I/O error on dev nbd2, logical block 1, async page read
[  107.285507][ T5864] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.289340][ T5864] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.293878][ T5864] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  107.305460][ T5864] ldm_validate_partition_table(): Disk read failed.
[  107.312578][ T5864] Dev nbd2: unable to read RDB block 0
[  107.319453][ T5864]  nbd2: unable to read partition table
[  107.361963][ T7988] bond1: entered promiscuous mode
[  107.364349][ T7988] bond1: entered allmulticast mode
[  107.367971][ T7988] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.385351][ T5864] ldm_validate_partition_table(): Disk read failed.
[  107.390079][ T5864] Dev nbd2: unable to read RDB block 0
[  107.395508][ T5864]  nbd2: unable to read partition table
[  107.505015][ T8011] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  108.248527][ T8037] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  108.439651][ T8045] vxcan1 speed is unknown, defaulting to 1000
[  108.502503][ T8052] netlink: 'syz.2.898': attribute type 13 has an invalid length.
[  108.505714][ T8052] __nla_validate_parse: 2 callbacks suppressed
[  108.505733][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'.
[  108.528301][ T8050] geneve2: entered promiscuous mode
[  108.547681][ T5883] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.552056][ T5883] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.555192][ T8052] netlink: 'syz.2.898': attribute type 13 has an invalid length.
[  108.558347][ T5883] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.562808][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'.
[  108.566431][ T5883] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.299874][ T8097] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  109.316998][ T8100] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  109.408796][ T8110] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  109.478733][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'.
[  109.564167][ T8124] netlink: 'syz.1.923': attribute type 13 has an invalid length.
[  109.566828][ T8124] netlink: 'syz.1.923': attribute type 17 has an invalid length.
[  109.644407][ T8124] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.649876][ T8124] 8021q: adding VLAN 0 to HW filter on device team0
[  109.783971][ T8124] batman_adv: batadv0: Interface activated: dummy0
[  109.786200][ T8124] batadv0: mtu less than device minimum
[  109.788747][ T8124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.792914][ T8124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.796965][ T8124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.801079][ T8124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.806229][ T8124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.810572][ T8124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.815095][ T8124] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  109.886790][ T8126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.924'.
[  110.135115][ T8159] siw: device registration error -23
[  110.138867][ T8159] smc: removing ib device syz2
[  111.064145][ T8206] syz_tun: entered promiscuous mode
[  111.066374][ T8206] syz_tun: entered allmulticast mode
[  112.760046][ T8263] netlink: 17 bytes leftover after parsing attributes in process `syz.2.976'.
[  113.000604][ T8278] pim6reg: entered allmulticast mode
[  113.007102][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'.
[  113.088954][ T8280] IPVS: persistence engine module ip_vs_pe_ not found
[  113.111070][ T8285] syz.2.986 uses old SIOCAX25GETINFO
[  113.290672][ T8304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.995'.
[  113.502502][ T8316] netlink: 136 bytes leftover after parsing attributes in process `syz.0.998'.
[  113.901943][ T8332] batman_adv: batadv0: Interface deactivated: dummy0
[  113.904901][ T8332] batman_adv: batadv0: Removing interface: dummy0
[  113.908855][ T8332] bridge_slave_0: left allmulticast mode
[  113.911281][ T8332] bridge_slave_0: left promiscuous mode
[  113.913821][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.919451][ T8332] bridge_slave_1: left allmulticast mode
[  113.922221][ T8332] bridge_slave_1: left promiscuous mode
[  113.924784][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.932515][ T8332] bond0: (slave bond_slave_0): Releasing backup interface
[  113.937842][ T8332] bond0: (slave bond_slave_1): Releasing backup interface
[  113.946946][ T8332] team0: Port device team_slave_0 removed
[  113.955559][ T8332] team0: Port device team_slave_1 removed
[  113.968394][ T8332] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.972653][ T8332] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.054672][ T8332] netlink: 'syz.1.1004': attribute type 10 has an invalid length.
[  114.070063][ T8332] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.084258][ T8332] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  114.116746][ T8332] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.120502][ T8332] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  115.035250][ T8375] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  115.075472][ T8375] bond0: (slave wlan1): Releasing backup interface
[  115.104378][ T8375] netlink: 'syz.1.1024': attribute type 10 has an invalid length.
[  115.107539][ T8375] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  115.114729][ T8375] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.127242][ T8375] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  115.133834][ T8375] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.054169][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1062'.
[  117.095919][ T8462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1062'.
[  117.124110][ T8462] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1062'.
[  117.670714][ T8476] netlink: 'syz.1.1065': attribute type 11 has an invalid length.
[  117.681390][ T8476] netlink: 'syz.1.1065': attribute type 4 has an invalid length.
[  117.688019][ T8476] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1065'.
[  118.156818][ T8494] batman_adv: batadv0: Adding interface: macvtap1
[  118.159389][ T8494] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  118.171389][ T8494] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  118.254980][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'.
[  118.626383][ T8510] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  118.629511][ T8510] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1077'.
[  118.646523][ T8510] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  118.801094][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1083'.
[  118.940033][ T8530] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1086'.
[  118.946464][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1086'.
[  119.188838][ T8546] netlink: 'syz.0.1094': attribute type 3 has an invalid length.
[  119.210576][ T8546] netlink: 'syz.0.1094': attribute type 1 has an invalid length.
[  119.230223][ T8546] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1094'.
[  119.488136][ T8575] ieee802154 phy0 wpan0: encryption failed: -90
[  119.600749][ T8581] Bluetooth: MGMT ver 1.23
[  119.712454][ T8587] syz_tun: entered allmulticast mode
[  119.737308][ T8587] dvmrp8: entered allmulticast mode
[  119.943729][ T8605] netlink: 'syz.2.1118': attribute type 1 has an invalid length.
