last executing test programs:

789.612419ms ago: executing program 0 (id=3433):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200))

789.538464ms ago: executing program 0 (id=3434):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0)

739.902161ms ago: executing program 0 (id=3435):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x300, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50)

739.782251ms ago: executing program 0 (id=3436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x7ffffffe}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

689.318089ms ago: executing program 0 (id=3437):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r3, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004)

689.083293ms ago: executing program 0 (id=3438):
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket(0x23, 0x803, 0xfffffffd)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000300)=0x80, 0x800)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

409.882545ms ago: executing program 2 (id=3448):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)

330.549015ms ago: executing program 2 (id=3450):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0xff, 0x4}, 0xff}, 0x18)

276.287834ms ago: executing program 2 (id=3453):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2e4060003006970"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000010)

275.402022ms ago: executing program 2 (id=3455):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010020bd70100600010007000000080009000200000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

231.853557ms ago: executing program 2 (id=3457):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
unshare(0x28040680)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)

177.110396ms ago: executing program 2 (id=3459):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
recvfrom$inet6(r0, &(0x7f0000000100)=""/215, 0xd7, 0x23, 0x0, 0x0)

100.143093ms ago: executing program 1 (id=3462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x70, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0x10, 0x0, 0x1, [@nested={0x43, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

99.986294ms ago: executing program 1 (id=3463):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7}, {0xb, 0xa}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x0)

49.891103ms ago: executing program 1 (id=3464):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010f000000000000000003000000080004"], 0x1c}}, 0x0)

49.47307ms ago: executing program 1 (id=3465):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)

232.315µs ago: executing program 1 (id=3466):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x28, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d153ce4a"]}]}, 0x1c}}, 0x0)

