last executing test programs:

2.669161636s ago: executing program 2 (id=4250):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0)

2.625604077s ago: executing program 2 (id=4254):
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f40), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x24)

2.538688181s ago: executing program 2 (id=4256):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006300)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x11}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)

2.451303682s ago: executing program 2 (id=4257):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.334657959s ago: executing program 2 (id=4261):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400002c00128009000100626f6e64000000001c00028008000b0004200000050006000000000008000700"], 0x4c}}, 0x0)

778.959019ms ago: executing program 2 (id=4262):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="ebe3a0e979501a148a0d0b129e6cfd164772219d205e81f4a7f71c1926aae1efd7e005ed863f045cfe6cb55b5bb9fa6935849e6098ed884e7ccb12b672c9f097ca4fe035bbb00400304c09b0294272df", 0x50}], 0x1}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r7, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

347.794827ms ago: executing program 0 (id=4272):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x9, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x150}}, 0x4000010)

347.198376ms ago: executing program 1 (id=4274):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)

289.938471ms ago: executing program 0 (id=4275):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000100)="c118ae99b95d02ff4284860186dd8ebe8d383e2cd981b72ce7da93e06ffda54712b7336b090000009ab2666537b8f3ee1fa8e4744e95", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

289.610994ms ago: executing program 1 (id=4276):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x923, 0x1, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x20000091)

228.221187ms ago: executing program 0 (id=4277):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005400010026bd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="010100000000000000000000d9781cda82405ef608"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x2004c800)

227.869232ms ago: executing program 1 (id=4278):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0x4, @empty, 0x0, 0xff, 'ip6gretap0\x00', 'wg2\x00', {0xff}, {}, 0x84}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x92, 0x1, [0x9, 0x8, 0x5, 0x7, 0x15, 0x3b, 0x4, 0x24, 0x1c, 0x2e, 0x3a, 0x1a, 0x1e, 0x2f, 0x7, 0x26], 0x0, 0x4, 0x1}}}, {{@ip={@multicast2, @local, 0xffffffff, 0xffffff00, 'wg0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003"], 0x364}}, 0x0)

227.522665ms ago: executing program 0 (id=4279):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000740)=0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

149.60342ms ago: executing program 1 (id=4280):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

149.049276ms ago: executing program 0 (id=4281):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

90.505926ms ago: executing program 1 (id=4282):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x3}})

281.144µs ago: executing program 0 (id=4283):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)

0s ago: executing program 1 (id=4284):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r0, 0x8, 0x0, 0xa0000, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d)

kernel console output (not intermixed with test programs):