[  120.006029][ T8605] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  120.087662][ T8613] ipvlan2: entered promiscuous mode
[  120.512775][ T8638] netlink: 'syz.2.1134': attribute type 13 has an invalid length.
[  120.521831][ T8638] gretap0: refused to change device tx_queue_len
[  120.524895][ T8638] net_ratelimit: 13 callbacks suppressed
[  120.524910][ T8638] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  120.546424][ T8586] syz_tun: left allmulticast mode
[  120.553864][ T8586] dvmrp8: left allmulticast mode
[  120.563031][ T8640] netlink: 'syz.2.1135': attribute type 21 has an invalid length.
[  121.680700][ T8695] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  122.233025][ T8717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.236933][ T8717] syzkaller0: entered promiscuous mode
[  122.239100][ T8717] syzkaller0: entered allmulticast mode
[  122.261497][ T8717] tipc: Resetting bearer <eth:syzkaller0>
[  122.267072][ T8716] tipc: Resetting bearer <eth:syzkaller0>
[  122.292092][ T8716] tipc: Disabling bearer <eth:syzkaller0>
[  122.354169][ T8719] netlink: 'syz.1.1166': attribute type 64 has an invalid length.
[  122.744743][ T8737] __nla_validate_parse: 8 callbacks suppressed
[  122.744757][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  122.750684][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1174'.
[  122.751075][ T8735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1172'.
[  122.760639][ T8738] netlink: 'syz.2.1175': attribute type 1 has an invalid length.
[  122.764009][ T8738] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1175'.
[  122.788694][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1172'.
[  122.816213][ T8741] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  123.438348][ T8780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.522790][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'.
[  123.526261][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1194'.
[  123.818727][ T8799] netlink: 'syz.2.1201': attribute type 1 has an invalid length.
[  123.831334][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1201'.
[  124.052954][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'.
[  124.077056][ T8818] veth3: entered promiscuous mode
[  124.088338][ T8818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.178917][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.185964][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.295054][ T8889] bridge1: left promiscuous mode
[  125.297189][ T8889] bridge1: left allmulticast mode
[  125.303817][ T8889] bond1: left promiscuous mode
[  125.305911][ T8889] bond1: left allmulticast mode
[  125.317008][ T8889] ipvlan2: left promiscuous mode
[  125.348529][ T8208] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.353328][ T8208] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.356924][ T8208] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.371393][ T8208] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.375357][ T8208] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.378849][ T8208] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.385870][ T8208] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.389373][ T8208] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.444725][ T8898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.516948][ T8901] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1249'.
[  126.160151][ T8946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.418132][ T8945] bridge_slave_1: left allmulticast mode
[  126.426894][ T8945] bridge_slave_1: left promiscuous mode
[  126.430959][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.503728][ T8945] bridge_slave_0: left allmulticast mode
[  126.506952][ T8945] bridge_slave_0: left promiscuous mode
[  126.510291][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.031789][ T8974] batadv0: entered promiscuous mode
[  127.037233][ T8974] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  127.063721][ T8974] batadv0: left promiscuous mode
[  127.476791][ T9007] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  127.479719][ T9007] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  127.755312][ T9025] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  127.757233][ T9026] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  127.781879][ T9028] __nla_validate_parse: 8 callbacks suppressed
[  127.781890][ T9028] netlink: 212936 bytes leftover after parsing attributes in process `syz.1.1289'.
[  127.891870][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'.
[  128.620026][ T9088] raw_sendmsg: syz.1.1310 forgot to set AF_INET. Fix it!
[  129.266439][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'.
[  129.269873][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'.
[  129.276852][ T9116] netlink: 'syz.2.1320': attribute type 15 has an invalid length.
[  129.543166][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1327'.
[  130.243942][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'.
[  130.247654][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'.
[  130.257803][ T9174] erspan0: entered promiscuous mode
[  130.261730][ T9174] gretap0: entered promiscuous mode
[  130.313697][ T9176] syzkaller1: entered promiscuous mode
[  130.316132][ T9176] syzkaller1: entered allmulticast mode
[  130.432936][ T9176] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1347'.
[  130.582524][ T9184] netlink: 'syz.0.1350': attribute type 1 has an invalid length.
[  130.585906][ T9184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.778993][ T9193] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  130.787261][ T9193] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  130.787514][ T9194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.956176][ T7562] hid-generic 0005:16C0:5502.0001: item fetching failed at offset 0/3
[  130.962441][ T7562] hid-generic 0005:16C0:5502.0001: probe with driver hid-generic failed with error -22
[  130.998704][ T9208] netlink: 'syz.0.1359': attribute type 10 has an invalid length.
[  131.008149][ T9208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1359'.
[  131.035579][ T9208] batman_adv: batadv0: Adding interface: virt_wifi0
[  131.059802][ T9208] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  131.071551][ T9208] batman_adv: batadv0: Interface activated: virt_wifi0
[  131.159899][ T9218] netlink: 'syz.2.1365': attribute type 11 has an invalid length.
[  131.167242][ T9218] netlink: 'syz.2.1365': attribute type 11 has an invalid length.
[  131.170082][ T9218] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1365'.
[  132.464659][ T9325] veth0_to_bond: entered allmulticast mode
[  132.959638][ T9360] __nla_validate_parse: 3 callbacks suppressed
[  132.959660][ T9360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1431'.
[  133.024564][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.027138][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.164654][ T9373] tipc: Started in network mode
[  133.166747][ T9373] tipc: Node identity c696a36ccf88, cluster identity 4711
[  133.169936][ T9373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.190994][ T9373] syzkaller0: entered promiscuous mode
[  133.197421][ T9373] syzkaller0: entered allmulticast mode
[  133.239726][ T9377] netlink: 'syz.0.1438': attribute type 1 has an invalid length.