0s ago: executing program 1 (id=3467):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000380)='syzkaller\x00'}, 0x94)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, 0x0, &(0x7f00000002c0))
tee(r5, r8, 0x100000af5, 0x0)
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000040)=0x1)
close(r7)
close(r6)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x1a, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x40)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x0, 0xfc73, 0xffffffffffffffff, 0x1, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x81}, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x3, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8)
close(r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4999' (ED25519) to the list of known hosts.
syzkaller login: [   48.983913][ T5834] cgroup: Unknown subsys name 'net'
[   49.112552][ T5834] cgroup: Unknown subsys name 'cpuset'
[   49.116716][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.841589][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.697390][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.701121][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.703797][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.706844][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.711440][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.741614][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.745162][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.749020][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.754178][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.757404][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.786861][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.789977][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.792499][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.795390][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.797840][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.026882][ T5878] chnl_net:caif_netlink_parms(): no params data found
[   62.099152][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   62.130515][ T5882] chnl_net:caif_netlink_parms(): no params data found
[   62.157989][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.160870][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.163030][ T5878] bridge_slave_0: entered allmulticast mode
[   62.165795][ T5878] bridge_slave_0: entered promiscuous mode
[   62.186017][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.188193][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.190796][ T5878] bridge_slave_1: entered allmulticast mode
[   62.193445][ T5878] bridge_slave_1: entered promiscuous mode
[   62.248763][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.253703][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.304767][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.306924][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.309147][ T5882] bridge_slave_0: entered allmulticast mode
[   62.312307][ T5882] bridge_slave_0: entered promiscuous mode
[   62.315020][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.317512][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.320233][ T5875] bridge_slave_0: entered allmulticast mode
[   62.322988][ T5875] bridge_slave_0: entered promiscuous mode
[   62.326147][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.328277][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.331929][ T5875] bridge_slave_1: entered allmulticast mode
[   62.334561][ T5875] bridge_slave_1: entered promiscuous mode
[   62.338395][ T5878] team0: Port device team_slave_0 added
[   62.342962][ T5878] team0: Port device team_slave_1 added
[   62.353298][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.355906][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.358637][ T5882] bridge_slave_1: entered allmulticast mode
[   62.361739][ T5882] bridge_slave_1: entered promiscuous mode
[   62.391305][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.393409][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.401614][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.424014][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.427038][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.429074][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.437509][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.443318][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.451903][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.457044][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.502467][ T5875] team0: Port device team_slave_0 added
[   62.515687][ T5878] hsr_slave_0: entered promiscuous mode
[   62.518067][ T5878] hsr_slave_1: entered promiscuous mode
[   62.532406][ T5875] team0: Port device team_slave_1 added
[   62.535688][ T5882] team0: Port device team_slave_0 added
[   62.548102][ T5882] team0: Port device team_slave_1 added
[   62.582357][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.584387][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.592467][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.607461][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.609615][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.617035][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.625710][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.627739][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.635476][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.648301][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.651298][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.658724][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.721952][ T5882] hsr_slave_0: entered promiscuous mode
[   62.724110][ T5882] hsr_slave_1: entered promiscuous mode
[   62.726142][ T5882] debugfs: 'hsr0' already exists in 'hsr'
[   62.727908][ T5882] Cannot create hsr debugfs directory
[   62.738091][ T5875] hsr_slave_0: entered promiscuous mode
[   62.741951][ T5875] hsr_slave_1: entered promiscuous mode
[   62.744176][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   62.745882][ T5875] Cannot create hsr debugfs directory
[   62.904192][ T5878] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.927642][ T5878] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.936253][ T5878] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.954743][ T5878] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.989216][ T5882] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.996683][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.998907][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.001661][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.003825][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.009066][ T5882] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.014980][ T5882] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.027759][ T5882] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.064160][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.067378][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.087349][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.102700][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.109198][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.115050][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.164971][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.185248][ T5878] 8021q: adding VLAN 0 to HW filter on device team0
[   63.197052][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.199266][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.213949][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.222331][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.224532][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.235809][ T5882] 8021q: adding VLAN 0 to HW filter on device team0
[   63.245163][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.247336][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.265952][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.268132][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.282260][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.310723][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   63.322217][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.324396][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.362592][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.364998][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.466758][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.483775][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.515582][ T5882] veth0_vlan: entered promiscuous mode
[   63.537346][ T5882] veth1_vlan: entered promiscuous mode
[   63.542519][ T5878] veth0_vlan: entered promiscuous mode
[   63.553319][ T5878] veth1_vlan: entered promiscuous mode
[   63.583479][ T5878] veth0_macvtap: entered promiscuous mode
[   63.593077][ T5878] veth1_macvtap: entered promiscuous mode
[   63.596708][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.606117][ T5882] veth0_macvtap: entered promiscuous mode
[   63.613204][ T5882] veth1_macvtap: entered promiscuous mode
[   63.623005][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.633152][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.643952][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.656167][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.662652][ T5717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.665492][ T5717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.668469][ T5717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.685396][ T5717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.694731][ T5717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.723305][ T5717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.747336][ T5717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.753077][ T5717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.763679][ T5875] veth0_vlan: entered promiscuous mode
[   63.781077][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.781542][ T5876] Bluetooth: hci1: command tx timeout
[   63.783525][ T5880] Bluetooth: hci0: command tx timeout
[   63.788563][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.794662][ T5875] veth1_vlan: entered promiscuous mode
[   63.817838][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.822847][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.847733][ T5875] veth0_macvtap: entered promiscuous mode
[   63.852084][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.859728][ T5880] Bluetooth: hci2: command tx timeout
[   63.861853][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.867718][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.868152][ T5875] veth1_macvtap: entered promiscuous mode
[   63.874284][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.881449][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.888168][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.895170][ T5887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.907444][ T5887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.918908][ T5878] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.929059][ T5887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.934363][ T5887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.983243][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.996698][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.024935][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.033446][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.188081][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.26'.
[   64.194433][ T5955] Bluetooth: MGMT ver 1.23
[   64.592661][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.45'.
[   64.633443][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'.
[   65.309788][ T6051] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[   65.404987][ T6060] netlink: 'syz.2.65': attribute type 21 has an invalid length.
[   65.414072][ T6060] netlink: 156 bytes leftover after parsing attributes in process `syz.2.65'.
[   65.603622][ T6081] netlink: 92 bytes leftover after parsing attributes in process `syz.0.72'.
[   65.861013][ T5880] Bluetooth: hci1: command tx timeout
[   65.861347][ T5876] Bluetooth: hci0: command tx timeout
[   65.864313][ T6102] tipc: Started in network mode
[   65.865954][ T6102] tipc: Node identity 8edbcfe76f92, cluster identity 4711
[   65.869144][ T6102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.879464][ T6102] syzkaller0: entered promiscuous mode
[   65.881134][ T6102] syzkaller0: entered allmulticast mode
[   65.903594][ T6102] tipc: Resetting bearer <eth:syzkaller0>
[   65.907908][ T6100] tipc: Resetting bearer <eth:syzkaller0>
[   65.917264][ T6100] tipc: Disabling bearer <eth:syzkaller0>
[   65.950977][ T5876] Bluetooth: hci2: command tx timeout
[   66.324008][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'.
[   66.374789][ T6144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'.
[   66.381118][ T6142] Zero length message leads to an empty skb
[   66.391668][ T6142] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.487630][ T6154] netlink: 104 bytes leftover after parsing attributes in process `syz.0.99'.
[   66.784638][ T6180] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   66.916223][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'.
[   67.059068][ T6195] syzkaller1: entered promiscuous mode
[   67.063478][ T6195] syzkaller1: entered allmulticast mode
[   67.182348][ T6209] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.122'.
[   67.346665][ T6223] syz.2.129 uses obsolete (PF_INET,SOCK_PACKET)
[   67.438855][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.625911][ T6245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.656438][ T6248] warning: `syz.1.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.939984][ T5876] Bluetooth: hci0: command tx timeout
[   67.940005][ T5880] Bluetooth: hci1: command tx timeout
[   68.019493][ T5880] Bluetooth: hci2: command tx timeout
[   68.625832][ T6304] tipc: Enabled bearer <udp:syz2>, priority 10
[   68.655517][ T6310] netlink: 'syz.0.171': attribute type 10 has an invalid length.
[   68.668297][ T6310] team0: Port device geneve0 added
[   69.138221][ T6357] sctp: [Deprecated]: syz.1.194 (pid 6357) Use of int in maxseg socket option.
[   69.138221][ T6357] Use struct sctp_assoc_value instead
[   69.620867][ T5879] tipc: Node number set to 3779710951
[   70.019997][ T5880] Bluetooth: hci1: command tx timeout
[   70.021687][ T5880] Bluetooth: hci0: command tx timeout
[   70.059820][ T6367] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   70.060725][ T6366] IPVS: stopping backup sync thread 6367 ...
[   70.100857][ T5880] Bluetooth: hci2: command tx timeout