an-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.393363][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.400686][ T5857] team0: Port device team_slave_0 added
[   73.428094][ T5857] team0: Port device team_slave_1 added
[   73.436065][ T5853] hsr_slave_0: entered promiscuous mode
[   73.438487][ T5853] hsr_slave_1: entered promiscuous mode
[   73.509496][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.512390][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.522838][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.555372][ T5862] hsr_slave_0: entered promiscuous mode
[   73.561986][ T5862] hsr_slave_1: entered promiscuous mode
[   73.564810][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   73.567130][ T5862] Cannot create hsr debugfs directory
[   73.570279][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.572957][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.582212][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.722528][ T5857] hsr_slave_0: entered promiscuous mode
[   73.725342][ T5857] hsr_slave_1: entered promiscuous mode
[   73.728136][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   73.730742][ T5857] Cannot create hsr debugfs directory
[   73.984026][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.991381][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   74.006733][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   74.018167][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   74.083344][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   74.098545][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   74.117431][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   74.128220][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   74.187220][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   74.197057][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   74.205254][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   74.223106][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   74.331696][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.350720][   T55] Bluetooth: hci0: command tx timeout
[   74.353233][   T55] Bluetooth: hci1: command tx timeout
[   74.386714][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   74.405988][  T742] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.409293][  T742] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.430460][  T742] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.433506][  T742] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.440168][   T55] Bluetooth: hci2: command tx timeout
[   74.465134][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.516030][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   74.528889][  T742] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.531895][  T742] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.545360][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.567937][  T742] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.570944][  T742] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.603495][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   74.630951][  T742] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.633977][  T742] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.673604][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.675979][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.732063][ T5857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.736152][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.829940][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.897330][ T5853] veth0_vlan: entered promiscuous mode
[   74.914657][ T5853] veth1_vlan: entered promiscuous mode
[   74.923045][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.983582][ T5853] veth0_macvtap: entered promiscuous mode
[   74.988740][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.003326][ T5853] veth1_macvtap: entered promiscuous mode
[   75.016008][ T5862] veth0_vlan: entered promiscuous mode
[   75.035279][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.046706][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.052903][ T5862] veth1_vlan: entered promiscuous mode
[   75.076823][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.082625][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.096379][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.104874][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.143640][ T5857] veth0_vlan: entered promiscuous mode
[   75.165999][ T5857] veth1_vlan: entered promiscuous mode
[   75.175393][ T5862] veth0_macvtap: entered promiscuous mode
[   75.192626][ T5862] veth1_macvtap: entered promiscuous mode
[   75.242408][  T742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.245757][  T742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.263315][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.276182][ T5857] veth0_macvtap: entered promiscuous mode
[   75.298049][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.305749][ T5857] veth1_macvtap: entered promiscuous mode
[   75.318665][  T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.323128][  T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.331801][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.346774][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.352206][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.355766][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.375706][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.400328][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.423330][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.426829][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.440422][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.455713][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.455851][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   75.484159][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.487433][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.549964][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.606085][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.610545][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.681720][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.684894][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.739388][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.742635][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.147353][ T5952] netlink: 'syz.2.14': attribute type 2 has an invalid length.
[   76.429939][   T55] Bluetooth: hci1: command tx timeout
[   76.432149][ T5856] Bluetooth: hci0: command tx timeout
[   76.510851][ T5856] Bluetooth: hci2: command tx timeout
[   76.593250][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.598232][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   77.386240][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'.
[   77.676140][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'.
[   77.683627][ T6020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.890894][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'.
[   77.896047][ T6029] syz.0.49 uses obsolete (PF_INET,SOCK_PACKET)
[   78.015696][ T6036] veth2: entered allmulticast mode
[   78.118012][ T6042] Zero length message leads to an empty skb
[   78.232457][ T6048] geneve2: entered promiscuous mode
[   78.512925][ T5856] Bluetooth: hci0: command tx timeout
[   78.515164][ T5856] Bluetooth: hci1: command tx timeout
[   78.599545][ T5856] Bluetooth: hci2: command tx timeout
[   78.841510][ T6077] netlink: 104 bytes leftover after parsing attributes in process `syz.2.72'.
[   79.212457][ T6090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.77'.
[   79.253881][ T6090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.77'.
[   79.677755][ T6119] warning: `syz.2.90' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.055413][ T6139] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   80.258238][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'.
[   80.496445][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'.
[   80.600708][ T5856] Bluetooth: hci1: command tx timeout
[   80.602956][ T5856] Bluetooth: hci0: command tx timeout
[   80.634676][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'.
[   80.654214][ T6174] erspan0: entered promiscuous mode
[   80.659864][ T6174] erspan0: left promiscuous mode
[   80.673781][ T5856] Bluetooth: hci2: command tx timeout
[   81.719124][   T33] audit: type=1800 audit(1754988611.913:2): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.134" name="cgroup.controllers" dev="tmpfs" ino=259 res=0 errno=0
[   82.043523][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'.
[   82.436221][ T6247] __nla_validate_parse: 1 callbacks suppressed
[   82.436240][ T6247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.151'.
[   82.687518][ T6261] netlink: 'syz.2.156': attribute type 27 has an invalid length.
[   82.700702][ T6265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'.
[   83.292741][ T6298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.450221][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'.
[   83.454721][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'.
[   83.707437][ T6318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.183'.
[   83.718173][ T6318] block nbd0: not configured, cannot reconfigure
[   83.765620][ T6321] netlink: 'syz.0.184': attribute type 4 has an invalid length.
[   83.878269][ T6325] syzkaller1: entered promiscuous mode
[   83.882626][ T6325] syzkaller1: entered allmulticast mode
[   84.570103][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'.
[   84.740238][ T6361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.798284][ T6363] lo speed is unknown, defaulting to 1000
[   84.805099][ T6363] lo speed is unknown, defaulting to 1000
[   84.820557][ T6363] lo speed is unknown, defaulting to 1000
[   84.826438][ T6363] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.860192][ T6363] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   84.984452][ T6363] lo speed is unknown, defaulting to 1000
[   84.990923][ T6363] lo speed is unknown, defaulting to 1000
[   84.995214][ T6363] lo speed is unknown, defaulting to 1000
[   85.000666][ T6363] lo speed is unknown, defaulting to 1000
[   85.115004][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'.
[   85.118745][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.208'.
[   85.333685][ T6379] lo speed is unknown, defaulting to 1000
[   85.336127][ T6386] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.760466][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'.
[   85.901145][ T6416] netlink: 'syz.0.227': attribute type 9 has an invalid length.
[   85.910764][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'.
[   85.970226][ T6416] netlink: 'syz.0.227': attribute type 9 has an invalid length.
[   85.972059][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.985114][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.007022][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.012920][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.837382][  T794] cfg80211: failed to load regulatory.db
[   87.292399][ T6505] netlink: 'syz.2.260': attribute type 10 has an invalid length.
[   87.308628][ T6505] team0: Port device geneve0 added
[   88.191361][ T6526] __nla_validate_parse: 5 callbacks suppressed
[   88.191380][ T6526] netlink: 96 bytes leftover after parsing attributes in process `syz.0.266'.
[   88.905512][ T6532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.269'.
[   89.140222][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'.
[   89.501944][ T6548] lo speed is unknown, defaulting to 1000
[   89.539923][ T6553] C: renamed from lo (while UP)
[   89.558035][ T6553] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.626793][ T6554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.276'.
[   90.561281][ T6516] Set syz1 is full, maxelem 65536 reached
[   90.768800][ T6584] batadv_slave_1: entered promiscuous mode
[   90.788498][ T6584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.291'.