[  133.243040][ T9377] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1438'.
[  133.252281][ T9373] tipc: Resetting bearer <eth:syzkaller0>
[  133.257921][ T9372] tipc: Resetting bearer <eth:syzkaller0>
[  133.275599][ T9372] tipc: Disabling bearer <eth:syzkaller0>
[  133.326519][ T9385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1443'.
[  133.437400][ T9397] syzkaller1: entered promiscuous mode
[  133.439803][ T9397] syzkaller1: entered allmulticast mode
[  133.451536][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'.
[  133.456846][ T9396] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1447'.
[  133.580141][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1455'.
[  133.583536][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1455'.
[  133.602042][ T9413] netlink: 'syz.2.1457': attribute type 1 has an invalid length.
[  133.605358][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'.
[  133.717797][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1461'.
[  133.730480][ T9422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1461'.
[  133.776742][ T9427] netlink: 'syz.2.1464': attribute type 21 has an invalid length.
[  133.782938][ T9427] netlink: 'syz.2.1464': attribute type 5 has an invalid length.
[  133.786069][ T9427] netlink: 'syz.2.1464': attribute type 6 has an invalid length.
[  134.428579][ T9486] netlink: 'syz.2.1491': attribute type 1 has an invalid length.
[  134.630221][ T9499] netlink: 'syz.2.1495': attribute type 16 has an invalid length.
[  134.633683][ T9499] netlink: 'syz.2.1495': attribute type 17 has an invalid length.
[  134.689085][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.696676][ T9499] 8021q: adding VLAN 0 to HW filter on device team0
[  134.708505][ T9499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.746473][ T5237] Bluetooth: hci2: link tx timeout
[  134.749189][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.624538][ T9540] team0: Mode changed to "activebackup"
[  135.817968][ T5864] udevd (5864) used greatest stack depth: 18344 bytes left
[  136.241070][ T9565] netlink: 'syz.0.1526': attribute type 7 has an invalid length.
[  136.782803][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  136.917780][ T9610] smc: net device bond0 applied user defined pnetid SYZ2
[  137.040317][ T9620] netlink: 'syz.1.1550': attribute type 3 has an invalid length.
[  137.548895][   T10] IPVS: starting estimator thread 0...
[  137.631683][ T9655] IPVS: using max 39 ests per chain, 93600 per kthread
[  138.139217][ T9688] __nla_validate_parse: 19 callbacks suppressed
[  138.139234][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'.
[  138.188787][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'.
[  138.535109][ T9714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.539362][ T9714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.780855][ T9734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.787031][ T9734] syzkaller0: entered promiscuous mode
[  138.789607][ T9734] syzkaller0: entered allmulticast mode
[  138.811307][ T9734] tipc: Resetting bearer <eth:syzkaller0>
[  138.816778][ T9733] tipc: Resetting bearer <eth:syzkaller0>
[  138.831666][ T9733] tipc: Disabling bearer <eth:syzkaller0>
[  138.898765][ T9744] netlink: zone id is out of range
[  138.901510][ T9744] netlink: zone id is out of range
[  138.911266][ T9744] netlink: zone id is out of range
[  138.913762][ T9744] netlink: zone id is out of range
[  138.916128][ T9744] netlink: zone id is out of range
[  138.918592][ T9744] netlink: zone id is out of range
[  138.920831][ T9744] netlink: zone id is out of range
[  138.923744][ T9744] netlink: zone id is out of range
[  138.925965][ T9744] netlink: zone id is out of range
[  139.604208][ T9779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.632085][ T9779] syzkaller0: entered promiscuous mode
[  139.634642][ T9779] syzkaller0: entered allmulticast mode
[  139.665986][ T9779] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1625'.
[  139.688665][ T9779] tipc: Resetting bearer <eth:syzkaller0>
[  139.703971][ T9778] tipc: Resetting bearer <eth:syzkaller0>
[  139.719580][ T9778] tipc: Disabling bearer <eth:syzkaller0>
[  139.736905][ T9788] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  139.750132][ T9788] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  140.386890][ T9832] tap0: tun_chr_ioctl cmd 1074025677
[  140.389458][ T9832] tap0: linktype set to 270
[  140.543393][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1647'.
[  140.904558][ T9862] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1650'.
[  140.990385][ T9862] veth5: entered promiscuous mode
[  141.598783][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'.
[  141.878782][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  141.891591][ T9900] netlink: 'syz.0.1673': attribute type 30 has an invalid length.
[  141.923654][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.923779][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  141.927641][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.937379][ T9900] netlink: 'syz.0.1673': attribute type 30 has an invalid length.
[  141.953230][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.968656][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.555470][ T9952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1697'.
[  142.594353][ T9955] netlink: 'syz.0.1698': attribute type 6 has an invalid length.
[  142.925855][ T9983] netlink: 'syz.0.1712': attribute type 26 has an invalid length.
[  143.343561][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'.
[  143.351694][ T9999] net_ratelimit: 3 callbacks suppressed
[  143.351716][ T9999] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  143.359060][ T9999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.704543][T10026] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1731'.
[  143.986652][T10045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1740'.
[  144.937705][T10057] syzkaller0: entered promiscuous mode
[  144.940222][T10057] syzkaller0: entered allmulticast mode
[  144.968016][ T7562] IPVS: starting estimator thread 0...
[  144.970755][T10042] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  145.051674][T10060] IPVS: using max 48 ests per chain, 115200 per kthread
[  147.246451][T10072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1752'.
[  147.537857][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1762'.
[  147.555852][T10096] delete_channel: no stack
[  147.898584][T10127] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1778'.
[  147.942475][T10129] bridge0: port 1(veth0_to_bridge) entered blocking state
[  147.945631][T10129] bridge0: port 1(veth0_to_bridge) entered disabled state
[  147.953971][T10129] veth0_to_bridge: entered allmulticast mode
[  147.958125][T10129] veth0_to_bridge: entered promiscuous mode
[  147.968532][T10133] netlink: 'syz.2.1780': attribute type 21 has an invalid length.