[   70.168161][ T6375] gtp0: entered promiscuous mode
[   70.180158][ T6375] __nla_validate_parse: 4 callbacks suppressed
[   70.180169][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'.
[   70.488578][ T6405] vxlan0: entered promiscuous mode
[   70.495849][ T6405] vxlan0: entered allmulticast mode
[   70.508843][ T5887] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.521658][ T5887] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.524266][ T5887] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.527230][ T5887] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.645365][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'.
[   70.675886][ T6420] netlink: 'syz.1.224': attribute type 9 has an invalid length.
[   70.678377][ T6420] netlink: 'syz.1.224': attribute type 7 has an invalid length.
[   70.683497][ T6420] netlink: 'syz.1.224': attribute type 8 has an invalid length.
[   70.877990][ T6440] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.980411][ T6448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.237'.
[   71.143593][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.145583][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.453671][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'.
[   71.457453][ T6474] IPVS: Error joining to the multicast group
[   72.322354][ T6494] netlink: 'syz.2.256': attribute type 10 has an invalid length.
[   72.337631][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.346229][ T6494] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   72.362709][ T6494] syz.2.256 (6494) used greatest stack depth: 18248 bytes left
[   72.632408][ T6518] netlink: 96 bytes leftover after parsing attributes in process `syz.2.269'.
[   72.685126][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'.
[   72.687841][ T6523] netlink: 'syz.0.271': attribute type 30 has an invalid length.
[   72.693099][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'.
[   72.891244][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'.
[   72.907501][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'.
[   73.285657][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'.
[   73.372605][ T6591] Bluetooth: MGMT ver 1.23
[   73.704196][ T6628] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   73.738991][ T6628] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   73.968275][  T790] IPVS: starting estimator thread 0...
[   74.069781][ T6659] IPVS: using max 61 ests per chain, 146400 per kthread
[   75.060183][ T6719] veth1_macvtap: left promiscuous mode
[   75.062275][ T6719] macsec0: entered promiscuous mode
[   75.070128][ T6719] veth1_macvtap: entered promiscuous mode
[   75.073527][ T6719] macsec0: left promiscuous mode
[   75.222516][ T6730] __nla_validate_parse: 3 callbacks suppressed
[   75.222529][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'.
[   75.227250][ T6730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.368'.
[   75.658779][ T5937] IPVS: starting estimator thread 0...
[   75.750655][ T6767] IPVS: using max 61 ests per chain, 146400 per kthread
[   75.779536][ T5876] Bluetooth: hci2: command 0x0405 tx timeout
[   75.932375][ T6801] netlink: 'syz.0.403': attribute type 15 has an invalid length.
[   76.008851][ T6813] sctp: [Deprecated]: syz.0.408 (pid 6813) Use of int in max_burst socket option.
[   76.008851][ T6813] Use struct sctp_assoc_value instead
[   76.109603][ T6826] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   76.259076][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'.
[   76.354596][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[   76.374019][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[   76.436768][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.424'.
[   76.695780][ T6868] sctp: [Deprecated]: syz.1.432 (pid 6868) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.695780][ T6868] Use struct sctp_sack_info instead
[   77.017161][ T6887] tipc: Started in network mode
[   77.018885][ T6887] tipc: Node identity ea5413ddc639, cluster identity 4711
[   77.023820][ T6887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.026843][ T6887] syzkaller0: entered promiscuous mode
[   77.028666][ T6887] syzkaller0: entered allmulticast mode
[   77.049727][ T6887] tipc: Resetting bearer <eth:syzkaller0>
[   77.059082][ T6886] tipc: Resetting bearer <eth:syzkaller0>
[   77.074720][ T6886] tipc: Disabling bearer <eth:syzkaller0>
[   77.090686][ T6889] tipc: Started in network mode
[   77.092177][ T6889] tipc: Node identity 72ad138c4825, cluster identity 4711
[   77.094358][ T6889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.097316][ T6889] syzkaller0: entered promiscuous mode
[   77.099079][ T6889] syzkaller0: entered allmulticast mode
[   77.123739][ T6889] tipc: Resetting bearer <eth:syzkaller0>
[   77.138133][ T6888] tipc: Resetting bearer <eth:syzkaller0>
[   77.150969][ T6888] tipc: Disabling bearer <eth:syzkaller0>
[   77.465788][ T6914] netlink: 76 bytes leftover after parsing attributes in process `syz.2.453'.
[   77.473999][ T6914] netlink: 128 bytes leftover after parsing attributes in process `syz.2.453'.
[   77.535416][ T6918] netlink: 'syz.2.455': attribute type 1 has an invalid length.
[   77.537821][ T6918] netlink: 228 bytes leftover after parsing attributes in process `syz.2.455'.
[   77.546462][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[   77.842332][ T6933] netlink: 'syz.1.462': attribute type 6 has an invalid length.
[   77.883612][ T6935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.886666][ T6935] syzkaller0: entered promiscuous mode
[   77.888374][ T6935] syzkaller0: entered allmulticast mode
[   77.910647][ T6935] tipc: Resetting bearer <eth:syzkaller0>
[   77.915678][ T6934] tipc: Resetting bearer <eth:syzkaller0>
[   77.938891][ T6934] tipc: Disabling bearer <eth:syzkaller0>
[   78.079595][ T6946] netlink: 'syz.1.468': attribute type 10 has an invalid length.
[   78.083083][ T6946] syz_tun: entered promiscuous mode
[   78.107945][ T6946] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   78.118420][ T6946] netlink: 'syz.1.468': attribute type 10 has an invalid length.
[   78.139874][ T6946] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.145302][ T6946] team0: Port device bond0 added
[   78.495444][ T6981] Bluetooth: MGMT ver 1.23
[   79.227023][ T7036] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   79.230251][ T7036] macvtap1: entered allmulticast mode
[   79.231907][ T7036] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   79.238818][ T7036] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   79.241218][ T7036] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   79.487170][ T7062] netlink: 'syz.0.523': attribute type 10 has an invalid length.
[   79.639867][ T7084] syzkaller1: entered promiscuous mode
[   79.641866][ T7084] syzkaller1: entered allmulticast mode
[   80.226163][ T7128] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   80.961370][ T7182] __nla_validate_parse: 9 callbacks suppressed
[   80.961383][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'.
[   81.095438][ T7191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.105532][ T7196] lo: entered allmulticast mode
[   81.111923][ T7196] lo: left allmulticast mode
[   81.185746][ T7191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.305058][ T7191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.368199][ T7191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.388993][   T24] cfg80211: failed to load regulatory.db
[   81.487824][ T5887] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.516945][ T5717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.540981][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.553335][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.571933][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[   81.575541][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[   81.834624][ T7248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.608'.
[   82.106558][ T7284] netlink: 'syz.1.620': attribute type 29 has an invalid length.
[   82.825861][ T5880] Bluetooth: hci2: command 0x0405 tx timeout
[   83.862413][ T7279] Set syz1 is full, maxelem 65536 reached
[   84.087658][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'.
[   84.094620][ T7347] geneve2: entered promiscuous mode
[   84.096292][ T7347] geneve2: entered allmulticast mode
[   84.222912][ T7349] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   84.377901][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'.
[   84.406720][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'.
[   84.410846][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.657'.
[   84.964239][ T7417] netlink: 'syz.2.683': attribute type 1 has an invalid length.
[   85.929933][ T7461] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   86.036921][ T7472] netlink: 'syz.1.698': attribute type 3 has an invalid length.
[   86.149367][ T7478] netlink: 'syz.2.707': attribute type 1 has an invalid length.
[   86.152029][ T7478] netlink: 244 bytes leftover after parsing attributes in process `syz.2.707'.
[   86.782479][ T7489] ip6tnl1: entered promiscuous mode
[   86.922066][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'.
[   86.937674][ T5887] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.941994][ T5887] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.944420][ T5887] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.946874][ T5887] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.949970][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'.
[   87.178335][ T7526] syzkaller0: entered promiscuous mode
[   87.180648][ T7526] syzkaller0: entered allmulticast mode
[   87.185312][ T7530] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   87.388388][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'.
[   88.035737][ T7549] tipc: Trying to set illegal importance in message
[   88.382837][ T7572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.752'.
[   88.426801][ T7574] netlink: 'syz.2.753': attribute type 1 has an invalid length.
[   88.491810][ T7578] netlink: 44 bytes leftover after parsing attributes in process `syz.2.755'.
[   88.518712][ T7578] team0: Port device team_slave_0 removed
[   88.727298][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'.
[   88.736933][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.759'.
[   90.061853][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'.
[   90.133419][ T7636] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   90.135456][ T5717] bond0: (slave bond_slave_0): interface is now down
[   90.142891][ T5717] bond0: (slave bond_slave_1): interface is now down
[   90.145120][ T5717] bond0: (slave syz_tun): interface is now down
[   90.162149][ T5717] bond0: now running without any active interface!
[   91.024738][ T7690] veth1_to_bond: entered allmulticast mode
[   91.027964][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'.
[   91.050962][ T7690] bond0: (slave bond_slave_1): Releasing backup interface
[   91.067675][ T7690] veth1_to_bond (unregistering): left allmulticast mode
[   91.796979][ T7708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.812'.
[   91.801283][ T7708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.155829][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'.
[   92.158653][ T7729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'.
[   92.198883][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'.
[   92.246171][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'.
[   92.524823][ T7771] netlink: 40 bytes leftover after parsing attributes in process `syz.0.840'.
[   92.593727][ T7777] batadv_slave_0: entered promiscuous mode
[   92.623103][ T7779] pimreg: entered allmulticast mode
[   92.627657][ T7767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.839'.
[   92.871043][ T7766] batadv_slave_0: left promiscuous mode
[   92.991623][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'.
[   93.088443][ T7799] pim6reg: entered allmulticast mode
[   93.092794][ T7799] pim6reg: left allmulticast mode
[   93.308778][ T7812] netlink: 'syz.1.858': attribute type 1 has an invalid length.
[   93.512845][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'.
[   93.599073][ T7834] netlink: 'syz.1.868': attribute type 5 has an invalid length.
[   93.645397][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'.
[   93.731650][ T7850] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.734349][ T7850] syzkaller0: entered promiscuous mode
[   93.739481][ T7850] syzkaller0: entered allmulticast mode
[   93.745588][ T7850] tipc: Resetting bearer <eth:syzkaller0>
[   93.751852][ T7849] tipc: Resetting bearer <eth:syzkaller0>
[   93.766485][ T7849] tipc: Disabling bearer <eth:syzkaller0>
[   93.783095][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.785506][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.855747][ T7859] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   94.108590][ T7889] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   94.235589][ T7901] syzkaller1: entered promiscuous mode
[   94.237362][ T7901] syzkaller1: entered allmulticast mode
[   95.607007][ T7992] delete_channel: no stack
[   96.363058][ T8084] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   96.367485][ T8084] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   96.439066][ T8094] netlink: 'syz.1.984': attribute type 7 has an invalid length.
[   96.595263][ T8111] netlink: 'syz.0.992': attribute type 1 has an invalid length.
[   96.602640][ T8111] NCSI netlink: No device for ifindex 0
[   96.750019][ T8127] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.752675][ T8127] bridge0: port 3(bond1) entered blocking state
[   96.754479][ T8134] netlink: 'syz.1.1003': attribute type 1 has an invalid length.
[   96.754785][ T8127] bridge0: port 3(bond1) entered disabled state
[   96.757137][ T8134] netlink: 'syz.1.1003': attribute type 1 has an invalid length.
[   96.761868][ T8127] bond1: entered allmulticast mode
[   96.764809][ T8127] bond1: entered promiscuous mode
[   96.768469][ T8127] bridge0: port 3(bond1) entered blocking state
[   96.770653][ T8127] bridge0: port 3(bond1) entered forwarding state
[   96.842241][ T8140] __nla_validate_parse: 4 callbacks suppressed
[   96.842254][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'.
[   96.850520][ T8140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1006'.
[   96.861523][ T8140] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   96.864986][ T8140] gretap1: entered promiscuous mode
[   96.962532][ T8156] netlink: 'syz.1.1015': attribute type 1 has an invalid length.
[   97.008104][ T8156] bond1: entered promiscuous mode