[   90.797774][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'.
[   90.802790][ T6584] bridge_slave_1: left allmulticast mode
[   90.805746][ T6584] bridge_slave_1: left promiscuous mode
[   90.809767][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.811927][ T6585] Bluetooth: MGMT ver 1.23
[   90.817787][ T6582] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   90.826548][ T6584] bridge_slave_0: left allmulticast mode
[   90.828918][ T6584] bridge_slave_0: left promiscuous mode
[   90.832811][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.986936][ T6583] batadv_slave_1: left promiscuous mode
[   91.596143][ T6617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.300'.
[   91.601004][ T6617] netlink: 43 bytes leftover after parsing attributes in process `syz.1.300'.
[   91.604877][ T6617] netlink: 'syz.1.300': attribute type 5 has an invalid length.
[   91.608508][ T6617] netlink: 43 bytes leftover after parsing attributes in process `syz.1.300'.
[   92.829654][ T5856] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   92.955110][ T6676] netlink: 60 bytes leftover after parsing attributes in process `syz.1.318'.
[   93.012002][ T6680] Driver unsupported XDP return value 0 on prog  (id 31) dev N/A, expect packet loss!
[   93.085167][ T6685] netlink: 'syz.2.324': attribute type 10 has an invalid length.
[   93.098752][ T6685] team0: Cannot enslave team device to itself
[   93.677917][ T6718] __nla_validate_parse: 3 callbacks suppressed
[   93.677937][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'.
[   94.049681][ T6737] block nbd0: server does not support multiple connections per device.
[   94.061084][ T6737] block nbd0: shutting down sockets
[   94.354042][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   94.488903][ T6775] netlink: 'syz.0.362': attribute type 1 has an invalid length.
[   95.343502][ T6824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'.
[   95.347043][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'.
[   95.705819][ T6835] tun0: tun_chr_ioctl cmd 21731
[   96.046853][ T6845] netlink: 'syz.0.390': attribute type 1 has an invalid length.
[   96.053542][ T6845] netlink: 144 bytes leftover after parsing attributes in process `syz.0.390'.
[   96.057110][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.390'.
[   96.450235][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'.
[   96.464568][ T6873] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   96.467903][ T6873] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.703619][ T6891] netlink: 'syz.2.413': attribute type 7 has an invalid length.
[   96.707176][ T6891] netlink: 'syz.2.413': attribute type 3 has an invalid length.
[   96.711631][ T6891] netlink: 224 bytes leftover after parsing attributes in process `syz.2.413'.
[   96.905888][ T6900] tipc: Started in network mode
[   96.908416][ T6900] tipc: Node identity 46280fc912d7, cluster identity 4711
[   96.914931][ T6900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.921908][ T6900] syzkaller0: entered promiscuous mode
[   96.924586][ T6900] syzkaller0: entered allmulticast mode
[   96.942780][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'.
[   96.951634][ T6900] tipc: Resetting bearer <eth:syzkaller0>
[   96.957821][ T6898] tipc: Resetting bearer <eth:syzkaller0>
[   96.969455][ T6898] tipc: Disabling bearer <eth:syzkaller0>
[   97.314816][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'.
[   97.601819][ T6939] netlink: 'syz.1.434': attribute type 8 has an invalid length.
[   97.693654][ T6945] tipc: Started in network mode
[   97.695400][ T6945] tipc: Node identity 261d40e80d9, cluster identity 4711
[   97.698106][ T6945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.702215][ T6945] syzkaller0: entered promiscuous mode
[   97.704188][ T6945] syzkaller0: entered allmulticast mode
[   97.732284][ T6945] tipc: Resetting bearer <eth:syzkaller0>
[   97.741115][ T6944] tipc: Resetting bearer <eth:syzkaller0>
[   97.773759][ T6944] tipc: Disabling bearer <eth:syzkaller0>
[   98.254982][ T5917] IPVS: starting estimator thread 0...
[   98.339294][ T6973] IPVS: using max 45 ests per chain, 108000 per kthread
[   98.385138][ T6981] ieee802154 phy0 wpan0: encryption failed: -22
[   98.403638][ T6978] C speed is unknown, defaulting to 1000
[   98.485415][ T6986] C speed is unknown, defaulting to 1000
[   98.554160][ T6990] netlink: 'syz.1.455': attribute type 3 has an invalid length.
[   98.557465][ T6990] netlink: 'syz.1.455': attribute type 3 has an invalid length.
[   98.861342][ T7008] __nla_validate_parse: 7 callbacks suppressed
[   98.861360][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'.
[   98.867653][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'.
[   98.974638][ T7014] netlink: 'syz.1.465': attribute type 9 has an invalid length.
[   98.978508][ T7014] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.465'.
[   99.257204][ T7026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.262030][ T7026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.352357][ T7026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.356701][ T7026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.374617][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'.
[   99.434379][ T7026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.438522][ T7026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.465191][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.2.478'.
[   99.517770][ T7026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   99.522458][ T7026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.595796][ T7048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.650460][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   99.653812][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.678725][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.689138][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.718494][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.721745][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.749922][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.759375][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.819348][ T7060] netlink: 'syz.1.486': attribute type 10 has an invalid length.
[   99.826226][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'.
[   99.834476][ T7062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.488'.
[   99.843493][ T7060] team0: Device veth1_macvtap failed to register rx_handler
[   99.857483][ T7060] syz.1.486 (7060) used greatest stack depth: 20024 bytes left
[   99.938327][ T7069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.108015][ T7085] tap0: tun_chr_ioctl cmd 35108
[  100.204137][ T7094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.503'.
[  100.451479][ T7116] netlink: 56 bytes leftover after parsing attributes in process `syz.0.511'.
[  100.586498][ T7125] tipc: Started in network mode
[  100.588383][ T7125] tipc: Node identity 7e59c539c4ae, cluster identity 4711
[  100.591975][ T7125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.600026][ T7125] syzkaller0: entered promiscuous mode
[  100.602365][ T7125] syzkaller0: entered allmulticast mode
[  101.213711][ T7134] tipc: Resetting bearer <eth:syzkaller0>
[  101.437045][ T7124] tipc: Resetting bearer <eth:syzkaller0>
[  101.448951][ T7124] tipc: Disabling bearer <eth:syzkaller0>
[  101.475868][ T7141] netlink: 'syz.0.522': attribute type 1 has an invalid length.
[  101.481588][ T7141] netlink: 224 bytes leftover after parsing attributes in process `syz.0.522'.
[  101.847796][ T7161] openvswitch: netlink: Unknown key attributes 2
[  102.070412][ T7171] syzkaller1: entered promiscuous mode
[  102.072423][ T7171] syzkaller1: entered allmulticast mode
[  103.907355][ T7314] __nla_validate_parse: 7 callbacks suppressed
[  103.907367][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'.
[  104.026810][ T7320] netlink: 'syz.2.603': attribute type 1 has an invalid length.
[  104.029875][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'.
[  104.098683][ T7326] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  104.236081][ T7330] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.607'.
[  104.410951][ T7332] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  104.494139][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.613'.
[  104.497819][ T7346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.613'.
[  104.731449][ T7359] gretap0: entered promiscuous mode
[  104.734150][ T7359] vlan2: entered promiscuous mode
[  104.858117][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'.
[  104.865547][ T7361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.618'.
[  104.872681][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'.
[  104.882837][ T7361] netlink: 32 bytes leftover after parsing attributes in process `syz.2.618'.
[  105.288653][ T7385] netlink: 48 bytes leftover after parsing attributes in process `syz.2.627'.
[  105.512971][ T7390] bridge0: entered promiscuous mode
[  105.517088][ T7390] macvtap1: entered promiscuous mode
[  105.527307][ T7390] macvtap1: entered allmulticast mode
[  105.531494][ T7390] bridge0: entered allmulticast mode
[  106.021997][ T7390] bridge0: left allmulticast mode
[  106.025852][ T7390] bridge0: left promiscuous mode
[  106.435017][ T7426] bridge0: entered promiscuous mode
[  106.437729][ T7426] macsec1: entered promiscuous mode
[  106.443430][ T7426] macsec1: entered allmulticast mode
[  106.446834][ T7426] bridge0: entered allmulticast mode
[  106.452184][ T7426] bridge0: port 1(macsec1) entered blocking state
[  106.455440][ T7426] bridge0: port 1(macsec1) entered disabled state
[  106.464223][ T7426] bridge0: left allmulticast mode
[  106.466813][ T7426] bridge0: left promiscuous mode
[  107.176541][ T7456] netlink: 'syz.2.658': attribute type 5 has an invalid length.
[  107.287838][ T7460] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  107.347762][ T7462] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[  107.417365][ T7462] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.425236][ T7466] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.475606][ T7464] bond1: (slave veth3): Enslaving as an active interface with a down link
[  107.495137][ T7462] vlan2: entered allmulticast mode
[  107.497126][ T7462] veth1: entered allmulticast mode
[  107.501390][ T7462] veth1: entered promiscuous mode
[  107.504964][ T7462] veth1: left promiscuous mode
[  107.513516][ T7462] bond1: (slave vlan2): making interface the new active one
[  107.517989][ T7462] veth1: entered promiscuous mode
[  107.522035][ T7462] vlan2: entered promiscuous mode
[  107.526481][ T7462] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  107.546084][ T7461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.018191][ T7493] 8021q: VLANs not supported on wg0
[  108.505812][ T7524] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  108.601110][ T7532] vlan3: entered promiscuous mode
[  108.603433][ T7532] vlan3: entered allmulticast mode
[  108.605980][ T7532] hsr_slave_1: entered allmulticast mode
[  108.983186][ T7553] __nla_validate_parse: 7 callbacks suppressed
[  108.983240][ T7553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.704'.
[  109.273031][ T7561] macsec1: entered allmulticast mode
[  109.288137][ T7561] macsec0: entered allmulticast mode
[  109.290595][ T7561] veth1_macvtap: entered allmulticast mode
[  109.294295][ T7567] vlan0: entered promiscuous mode
[  110.034260][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.731'.
[  110.038268][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'.
[  110.067706][ T7611] bridge0: port 1(syz_tun) entered blocking state
[  110.071812][ T7611] bridge0: port 1(syz_tun) entered disabled state
[  110.074353][ T7611] syz_tun: entered allmulticast mode
[  110.077534][ T7611] syz_tun: entered promiscuous mode
[  110.083999][ T7611] bridge0: port 1(syz_tun) entered blocking state
[  110.086904][ T7611] bridge0: port 1(syz_tun) entered forwarding state
[  110.272900][ T7625] ieee802154 phy1 wpan1: encryption failed: -22