[  148.045915][T10139] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  148.119846][T10146] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1787'.
[  149.246194][T10187] netlink: 'syz.2.1800': attribute type 13 has an invalid length.
[  149.249266][T10187] netlink: 'syz.2.1800': attribute type 17 has an invalid length.
[  149.370126][T10187] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.402984][T10187] 8021q: adding VLAN 0 to HW filter on device team0
[  149.423452][T10187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  149.814259][T10197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1802'.
[  150.273870][T10213] netlink: 'syz.1.1810': attribute type 11 has an invalid length.
[  150.300135][T10215] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1811'.
[  150.316370][T10215] netlink: zone id is out of range
[  150.317979][T10215] netlink: zone id is out of range
[  150.319510][T10215] netlink: zone id is out of range
[  150.320995][T10215] netlink: get zone limit has 8 unknown bytes
[  150.478091][T10221] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  150.484474][T10221] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  150.809761][T10242] netlink: 'syz.2.1822': attribute type 58 has an invalid length.
[  150.824440][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1822'.
[  151.004079][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  151.007776][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  151.012764][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  151.016243][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  151.019876][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  151.024248][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  151.027697][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  151.340835][T10281] syzkaller1: entered promiscuous mode
[  151.343084][T10281] syzkaller1: entered allmulticast mode
[  151.747242][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  152.652796][T10339] veth3: entered promiscuous mode
[  152.855355][T10359] veth1_to_bond: entered allmulticast mode
[  152.858861][T10359] veth1_to_bond: entered promiscuous mode
[  152.868868][T10358] veth1_to_bond: left promiscuous mode
[  152.870803][T10358] veth1_to_bond: left allmulticast mode
[  153.387242][T10406] pim6reg99999999: entered allmulticast mode
[  153.445097][T10412] netlink: 'syz.0.1898': attribute type 15 has an invalid length.
[  153.459964][   T12] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0
[  153.464831][   T12] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0
[  153.468603][   T12] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0
[  153.473469][T10412] netlink: 'syz.0.1898': attribute type 15 has an invalid length.
[  153.476633][   T12] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0
[  154.289947][T10447] geneve3: entered promiscuous mode
[  154.292355][T10447] geneve3: entered allmulticast mode
[  154.316552][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  154.322526][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  154.329401][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  154.352800][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  154.638860][T10469] netlink: 'syz.0.1920': attribute type 10 has an invalid length.
[  154.663270][T10469] team0: Device dummy0 is up. Set it down before adding it as a team port
[  154.902094][T10492] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  155.161839][T10504] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  155.167378][T10506] __nla_validate_parse: 15 callbacks suppressed
[  155.167396][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1935'.
[  155.298684][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'.
[  155.418971][T10520] netlink: 'syz.1.1940': attribute type 6 has an invalid length.
[  155.483804][T10526] netlink: 'syz.2.1943': attribute type 1 has an invalid length.
[  155.548345][T10529] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1944'.
[  155.555976][T10529] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1944'.
[  155.575367][T10532] Bluetooth: MGMT ver 1.23
[  155.578708][T10532] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  155.847206][T10552] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1958'.
[  155.850639][T10552] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1958'.
[  156.036457][T10569] "syz.1.1964" (10569) uses obsolete ecb(arc4) skcipher
[  156.075266][T10576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  156.250760][T10591] netlink: 'syz.0.1973': attribute type 3 has an invalid length.
[  156.254647][T10591] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1973'.
[  156.280858][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1974'.
[  156.287414][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1974'.
[  156.292566][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1974'.
[  156.480410][T10606] bridge5: entered allmulticast mode
[  156.605092][T10615] lo speed is unknown, defaulting to 1000
[  156.607548][T10615] lo speed is unknown, defaulting to 1000
[  156.610550][T10615] lo speed is unknown, defaulting to 1000
[  156.627288][T10615] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  156.660289][T10615] lo speed is unknown, defaulting to 1000
[  156.665166][T10615] lo speed is unknown, defaulting to 1000
[  156.669358][T10615] lo speed is unknown, defaulting to 1000
[  157.285085][T10656] nbd0: detected capacity change from 0 to 127
[  157.291766][   T57] block nbd0: Receive control failed (result -32)
[  157.293229][T10190] block nbd0: Send control failed (result -32)
[  157.302737][T10190] block nbd0: Request send failed, requeueing
[  157.313616][   T98] block nbd0: Dead connection, failed to find a fallback
[  157.316673][   T98] block nbd0: shutting down sockets
[  157.318931][   T98] blk_print_req_error: 135 callbacks suppressed
[  157.318944][   T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.329016][   T98] buffer_io_error: 138 callbacks suppressed
[  157.329037][   T98] Buffer I/O error on dev nbd0, logical block 0, async page read
[  157.335443][T10190] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.338930][T10190] Buffer I/O error on dev nbd0, logical block 1, async page read
[  157.342636][T10190] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.346393][T10190] Buffer I/O error on dev nbd0, logical block 2, async page read
[  157.349733][T10190] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.354060][T10190] Buffer I/O error on dev nbd0, logical block 3, async page read
[  157.357554][T10190] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.361439][T10190] Buffer I/O error on dev nbd0, logical block 0, async page read
[  157.365267][T10190] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.368954][T10190] Buffer I/O error on dev nbd0, logical block 1, async page read
[  157.381805][T10190] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.385388][T10190] Buffer I/O error on dev nbd0, logical block 2, async page read
[  157.388571][T10190] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.401326][T10190] Buffer I/O error on dev nbd0, logical block 3, async page read
[  157.424184][T10190] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.427500][T10190] Buffer I/O error on dev nbd0, logical block 0, async page read
[  157.430715][T10190] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.446116][T10190] Buffer I/O error on dev nbd0, logical block 1, async page read
[  157.463985][T10190] ldm_validate_partition_table(): Disk read failed.