[   97.010931][ T8156] bond1: entered allmulticast mode
[   97.014689][ T8156] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.028004][ T8156] bridge2: entered promiscuous mode
[   97.031384][ T8156] bridge2: entered allmulticast mode
[   97.033654][ T8156] bond1: (slave bridge2): Enslaving as a backup interface with an up link
[   97.098439][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.101491][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.111243][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   97.217314][ T8156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.219977][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   97.231936][ T8156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.415573][ T1087] bridge0: port 3(bond1) entered disabled state
[   97.433224][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.438319][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.441598][ T8180] smc: net device bond0 applied user defined pnetid SYZ2
[   97.445666][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.460415][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.493475][ T8184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.498402][ T8184] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   97.501481][ T8184] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   97.512178][ T8184] sch_fq: defrate 257 ignored.
[   97.529493][ T8184] tipc: Resetting bearer <eth:syzkaller0>
[   97.637496][ T8195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1027'.
[   99.838188][ T8342] tipc: Enabled bearer <eth:team0>, priority 0
[   99.856123][ T8344] netlink: 'syz.1.1061': attribute type 7 has an invalid length.
[   99.858885][ T8344] netlink: 'syz.1.1061': attribute type 8 has an invalid length.
[  100.038327][ T8363] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  100.091832][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'.
[  100.098351][ T8371] netlink: 'syz.0.1074': attribute type 42 has an invalid length.
[  100.138618][ T8377] netlink: 'syz.2.1076': attribute type 9 has an invalid length.
[  100.158219][ T8376] syzkaller0: entered promiscuous mode
[  100.160125][ T8376] syzkaller0: entered allmulticast mode
[  100.325229][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1080'.
[  100.573466][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'.
[  100.576956][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'.
[  101.302136][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'.
[  101.412817][ T8424] netlink: 'syz.2.1095': attribute type 1 has an invalid length.
[  101.443792][ T8424] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.467426][ T8424] bond2: (slave gretap1): making interface the new active one
[  101.480356][ T8424] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  101.537638][ T8430] batman_adv: batadv0: Adding interface: gretap1
[  101.549753][ T8430] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.629414][ T8430] batman_adv: batadv0: Interface activated: gretap1
[  101.944398][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1106'.
[  101.973627][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'.
[  102.065736][ T8454] tipc: Enabling of bearer <et:g> rejected, media not registered
[  102.261754][ T8470] ieee802154 phy0 wpan0: encryption failed: -22
[  102.455949][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1123'.
[  102.532079][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'.
[  102.587567][ T8500] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  102.718222][ T8517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1139'.
[  102.721971][ T8517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.936357][ T8531] netlink: 'syz.0.1146': attribute type 6 has an invalid length.
[  103.473321][ T8555] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1154'.
[  103.515738][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'.
[  103.653218][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1160'.
[  103.779172][ T8576] netlink: 'syz.0.1164': attribute type 8 has an invalid length.
[  103.783324][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'.
[  104.241463][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1183'.
[  104.430120][ T8627] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.432873][ T8627] syzkaller0: entered promiscuous mode
[  104.434723][ T8627] syzkaller0: entered allmulticast mode
[  104.449520][ T8627] tipc: Resetting bearer <eth:syzkaller0>
[  104.454096][ T8626] tipc: Resetting bearer <eth:syzkaller0>
[  104.488767][ T8626] tipc: Disabling bearer <eth:syzkaller0>
[  104.580267][ T8633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.625171][ T8633] syzkaller0: entered promiscuous mode
[  104.626936][ T8633] syzkaller0: entered allmulticast mode
[  104.631390][ T8633] tipc: Resetting bearer <eth:syzkaller0>
[  104.649927][ T8631] tipc: Resetting bearer <eth:syzkaller0>
[  104.899755][ T8641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.570178][ T8631] tipc: Disabling bearer <eth:syzkaller0>
[  105.950865][ T8684] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  106.296927][ T8713] netlink: 'syz.0.1220': attribute type 1 has an invalid length.
[  106.378411][ T8721] batadv0: entered promiscuous mode
[  107.481160][ T8785] __nla_validate_parse: 2 callbacks suppressed
[  107.481171][ T8785] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1245'.
[  107.528899][ T8785] pimreg: left allmulticast mode
[  107.606070][ T8785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.155088][ T8846] netlink: 'syz.2.1259': attribute type 1 has an invalid length.
[  108.165468][ T8846] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1259'.
[  108.478499][ T8870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.285296][ T8888] syzkaller1: entered promiscuous mode
[  109.287466][ T8888] syzkaller1: entered allmulticast mode
[  109.495409][ T8903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1283'.
[  109.501397][ T8903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1283'.
[  109.863390][ T8932] netlink: 'syz.0.1296': attribute type 5 has an invalid length.
[  110.044626][ T8944] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1301'.
[  110.388831][ T8961] syzkaller0: entered promiscuous mode
[  110.392656][ T8961] syzkaller0: entered allmulticast mode
[  111.321592][ T8966] netlink: 'syz.2.1310': attribute type 1 has an invalid length.
[  111.563856][ T9004] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1324'.
[  111.671495][ T9015] netlink: 'syz.1.1328': attribute type 11 has an invalid length.
[  111.807346][ T9031] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1337'.
[  111.816942][ T9031] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  111.921620][ T9045] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1343'.
[  112.309617][ T9082] netlink: 'syz.2.1360': attribute type 1 has an invalid length.
[  113.178698][ T9109] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1373'.
[  113.326696][ T9127] netlink: 'syz.0.1382': attribute type 1 has an invalid length.
[  113.329154][ T9127] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1382'.
[  113.336570][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'.
[  113.339234][ T9129] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1383'.
[  113.354333][ T9129] gretap2: entered promiscuous mode
[  113.520534][ T9151] ieee802154 phy0 wpan0: encryption failed: -90
[  113.551546][ T9153] bond0: entered promiscuous mode
[  113.553155][ T9153] bond_slave_0: entered promiscuous mode
[  113.556524][ T9153] batadv0: entered promiscuous mode
[  113.558958][ T9153] hsr1: entered allmulticast mode
[  113.560742][ T9153] bond0: entered allmulticast mode
[  113.562322][ T9153] bond_slave_0: entered allmulticast mode
[  113.564945][ T9153] batadv0: entered allmulticast mode
[  113.567011][ T9153] 8021q: adding VLAN 0 to HW filter on device hsr1
[  113.574634][ T9153] bond0: left promiscuous mode
[  113.576266][ T9153] bond_slave_0: left promiscuous mode
[  113.578702][ T9153] batadv0: left promiscuous mode
[  113.985091][ T9195] Illegal XDP return value 4294967294 on prog  (id 221) dev N/A, expect packet loss!
[  114.144353][ T9202] batadv_slave_1: entered promiscuous mode
[  114.156654][ T9201] batadv_slave_1: left promiscuous mode
[  114.185186][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.816577][ T9231] openvswitch: netlink: Duplicate or invalid key (type 0).
[  114.819862][ T9231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.104120][ T9241] tun0: tun_chr_ioctl cmd 2148553947
[  115.162271][ T9243] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  115.188713][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'.
[  115.451785][ T9259] netlink: 'syz.1.1445': attribute type 10 has an invalid length.
[  115.461354][ T9259] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  115.588789][ T9278] netlink: 'syz.2.1454': attribute type 6 has an invalid length.
[  115.750315][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'.
[  115.908330][ T9312] ieee802154 phy0 wpan0: encryption failed: -90
[  115.913985][ T9311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1470'.
[  115.921429][ T9311] tipc: New replicast peer: 255.255.255.255
[  115.925035][ T9311] tipc: Enabled bearer <udp:syz2>, priority 10
[  115.933557][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'.
[  115.938757][ T9311] tipc: Disabling bearer <udp:syz2>
[  116.017037][ T9322] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  116.159984][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'.
[  116.162918][ T9335] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1482'.
[  116.573296][ T9376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  117.055911][ T9430] netlink: 'syz.0.1515': attribute type 6 has an invalid length.
[  117.058570][ T9430] netlink: 'syz.0.1515': attribute type 4 has an invalid length.
[  117.235093][ T9446] IPv6: sit1: Disabled Multicast RS
[  117.237318][ T9446] sit1: entered allmulticast mode
[  117.429496][   T33] audit: type=1800 audit(1754814194.698:2): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1524" name="memory.events" dev="tmpfs" ino=2411 res=0 errno=0
[  117.586996][ T9468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.595832][ T9468] syzkaller0: entered promiscuous mode
[  117.597516][ T9468] syzkaller0: entered allmulticast mode
[  117.612743][ T9468] tipc: Resetting bearer <eth:syzkaller0>
[  117.619675][ T9466] tipc: Resetting bearer <eth:syzkaller0>
[  117.631685][ T9466] tipc: Disabling bearer <eth:syzkaller0>
[  118.004729][ T9500] netlink: 'syz.2.1549': attribute type 1 has an invalid length.
[  118.007327][ T9500] netlink: 'syz.2.1549': attribute type 11 has an invalid length.
[  118.204498][ T9519] __nla_validate_parse: 11 callbacks suppressed
[  118.204509][ T9519] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1558'.
[  118.222080][ T9519] netlink: zone id is out of range
[  118.223798][ T9519] netlink: get zone limit has 8 unknown bytes
[  118.565754][ T9536] netlink: zone id is out of range
[  118.567400][ T9536] netlink: zone id is out of range
[  118.569026][ T9536] netlink: zone id is out of range
[  118.571199][ T9536] netlink: zone id is out of range
[  118.572823][ T9536] netlink: zone id is out of range
[  118.574627][ T9536] netlink: zone id is out of range
[  118.735847][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1576'.
[  118.745184][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1576'.
[  118.911826][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'.
[  118.915047][ T9580] Unsupported xt match
[  118.915055][ T9580] unable to load match
[  119.854577][ T9635] netlink: 'syz.2.1608': attribute type 1 has an invalid length.
[  119.923106][ T9640] delete_channel: no stack
[  119.931117][ T9644] netlink: 'syz.1.1607': attribute type 13 has an invalid length.
[  119.933609][ T9644] netlink: 'syz.1.1607': attribute type 17 has an invalid length.
[  119.999830][ T9644] syz_tun: left promiscuous mode
[  120.024283][   T12] bond0: (slave wlan1): interface is now down
[  120.028666][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.039821][   T12] bond0: (slave wlan1): interface is now down
[  120.052101][ T9644] 8021q: adding VLAN 0 to HW filter on device team0
[  120.060679][   T12] bond0: (slave wlan1): interface is now down
[  120.064407][ T9644] net_ratelimit: 96 callbacks suppressed
[  120.064426][ T9644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.087490][   T13] bond0: (slave wlan1): interface is now down
[  120.095520][ T9650] syzkaller1: entered promiscuous mode
[  120.099029][ T9650] syzkaller1: entered allmulticast mode
[  120.109748][   T12] bond0: (slave wlan1): interface is now down
[  120.129730][ T5887] bond0: (slave wlan1): interface is now down
[  120.152617][ T5887] bond0: (slave wlan1): interface is now down
[  120.169686][   T12] bond0: (slave wlan1): interface is now down
[  120.190594][ T5887] bond0: (slave wlan1): interface is now down
[  120.193148][ T5887] bond0: now running without any active interface!
[  120.244006][ T9633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.307735][ T9676] netlink: 'syz.0.1621': attribute type 3 has an invalid length.
[  120.333722][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'.
[  120.444621][ T9686] netlink: 'syz.0.1626': attribute type 10 has an invalid length.
[  120.453505][ T9686] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.458646][ T9686] team0: Port device bond0 added
[  120.598969][ T9696] batadv_slave_1: entered promiscuous mode
[  120.602511][ T9695] batadv_slave_1: left promiscuous mode
[  120.738372][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'.
[  120.963642][ T9712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.996266][ T9712] syzkaller0: entered promiscuous mode
[  121.000694][ T9712] syzkaller0: entered allmulticast mode
[  121.002855][ T9712] tipc: Resetting bearer <eth:syzkaller0>
[  121.011915][ T9711] tipc: Resetting bearer <eth:syzkaller0>
[  121.889458][ T9711] tipc: Disabling bearer <eth:syzkaller0>
[  121.976300][ T9717] bond1: left promiscuous mode
[  121.977949][ T9717] bridge2: left promiscuous mode
[  121.979980][ T9717] bond1: left allmulticast mode
[  121.981608][ T9717] bridge2: left allmulticast mode
[  121.983448][ T9717] batman_adv: batadv0: Interface deactivated: gretap1
[  122.137585][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'.
[  122.141138][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'.
[  122.219181][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1655'.
[  122.343987][ T9766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1663'.
[  122.429882][ T9776] IPVS: Error connecting to the multicast addr
[  122.434762][ T9776] netlink: 'syz.1.1665': attribute type 16 has an invalid length.