[  110.380852][ T7632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.384273][ T7632] syzkaller0: entered promiscuous mode
[  110.386493][ T7632] syzkaller0: entered allmulticast mode
[  110.423945][ T7632] tipc: Resetting bearer <eth:syzkaller0>
[  110.430555][ T7631] tipc: Resetting bearer <eth:syzkaller0>
[  110.462206][ T7631] tipc: Disabling bearer <eth:syzkaller0>
[  110.520022][ T7641] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  110.556186][ T7643] netlink: 'syz.0.747': attribute type 9 has an invalid length.
[  110.762819][ T7666] netlink: 132 bytes leftover after parsing attributes in process `syz.0.758'.
[  110.785205][ T7669] netlink: 'syz.2.760': attribute type 3 has an invalid length.
[  110.788457][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[  110.915616][ T7681] ip6gre1: entered promiscuous mode
[  111.067990][ T7685] geneve2: entered promiscuous mode
[  111.074164][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  111.081359][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  111.088033][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  111.092866][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  111.472075][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'.
[  111.641625][ T5312] tipc: Node number set to 1426001865
[  112.001096][ T7730] C speed is unknown, defaulting to 1000
[  112.055350][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'.
[  112.063892][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'.
[  112.122142][ T7737] C speed is unknown, defaulting to 1000
[  112.139744][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[  112.195560][ T7742] syzkaller1: entered promiscuous mode
[  112.198161][ T7742] syzkaller1: entered allmulticast mode
[  112.403904][ T7754] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  112.478880][ T7758] ieee802154 phy1 wpan1: encryption failed: -22
[  113.302308][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'.
[  113.753339][ T7821] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  113.757495][ T7821] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  113.837764][ T7826] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  114.122389][ T7834] __nla_validate_parse: 1 callbacks suppressed
[  114.122408][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  114.538710][ T5903] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  115.267125][ T7916] netlink: 'syz.0.863': attribute type 13 has an invalid length.
[  115.281795][ T7916] gretap0: refused to change device tx_queue_len
[  115.289322][ T7916] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  115.398299][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'.
[  115.418348][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'.
[  115.421898][ T7930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.435940][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.869'.
[  115.773944][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'.
[  116.045875][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.052478][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.071334][ T7976] netlink: 'syz.2.893': attribute type 16 has an invalid length.
[  116.085193][ T7976] netlink: 'syz.2.893': attribute type 17 has an invalid length.
[  116.147840][ T7976] 8021q: adding VLAN 0 to HW filter on device team0
[  116.167605][ T7976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.478905][ T7993] netlink: 56 bytes leftover after parsing attributes in process `syz.2.899'.
[  116.516347][ T7993] netlink: 152 bytes leftover after parsing attributes in process `syz.2.899'.
[  116.845445][ T8022] syzkaller0: entered promiscuous mode
[  116.847593][ T8022] syzkaller0: entered allmulticast mode
[  116.866255][ T8022] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  117.371754][ T8054] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.246553][ T8110] netlink: 'syz.0.947': attribute type 8 has an invalid length.
[  118.345050][ T8116] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  118.350214][ T8116] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  118.361621][ T8118] bridge: RTM_NEWNEIGH with invalid ether address
[  118.403280][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'.
[  118.464441][ T8125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.467825][ T8125] syzkaller0: entered promiscuous mode
[  118.471793][ T8125] syzkaller0: entered allmulticast mode
[  118.502256][ T8125] tipc: Resetting bearer <eth:syzkaller0>
[  118.508579][ T8123] tipc: Resetting bearer <eth:syzkaller0>
[  118.520184][ T8123] tipc: Disabling bearer <eth:syzkaller0>
[  118.652934][ T8134] pim6reg1: entered promiscuous mode
[  118.654844][ T8134] pim6reg1: entered allmulticast mode
[  118.700997][   T13] vlan2: left promiscuous mode
[  118.847927][ T8146] netlink: 104 bytes leftover after parsing attributes in process `syz.0.965'.
[  118.988366][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'.
[  119.122857][ T8158] bridge0: port 1(syz_tun) entered disabled state
[  119.255114][ T8158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.275993][ T8158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.353868][ T8158] tipc: Resetting bearer <eth:macvtap0>
[  119.403759][ T8158] geneve2: left promiscuous mode
[  119.416768][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.423313][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.426915][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.439601][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.443021][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.446606][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.455328][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.472974][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.483370][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.488074][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  119.496995][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.504942][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  119.621969][ T8183] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.982'.
[  119.685396][ T8187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.984'.
[  119.691880][ T8187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.681016][ T8215] netlink: 52 bytes leftover after parsing attributes in process `syz.1.995'.
[  121.684876][ T8215] netlink: 'syz.1.995': attribute type 1 has an invalid length.
[  122.851569][ T8266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.983763][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'.
[  122.987520][ T8275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1018'.
[  122.997320][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'.
[  123.001979][ T8275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1018'.
[  123.005957][ T8275] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1018'.
[  123.133948][ T8282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1018'.
[  123.151487][ T8275] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1018'.
[  124.789783][ T8383] __nla_validate_parse: 1 callbacks suppressed
[  124.789800][ T8383] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1031'.
[  125.021352][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'.
[  125.056149][ T8402] IPv6: Can't replace route, no match found
[  125.106610][ T8406] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1048'.
[  125.198141][ T8414] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1052'.
[  125.210399][ T8414] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  125.240251][ T8414] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.264992][ T8414] bond1: (slave gretap1): making interface the new active one
[  125.271049][ T8416] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  125.281608][ T8414] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  125.329458][ T8414] syz.0.1052 (8414) used greatest stack depth: 19944 bytes left
[  125.543427][ T8436] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  127.191343][ T8519] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  127.419205][ T8533] netlink: 'syz.1.1084': attribute type 10 has an invalid length.
[  127.421922][ T8533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1084'.
[  127.448192][ T8533] batman_adv: batadv0: Adding interface: virt_wifi0
[  127.452367][ T8533] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.461333][ T8533] batman_adv: batadv0: Interface activated: virt_wifi0
[  127.655020][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'.
[  127.658263][ T8552] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.708208][ T8552] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.784656][ T8559] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1096'.
[  127.868534][ T8562] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1097'.
[  127.874095][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'.
[  127.912214][ T8563] TCP: TCP_TX_DELAY enabled
[  128.904649][ T8572] bridge_slave_0: left allmulticast mode
[  128.907015][ T8572] bridge_slave_0: left promiscuous mode
[  128.911498][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.921628][ T8572] bridge_slave_1: left allmulticast mode
[  128.924187][ T8572] bridge_slave_1: left promiscuous mode
[  128.928479][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.952177][ T8572] bond0: (slave bond_slave_0): Releasing backup interface
[  128.983694][ T8572] bond0: (slave bond_slave_1): Releasing backup interface
[  129.008576][ T8572] team0: Port device team_slave_0 removed
[  129.026709][ T8572] team0: Port device team_slave_1 removed
[  129.040776][ T8572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.059486][ T8572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.074856][ T8572] team0: Port device geneve0 removed
[  129.328588][ T8582] C speed is unknown, defaulting to 1000
[  129.435785][ T8589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1107'.
[  129.441735][ T8589] unsupported nlmsg_type 40
[  129.564216][ T8595] vlan2: entered promiscuous mode
[  129.567059][ T8595] bridge0: entered promiscuous mode
[  129.574189][ T8595] vlan2: entered allmulticast mode
[  129.576609][ T8595] bridge0: entered allmulticast mode
[  129.622303][ T8599] netlink: 'syz.2.1112': attribute type 1 has an invalid length.
[  129.924652][ T8614] netlink: 'syz.1.1118': attribute type 10 has an invalid length.
[  129.939213][ T8614] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  131.432346][ T8639] IPVS: persistence engine module ip_vs_pe_ not found
[  132.585510][ T8670] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  132.942743][ T8688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.947112][ T8688] syzkaller0: entered promiscuous mode
[  132.950775][ T8688] syzkaller0: entered allmulticast mode
[  132.977389][ T8688] tipc: Resetting bearer <eth:syzkaller0>
[  132.985146][ T8687] tipc: Resetting bearer <eth:syzkaller0>
[  132.998517][ T8687] tipc: Disabling bearer <eth:syzkaller0>
[  133.142372][ T8698] __nla_validate_parse: 1 callbacks suppressed
[  133.142384][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1152'.
[  133.323815][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1157'.
[  133.488621][ T8718] ipvlan2: entered promiscuous mode
[  133.877191][ T8752] netlink: 'syz.1.1177': attribute type 1 has an invalid length.
[  134.034302][ T8761] netlink: 'syz.0.1179': attribute type 1 has an invalid length.
[  134.094873][ T8767] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1184'.
[  134.356986][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'.
[  134.879791][ T8805] bridge0: port 2(ipvlan2) entered blocking state
[  134.887645][ T8805] bridge0: port 2(ipvlan2) entered disabled state
[  134.891147][ T8805] ipvlan2: entered allmulticast mode
[  134.900231][ T8805] bridge0: entered allmulticast mode
[  134.904460][ T8805] ipvlan2: left allmulticast mode
[  134.906751][ T8805] bridge0: left allmulticast mode
[  134.984124][ T8813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'.
[  135.054400][ T8817] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  135.692750][ T8873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1232'.