[  157.468050][T10190] Dev nbd0: unable to read RDB block 0
[  157.484194][T10190]  nbd0: unable to read partition table
[  157.505864][T10190] ldm_validate_partition_table(): Disk read failed.
[  157.512569][T10190] Dev nbd0: unable to read RDB block 0
[  157.519643][T10190]  nbd0: unable to read partition table
[  159.204133][T10793] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  159.462432][T10818] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (13)
[  159.525730][T10822] netlink: 'syz.1.2079': attribute type 5 has an invalid length.
[  159.560054][T10825] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  159.669661][T10832] macvtap1: entered promiscuous mode
[  159.673066][T10832] batadv0: entered promiscuous mode
[  159.675640][T10832] macvtap1: entered allmulticast mode
[  159.677921][T10832] batadv0: entered allmulticast mode
[  159.683017][T10832] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  159.853693][T10843] syzkaller1: entered promiscuous mode
[  159.855981][T10843] syzkaller1: entered allmulticast mode
[  160.150714][T10862] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  160.537275][T10885] lo speed is unknown, defaulting to 1000
[  160.648609][T10891] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  160.796745][T10901] __nla_validate_parse: 13 callbacks suppressed
[  160.796760][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'.
[  160.806635][T10899] lo speed is unknown, defaulting to 1000
[  160.892122][T10910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2110'.
[  161.036040][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2116'.
[  161.112332][T10922] netlink: 'syz.2.2118': attribute type 1 has an invalid length.
[  161.115525][T10922] netlink: 'syz.2.2118': attribute type 3 has an invalid length.
[  161.121683][T10922] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2118'.
[  161.125736][T10922] NCSI netlink: No device for ifindex 246
[  161.266489][T10933] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  161.288504][T10933] pim6reg: left allmulticast mode
[  161.437007][T10947] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2130'.
[  161.451438][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2130'.
[  161.597850][T10955] batadv0: left allmulticast mode
[  161.600284][T10955] batadv0: left promiscuous mode
[  161.648795][T10964] netlink: 'syz.2.2139': attribute type 1 has an invalid length.
[  161.685148][T10964] 8021q: adding VLAN 0 to HW filter on device bond3
[  161.690456][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'.
[  161.697516][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2139'.
[  162.091321][T10995] netlink: 'syz.2.2153': attribute type 2 has an invalid length.
[  162.956819][T11041] netlink: 'syz.2.2174': attribute type 11 has an invalid length.
[  162.959643][T11041] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2174'.
[  163.729110][T11083] IPVS: Error connecting to the multicast addr
[  163.865584][T11085] lo speed is unknown, defaulting to 1000
[  164.156514][T11093] netlink: 'syz.1.2196': attribute type 12 has an invalid length.
[  164.159679][T11093] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2196'.
[  164.234531][T11095] lo speed is unknown, defaulting to 1000
[  164.923923][T11137] netlink: 'syz.2.2216': attribute type 1 has an invalid length.
[  165.266545][T11164] netlink: 'syz.2.2227': attribute type 9 has an invalid length.
[  165.514872][T11181] netlink: 'syz.1.2235': attribute type 10 has an invalid length.
[  165.802797][T11198] __nla_validate_parse: 6 callbacks suppressed
[  165.802821][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2241'.
[  166.396382][T11241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.833949][T11283] syz_tun: entered allmulticast mode
[  166.845390][T11283] pimreg: entered allmulticast mode
[  166.853838][T11282] syz_tun: left allmulticast mode
[  166.903900][T11289] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2285'.
[  166.920521][T11289] netlink: 'syz.0.2285': attribute type 1 has an invalid length.
[  166.947012][T11289] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.972807][T11289] bond1: (slave gretap1): making interface the new active one
[  166.977996][T11289] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  167.512341][T11321] netlink: 'syz.1.2299': attribute type 12 has an invalid length.
[  167.548089][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2300'.
[  167.676900][T11332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2302'.
[  167.680405][T11332] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2302'.
[  167.748958][T11338] netlink: 'syz.0.2305': attribute type 1 has an invalid length.
[  167.753434][T11338] netlink: 'syz.0.2305': attribute type 6 has an invalid length.
[  168.078890][T11365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'.
[  168.170283][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'.