[  122.437201][ T9776] netlink: 'syz.1.1665': attribute type 17 has an invalid length.
[  122.444787][ T9776] IPv6: NLM_F_REPLACE set, but no existing node found!
[  122.511730][ T9777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.515428][ T9777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.582389][ T9777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.585683][ T9777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.636786][ T9777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.640841][ T9777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.705266][ T9777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  122.708541][ T9777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.780737][ T5887] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.783419][ T5887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.797060][ T5887] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.800873][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.811562][ T5887] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.814302][ T5887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.824107][ T5887] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.827069][ T5887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.968353][ T9791] vlan3: entered allmulticast mode
[  122.970247][ T9791] veth1: entered allmulticast mode
[  122.972581][ T9791] batman_adv: batadv0: Adding interface: vlan3
[  122.974595][ T9791] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.982932][ T9791] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active
[  123.235126][ T9798] ieee802154 phy0 wpan0: encryption failed: -22
[  123.583161][ T9816] __nla_validate_parse: 1 callbacks suppressed
[  123.583176][ T9816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1684'.
[  123.590706][ T9816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1684'.
[  123.947580][ T9844] netlink: 'syz.2.1697': attribute type 1 has an invalid length.
[  123.989974][ T9844] 8021q: adding VLAN 0 to HW filter on device bond3
[  124.001547][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1697'.
[  124.013926][ T9844] gretap3: entered promiscuous mode
[  124.018774][ T9844] bond3: (slave gretap3): making interface the new active one
[  124.025522][ T9844] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  124.034898][ T9849] netlink: 'syz.0.1699': attribute type 2 has an invalid length.
[  124.210603][ T9856] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1697'.
[  124.303437][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'.
[  125.119426][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'.
[  125.278284][ T9883] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1714'.
[  125.331614][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1716'.
[  125.581300][ T9910] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  125.627379][ T9912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.630851][ T9912] syzkaller0: entered promiscuous mode
[  125.632577][ T9912] syzkaller0: entered allmulticast mode
[  125.648729][ T9912] tipc: Resetting bearer <eth:syzkaller0>
[  125.653428][ T9911] tipc: Resetting bearer <eth:syzkaller0>
[  125.679517][ T9911] tipc: Disabling bearer <eth:syzkaller0>
[  125.795989][ T5880] Bluetooth: hci2: link tx timeout
[  125.797954][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.131644][ T9938] netlink: 'syz.0.1738': attribute type 1 has an invalid length.
[  126.134773][ T9938] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1738'.
[  126.138393][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'.
[  126.484827][   T12] syzkaller0: tun_net_xmit 76
[  126.486659][   T12] syzkaller0: tun_net_xmit 48
[  126.494988][ T9965] syzkaller0: create flow: hash 2996956 index 1
[  126.518256][ T9969] netlink: 'syz.2.1750': attribute type 21 has an invalid length.
[  126.520214][ T5879] syzkaller0: tun_net_xmit 76
[  126.531167][ T9965] syzkaller0: delete flow: hash 2996956 index 1
[  127.360546][ T9980] syzkaller1: entered promiscuous mode
[  127.366552][ T9980] syzkaller1: entered allmulticast mode
[  127.491837][ T9987] netlink: 'syz.2.1757': attribute type 12 has an invalid length.
[  127.541066][ T9996] syzkaller0: entered promiscuous mode
[  127.542866][ T9996] syzkaller0: entered allmulticast mode
[  127.548737][ T9996] netlink: 'syz.1.1761': attribute type 11 has an invalid length.
[  127.747336][T10019] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  127.860311][ T5876] Bluetooth: hci2: command 0x0405 tx timeout
[  127.874091][T10038] IPv6: NLM_F_REPLACE set, but no existing node found!
[  127.878168][T10037] netlink: 'syz.0.1782': attribute type 7 has an invalid length.
[  127.928603][T10043] gretap0: entered promiscuous mode
[  128.040642][T10057] syzkaller1: entered promiscuous mode
[  128.042386][T10057] syzkaller1: entered allmulticast mode
[  128.483823][T10101] syz_tun: entered promiscuous mode
[  128.488287][T10101] vlan2: entered promiscuous mode
[  128.602498][T10106] __nla_validate_parse: 6 callbacks suppressed
[  128.602509][T10106] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1812'.
[  128.614378][T10106] netlink: zone id is out of range
[  128.616171][T10106] netlink: zone id is out of range
[  128.617940][T10106] netlink: zone id is out of range
[  128.620310][T10106] netlink: zone id is out of range
[  128.622000][T10106] netlink: zone id is out of range
[  128.622526][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1813'.
[  128.623680][T10106] netlink: zone id is out of range
[  128.627926][T10106] netlink: zone id is out of range
[  128.629834][T10106] netlink: zone id is out of range
[  128.631486][T10106] netlink: zone id is out of range
[  128.633173][T10106] netlink: zone id is out of range
[  128.687696][T10112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1815'.
[  128.702093][T10112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1815'.
[  128.710738][T10112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1815'.
[  128.721208][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1815'.
[  128.799233][T10121] syz_tun: entered allmulticast mode
[  128.803401][T10121] syz_tun: left allmulticast mode
[  129.079901][T10158] bridge1: entered allmulticast mode
[  129.403620][T10195] netlink: 'syz.2.1855': attribute type 9 has an invalid length.
[  129.635248][T10222] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.1868'.
[  129.795519][T10228] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1871'.
[  129.870459][T10234] bond0: (slave batadv0): Releasing backup interface
[  129.880909][T10234] bridge_slave_0: left allmulticast mode
[  129.882831][T10234] bridge_slave_0: left promiscuous mode
[  129.884849][T10234] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.891340][T10234] bridge_slave_1: left allmulticast mode
[  129.893221][T10234] bridge_slave_1: left promiscuous mode
[  129.895209][T10234] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.901397][T10234] bond0: (slave bond_slave_0): Releasing backup interface
[  129.908569][T10234] bond0: (slave bond_slave_1): Releasing backup interface
[  129.922458][T10234] team0: Port device team_slave_1 removed
[  129.924707][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.927057][T10234] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.942235][T10234] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.944734][T10234] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.967331][T10234] bond1: left allmulticast mode
[  129.974529][T10234] bond1: left promiscuous mode
[  129.978302][T10234] bridge0: port 3(bond1) entered disabled state
[  129.987528][T10234] bond2: (slave gretap1): Releasing active interface
[  129.996803][T10234] batman_adv: batadv0: Removing interface: vlan3
[  130.003005][T10234] bond3: (slave gretap3): Releasing active interface
[  130.013052][ T1087] tipc: Resetting bearer <eth:team0>
[  130.018902][T10243] netlink: 'syz.1.1877': attribute type 7 has an invalid length.
[  130.022393][T10243] netlink: 'syz.1.1877': attribute type 8 has an invalid length.
[  130.946773][T10354] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1929'.
[  131.021338][T10362] trusted_key: syz.1.1933 sent an empty control message without MSG_MORE.
[  131.411504][T10403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1952'.
[  132.276829][T10428] netlink: 'syz.2.1963': attribute type 2 has an invalid length.
[  132.399772][T10428] k*]: entered promiscuous mode
[  132.472328][T10429] tipc: Resetting bearer <eth:team0>
[  132.474407][T10429] tipc: Resetting bearer <eth:team0>
[  132.582557][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  133.004558][T10462] IPVS: Scheduler module ip_vs_sip not found
[  133.468487][T10519] netlink: 'syz.1.1999': attribute type 21 has an invalid length.
[  133.471351][T10519] netlink: 'syz.1.1999': attribute type 1 has an invalid length.
[  133.772251][T10547] netlink: 'syz.2.2013': attribute type 4 has an invalid length.
[  134.226737][T10580] tc_dump_action: action bad kind
[  134.425820][T10595] __nla_validate_parse: 3 callbacks suppressed
[  134.425831][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'.
[  134.478783][T10601] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.484310][T10601] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.541668][T10606] netlink: 'syz.0.2039': attribute type 13 has an invalid length.
[  134.569258][T10608] netlink: 'syz.0.2040': attribute type 1 has an invalid length.
[  134.613326][T10614] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2042'.
[  134.616142][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'.
[  135.215477][T10686] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2079'.
[  135.391969][T10709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  135.394338][T10709] IPv6: NLM_F_CREATE should be set when creating new route
[  135.396706][T10709] IPv6: NLM_F_CREATE should be set when creating new route
[  135.398962][T10709] IPv6: NLM_F_CREATE should be set when creating new route
[  135.407979][T10709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  135.502935][T10718] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  135.507062][T10718] net_ratelimit: 5 callbacks suppressed
[  135.507072][T10718] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  135.674626][T10737] syzkaller1: entered promiscuous mode
[  135.676778][T10737] syzkaller1: entered allmulticast mode
[  135.770571][T10743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  135.772779][T10743] IPv6: NLM_F_CREATE should be set when creating new route
[  135.785607][T10745] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2105'.
[  136.209637][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'.
[  136.522146][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2121'.
[  137.583624][T10809] netlink: 'syz.2.2134': attribute type 1 has an invalid length.
[  137.586116][T10809] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2134'.
[  137.642954][T10813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2136'.
[  138.615395][T10880] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2165'.
[  138.645987][T10880] team0: Port device bond0 removed
[  138.654970][T10880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.659168][T10880] bond_slave_0: left allmulticast mode
[  138.664664][T10880] bond0 (unregistering): Released all slaves
[  139.162872][T10940] sctp: [Deprecated]: syz.0.2193 (pid 10940) Use of int in maxseg socket option.
[  139.162872][T10940] Use struct sctp_assoc_value instead
[  139.171909][T10942] netlink: 'syz.2.2192': attribute type 1 has an invalid length.
[  139.225500][T10942] bond4: entered promiscuous mode
[  139.236423][T10942] bond4: entered allmulticast mode
[  139.238262][T10942] 8021q: adding VLAN 0 to HW filter on device bond4
[  139.257713][T10942] ip6gretap1: entered promiscuous mode
[  139.261417][T10942] ip6gretap1: entered allmulticast mode
[  139.263506][T10942] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  139.306270][T10957] IPVS: length: 148 != 24
[  139.329896][ T5887] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  139.441518][ T5887] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  139.796164][T11010] __nla_validate_parse: 4 callbacks suppressed
[  139.796175][T11010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2224'.
[  139.944205][T11025] netlink: 'syz.2.2229': attribute type 13 has an invalid length.
[  139.946877][T11025] netlink: 'syz.2.2229': attribute type 17 has an invalid length.
[  139.977826][T11025] tipc: Resetting bearer <eth:team0>
[  139.982750][T11025] tipc: Resetting bearer <eth:team0>
[  139.986833][T11025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.039087][T11031] netlink: 'syz.1.2234': attribute type 1 has an invalid length.
[  140.059884][T11031] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.079048][T11031] 8021q: adding VLAN 0 to HW filter on device bond2
[  140.082520][T11031] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  140.086658][T11031] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  140.125974][T11025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.136243][T11033] gretap2: entered promiscuous mode
[  140.141503][T11033] bond2: (slave gretap2): making interface the new active one
[  140.144213][T11033] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  140.155399][T11031] macvlan3: entered promiscuous mode
[  140.157060][T11031] macvlan3: entered allmulticast mode
[  140.159777][T11031] bond2: entered promiscuous mode
[  140.162087][T11031] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  140.166020][T11031] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  140.170742][T11031] bond2: left promiscuous mode
[  140.199295][T11020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.341076][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'.
[  140.344083][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'.
[  140.379857][T11047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.382454][T11047] syzkaller0: entered promiscuous mode
[  140.384154][T11047] syzkaller0: entered allmulticast mode
[  140.401195][T11047] tipc: Resetting bearer <eth:syzkaller0>
[  140.405380][T11046] tipc: Resetting bearer <eth:syzkaller0>
[  140.415569][T11046] tipc: Disabling bearer <eth:syzkaller0>
[  140.448268][T11053] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  141.161316][T11107] tap0: tun_chr_ioctl cmd 1074025680
[  141.164653][T11107] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.168433][T11107] mac80211_hwsim hwsim5 D: renamed from syzkaller0
[  141.172055][T11107] tipc: Disabling bearer <eth:syzkaller0>
[  141.263087][T11113] netlink: 'syz.2.2270': attribute type 41 has an invalid length.