[  135.838560][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'.
[  136.005887][ T8899] netlink: 'syz.0.1244': attribute type 5 has an invalid length.
[  136.008799][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'.
[  136.029296][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  136.125092][ T8909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.132325][ T8909] syzkaller0: entered promiscuous mode
[  136.134445][ T8909] syzkaller0: entered allmulticast mode
[  136.155738][ T8909] tipc: Resetting bearer <eth:syzkaller0>
[  136.162606][ T8908] tipc: Resetting bearer <eth:syzkaller0>
[  136.178473][ T8908] tipc: Disabling bearer <eth:syzkaller0>
[  136.476855][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'.
[  136.485562][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'.
[  136.532278][ T8938] netlink: 'syz.1.1263': attribute type 5 has an invalid length.
[  136.535799][ T8938] netlink: 'syz.1.1263': attribute type 5 has an invalid length.
[  137.504546][ T9007] netlink: 'syz.0.1294': attribute type 1 has an invalid length.
[  137.856602][ T9020] tun0: tun_chr_ioctl cmd 2148553947
[  137.879738][ T9020] C speed is unknown, defaulting to 1000
[  138.033356][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  138.307703][ T5856] Bluetooth: hci2: link tx timeout
[  138.312892][ T5856] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  138.317628][   T55] Bluetooth: hci2: link tx timeout
[  138.320396][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  138.323623][   T55] Bluetooth: hci2: link tx timeout
[  138.325959][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  138.382876][ T9031] __nla_validate_parse: 3 callbacks suppressed
[  138.382888][ T9031] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1303'.
[  138.399847][ T9033] netlink: 'syz.0.1305': attribute type 3 has an invalid length.
[  138.618541][   T46] IPVS: starting estimator thread 0...
[  138.634690][ T9052] syzkaller1: entered promiscuous mode
[  138.637355][ T9052] syzkaller1: entered allmulticast mode
[  138.709246][ T9055] IPVS: using max 38 ests per chain, 91200 per kthread
[  138.814043][ T9061] netlink: 'syz.0.1319': attribute type 58 has an invalid length.
[  138.817361][ T9061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1319'.
[  138.870029][ T9064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  138.910241][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'.
[  138.986095][ T9070] netlink: 'syz.1.1322': attribute type 322 has an invalid length.
[  139.206826][ T9076] syzkaller0: entered promiscuous mode
[  139.209526][ T9076] syzkaller0: entered allmulticast mode
[  139.283357][ T9080] netem: incorrect gi model size
[  139.285702][ T9080] netem: change failed
[  139.486880][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'.
[  139.652603][ T9090] netlink: 'syz.0.1332': attribute type 11 has an invalid length.
[  139.652600][ T9092] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1333'.
[  139.708956][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  139.861057][ T9102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.864769][ T9102] syzkaller0: entered promiscuous mode
[  139.867071][ T9102] syzkaller0: entered allmulticast mode
[  139.883284][ T9102] tipc: Resetting bearer <eth:syzkaller0>
[  139.890938][ T9101] tipc: Resetting bearer <eth:syzkaller0>
[  139.909979][ T9101] tipc: Disabling bearer <eth:syzkaller0>
[  140.336764][ T9137] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  140.360842][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  140.403357][ T9139] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.490412][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'.
[  140.586482][ T9156] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1363'.
[  140.626104][ T9158] syzkaller1: entered promiscuous mode
[  140.627921][ T9158] syzkaller1: entered allmulticast mode
[  140.632223][ T9158] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  140.860101][ T9168] batman_adv: batadv0: Adding interface: macvlan2
[  140.862791][ T9168] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.873602][ T9168] batman_adv: batadv0: Interface activated: macvlan2
[  140.931229][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'.
[  140.936948][ T9172] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1371'.
[  141.092168][ T9186] xt_limit: Overflow, try lower: 271964/0
[  141.194842][ T9188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.223388][ T9195] ieee802154 phy1 wpan1: encryption failed: -90
[  141.238369][ T9198] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  141.302364][ T9188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.396181][ T9188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.489238][ T9188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.610436][ T5747] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.626205][ T5747] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  141.669589][ T5747] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.687518][ T5747] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.720025][ T9232] netlink: 'syz.2.1398': attribute type 5 has an invalid length.
[  141.722455][ T9232] netlink: 'syz.2.1398': attribute type 6 has an invalid length.
[  142.075632][ T9247] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  142.214446][ T9254] netlink: 'syz.1.1406': attribute type 10 has an invalid length.
[  142.237626][ T9254] team0: Port device dummy0 added
[  142.425855][ T9264] netlink: 'syz.1.1412': attribute type 28 has an invalid length.
[  142.658550][ T9280] netlink: 'syz.0.1420': attribute type 15 has an invalid length.
[  143.496538][ T9337] __nla_validate_parse: 9 callbacks suppressed
[  143.496557][ T9337] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1440'.
[  143.898528][ T9359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1446'.
[  143.974567][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'.
[  144.063088][ T9375] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  144.107139][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'.
[  144.114304][ T9377] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1455'.
[  144.331910][ T9396] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1456'.
[  144.397759][ T9396] bond0 (unregistering): Released all slaves
[  144.651095][ T9423] netlink: 'syz.1.1471': attribute type 9 has an invalid length.
[  144.654245][ T9423] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1471'.
[  145.125462][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'.
[  146.226815][ T9530] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1521'.
[  146.236320][ T9530] batadv1: entered promiscuous mode
[  146.238462][ T9530] batadv1: entered allmulticast mode
[  146.378458][ T9530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1521'.
[  146.624099][   T33] audit: type=1804 audit(1754988676.833:3): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1528" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2428 res=1 errno=0
[  146.635044][   T33] audit: type=1800 audit(1754988676.833:4): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1528" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2428 res=0 errno=0
[  146.713415][ T9556] tipc: Failed to remove unknown binding: 66,1,1/0:116249525/116249527
[  146.718824][ T9556] tipc: Failed to remove unknown binding: 66,1,1/0:116249525/116249527
[  146.868070][ T9567] ip6gre1: entered allmulticast mode
[  147.346622][ T9587] IPv6: addrconf: prefix option has invalid lifetime
[  147.746806][ T9607] openvswitch: netlink: Unknown nsh attribute 0
[  147.749791][ T9607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.041728][ T9619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.045270][ T9619] syzkaller0: entered promiscuous mode
[  148.047498][ T9619] syzkaller0: entered allmulticast mode
[  148.088546][ T9619] tipc: Resetting bearer <eth:syzkaller0>
[  148.100649][ T9618] tipc: Resetting bearer <eth:syzkaller0>
[  148.127784][ T9618] tipc: Disabling bearer <eth:syzkaller0>
[  149.197577][ T9675] netlink: 'syz.0.1587': attribute type 1 has an invalid length.
[  149.201641][ T9675] netlink: 'syz.0.1587': attribute type 2 has an invalid length.
[  149.205158][ T9675] netlink: 'syz.0.1587': attribute type 1 has an invalid length.
[  149.208522][ T9675] __nla_validate_parse: 2 callbacks suppressed
[  149.208533][ T9675] netlink: 1156 bytes leftover after parsing attributes in process `syz.0.1587'.
[  149.590122][ T9703] netlink: 'syz.0.1601': attribute type 1 has an invalid length.
[  149.593134][ T9703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.751699][ T9668] Bluetooth: hci0: Opcode 0x080f failed: -4
[  149.766151][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'.
[  149.797628][ T9714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1607'.
[  149.858932][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1609'.
[  149.906976][ T9726] netlink: 'syz.1.1612': attribute type 4 has an invalid length.
[  149.922192][  T794] C speed is unknown, defaulting to 1000
[  149.924317][  T794] syz2: Port: 1 Link DOWN
[  150.091664][ T9742] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1620'.
[  150.095713][ T9742] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  150.149474][ T9746] bridge2: entered allmulticast mode
[  150.552679][ T9770] team0: Port device dummy0 removed
[  150.559930][ T9770] bridge_slave_0: left allmulticast mode
[  150.562727][ T9770] bridge_slave_0: left promiscuous mode
[  150.565658][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.583396][ T9770] bridge_slave_1: left allmulticast mode
[  150.586146][ T9770] bridge_slave_1: left promiscuous mode
[  150.591925][ T9770] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.608415][ T9770] bond0: (slave bond_slave_0): Releasing backup interface
[  150.616875][ T9770] bond0: (slave bond_slave_1): Releasing backup interface
[  150.633021][ T9770] team0: Port device team_slave_0 removed
[  150.647279][ T9770] team0: Port device team_slave_1 removed
[  150.651469][ T9770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.664276][ T9770] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.670094][ T9770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.673385][ T9770] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.681027][ T9770] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  150.684076][ T9770] batman_adv: batadv0: Removing interface: virt_wifi0
[  150.696397][ T9770] bond0: (slave geneve1): Releasing backup interface
[  150.709279][ T9770] bond1: (slave veth3): Releasing active interface
[  150.712206][ T9770] bond1: (slave veth3): the permanent HWaddr of slave - 32:7e:5f:a2:f1:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  150.723205][ T9770] vlan2: entered promiscuous mode
[  150.730694][ T9770] bond1: (slave vlan2): Releasing active interface
[  150.733978][ T9770] vlan2: left promiscuous mode
[  150.741637][ T9770] veth1: left promiscuous mode
[  151.248255][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1653'.
[  151.394482][ T9826] netlink: 'syz.2.1658': attribute type 1 has an invalid length.
[  151.472499][ T9828] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  152.145688][ T9864] C speed is unknown, defaulting to 1000
[  152.297062][ T9877] veth1_to_bond: entered allmulticast mode
[  152.300779][ T9877] bond_slave_1: entered promiscuous mode
[  152.303689][ T9876] bond_slave_1: left promiscuous mode
[  152.306149][ T9876] veth1_to_bond: left allmulticast mode
[  152.360270][ T9878] syz.1.1682: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  152.371089][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: syz.1.1682 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  152.371110][ T9878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.371120][ T9878] Call Trace:
[  152.371126][ T9878]  <TASK>
[  152.371133][ T9878]  dump_stack_lvl+0x189/0x250
[  152.371166][ T9878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.371184][ T9878]  ? __pfx__printk+0x10/0x10