[  168.218696][T11376] ==================================================================
[  168.221979][T11376] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  168.225132][T11376] Read of size 1 at addr ffff88802a6d3030 by task syz.2.2325/11376
[  168.229275][T11376] 
[  168.230778][T11376] CPU: 1 UID: 0 PID: 11376 Comm: syz.2.2325 Not tainted syzkaller #0 PREEMPT(full) 
[  168.230803][T11376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.230815][T11376] Call Trace:
[  168.230822][T11376]  <TASK>
[  168.230831][T11376]  dump_stack_lvl+0x189/0x250
[  168.230866][T11376]  ? __kasan_check_byte+0x12/0x40
[  168.230892][T11376]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.230936][T11376]  ? lock_release+0x4b/0x3e0
[  168.230963][T11376]  ? __virt_addr_valid+0x4a5/0x5c0
[  168.230986][T11376]  print_report+0xca/0x240
[  168.231002][T11376]  ? xfrm_state_find+0x2cf2/0x5400
[  168.231023][T11376]  kasan_report+0x118/0x150
[  168.231047][T11376]  ? xfrm_state_find+0x2cf2/0x5400
[  168.231074][T11376]  xfrm_state_find+0x2cf2/0x5400
[  168.231103][T11376]  ? xfrm_state_find+0x1da/0x5400
[  168.231127][T11376]  ? __pfx_xfrm_state_find+0x10/0x10
[  168.231148][T11376]  ? xfrm4_get_saddr+0xd5/0x140
[  168.231162][T11376]  ? __pfx_xfrm4_get_saddr+0x10/0x10
[  168.231182][T11376]  ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80
[  168.231197][T11376]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  168.231217][T11376]  ? stack_depot_save_flags+0x40/0x860
[  168.231240][T11376]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  168.231252][T11376]  ? __lock_acquire+0xab9/0xd20
[  168.231272][T11376]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  168.231284][T11376]  ? rt_set_nexthop+0x693/0xa80
[  168.231300][T11376]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  168.231315][T11376]  ? xfrm_expand_policies+0x41f/0x6a0
[  168.231331][T11376]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  168.231344][T11376]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  168.231359][T11376]  xfrm_lookup_route+0x3c/0x1c0
[  168.231371][T11376]  udp_sendmsg+0x142e/0x2170
[  168.231387][T11376]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  168.231400][T11376]  ? __pfx_udp_sendmsg+0x10/0x10
[  168.231418][T11376]  ? count_memcg_event_mm+0x21/0x260
[  168.231438][T11376]  ? count_memcg_event_mm+0x21/0x260
[  168.231457][T11376]  ? __pfx_aa_sk_perm+0x10/0x10
[  168.231473][T11376]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  168.231487][T11376]  ? sock_rps_record_flow+0x19/0x410
[  168.231501][T11376]  ? inet_sendmsg+0x29c/0x370
[  168.231512][T11376]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.231525][T11376]  __sock_sendmsg+0x19c/0x270
[  168.231540][T11376]  ____sys_sendmsg+0x52d/0x830
[  168.231558][T11376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.231577][T11376]  ? import_iovec+0x74/0xa0
[  168.231593][T11376]  ___sys_sendmsg+0x21f/0x2a0
[  168.231666][T11376]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.231696][T11376]  ? __fget_files+0x2a/0x420
[  168.231709][T11376]  ? __fget_files+0x3a0/0x420
[  168.231721][T11376]  __sys_sendmmsg+0x227/0x430
[  168.231740][T11376]  ? __pfx___sys_sendmmsg+0x10/0x10
[  168.231754][T11376]  ? do_futex+0x333/0x420
[  168.231779][T11376]  ? rcu_is_watching+0x15/0xb0
[  168.231790][T11376]  __x64_sys_sendmmsg+0xa0/0xc0
[  168.231805][T11376]  do_syscall_64+0xfa/0x3b0
[  168.231841][T11376]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.231854][T11376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.231867][T11376]  ? exc_page_fault+0x9f/0xf0
[  168.231881][T11376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.231894][T11376] RIP: 0033:0x7f96b6f8ec29
[  168.231909][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.231921][T11376] RSP: 002b:00007f96b7e01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  168.231939][T11376] RAX: ffffffffffffffda RBX: 00007f96b71d5fa0 RCX: 00007f96b6f8ec29
[  168.231949][T11376] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  168.231959][T11376] RBP: 00007f96b7011e41 R08: 0000000000000000 R09: 0000000000000000
[  168.231968][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.231977][T11376] R13: 00007f96b71d6038 R14: 00007f96b71d5fa0 R15: 00007ffc5201f758
[  168.231994][T11376]  </TASK>
[  168.231999][T11376] 
[  168.373869][T11376] Allocated by task 9280:
[  168.375442][T11376]  kasan_save_track+0x3e/0x80
[  168.377162][T11376]  __kasan_slab_alloc+0x6c/0x80
[  168.378978][T11376]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  168.380960][T11376]  xfrm_state_alloc+0x24/0x2f0
[  168.383133][T11376]  __find_acq_core+0x8a7/0x1c00
[  168.385049][T11376]  xfrm_find_acq+0x78/0xa0
[  168.386655][T11376]  xfrm_alloc_userspi+0x6b3/0xc90
[  168.388467][T11376]  xfrm_user_rcv_msg+0x7a3/0xab0
[  168.390558][T11376]  netlink_rcv_skb+0x208/0x470
[  168.392396][T11376]  xfrm_netlink_rcv+0x79/0x90
[  168.394227][T11376]  netlink_unicast+0x82f/0x9e0
[  168.395969][T11376]  netlink_sendmsg+0x805/0xb30
[  168.397855][T11376]  __sock_sendmsg+0x21c/0x270
[  168.399750][T11376]  ____sys_sendmsg+0x505/0x830
[  168.401707][T11376]  ___sys_sendmsg+0x21f/0x2a0
[  168.403799][T11376]  __x64_sys_sendmsg+0x19b/0x260
[  168.406114][T11376]  do_syscall_64+0xfa/0x3b0
[  168.408052][T11376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.410342][T11376] 
[  168.411258][T11376] Freed by task 10:
[  168.412671][T11376]  kasan_save_track+0x3e/0x80