[  141.311541][T11117] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2272'.
[  141.335833][T11119] netlink: 'syz.2.2273': attribute type 1 has an invalid length.
[  141.338364][T11119] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2273'.
[  141.781392][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'.
[  141.811300][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'.
[  141.935706][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2293'.
[  141.965060][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2295'.
[  143.238700][T11231] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2323'.
[  143.371672][T11248] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  143.503821][T11267] bridge0: port 3(vlan2) entered blocking state
[  143.511970][T11267] bridge0: port 3(vlan2) entered disabled state
[  143.514785][T11267] vlan2: entered allmulticast mode
[  143.516389][T11267] bridge0: entered allmulticast mode
[  143.521879][T11267] vlan2: left allmulticast mode
[  143.523420][T11267] bridge0: left allmulticast mode
[  144.590212][T11297] wg1: entered promiscuous mode
[  144.591751][T11297] wg1: entered allmulticast mode
[  144.858310][T11329] netlink: 'syz.1.2367': attribute type 1 has an invalid length.
[  144.994724][T11344] netlink: zone id is out of range
[  144.996646][T11344] netlink: zone id is out of range
[  144.998307][T11344] netlink: zone id is out of range
[  145.001911][T11344] netlink: zone id is out of range
[  145.003807][T11344] netlink: zone id is out of range
[  145.005443][T11344] netlink: zone id is out of range
[  145.007538][T11344] netlink: zone id is out of range
[  145.009244][T11344] netlink: zone id is out of range
[  145.011049][T11344] netlink: zone id is out of range
[  145.013457][T11344] netlink: zone id is out of range
[  146.062293][T11378] vlan2: entered promiscuous mode
[  146.063931][T11378] bond0: entered promiscuous mode
[  146.065438][T11378] bond_slave_0: entered promiscuous mode
[  146.067321][T11378] bond_slave_1: entered promiscuous mode
[  146.069284][T11378] syz_tun: entered promiscuous mode
[  146.071537][T11378] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  146.073801][T11378] vlan2: entered allmulticast mode
[  146.075429][T11378] bond0: entered allmulticast mode
[  146.077011][T11378] bond_slave_0: entered allmulticast mode
[  146.078684][T11378] bond_slave_1: entered allmulticast mode
[  146.083304][T11378] syz_tun: entered allmulticast mode
[  146.085191][T11378] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  146.253778][T11404] __nla_validate_parse: 5 callbacks suppressed
[  146.253788][T11404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2403'.
[  146.452676][T11423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2413'.
[  146.606075][T11440] bond0: (slave syz_tun): Releasing backup interface
[  146.613564][T11440] syz_tun: left promiscuous mode
[  146.615260][T11440] syz_tun: left allmulticast mode
[  146.618778][T11440] team0: Port device bond0 removed
[  146.620847][T11440] bridge_slave_0: left allmulticast mode
[  146.622604][T11440] bridge_slave_0: left promiscuous mode
[  146.624470][T11440] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.627779][T11440] bridge_slave_1: left allmulticast mode
[  146.629896][T11440] bridge_slave_1: left promiscuous mode
[  146.631696][T11440] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.635636][T11440] bond0: (slave bond_slave_0): Releasing backup interface
[  146.638092][T11440] bond_slave_0: left promiscuous mode
[  146.640323][T11440] bond_slave_0: left allmulticast mode
[  146.651587][T11440] bond0: (slave bond_slave_1): Releasing backup interface
[  146.654983][T11440] bond_slave_1: left promiscuous mode
[  146.657712][T11440] bond_slave_1: left allmulticast mode
[  146.662899][T11440] team0: Port device team_slave_0 removed
[  146.666144][T11440] team0: Port device team_slave_1 removed
[  146.668052][T11440] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.671199][T11440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  146.674494][T11440] bond0: (slave wlan1): Releasing backup interface
[  146.677089][T11440] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  146.679276][T11440] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  146.682350][T11440] bond1: (slave bridge2): Removing an active aggregator
[  146.685069][T11440] bond1: (slave bridge2): Releasing backup interface
[  146.687995][T11440] batman_adv: batadv0: Removing interface: gretap1
[  146.691429][T11440] bond2: (slave gretap2): Releasing active interface
[  146.720866][T11440] gretap0: left promiscuous mode
[  146.722496][T11449] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2425'.
[  146.738807][T11440] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.009251][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'.
[  147.013707][T11478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2438'.
[  147.016525][T11478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2438'.
[  147.866223][T11518] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2456'.
[  148.134233][T11546] bridge3: entered promiscuous mode
[  148.231354][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'.
[  148.347166][T11569] netlink: 'syz.1.2478': attribute type 10 has an invalid length.
[  148.361919][T11569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2478'.
[  148.392056][T11569] dummy0: entered promiscuous mode
[  148.408122][T11569] bridge0: port 1(dummy0) entered blocking state
[  148.410478][T11569] bridge0: port 1(dummy0) entered disabled state
[  148.412456][T11569] dummy0: entered allmulticast mode
[  148.415454][T11569] bridge0: port 1(dummy0) entered blocking state
[  148.417419][T11569] bridge0: port 1(dummy0) entered forwarding state
[  148.426013][T11575] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.429037][T11575] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.485798][T11575] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.488832][T11575] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.496391][T11577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'.
[  148.612987][T11575] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.617263][T11575] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.681435][T11575] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.685244][T11575] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.769033][ T9726] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.774539][ T9726] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.804975][ T5903] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.815139][ T5903] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.824661][ T5903] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.831980][ T5903] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.852238][ T5903] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.854816][ T5903] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.813941][T11676] netlink: 'syz.0.2519': attribute type 83 has an invalid length.
[  150.121703][T11700] netlink: 'syz.1.2531': attribute type 2 has an invalid length.
[  150.131814][T11700] : entered promiscuous mode
[  150.305182][T11722] netlink: 'syz.2.2542': attribute type 1 has an invalid length.
[  150.310400][T11722] netlink: 'syz.2.2542': attribute type 1 has an invalid length.
[  150.313053][T11728] netlink: 'syz.1.2545': attribute type 16 has an invalid length.
[  150.315605][T11728] netlink: 'syz.1.2545': attribute type 3 has an invalid length.
[  150.580312][T11759] batman_adv: batadv0: Adding interface: dummy0
[  150.582219][T11759] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.596604][T11759] batman_adv: batadv0: Interface activated: dummy0
[  150.614916][T11759] net_ratelimit: 17 callbacks suppressed
[  150.614927][T11759] batadv0: mtu less than device minimum
[  150.618994][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.622936][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.626893][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.630811][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.634571][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.638330][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.642099][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.645819][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  150.649657][T11759] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  151.427065][T11843] __nla_validate_parse: 4 callbacks suppressed
[  151.427076][T11843] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2600'.
[  151.508390][T11853] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2605'.
[  151.593298][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'.
[  151.736403][T11881] netlink: 'syz.0.2617': attribute type 11 has an invalid length.
[  151.960669][T11897] syzkaller1: entered allmulticast mode
[  152.793316][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'.
[  152.910114][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2639'.
[  153.133655][T11952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2647'.
[  153.266546][T11970] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2655'.
[  153.271143][T11970] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2655'.
[  153.282382][T11970] lo speed is unknown, defaulting to 1000
[  153.286348][T11970] lo speed is unknown, defaulting to 1000
[  153.290140][T11970] lo speed is unknown, defaulting to 1000
[  153.340923][T11972] 8021q: adding VLAN 0 to HW filter on device team0
[  153.352662][T11974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2657'.
[  153.453794][T11970] infiniband syz0: set active
[  153.456731][ T5911] lo speed is unknown, defaulting to 1000
[  153.458974][T11970] infiniband syz0: added lo
[  153.498104][T11970] RDS/IB: syz0: added
[  153.501699][T11970] smc: adding ib device syz0 with port count 1
[  153.504088][T11970] smc:    ib device syz0 port 1 has pnetid 
[  153.510804][ T5911] lo speed is unknown, defaulting to 1000
[  153.516485][T11970] lo speed is unknown, defaulting to 1000
[  153.654323][T11970] lo speed is unknown, defaulting to 1000
[  153.762883][T11970] lo speed is unknown, defaulting to 1000
[  153.920035][T11992] sctp: [Deprecated]: syz.0.2663 (pid 11992) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.920035][T11992] Use struct sctp_sack_info instead
[  153.962188][T11996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2666'.
[  154.831957][T12054] netlink: 'syz.0.2694': attribute type 1 has an invalid length.
[  154.834963][T12054] netlink: 'syz.0.2694': attribute type 1 has an invalid length.
[  154.970095][T12066] syzkaller0: entered promiscuous mode
[  154.972172][T12066] syzkaller0: entered allmulticast mode
[  155.635529][T12119] ip6gretap0: entered promiscuous mode
[  155.637562][T12119] macsec1: entered promiscuous mode
[  155.639541][T12119] macsec1: entered allmulticast mode
[  155.641214][T12119] ip6gretap0: entered allmulticast mode
[  156.012467][T12143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.016073][T12143] syzkaller0: entered promiscuous mode
[  156.017953][T12143] syzkaller0: entered allmulticast mode
[  156.056247][T12142] tipc: Resetting bearer <eth:syzkaller0>
[  156.070287][T12142] tipc: Disabling bearer <eth:syzkaller0>
[  156.643213][T12165] netlink: 'syz.1.2740': attribute type 10 has an invalid length.
[  156.648910][T12165] 8021q: adding VLAN 0 to HW filter on device team0
[  156.652256][T12165] team0: entered promiscuous mode
[  156.654071][T12165] team0: entered allmulticast mode
[  156.656058][T12165] bond0: (slave team0): Enslaving as an active interface with a down link
[  156.815885][T12175] __nla_validate_parse: 5 callbacks suppressed
[  156.815895][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2745'.
[  156.991609][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2753'.
[  157.175748][T12203] netlink: 'syz.0.2756': attribute type 6 has an invalid length.
[  157.232781][T12207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.235528][T12207] syzkaller0: entered promiscuous mode
[  157.237462][T12207] syzkaller0: entered allmulticast mode
[  157.252316][T12207] tipc: Resetting bearer <eth:syzkaller0>
[  157.256732][T12206] tipc: Resetting bearer <eth:syzkaller0>
[  157.267078][T12206] tipc: Disabling bearer <eth:syzkaller0>
[  157.332857][T12209] netlink: 'syz.0.2759': attribute type 9 has an invalid length.
[  157.566780][T12213] lo speed is unknown, defaulting to 1000
[  157.957883][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'.
[  158.177151][T12252] sctp: [Deprecated]: syz.2.2775 (pid 12252) Use of struct sctp_assoc_value in delayed_ack socket option.
[  158.177151][T12252] Use struct sctp_sack_info instead
[  158.262080][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2780'.
[  158.264936][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'.
[  158.377859][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2784'.
[  158.386912][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2784'.
[  158.540600][T12277] netlink: 'syz.1.2784': attribute type 1 has an invalid length.
[  159.712834][T12328] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  159.716496][T12328] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.719471][T12328] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.743791][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2810'.
[  159.829256][T12341] tipc: Resetting bearer <eth:team0>
[  159.832612][T12341] batman_adv: batadv0: Interface deactivated: dummy0
[  159.834642][T12341] batman_adv: batadv0: Removing interface: dummy0
[  159.853125][T12341] bond4: (slave ip6gretap1): Removing an active aggregator
[  159.856919][T12341] bond4: (slave ip6gretap1): Releasing backup interface
[  159.860287][T12341] ip6gretap1: left promiscuous mode
[  159.862048][T12341] ip6gretap1: left allmulticast mode
[  159.906759][T12341] team0: Mode changed to "activebackup"
[  159.910266][T12341] vlan0: entered promiscuous mode
[  159.921559][T12341] team0: Port device vlan0 added
[  159.927058][T12341] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  160.482136][T12412] raw_sendmsg: syz.1.2847 forgot to set AF_INET. Fix it!
[  160.562945][T12423] net_ratelimit: 11 callbacks suppressed
[  160.562956][T12423] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  160.567101][T12422] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  160.570029][T12422] macvtap1: entered allmulticast mode
[  160.571744][T12422] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  160.577243][T12422] batman_adv: batadv0: Adding interface: macvtap1
[  160.579291][T12422] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.594195][T12422] batman_adv: batadv0: Interface activated: macvtap1