[  152.371206][ T9878]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  152.371262][ T9878]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  152.371282][ T9878]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  152.371301][ T9878]  warn_alloc+0x214/0x310
[  152.371327][ T9878]  ? stack_depot_save_flags+0x40/0x860
[  152.371346][ T9878]  ? __pfx_warn_alloc+0x10/0x10
[  152.371369][ T9878]  ? kasan_save_track+0x4f/0x80
[  152.371388][ T9878]  ? xskq_create+0x56/0x170
[  152.371404][ T9878]  ? xsk_init_queue+0xb0/0x110
[  152.371418][ T9878]  ? xsk_setsockopt+0x4dc/0x8d0
[  152.371431][ T9878]  ? do_sock_setsockopt+0x17c/0x1b0
[  152.371451][ T9878]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  152.371470][ T9878]  ? do_syscall_64+0xfa/0x3b0
[  152.371487][ T9878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.371508][ T9878]  __vmalloc_node_range_noprof+0x125/0x12f0
[  152.371551][ T9878]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  152.371576][ T9878]  ? __kasan_kmalloc+0x93/0xb0
[  152.371597][ T9878]  vmalloc_user_noprof+0xad/0xf0
[  152.371617][ T9878]  ? xskq_create+0xbf/0x170
[  152.371633][ T9878]  xskq_create+0xbf/0x170
[  152.371652][ T9878]  xsk_init_queue+0xb0/0x110
[  152.371669][ T9878]  xsk_setsockopt+0x4dc/0x8d0
[  152.371686][ T9878]  ? __pfx_xsk_setsockopt+0x10/0x10
[  152.371701][ T9878]  ? __pfx_aa_sk_perm+0x10/0x10
[  152.371721][ T9878]  ? aa_sock_opt_perm+0xff/0x1b0
[  152.371743][ T9878]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  152.371758][ T9878]  ? __pfx_xsk_setsockopt+0x10/0x10
[  152.371774][ T9878]  do_sock_setsockopt+0x17c/0x1b0
[  152.371796][ T9878]  __x64_sys_setsockopt+0x13f/0x1b0
[  152.371820][ T9878]  do_syscall_64+0xfa/0x3b0
[  152.371837][ T9878]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.371853][ T9878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.371867][ T9878]  ? exc_page_fault+0x9f/0xf0
[  152.371885][ T9878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.371899][ T9878] RIP: 0033:0x7f001eb8ebe9
[  152.371926][ T9878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.371939][ T9878] RSP: 002b:00007f001f9ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  152.371954][ T9878] RAX: ffffffffffffffda RBX: 00007f001edb6090 RCX: 00007f001eb8ebe9
[  152.371965][ T9878] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  152.371973][ T9878] RBP: 00007f001ec11e19 R08: 0000000000000004 R09: 0000000000000000
[  152.371981][ T9878] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.372009][ T9878] R13: 00007f001edb6128 R14: 00007f001edb6090 R15: 00007ffdd919fed8
[  152.372033][ T9878]  </TASK>
[  152.372039][ T9878] Mem-Info:
[  152.528331][ T9878] active_anon:5219 inactive_anon:0 isolated_anon:0
[  152.528331][ T9878]  active_file:951 inactive_file:38243 isolated_file:0
[  152.528331][ T9878]  unevictable:1768 dirty:377 writeback:0
[  152.528331][ T9878]  slab_reclaimable:9653 slab_unreclaimable:53834
[  152.528331][ T9878]  mapped:18195 shmem:2447 pagetables:1057
[  152.528331][ T9878]  sec_pagetables:0 bounce:0
[  152.528331][ T9878]  kernel_misc_reclaimable:0
[  152.528331][ T9878]  free:301694 free_pcp:15268 free_cma:0
[  152.549485][ T9878] Node 0 active_anon:10660kB inactive_anon:0kB active_file:1252kB inactive_file:18044kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32704kB dirty:252kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6984kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  152.603199][ T9878] Node 1 active_anon:10284kB inactive_anon:0kB active_file:2552kB inactive_file:134928kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40144kB dirty:1256kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4688kB pagetables:1848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  152.611087][ T9889] netlink: 'syz.2.1687': attribute type 3 has an invalid length.
[  152.616326][ T9878] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  152.621723][ T9889] netlink: 'syz.2.1687': attribute type 1 has an invalid length.
[  152.633203][ T9878] lowmem_reserve[]: 0 811 811 811 811
[  152.636793][ T9878] Node 0 DMA32 free:395064kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10728kB inactive_anon:0kB active_file:1252kB inactive_file:18044kB unevictable:3536kB writepending:252kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:22540kB local_pcp:13792kB free_cma:0kB
[  152.638857][ T9889] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1687'.
[  152.653759][ T9878] lowmem_reserve[]: 0 0 0 0 0
[  152.656579][ T9878] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  152.671864][ T9878] lowmem_reserve[]: 0 0 854 854 854
[  152.674152][ T9878] Node 1 Normal free:337472kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10284kB inactive_anon:0kB active_file:2552kB inactive_file:134928kB unevictable:3536kB writepending:1256kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38916kB local_pcp:20720kB free_cma:0kB
[  152.687719][ T9878] lowmem_reserve[]: 0 0 0 0 0
[  152.699170][ T9878] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  152.704554][ T9878] Node 0 DMA32: 967*4kB (UME) 738*8kB (UME) 525*16kB (UME) 453*32kB (UME) 216*64kB (UME) 85*128kB (UME) 39*256kB (UME) 14*512kB (UM) 9*1024kB (UME) 10*2048kB (UME) 71*4096kB (UM) = 395036kB
[  152.713049][ T9878] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  152.722630][ T9878] Node 1 Normal: 1588*4kB (UME) 456*8kB (UME) 394*16kB (UME) 219*32kB (UME) 170*64kB (UME) 57*128kB (UM) 22*256kB (UM) 25*512kB (UM) 21*1024kB (UME) 1*2048kB (M) 62*4096kB (UM) = 337424kB
[  152.732681][ T9878] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  152.737048][ T9878] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  152.742262][ T9878] 41658 total pagecache pages
[  152.745363][ T9878] 0 pages in swap cache
[  152.747367][ T9878] Free swap  = 124996kB
[  152.751759][ T9878] Total swap = 124996kB
[  152.753757][ T9878] 786301 pages RAM
[  152.755542][ T9878] 0 pages HighMem/MovableOnly
[  152.757718][ T9878] 241320 pages reserved
[  152.759874][ T9878] 0 pages cma reserved
[  152.845586][ T9897] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1691'.
[  152.950328][ T9901] syzkaller1: entered promiscuous mode
[  152.952914][ T9901] syzkaller1: entered allmulticast mode
[  153.149204][ T5856] Bluetooth: hci2: command 0x0405 tx timeout
[  153.161096][ T9875] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  153.217634][ T9905] infiniband syz1: set active
[  153.221825][ T9905] infiniband syz1: added macvlan1
[  153.272745][ T9905] RDS/IB: syz1: added
[  153.279665][ T9905] smc: adding ib device syz1 with port count 1
[  153.282664][ T9905] smc:    ib device syz1 port 1 has pnetid 
[  154.693520][ T9965] netlink: 'syz.0.1720': attribute type 1 has an invalid length.
[  154.825512][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'.
[  156.343865][T10044] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1755'.
[  156.791435][T10062] C speed is unknown, defaulting to 1000
[  157.326398][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'.
[  157.344163][T10073] team0: entered promiscuous mode
[  157.350056][T10073] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  157.657673][T10073] team0: left promiscuous mode
[  157.968972][T10076] syzkaller1: entered promiscuous mode
[  157.970953][T10076] syzkaller1: entered allmulticast mode
[  158.254947][T10095] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.1774'.
[  158.412996][  T794] IPVS: starting estimator thread 0...
[  158.462901][T10112] netlink: 'syz.0.1782': attribute type 1 has an invalid length.
[  158.499847][T10110] IPVS: using max 38 ests per chain, 91200 per kthread
[  158.514782][T10112] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  158.521854][T10112] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  158.529868][T10112] bond2: (slave vti0): making interface the new active one
[  158.534659][T10112] bond2: (slave vti0): Enslaving as an active interface with an up link
[  158.542164][T10117] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1784'.
[  158.973010][T10150] bond0 (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  158.980421][T10150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1797'.
[  158.984380][T10150] netlink: 'syz.2.1797': attribute type 1 has an invalid length.
[  158.987548][T10150] netlink: 'syz.2.1797': attribute type 2 has an invalid length.
[  158.990940][T10150] netlink: 'syz.2.1797': attribute type 3 has an invalid length.
[  158.994174][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'.
[  159.097652][T10155] netlink: zone id is out of range
[  159.477385][T10187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1815'.
[  159.543684][T10190] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1816'.
[  159.547716][T10190] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1816'.
[  159.850128][T10199] nbd: socks must be embedded in a SOCK_ITEM attr
[  160.521356][T10221] __nla_validate_parse: 1 callbacks suppressed
[  160.521375][T10221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1826'.
[  160.801980][T10232] netlink: 'syz.1.1831': attribute type 1 has an invalid length.
[  160.804620][T10232] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1831'.
[  160.807494][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1831'.
[  161.178485][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'.
[  161.293305][T10257] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  161.328061][T10257] tipc: Resetting bearer <eth:syzkaller0>
[  161.356854][T10256] tipc: Resetting bearer <eth:syzkaller0>
[  162.347902][   T46] tipc: Node number set to 3136800057
[  162.956220][T10256] tipc: Disabling bearer <eth:syzkaller0>
[  163.433693][T10270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  164.707293][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'.
[  164.732810][T10342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1880'.
[  165.076391][T10365] wg1 speed is unknown, defaulting to 1000
[  165.078906][T10365] wg1 speed is unknown, defaulting to 1000
[  165.084768][T10365] wg1 speed is unknown, defaulting to 1000
[  165.089215][T10367] netlink: 'syz.2.1891': attribute type 4 has an invalid length.
[  165.106665][T10365] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  165.131180][T10368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1888'.
[  165.148819][T10365] wg1 speed is unknown, defaulting to 1000
[  165.162738][T10365] wg1 speed is unknown, defaulting to 1000
[  165.172750][T10365] wg1 speed is unknown, defaulting to 1000
[  165.282252][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'.
[  165.346083][T10374] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  165.457880][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1895'.
[  165.945105][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'.
[  166.077616][T10422] hsr0: entered promiscuous mode
[  166.081978][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'.
[  166.092454][T10422] hsr_slave_0: left promiscuous mode
[  166.096400][T10422] hsr_slave_1: left promiscuous mode
[  166.114454][T10422] hsr0 (unregistering): left promiscuous mode
[  166.517154][T10450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1930'.
[  166.850636][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1942'.
[  167.117050][T10498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1949'.
[  167.317502][T10513] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  167.378121][T10519] smc: net device bond0 applied user defined pnetid SYZ2
[  167.389350][T10519] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2
[  167.425080][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1959'.
[  167.467138][T10525] macvlan1: entered promiscuous mode
[  167.473383][T10525] ipvlan0: entered promiscuous mode
[  167.476767][T10525] ipvlan0: left promiscuous mode
[  167.481867][T10525] macvlan1: left promiscuous mode
[  167.594515][T10537] bridge5: entered promiscuous mode
[  167.883774][T10569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1983'.
[  167.934269][T10569] C speed is unknown, defaulting to 1000
[  168.074084][T10582] netlink: 'syz.0.1988': attribute type 25 has an invalid length.