[  168.414247][T11376]  kasan_save_free_info+0x46/0x50
[  168.415974][T11376]  __kasan_slab_free+0x5b/0x80
[  168.417922][T11376]  kmem_cache_free+0x18f/0x400
[  168.419764][T11376]  xfrm_state_gc_task+0x52d/0x6b0
[  168.422170][T11376]  process_scheduled_works+0xae1/0x17b0
[  168.424736][T11376]  worker_thread+0x8a0/0xda0
[  168.426564][T11376]  kthread+0x711/0x8a0
[  168.428150][T11376]  ret_from_fork+0x439/0x7d0
[  168.429891][T11376]  ret_from_fork_asm+0x1a/0x30
[  168.431795][T11376] 
[  168.432669][T11376] The buggy address belongs to the object at ffff88802a6d2d00
[  168.432669][T11376]  which belongs to the cache xfrm_state of size 928
[  168.437843][T11376] The buggy address is located 816 bytes inside of
[  168.437843][T11376]  freed 928-byte region [ffff88802a6d2d00, ffff88802a6d30a0)
[  168.443028][T11376] 
[  168.444436][T11376] The buggy address belongs to the physical page:
[  168.447087][T11376] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a6d2d00 pfn:0x2a6d0
[  168.450649][T11376] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  168.453876][T11376] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  168.456721][T11376] page_type: f5(slab)
[  168.458567][T11376] raw: 00fff00000000040 ffff888104b1f640 dead000000000122 0000000000000000
[  168.462012][T11376] raw: ffff88802a6d2d00 00000000800e0006 00000000f5000000 0000000000000000
[  168.465848][T11376] head: 00fff00000000040 ffff888104b1f640 dead000000000122 0000000000000000
[  168.469204][T11376] head: ffff88802a6d2d00 00000000800e0006 00000000f5000000 0000000000000000
[  168.472551][T11376] head: 00fff00000000002 ffffea0000a9b401 00000000ffffffff 00000000ffffffff
[  168.475777][T11376] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  168.479445][T11376] page dumped because: kasan: bad access detected
[  168.482104][T11376] page_owner tracks the page as allocated
[  168.484189][T11376] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6027, tgid 6024 (syz.2.46), ts 70394844586, free_ts 70134640489
[  168.491293][T11376]  post_alloc_hook+0x240/0x2a0
[  168.493055][T11376]  get_page_from_freelist+0x21e4/0x22c0
[  168.495015][T11376]  __alloc_frozen_pages_noprof+0x181/0x370
[  168.497091][T11376]  alloc_pages_mpol+0x232/0x4a0
[  168.499119][T11376]  allocate_slab+0x8a/0x370
[  168.501297][T11376]  ___slab_alloc+0xbeb/0x1420
[  168.503485][T11376]  kmem_cache_alloc_noprof+0x283/0x3c0
[  168.505723][T11376]  xfrm_state_alloc+0x24/0x2f0
[  168.507663][T11376]  pfkey_add+0x6e4/0x2e00
[  168.509247][T11376]  pfkey_sendmsg+0xbfe/0x1090
[  168.511046][T11376]  __sock_sendmsg+0x21c/0x270
[  168.512774][T11376]  ____sys_sendmsg+0x505/0x830
[  168.514479][T11376]  ___sys_sendmsg+0x21f/0x2a0
[  168.516223][T11376]  __x64_sys_sendmsg+0x19b/0x260
[  168.518032][T11376]  do_syscall_64+0xfa/0x3b0
[  168.519879][T11376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.522086][T11376] page last free pid 5920 tgid 5920 stack trace:
[  168.524871][T11376]  __free_frozen_pages+0xbc4/0xd30
[  168.527060][T11376]  __slab_free+0x303/0x3c0
[  168.528900][T11376]  qlist_free_all+0x97/0x140
[  168.530802][T11376]  kasan_quarantine_reduce+0x148/0x160
[  168.533019][T11376]  __kasan_slab_alloc+0x22/0x80
[  168.534940][T11376]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  168.537311][T11376]  __alloc_skb+0x112/0x2d0
[  168.539178][T11376]  mld_newpack+0x13c/0xc40
[  168.541031][T11376]  add_grhead+0x5a/0x2a0
[  168.543063][T11376]  add_grec+0x1452/0x1740
[  168.544897][T11376]  mld_send_initial_cr+0x288/0x550
[  168.546816][T11376]  mld_dad_work+0x46/0x490
[  168.548511][T11376]  process_scheduled_works+0xae1/0x17b0
[  168.550652][T11376]  worker_thread+0x8a0/0xda0
[  168.552430][T11376]  kthread+0x711/0x8a0
[  168.553987][T11376]  ret_from_fork+0x439/0x7d0
[  168.555937][T11376] 
[  168.556872][T11376] Memory state around the buggy address:
[  168.558936][T11376]  ffff88802a6d2f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.561880][T11376]  ffff88802a6d2f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.564826][T11376] >ffff88802a6d3000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.567759][T11376]                                      ^
[  168.569811][T11376]  ffff88802a6d3080: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  168.572853][T11376]  ffff88802a6d3100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  168.575736][T11376] ==================================================================
[  168.619237][T11376] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  168.622945][T11376] CPU: 0 UID: 0 PID: 11376 Comm: syz.2.2325 Not tainted syzkaller #0 PREEMPT(full) 
[  168.626544][T11376] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  168.630312][T11376] Call Trace:
[  168.631682][T11376]  <TASK>
[  168.632833][T11376]  dump_stack_lvl+0x99/0x250
[  168.634565][T11376]  ? __asan_memcpy+0x40/0x70
[  168.636359][T11376]  ? __pfx_dump_stack_lvl+0x10/0x10
[  168.638261][T11376]  ? __pfx__printk+0x10/0x10
[  168.639954][T11376]  vpanic+0x281/0x750
[  168.641417][T11376]  ? preempt_schedule+0xae/0xc0
[  168.643362][T11376]  ? __pfx_vpanic+0x10/0x10
[  168.644966][T11376]  ? preempt_schedule_common+0x83/0xd0
[  168.646909][T11376]  ? preempt_schedule+0xae/0xc0
[  168.648719][T11376]  ? __pfx_preempt_schedule+0x10/0x10
[  168.650999][T11376]  panic+0xb9/0xc0
[  168.652426][T11376]  ? __pfx_panic+0x10/0x10