[  160.658271][T12435] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2859'.
[  160.715902][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'.
[  160.722733][T12442] netlink: 'syz.1.2862': attribute type 18 has an invalid length.
[  160.725681][T12442] netlink: 'syz.1.2862': attribute type 18 has an invalid length.
[  160.949576][T12465] sock: sock_timestamping_bind_phc: sock not bind to device
[  161.068167][T12467] lo speed is unknown, defaulting to 1000
[  161.135768][T12485] netlink: 'syz.0.2878': attribute type 16 has an invalid length.
[  161.138266][T12485] netlink: 'syz.0.2878': attribute type 17 has an invalid length.
[  161.200676][T12485] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.202953][T12485] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.205566][T12485] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.207723][T12485] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.214777][T12485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  161.656730][T12512] netlink: 'syz.1.2890': attribute type 15 has an invalid length.
[  161.659216][T12512] netlink: 'syz.1.2890': attribute type 18 has an invalid length.
[  161.697150][T12514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.720629][T12516] netlink: 'syz.2.2892': attribute type 1 has an invalid length.
[  161.755285][T12520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.835554][T12526] syz.2.2897 uses old SIOCAX25GETINFO
[  161.889308][T12532] __nla_validate_parse: 8 callbacks suppressed
[  161.893589][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'.
[  162.266995][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2923'.
[  162.423373][T12602] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  162.434090][T12602] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  162.463109][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'.
[  162.809276][T12640] vlan2: entered promiscuous mode
[  162.812739][T12640] vlan2: entered allmulticast mode
[  162.814442][T12640] hsr_slave_1: entered allmulticast mode
[  162.857832][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2948'.
[  163.554922][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'.
[  163.637181][T12697] netlink: 'syz.2.2974': attribute type 3 has an invalid length.
[  163.714982][T12707] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2979'.
[  163.721553][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'.
[  164.116629][T12745] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2996'.
[  164.213361][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3003'.
[  164.223032][T12760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3004'.
[  164.281384][T12764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.415411][T12800] netlink: 'syz.2.3023': attribute type 1 has an invalid length.
[  165.725999][T12835] lo speed is unknown, defaulting to 1000
[  165.957863][T12843] tipc: Resetting bearer <eth:team0>
[  165.970269][T12843] batadv0: left promiscuous mode
[  166.080569][T12843] vlan0: left promiscuous mode
[  166.143440][T12843] vxlan0: left promiscuous mode
[  166.145290][T12843] vxlan0: left allmulticast mode
[  166.149962][T12843] geneve2: left promiscuous mode
[  166.152559][T12843] geneve2: left allmulticast mode
[  166.159258][T12843] ip6tnl1: left promiscuous mode
[  166.166892][T12843] mac80211_hwsim hwsim5 D: left promiscuous mode
[  166.169218][T12843] mac80211_hwsim hwsim5 D: left allmulticast mode
[  166.181515][T12843] gretap2: left promiscuous mode
[  166.191231][T12843] vlan3: left allmulticast mode
[  166.193661][T12843] veth1: left allmulticast mode
[  166.198231][T12843] gretap3: left promiscuous mode
[  166.200718][T12843] bond4: left promiscuous mode
[  166.202424][T12843] bond4: left allmulticast mode
[  166.214726][T12843] batman_adv: batadv0: Interface deactivated: macvtap1
[  166.218220][T12843] mac80211_hwsim hwsim3 wlan0: left allmulticast mode
[  166.221019][T12843] macvtap1: left allmulticast mode
[  166.229425][ T5903] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.233221][ T5903] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.235974][ T5903] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.238648][ T5903] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.254537][ T5903] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.257261][ T5903] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.261466][ T5903] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.266392][ T5903] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.331851][T12849] netlink: 'syz.2.3044': attribute type 2 has an invalid length.
[  166.400623][T12853] netlink: 'syz.1.3046': attribute type 1 has an invalid length.
[  166.403131][T12853] netlink: 'syz.1.3046': attribute type 2 has an invalid length.
[  166.405572][T12857] tc_dump_action: action bad kind
[  166.842714][T12889] tipc: Disabling bearer <eth:team0>
[  166.846164][T12889] team0 (unregistering): Port device vlan0 removed
[  166.915922][T12901] __nla_validate_parse: 4 callbacks suppressed
[  166.915935][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'.
[  167.304640][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'.
[  167.607434][T12944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3090'.
[  167.773468][T12956] netlink: 'syz.0.3096': attribute type 3 has an invalid length.
[  167.781011][T12956] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.784129][T12956] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.833890][T12956] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.836896][T12956] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.906270][T12956] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.910164][T12956] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.999664][T12956] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.002743][T12956] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.126477][ T5903] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  168.130325][ T5903] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.163590][ T5717] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  168.166178][ T5717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.174862][ T5717] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  168.177577][ T5717] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.186423][ T5717] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  168.190568][ T5717] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.660129][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'.
[  168.788756][T13022] openvswitch: netlink: Multiple metadata blocks provided
[  168.820923][   T33] audit: type=1800 audit(1754814246.098:3): pid=13020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3121" name="memory.events" dev="tmpfs" ino=5587 res=0 errno=0
[  168.926762][T13032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3129'.
[  168.955600][T13036] netlink: 'syz.0.3131': attribute type 1 has an invalid length.
[  168.958054][T13036] netlink: 600 bytes leftover after parsing attributes in process `syz.0.3131'.
[  169.050365][T13048] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  169.083065][T13051] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  169.184415][T13065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.187030][T13065] syzkaller0: entered promiscuous mode
[  169.188878][T13065] syzkaller0: entered allmulticast mode
[  169.204960][T13065] tipc: Resetting bearer <eth:syzkaller0>
[  169.208952][T13064] tipc: Resetting bearer <eth:syzkaller0>
[  169.221513][T13064] tipc: Disabling bearer <eth:syzkaller0>
[  169.599924][T13095] netlink: 'syz.2.3158': attribute type 1 has an invalid length.
[  169.602477][T13095] netlink: 'syz.2.3158': attribute type 3 has an invalid length.
[  169.605436][T13095] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3158'.
[  169.704652][T13103] bridge0: port 1(gretap0) entered blocking state
[  169.707020][T13103] bridge0: port 1(gretap0) entered disabled state
[  169.709123][T13103] gretap0: entered allmulticast mode
[  169.711040][ T5876] Bluetooth: hci0: command 0x0c1a tx timeout
[  169.713023][ T5880] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  169.714608][T13103] gretap0: entered promiscuous mode
[  170.127649][T13141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.131146][T13141] syzkaller0: entered promiscuous mode
[  170.133070][T13141] syzkaller0: entered allmulticast mode
[  170.951581][T13143] tipc: Resetting bearer <eth:syzkaller0>
[  170.955815][T13140] tipc: Resetting bearer <eth:syzkaller0>
[  170.977256][T13140] tipc: Disabling bearer <eth:syzkaller0>
[  171.174016][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'.
[  171.176788][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'.
[  171.271305][T13177] lo speed is unknown, defaulting to 1000
[  171.271418][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3198'.
[  171.332387][T13183] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  172.283984][T13205] netlink: 'syz.1.3206': attribute type 1 has an invalid length.
[  172.286353][T13205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3206'.
[  172.400880][T13217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3212'.
[  172.441261][T13221] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3214'.
[  172.493474][T13226] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  172.743768][T13242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.914492][T13262] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  172.965178][T13265] netlink: 'syz.2.3235': attribute type 83 has an invalid length.
[  173.164239][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'.
[  173.675274][T13319] netlink: 'syz.0.3259': attribute type 7 has an invalid length.
[  173.677784][T13319] netlink: 'syz.0.3259': attribute type 8 has an invalid length.
[  173.680612][T13319] netlink: 'syz.0.3259': attribute type 4 has an invalid length.
[  173.683022][T13319] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3259'.
[  173.723995][T13323] netlink: 'syz.1.3261': attribute type 1 has an invalid length.
[  173.793558][T13331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3265'.
[  173.796411][T13331] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3265'.
[  173.799130][T13331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3265'.
[  173.816912][T13331] bond0: (slave team0): Releasing backup interface
[  173.820618][T13331] team0: left promiscuous mode
[  173.823693][T13331] team0: left allmulticast mode
[  173.827706][T13331] dummy0: left allmulticast mode
[  173.829660][T13331] dummy0: left promiscuous mode
[  173.831468][T13331] bridge0: port 1(dummy0) entered disabled state
[  173.837227][ T5911] lo speed is unknown, defaulting to 1000
[  173.936260][T13344] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3271'.
[  173.939119][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'.
[  173.944869][T13344] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  173.964506][T13346] lo speed is unknown, defaulting to 1000
[  174.012367][T13349] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  174.765361][T13404] rdma_rxe: rxe_newlink: failed to add lo
[  174.794049][T13404] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.810710][T13404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.200467][T13448] netem: unknown loss type 13
[  175.204138][T13448] netem: change failed
[  175.475829][T13477] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.959166][T13526] geneve2: entered promiscuous mode
[  176.869745][T13591] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.872083][T13591] IPv6: NLM_F_CREATE should be set when creating new route
[  176.874333][T13591] IPv6: NLM_F_CREATE should be set when creating new route
[  177.038452][T13607] netlink: 'syz.1.3393': attribute type 8 has an invalid length.
[  177.142917][T13613] "syz.1.3396" (13613) uses obsolete ecb(arc4) skcipher
[  177.157617][T13620] netlink: 'syz.2.3398': attribute type 1 has an invalid length.
[  177.187829][T13622] netlink: 'syz.1.3399': attribute type 4 has an invalid length.
[  177.314337][T13640] __nla_validate_parse: 16 callbacks suppressed
[  177.314358][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'.
[  177.422608][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'.
[  177.632769][T13669] syzkaller1: entered promiscuous mode
[  177.634600][T13669] syzkaller1: entered allmulticast mode
[  177.908835][T13687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.914098][T13687] syzkaller0: entered promiscuous mode
[  177.915876][T13687] syzkaller0: entered allmulticast mode
[  177.933549][T13687] tipc: Resetting bearer <eth:syzkaller0>
[  177.937443][T13686] tipc: Resetting bearer <eth:syzkaller0>
[  177.948933][T13686] tipc: Disabling bearer <eth:syzkaller0>
[  178.108087][T13697] netlink: 'syz.0.3436': attribute type 3 has an invalid length.
[  178.209124][T13706] syzkaller0: entered promiscuous mode
[  178.212741][T13706] syzkaller0: entered allmulticast mode
[  178.475244][T13726] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3449'.
[  178.478029][T13726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3449'.
[  178.482596][T13726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3449'.
[  178.561802][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'.
[  178.605138][T13740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3455'.
[  178.726786][T13754] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  178.754261][T13756] netlink: 'syz.1.3463': attribute type 8 has an invalid length.
[  178.831670][T13762] ksmbd: Unknown IPC event: 3, ignore.
[  178.953517][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3468'.
[  178.957036][T13767] ==================================================================
[  178.959571][T13767] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  178.961877][T13767] Read of size 4 at addr ffff888108301bc4 by task syz.1.3468/13767
[  178.965007][T13767] 
[  178.966049][T13767] CPU: 1 UID: 0 PID: 13767 Comm: syz.1.3468 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  178.966076][T13767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.966090][T13767] Call Trace:
[  178.966098][T13767]  <TASK>
[  178.966106][T13767]  dump_stack_lvl+0x189/0x250
[  178.966130][T13767]  ? __kasan_check_byte+0x12/0x40
[  178.966180][T13767]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.966199][T13767]  ? lock_release+0x4b/0x3e0
[  178.966226][T13767]  ? __virt_addr_valid+0x4a5/0x5c0
[  178.966246][T13767]  print_report+0xca/0x240
[  178.966259][T13767]  ? xfrm_alloc_spi+0x570/0xf30
[  178.966274][T13767]  kasan_report+0x118/0x150
[  178.966297][T13767]  ? xfrm_alloc_spi+0x570/0xf30
[  178.966313][T13767]  xfrm_alloc_spi+0x570/0xf30
[  178.966328][T13767]  ? xfrm_alloc_spi+0x2a0/0xf30