[  168.088200][T10569] wg1 speed is unknown, defaulting to 1000
[  168.543984][T10616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.546808][T10616] syzkaller0: entered promiscuous mode
[  168.548766][T10616] syzkaller0: entered allmulticast mode
[  168.567592][T10616] tipc: Resetting bearer <eth:syzkaller0>
[  168.575904][T10615] tipc: Resetting bearer <eth:syzkaller0>
[  168.584532][T10618] netlink: 'syz.0.2005': attribute type 1 has an invalid length.
[  168.606646][T10615] tipc: Disabling bearer <eth:syzkaller0>
[  168.844384][T10630] bridge0: port 2(gretap0) entered blocking state
[  168.847026][T10630] bridge0: port 2(gretap0) entered disabled state
[  168.852123][T10630] gretap0: entered allmulticast mode
[  168.855197][T10630] gretap0: entered promiscuous mode
[  168.965941][T10635] macsec2: entered promiscuous mode
[  168.967791][T10635] macsec2: entered allmulticast mode
[  169.815065][T10676] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.819473][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'.
[  169.820127][T10676] syzkaller0: entered promiscuous mode
[  169.825491][T10676] syzkaller0: entered allmulticast mode
[  169.845709][T10676] tipc: Resetting bearer <eth:syzkaller0>
[  169.852828][T10675] tipc: Resetting bearer <eth:syzkaller0>
[  169.884387][T10675] tipc: Disabling bearer <eth:syzkaller0>
[  169.893801][T10679] netlink: 'syz.1.2030': attribute type 7 has an invalid length.
[  169.916780][T10679] : entered promiscuous mode
[  171.543122][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'.
[  171.547287][T10693] netlink: 'syz.0.2037': attribute type 1 has an invalid length.
[  171.553502][T10693] netlink: 'syz.0.2037': attribute type 2 has an invalid length.
[  171.618000][T10702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.623614][T10702] syzkaller0: entered promiscuous mode
[  171.625471][T10702] syzkaller0: entered allmulticast mode
[  171.638756][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2043'.
[  171.665211][T10702] tipc: Resetting bearer <eth:syzkaller0>
[  171.671328][T10700] tipc: Resetting bearer <eth:syzkaller0>
[  171.696590][T10700] tipc: Disabling bearer <eth:syzkaller0>
[  171.712725][T10711] netlink: 'syz.0.2046': attribute type 1 has an invalid length.
[  171.715436][T10711] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2046'.
[  171.815061][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'.
[  172.034181][T10729] netlink: 'syz.2.2055': attribute type 12 has an invalid length.
[  172.321224][T10753] netlink: 'syz.1.2066': attribute type 1 has an invalid length.
[  172.323815][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2066'.
[  172.838341][T10777] openvswitch: netlink: IP tunnel dst address not specified
[  172.903439][T10780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2076'.
[  173.508196][T10816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.515026][T10816] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  173.518464][T10816] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  173.562069][T10816] tipc: Resetting bearer <eth:syzkaller0>
[  173.662992][T10820] netlink: zone id is out of range
[  173.665273][T10820] netlink: zone id is out of range
[  173.667489][T10820] netlink: zone id is out of range
[  173.672127][T10820] netlink: zone id is out of range
[  173.674478][T10820] netlink: zone id is out of range
[  173.676890][T10820] netlink: zone id is out of range
[  173.680153][T10820] netlink: zone id is out of range
[  173.682327][T10820] netlink: zone id is out of range
[  173.684541][T10820] netlink: zone id is out of range
[  173.747648][T10825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.751293][T10825] IPv6: NLM_F_CREATE should be set when creating new route
[  173.754727][T10825] IPv6: NLM_F_CREATE should be set when creating new route
[  173.758015][T10825] IPv6: NLM_F_CREATE should be set when creating new route
[  173.763677][T10825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.099300][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.116809][T10843] netlink: 'syz.2.2106': attribute type 1 has an invalid length.
[  174.154244][T10843] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.166985][T10843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2106'.
[  174.181320][T10843] vlan3: entered allmulticast mode
[  174.183592][T10843] macvtap0: entered allmulticast mode
[  174.186034][T10843] veth0_macvtap: entered allmulticast mode
[  174.213554][T10843] bond0: (slave vlan3): making interface the new active one
[  174.219402][T10843] bond0: (slave vlan3): Enslaving as an active interface with an up link
[  174.298049][T10849] C speed is unknown, defaulting to 1000
[  174.445588][T10849] wg1 speed is unknown, defaulting to 1000
[  175.828606][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'.
[  175.889209][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'.
[  175.892808][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'.
[  176.177015][T10926] ipvlan2: entered promiscuous mode
[  176.181234][T10926] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  176.261522][T10931] macsec1: entered promiscuous mode
[  176.263915][T10931] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  176.267024][T10931] macsec1: entered allmulticast mode
[  176.273103][T10931] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  176.444754][T10944] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  176.472222][T10944] syz_tun (unregistering): left allmulticast mode
[  176.475402][T10944] syz_tun (unregistering): left promiscuous mode
[  176.478820][T10944] bridge0: port 1(syz_tun) entered disabled state
[  176.637363][T10956] __nla_validate_parse: 1 callbacks suppressed
[  176.637383][T10956] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2155'.
[  176.738481][T10966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2159'.
[  177.985293][T10995] netlink: 'syz.2.2170': attribute type 3 has an invalid length.
[  178.000181][T10995] netlink: 'syz.2.2170': attribute type 3 has an invalid length.
[  178.164219][T11009] C: renamed from team_slave_0
[  178.168894][T11009] netlink: 'syz.2.2176': attribute type 1 has an invalid length.
[  178.177278][T11009] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2176'.
[  178.187534][T11009] net_ratelimit: 78 callbacks suppressed
[  178.187570][T11009] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  179.361451][T10978] Set syz1 is full, maxelem 65536 reached
[  179.516157][T11042] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.648179][T11050] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2194'.
[  179.655817][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'.
[  179.724940][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2194'.
[  179.733461][T11056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2194'.
[  179.739660][T11056] netlink: 'syz.1.2194': attribute type 3 has an invalid length.
[  179.760423][T11058] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.812198][T11061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2198'.
[  179.816975][T11061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2198'.
[  179.931841][T11067] syzkaller1: entered promiscuous mode
[  179.934807][T11067] syzkaller1: entered allmulticast mode
[  179.938672][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'.
[  180.514259][T11107] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  180.517415][T11107] team0: Device ipvlan2 is already an upper device of the team interface
[  181.862208][T11153] nbd: must specify at least one socket
[  182.328825][T11167] __nla_validate_parse: 2 callbacks suppressed
[  182.328842][T11167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2246'.
[  182.337261][T11167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2246'.
[  182.794074][T11182] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  182.798088][T11182] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2253'.
[  182.875897][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2258'.
[  182.878890][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'.
[  182.884975][T11190] netlink: 'syz.1.2258': attribute type 15 has an invalid length.
[  182.888105][T11190] netlink: 'syz.1.2258': attribute type 18 has an invalid length.
[  182.974451][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'.
[  182.977662][T11198] netlink: 'syz.2.2261': attribute type 1 has an invalid length.
[  182.996768][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2261'.
[  183.153871][T11218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2271'.
[  183.388011][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2283'.
[  183.866360][T11285] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2301'.
[  184.346420][T11316] tipc: Disabling bearer <eth:macvtap0>
[  185.001957][T11339] openvswitch: netlink: EtherType 0 is less than min 600
[  185.038554][T11341] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  185.605403][T11401] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  185.834588][T11419] netlink: 'syz.0.2366': attribute type 14 has an invalid length.
[  186.843510][T11494] netlink: 'syz.2.2399': attribute type 11 has an invalid length.
[  187.973916][T11572] __nla_validate_parse: 14 callbacks suppressed
[  187.973928][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'.
[  187.981500][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'.
[  188.017641][T11575] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2435'.
[  188.136052][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2438'.
[  188.235705][T11589] batadv_slave_1: entered promiscuous mode
[  188.247978][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2441'.
[  188.255972][T11588] batadv_slave_1: left promiscuous mode
[  188.310598][T11593] netlink: 'syz.0.2443': attribute type 6 has an invalid length.
[  188.506965][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2448'.
[  188.677623][T11617] gre2: entered allmulticast mode
[  188.845533][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'.
[  188.848530][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2462'.
[  188.854477][T11632] netlink: 'syz.2.2462': attribute type 20 has an invalid length.
[  188.857630][T11634] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2461'.
[  188.864050][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'.
[  188.868306][T11632] netlink: 'syz.2.2462': attribute type 20 has an invalid length.
[  188.979917][T11644] netlink: 'syz.2.2467': attribute type 2 has an invalid length.
[  189.062661][T11650] pimreg: entered allmulticast mode
[  189.066744][T11650] pimreg: left allmulticast mode
[  189.340254][T11670] netlink: 'syz.1.2476': attribute type 13 has an invalid length.
[  189.344087][T11670] netlink: 'syz.1.2476': attribute type 17 has an invalid length.
[  189.491809][T11670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  189.510415][  T794] C speed is unknown, defaulting to 1000
[  189.512383][  T794] syz2: Port: 1 Link ACTIVE
[  189.536898][T11666] C speed is unknown, defaulting to 1000
[  189.747363][T11666] wg1 speed is unknown, defaulting to 1000
[  190.250133][T11709] syzkaller0: entered promiscuous mode
[  190.252351][T11709] syzkaller0: entered allmulticast mode
[  191.863375][T11734] netlink: 'syz.0.2503': attribute type 6 has an invalid length.
[  191.935272][T11738] netlink: 'syz.0.2505': attribute type 1 has an invalid length.
[  192.704263][T11790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  193.096356][T11811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.098135][T11869] __nla_validate_parse: 11 callbacks suppressed
[  194.098148][T11869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2555'.
[  194.319289][T11889] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2561'.
[  194.359304][T11886] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  194.438939][T11893] netlink: 'syz.2.2563': attribute type 1 has an invalid length.
[  194.648473][T11904] netlink: 'syz.2.2568': attribute type 7 has an invalid length.
[  195.046175][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2573'.
[  195.278505][T11922] C speed is unknown, defaulting to 1000