[  168.654045][T11376]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  168.656248][T11376]  ? xfrm_state_find+0x2cf2/0x5400
[  168.658209][T11376]  check_panic_on_warn+0x89/0xb0
[  168.660427][T11376]  ? xfrm_state_find+0x2cf2/0x5400
[  168.662550][T11376]  end_report+0x78/0x160
[  168.664509][T11376]  kasan_report+0x129/0x150
[  168.666256][T11376]  ? xfrm_state_find+0x2cf2/0x5400
[  168.668038][T11376]  xfrm_state_find+0x2cf2/0x5400
[  168.669863][T11376]  ? xfrm_state_find+0x1da/0x5400
[  168.671884][T11376]  ? __pfx_xfrm_state_find+0x10/0x10
[  168.674077][T11376]  ? xfrm4_get_saddr+0xd5/0x140
[  168.675856][T11376]  ? __pfx_xfrm4_get_saddr+0x10/0x10
[  168.678294][T11376]  ? xfrm_resolve_and_create_bundle+0x6e6/0x2f80
[  168.680591][T11376]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  168.682806][T11376]  ? stack_depot_save_flags+0x40/0x860
[  168.684814][T11376]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  168.687312][T11376]  ? __lock_acquire+0xab9/0xd20
[  168.689176][T11376]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  168.691248][T11376]  ? rt_set_nexthop+0x693/0xa80
[  168.693078][T11376]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  168.694933][T11376]  ? xfrm_expand_policies+0x41f/0x6a0
[  168.697131][T11376]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  168.699185][T11376]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  168.701646][T11376]  xfrm_lookup_route+0x3c/0x1c0
[  168.703726][T11376]  udp_sendmsg+0x142e/0x2170
[  168.705604][T11376]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  168.707988][T11376]  ? __pfx_udp_sendmsg+0x10/0x10
[  168.710089][T11376]  ? count_memcg_event_mm+0x21/0x260
[  168.712324][T11376]  ? count_memcg_event_mm+0x21/0x260
[  168.714483][T11376]  ? __pfx_aa_sk_perm+0x10/0x10
[  168.716460][T11376]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  168.719061][T11376]  ? sock_rps_record_flow+0x19/0x410
[  168.721324][T11376]  ? inet_sendmsg+0x29c/0x370
[  168.723263][T11376]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.725498][T11376]  __sock_sendmsg+0x19c/0x270
[  168.727416][T11376]  ____sys_sendmsg+0x52d/0x830
[  168.729374][T11376]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.731649][T11376]  ? import_iovec+0x74/0xa0
[  168.733512][T11376]  ___sys_sendmsg+0x21f/0x2a0
[  168.735443][T11376]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.737550][T11376]  ? __fget_files+0x2a/0x420
[  168.739709][T11376]  ? __fget_files+0x3a0/0x420
[  168.741551][T11376]  __sys_sendmmsg+0x227/0x430
[  168.743316][T11376]  ? __pfx___sys_sendmmsg+0x10/0x10
[  168.745122][T11376]  ? do_futex+0x333/0x420
[  168.747114][T11376]  ? rcu_is_watching+0x15/0xb0
[  168.748958][T11376]  __x64_sys_sendmmsg+0xa0/0xc0
[  168.750664][T11376]  do_syscall_64+0xfa/0x3b0
[  168.752345][T11376]  ? lockdep_hardirqs_on+0x9c/0x150
[  168.754121][T11376]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.756631][T11376]  ? exc_page_fault+0x9f/0xf0
[  168.758257][T11376]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.760277][T11376] RIP: 0033:0x7f96b6f8ec29
[  168.761871][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.769377][T11376] RSP: 002b:00007f96b7e01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  168.772705][T11376] RAX: ffffffffffffffda RBX: 00007f96b71d5fa0 RCX: 00007f96b6f8ec29
[  168.775453][T11376] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  168.778370][T11376] RBP: 00007f96b7011e41 R08: 0000000000000000 R09: 0000000000000000
[  168.781625][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.784651][T11376] R13: 00007f96b71d6038 R14: 00007f96b71d5fa0 R15: 00007ffc5201f758
[  168.787648][T11376]  </TASK>
[  168.789411][T11376] Kernel Offset: disabled
[  168.791254][T11376] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:39:15  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e78e5 RBX=0000000000029014 RCX=ffff888107f2d640 RDX=0000000000000000
RSI=0000000000029014 RDI=0000000400000000 RBP=ffffc90003aef630 RSP=ffffc90003aef308
R8 =ffffea0000a40507 R9 =1ffffd40001480a0 R10=dffffc0000000000 R11=fffff940001480a1
R12=dffffc0000000000 R13=ffff888034d98490 R14=0000000000029014 R15=0000000000000001
RIP=ffffffff81bfb278 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557f763500 ffffffff 00c00000
GS =0000 ffff8880b8611000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5b36b056c0 CR3=000000010e0f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f5b35e12e7b
XMM06=0000000000000000 00007f5b35e12e75 XMM07=0000000000000000 00007f5b35e12e89
XMM08=0000000000000000 00007f5b35e12f0f XMM09=0000000000000000 00007f5b35e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001663 RDI=0000000000001664 RBP=00000000000003f8 RSP=ffffc900090b67b0
R8 =ffff8880202a8237 R9 =1ffff11004055046 R10=dffffc0000000000 R11=ffffffff854fb640
R12=dffffc0000000000 R13=ffffffff99b048c9 R14=ffffffff99df9480 R15=0000000000000000
RIP=ffffffff854fb6bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f96b7e016c0 ffffffff 00c00000
GS =0000 ffff8881a3c11000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000007fc0 CR3=000000010f2d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f96b71a7498 00007f96b71a7470 XMM03=00007f96b71a74a8 00007f96b71a74a0
XMM04=00007f96b7d0d100 00007f96b71a7460 XMM05=00007f96b71a7478 00007f96b71a74c0
XMM06=00007f96b71a74b8 00007f96b71a74b0 XMM07=00007f96b71a74a8 00007f96b71a74a0
XMM08=0000000000000000 00007f96b7012f0f XMM09=0000000000000000 00007f96b7012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