[  178.966341][T13767]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  178.966355][T13767]  ? xfrm_find_acq+0x87/0xa0
[  178.966368][T13767]  xfrm_alloc_userspi+0x70b/0xc90
[  178.966382][T13767]  ? apparmor_capable+0x137/0x1b0
[  178.966391][T13767]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  178.966400][T13767]  ? __nla_parse+0x40/0x60
[  178.966412][T13767]  xfrm_user_rcv_msg+0x7a3/0xab0
[  178.966421][T13767]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  178.966437][T13767]  ? __pfx___mutex_trylock_common+0x10/0x10
[  178.966448][T13767]  ? rcu_is_watching+0x15/0xb0
[  178.966458][T13767]  ? trace_contention_end+0x39/0x120
[  178.966467][T13767]  ? __mutex_lock+0x335/0x1360
[  178.966480][T13767]  netlink_rcv_skb+0x208/0x470
[  178.966493][T13767]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  178.966502][T13767]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  178.966514][T13767]  ? netlink_deliver_tap+0x2e/0x1b0
[  178.966524][T13767]  ? netlink_deliver_tap+0x2e/0x1b0
[  178.966534][T13767]  xfrm_netlink_rcv+0x79/0x90
[  178.966542][T13767]  netlink_unicast+0x82f/0x9e0
[  178.966554][T13767]  ? __pfx_netlink_unicast+0x10/0x10
[  178.966565][T13767]  ? netlink_sendmsg+0x642/0xb30
[  178.966576][T13767]  ? skb_put+0x11b/0x210
[  178.966588][T13767]  netlink_sendmsg+0x805/0xb30
[  178.966600][T13767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.966610][T13767]  ? aa_sock_msg_perm+0xf1/0x1d0
[  178.966622][T13767]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  178.966631][T13767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.966641][T13767]  __sock_sendmsg+0x21c/0x270
[  178.966652][T13767]  ____sys_sendmsg+0x505/0x830
[  178.966665][T13767]  ? __pfx_____sys_sendmsg+0x10/0x10
[  178.966678][T13767]  ? import_iovec+0x74/0xa0
[  178.966686][T13767]  ___sys_sendmsg+0x21f/0x2a0
[  178.966698][T13767]  ? __pfx____sys_sendmsg+0x10/0x10
[  178.966716][T13767]  ? __fget_files+0x2a/0x420
[  178.966728][T13767]  ? __fget_files+0x3a0/0x420
[  178.966741][T13767]  __x64_sys_sendmsg+0x19b/0x260
[  178.966753][T13767]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  178.966767][T13767]  ? rcu_is_watching+0x15/0xb0
[  178.966788][T13767]  ? do_syscall_64+0xbe/0x3b0
[  178.966802][T13767]  do_syscall_64+0xfa/0x3b0
[  178.966813][T13767]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.966825][T13767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.966840][T13767]  ? exc_page_fault+0x9f/0xf0
[  178.966850][T13767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.966860][T13767] RIP: 0033:0x7f52c3f8ebe9
[  178.966883][T13767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.966893][T13767] RSP: 002b:00007f52c4de5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  178.966903][T13767] RAX: ffffffffffffffda RBX: 00007f52c41b5fa0 RCX: 00007f52c3f8ebe9
[  178.966911][T13767] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003
[  178.966917][T13767] RBP: 00007f52c4011e19 R08: 0000000000000000 R09: 0000000000000000
[  178.966922][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.966927][T13767] R13: 00007f52c41b6038 R14: 00007f52c41b5fa0 R15: 00007fff37b42448
[  178.966936][T13767]  </TASK>
[  178.966940][T13767] 
[  179.088957][T13767] Allocated by task 11387:
[  179.090295][T13767]  kasan_save_track+0x3e/0x80
[  179.091739][T13767]  __kasan_slab_alloc+0x6c/0x80
[  179.093215][T13767]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  179.094881][T13767]  xfrm_state_alloc+0x24/0x2f0
[  179.096377][T13767]  __find_acq_core+0x8a7/0x1c00
[  179.097866][T13767]  xfrm_find_acq+0x78/0xa0
[  179.099241][T13767]  xfrm_alloc_userspi+0x6b3/0xc90
[  179.100770][T13767]  xfrm_user_rcv_msg+0x7a3/0xab0
[  179.102283][T13767]  netlink_rcv_skb+0x208/0x470
[  179.103741][T13767]  xfrm_netlink_rcv+0x79/0x90
[  179.105171][T13767]  netlink_unicast+0x82f/0x9e0
[  179.106601][T13767]  netlink_sendmsg+0x805/0xb30
[  179.108078][T13767]  __sock_sendmsg+0x21c/0x270
[  179.109550][T13767]  ____sys_sendmsg+0x505/0x830
[  179.111023][T13767]  ___sys_sendmsg+0x21f/0x2a0
[  179.112459][T13767]  __x64_sys_sendmsg+0x19b/0x260
[  179.113986][T13767]  do_syscall_64+0xfa/0x3b0
[  179.115382][T13767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.117215][T13767] 
[  179.117959][T13767] Freed by task 5879:
[  179.119212][T13767]  kasan_save_track+0x3e/0x80
[  179.120673][T13767]  kasan_save_free_info+0x46/0x50
[  179.122215][T13767]  __kasan_slab_free+0x5b/0x80
[  179.123634][T13767]  kmem_cache_free+0x18f/0x400
[  179.125057][T13767]  xfrm_state_gc_task+0x52d/0x6b0
[  179.126577][T13767]  process_scheduled_works+0xae1/0x17b0
[  179.128240][T13767]  worker_thread+0x8a0/0xda0
[  179.129633][T13767]  kthread+0x711/0x8a0
[  179.130838][T13767]  ret_from_fork+0x3fc/0x770
[  179.132273][T13767]  ret_from_fork_asm+0x1a/0x30
[  179.133743][T13767] 
[  179.134530][T13767] The buggy address belongs to the object at ffff888108301b00
[  179.134530][T13767]  which belongs to the cache xfrm_state of size 928
[  179.138714][T13767] The buggy address is located 196 bytes inside of
[  179.138714][T13767]  freed 928-byte region [ffff888108301b00, ffff888108301ea0)
[  179.142753][T13767] 
[  179.143491][T13767] The buggy address belongs to the physical page:
[  179.145430][T13767] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888108303600 pfn:0x108300
[  179.148500][T13767] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  179.151041][T13767] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  179.153360][T13767] page_type: f5(slab)
[  179.154538][T13767] raw: 057ff00000000040 ffff8881053e3000 dead000000000122 0000000000000000
[  179.157054][T13767] raw: ffff888108303600 00000000800e000b 00000000f5000000 0000000000000000
[  179.159635][T13767] head: 057ff00000000040 ffff8881053e3000 dead000000000122 0000000000000000
[  179.162327][T13767] head: ffff888108303600 00000000800e000b 00000000f5000000 0000000000000000
[  179.164909][T13767] head: 057ff00000000002 ffffea000420c001 00000000ffffffff 00000000ffffffff
[  179.167594][T13767] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  179.170259][T13767] page dumped because: kasan: bad access detected
[  179.172369][T13767] page_owner tracks the page as allocated
[  179.174112][T13767] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8767, tgid 8763 (syz.2.1242), ts 107213685051, free_ts 106381434031
[  179.179775][T13767]  post_alloc_hook+0x240/0x2a0
[  179.181244][T13767]  get_page_from_freelist+0x21e4/0x22c0
[  179.183292][T13767]  __alloc_frozen_pages_noprof+0x181/0x370
[  179.185219][T13767]  alloc_pages_mpol+0x232/0x4a0
[  179.186727][T13767]  allocate_slab+0x8a/0x370
[  179.188157][T13767]  ___slab_alloc+0xbeb/0x1410
[  179.189546][T13767]  kmem_cache_alloc_noprof+0x283/0x3c0
[  179.191180][T13767]  xfrm_state_alloc+0x24/0x2f0
[  179.192643][T13767]  xfrm_state_find+0x37d4/0x5400
[  179.194174][T13767]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  179.195985][T13767]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  179.197549][T13767]  xfrm_lookup_route+0x3c/0x1c0
[  179.199040][T13767]  udp_sendmsg+0x142e/0x2170
[  179.200464][T13767]  __sock_sendmsg+0x19c/0x270
[  179.201921][T13767]  ____sys_sendmsg+0x52d/0x830
[  179.203408][T13767]  ___sys_sendmsg+0x21f/0x2a0
[  179.204835][T13767] page last free pid 8721 tgid 8719 stack trace:
[  179.206783][T13767]  __free_frozen_pages+0xbc4/0xd30
[  179.208275][T13767]  __put_partials+0x156/0x1a0
[  179.209680][T13767]  put_cpu_partial+0x17c/0x250
[  179.211156][T13767]  __slab_free+0x2d5/0x3c0
[  179.212525][T13767]  qlist_free_all+0x97/0x140
[  179.213913][T13767]  kasan_quarantine_reduce+0x148/0x160
[  179.215586][T13767]  __kasan_slab_alloc+0x22/0x80
[  179.217079][T13767]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  179.218879][T13767]  __alloc_skb+0x112/0x2d0
[  179.220257][T13767]  rtmsg_ifinfo_build_skb+0x84/0x260
[  179.222031][T13767]  rtmsg_ifinfo+0x8c/0x1a0
[  179.223375][T13767]  netif_state_change+0x29e/0x3a0
[  179.225217][T13767]  do_setlink+0x35de/0x41c0
[  179.226631][T13767]  rtnl_newlink+0x160b/0x1c70
[  179.228097][T13767]  rtnetlink_rcv_msg+0x7cf/0xb70
[  179.229626][T13767]  netlink_rcv_skb+0x208/0x470
[  179.231105][T13767] 
[  179.231861][T13767] Memory state around the buggy address:
[  179.233603][T13767]  ffff888108301a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  179.236077][T13767]  ffff888108301b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.238514][T13767] >ffff888108301b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.240955][T13767]                                            ^
[  179.242848][T13767]  ffff888108301c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.245339][T13767]  ffff888108301c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.247801][T13767] ==================================================================
[  179.250790][T13767] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  179.253367][T13767] CPU: 1 UID: 0 PID: 13767 Comm: syz.1.3468 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  179.257002][T13767] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.260028][T13767] Call Trace:
[  179.261038][T13767]  <TASK>
[  179.261955][T13767]  dump_stack_lvl+0x99/0x250
[  179.263367][T13767]  ? __asan_memcpy+0x40/0x70
[  179.264758][T13767]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.266327][T13767]  ? __pfx__printk+0x10/0x10
[  179.267777][T13767]  vpanic+0x281/0x750
[  179.268979][T13767]  ? __pfx_vpanic+0x10/0x10
[  179.270461][T13767]  ? irqentry_exit+0x74/0x90
[  179.271880][T13767]  panic+0xb9/0xc0
[  179.273061][T13767]  ? __pfx_panic+0x10/0x10
[  179.274593][T13767]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  179.276449][T13767]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  179.278268][T13767]  ? xfrm_alloc_spi+0x570/0xf30
[  179.279762][T13767]  check_panic_on_warn+0x89/0xb0
[  179.281302][T13767]  ? xfrm_alloc_spi+0x570/0xf30
[  179.282795][T13767]  end_report+0x78/0x160
[  179.284107][T13767]  kasan_report+0x129/0x150
[  179.285523][T13767]  ? xfrm_alloc_spi+0x570/0xf30
[  179.287050][T13767]  xfrm_alloc_spi+0x570/0xf30
[  179.288485][T13767]  ? xfrm_alloc_spi+0x2a0/0xf30
[  179.289969][T13767]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  179.291559][T13767]  ? xfrm_find_acq+0x87/0xa0
[  179.292977][T13767]  xfrm_alloc_userspi+0x70b/0xc90
[  179.294539][T13767]  ? apparmor_capable+0x137/0x1b0
[  179.296095][T13767]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  179.297750][T13767]  ? __nla_parse+0x40/0x60
[  179.299126][T13767]  xfrm_user_rcv_msg+0x7a3/0xab0
[  179.300661][T13767]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  179.302339][T13767]  ? __pfx___mutex_trylock_common+0x10/0x10
[  179.304154][T13767]  ? rcu_is_watching+0x15/0xb0
[  179.305604][T13767]  ? trace_contention_end+0x39/0x120
[  179.307210][T13767]  ? __mutex_lock+0x335/0x1360
[  179.308657][T13767]  netlink_rcv_skb+0x208/0x470
[  179.310118][T13767]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  179.311763][T13767]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  179.313374][T13767]  ? netlink_deliver_tap+0x2e/0x1b0
[  179.314947][T13767]  ? netlink_deliver_tap+0x2e/0x1b0
[  179.316532][T13767]  xfrm_netlink_rcv+0x79/0x90
[  179.318078][T13767]  netlink_unicast+0x82f/0x9e0
[  179.319513][T13767]  ? __pfx_netlink_unicast+0x10/0x10
[  179.321072][T13767]  ? netlink_sendmsg+0x642/0xb30
[  179.322562][T13767]  ? skb_put+0x11b/0x210
[  179.323857][T13767]  netlink_sendmsg+0x805/0xb30
[  179.325302][T13767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.326914][T13767]  ? aa_sock_msg_perm+0xf1/0x1d0
[  179.328412][T13767]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.329992][T13767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.331575][T13767]  __sock_sendmsg+0x21c/0x270
[  179.333017][T13767]  ____sys_sendmsg+0x505/0x830
[  179.334511][T13767]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.336099][T13767]  ? import_iovec+0x74/0xa0
[  179.337480][T13767]  ___sys_sendmsg+0x21f/0x2a0
[  179.338885][T13767]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.340511][T13767]  ? __fget_files+0x2a/0x420
[  179.341943][T13767]  ? __fget_files+0x3a0/0x420
[  179.343399][T13767]  __x64_sys_sendmsg+0x19b/0x260
[  179.344920][T13767]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  179.346556][T13767]  ? rcu_is_watching+0x15/0xb0
[  179.348016][T13767]  ? do_syscall_64+0xbe/0x3b0
[  179.349445][T13767]  do_syscall_64+0xfa/0x3b0
[  179.350846][T13767]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.352421][T13767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.354250][T13767]  ? exc_page_fault+0x9f/0xf0
[  179.355689][T13767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.357517][T13767] RIP: 0033:0x7f52c3f8ebe9
[  179.358895][T13767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.364737][T13767] RSP: 002b:00007f52c4de5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.367279][T13767] RAX: ffffffffffffffda RBX: 00007f52c41b5fa0 RCX: 00007f52c3f8ebe9
[  179.369677][T13767] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003
[  179.372153][T13767] RBP: 00007f52c4011e19 R08: 0000000000000000 R09: 0000000000000000
[  179.374571][T13767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.376975][T13767] R13: 00007f52c41b6038 R14: 00007f52c41b5fa0 R15: 00007fff37b42448
[  179.379573][T13767]  </TASK>
[  179.381106][T13767] Kernel Offset: disabled
[  179.382453][T13767] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:24:16  Registers:
info registers vcpu 0

CPU#0
RAX=8c3aab3732f01100 RBX=ffffffff81968308 RCX=8c3aab3732f01100 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000200 CR3=0000000113d9c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fcc69412e53
XMM06=0000000000000000 00007fcc69412e4d XMM07=0000000000000000 00007fcc69412e61
XMM08=0000000000000000 00007fcc69412ee7 XMM09=0000000000000000 00007fcc69412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000016ed RDI=00000000000016ee RBP=00000000000003f8 RSP=ffffc90007f269f0
R8 =ffff8881070c8237 R9 =1ffff11020e19046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48c6 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f52c4de56c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f52c4de4fc8 CR3=00000000293d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8167983b ffffffff8133c57e
XMM02=3a01000000000000 ffffffff8133c57e XMM03=ffaa000000000000 0000000000000080
XMM04=00007fcc6a0ed100 00007fcc69587460 XMM05=00007fcc69587478 00007fcc695874c0
XMM06=00007fcc695874b8 00007fcc695874b0 XMM07=00007fcc695874a8 00007fcc695874a0
XMM08=0000000000000000 00007fcc69412ee7 XMM09=0000000000000000 00007fcc69412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