[  195.301643][T11926] netlink: 'syz.0.2576': attribute type 13 has an invalid length.
[  195.304732][T11926] netlink: 'syz.0.2576': attribute type 17 has an invalid length.
[  195.356938][T11926] erspan0: entered promiscuous mode
[  195.456903][T11926] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.473685][T11926] 8021q: adding VLAN 0 to HW filter on device team0
[  195.497197][T11926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.627501][T11922] wg1 speed is unknown, defaulting to 1000
[  195.881129][T11946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  195.934447][T11943] veth0_to_team: entered promiscuous mode
[  195.937000][T11943] veth0_to_team: entered allmulticast mode
[  196.169952][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2593'.
[  196.210358][T11966] netlink: 'syz.0.2595': attribute type 1 has an invalid length.
[  196.213643][T11966] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.2595'.
[  196.358094][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'.
[  196.366763][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'.
[  196.429476][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  197.257723][T12018] tap0: tun_chr_ioctl cmd 1074025677
[  197.261320][T12018] tap0: linktype set to 0
[  197.505951][T12022] netlink: 'syz.1.2621': attribute type 178 has an invalid length.
[  197.556257][T12026] raw_sendmsg: syz.1.2623 forgot to set AF_INET. Fix it!
[  197.562205][T12026] sctp: [Deprecated]: syz.1.2623 (pid 12026) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.562205][T12026] Use struct sctp_sack_info instead
[  197.651924][T12032] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2625'.
[  197.724571][T12038] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2628'.
[  197.796640][T12045] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  197.823912][T12048] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  197.848735][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'.
[  198.867103][T12104] netlink: 'syz.2.2657': attribute type 1 has an invalid length.
[  199.228443][T12134] __nla_validate_parse: 3 callbacks suppressed
[  199.228463][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2668'.
[  199.635345][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2686'.
[  199.676211][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2687'.
[  199.690813][T12170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.968041][T12196] batman_adv: batadv0: Adding interface: dummy0
[  199.974327][T12196] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.985824][T12196] batman_adv: batadv0: Interface activated: dummy0
[  200.043183][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2702'.
[  200.114315][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2704'.
[  200.174631][T12208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2705'.
[  200.923456][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2729'.
[  201.183223][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2734'.
[  201.188140][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2730'.
[  201.563057][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2739'.
[  201.680272][T12288] netlink: 'syz.1.2741': attribute type 3 has an invalid length.
[  201.684748][T12290] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16)
[  201.688656][T12290] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  201.710436][T12288] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.773972][T12288] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.851794][T12288] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.975890][T12288] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.057610][ T5903] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.075348][ T5903] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  202.094774][ T5903] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.114615][ T5903] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.291746][T12318] sctp: [Deprecated]: syz.0.2753 (pid 12318) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.291746][T12318] Use struct sctp_sack_info instead
[  202.396382][T12322] veth0_to_team: left promiscuous mode
[  202.402570][T12322] veth0_to_team: left allmulticast mode
[  202.426520][T12322] batman_adv: batadv0: Interface deactivated: macvlan2
[  202.434918][T12322] ip6gre1: left allmulticast mode
[  202.436768][T12328] rdma_op ffff8880232829f0 conn xmit_rdma 0000000000000000
[  202.442293][T12322] tipc: Resetting bearer <eth:syzkaller0>
[  202.446920][T12322] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  202.451349][T12322] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  202.458229][T12322] ipvlan2: left promiscuous mode
[  202.464035][T12322] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  202.466420][T12322] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  202.468853][T12322] macsec1: left promiscuous mode
[  202.471057][T12322] macsec1: left allmulticast mode
[  202.553307][T12334] netlink: 'syz.1.2760': attribute type 1 has an invalid length.
[  202.571162][T12334] 8021q: adding VLAN 0 to HW filter on device bond2
[  202.597738][T12334] 8021q: adding VLAN 0 to HW filter on device batadv1
[  202.606245][T12334] bond2: (slave batadv1): making interface the new active one
[  202.610026][T12334] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  203.455262][T12398] syzkaller0: entered promiscuous mode
[  203.457202][T12398] syzkaller0: entered allmulticast mode
[  203.592488][T12404] siw: device registration error -23
[  203.693329][T12410] pim6reg1: entered promiscuous mode
[  203.696200][T12410] pim6reg1: entered allmulticast mode
[  204.272280][T12428] __nla_validate_parse: 3 callbacks suppressed
[  204.272305][T12428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2801'.
[  204.426498][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'.
[  204.430689][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2803'.
[  204.746251][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2809'.
[  204.750589][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2809'.
[  205.017604][T12463] C speed is unknown, defaulting to 1000
[  205.177995][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'.
[  205.276175][T12463] wg1 speed is unknown, defaulting to 1000
[  205.377781][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'.
[  205.381267][T12484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  205.384235][T12484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.395293][T12486] bridge0: port 1(erspan0) entered blocking state
[  205.398085][T12486] bridge0: port 1(erspan0) entered disabled state
[  205.401988][T12486] erspan0: entered allmulticast mode
[  205.406173][T12486] erspan0: entered promiscuous mode
[  205.414859][T12486] bridge0: port 1(erspan0) entered blocking state
[  205.417530][T12486] bridge0: port 1(erspan0) entered forwarding state
[  205.427011][T12486] erspan0: left allmulticast mode
[  205.430428][T12486] erspan0: left promiscuous mode
[  205.432994][T12486] bridge0: port 1(erspan0) entered disabled state
[  205.487017][T12491] trusted_key: syz.0.2822 sent an empty control message without MSG_MORE.
[  205.735043][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2827'.
[  205.841104][T12503] netlink: 'syz.1.2827': attribute type 1 has an invalid length.
[  205.854807][T12503] netlink: 'syz.1.2827': attribute type 1 has an invalid length.
[  205.956682][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'.
[  206.162486][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'.
[  206.861337][ T5856] Bluetooth: hci2: link tx timeout
[  206.863809][ T5856] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  206.926269][T12579] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  207.291915][T12593] vlan2: entered promiscuous mode
[  207.294013][T12593] bond0: entered promiscuous mode
[  207.296049][T12593] bond_slave_0: entered promiscuous mode
[  207.298662][T12593] bond_slave_1: entered promiscuous mode
[  207.303436][T12593] vlan2: entered allmulticast mode
[  207.306921][T12593] bond0: entered allmulticast mode
[  207.308905][T12593] bond_slave_0: entered allmulticast mode
[  207.314001][T12593] bond_slave_1: entered allmulticast mode
[  208.450878][T12654] : renamed from bond_slave_0
[  208.676136][T12663] lo: entered allmulticast mode
[  208.683689][T12662] lo: left allmulticast mode
[  208.909679][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  209.266781][T12683] veth1_to_team: entered allmulticast mode
[  209.274662][T12683] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  209.519404][T12675] __nla_validate_parse: 8 callbacks suppressed
[  209.519426][T12675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2899'.
[  210.117969][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2915'.
[  210.128956][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2915'.
[  210.136319][T12732] netlink: 'syz.1.2915': attribute type 4 has an invalid length.
[  210.162721][T12732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2915'.
[  210.625476][T12766] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2926'.
[  210.628594][T12766] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2926'.
[  211.162444][T12797] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  211.433021][T12801] 8021q: adding VLAN 0 to HW filter on device bond3
[  211.438330][T12801] bond0: (slave bond3): Enslaving as an active interface with an up link
[  211.608145][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2952'.
[  211.965058][T12857] C speed is unknown, defaulting to 1000
[  212.230068][T12857] wg1 speed is unknown, defaulting to 1000
[  212.799716][T12879] netlink: 'syz.2.2970': attribute type 6 has an invalid length.
[  213.120474][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2980'.
[  213.127499][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2980'.
[  213.352178][T12916] bridge7: entered allmulticast mode
[  213.654163][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2994'.
[  213.725342][T12936] : entered promiscuous mode
[  214.567527][T12988] __nla_validate_parse: 1 callbacks suppressed
[  214.567548][T12988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3020'.
[  214.724120][T13001] netlink: 'syz.2.3027': attribute type 1 has an invalid length.
[  214.838824][T13007] GUP no longer grows the stack in syz.0.3030 (13007): 200000006000-20000000a000 (200000005000)
[  214.846824][T13007] CPU: 0 UID: 0 PID: 13007 Comm: syz.0.3030 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  214.846850][T13007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  214.846874][T13007] Call Trace:
[  214.846882][T13007]  <TASK>
[  214.846890][T13007]  dump_stack_lvl+0x189/0x250
[  214.846934][T13007]  ? __pfx_dump_stack_lvl+0x10/0x10
[  214.846955][T13007]  ? __pfx__printk+0x10/0x10
[  214.847004][T13007]  ? find_vma+0xe7/0x160
[  214.847040][T13007]  __get_user_pages+0x24d0/0x2ce0
[  214.847078][T13007]  ? __lock_acquire+0xab9/0xd20
[  214.847128][T13007]  ? __gup_longterm_locked+0xc68/0x1660
[  214.847155][T13007]  __gup_longterm_locked+0xde9/0x1660
[  214.847193][T13007]  ? try_grab_folio_fast+0x1be/0x4f0
[  214.847233][T13007]  ? gup_fast_fallback+0x195f/0x2010
[  214.847263][T13007]  gup_fast_fallback+0x1e6a/0x2010
[  214.847324][T13007]  ? __pfx_gup_fast_fallback+0x10/0x10
[  214.847346][T13007]  ? __mutex_lock+0x335/0x1360
[  214.847378][T13007]  ? futex_unqueue+0x22/0x240
[  214.847400][T13007]  ? futex_unqueue+0x22/0x240
[  214.847418][T13007]  ? futex_unqueue+0x22/0x240
[  214.847439][T13007]  ? is_valid_gup_args+0x11f/0x200
[  214.847466][T13007]  ? get_user_pages_fast+0x4d/0xb0
[  214.847506][T13007]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  214.847545][T13007]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  214.847574][T13007]  ? wait_for_space+0x24d/0x2d0
[  214.847603][T13007]  iov_iter_get_pages2+0x5e/0xa0
[  214.847637][T13007]  __se_sys_vmsplice+0x548/0x10d0
[  214.847685][T13007]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  214.847729][T13007]  ? __pfx_futex_wait+0x10/0x10
[  214.847769][T13007]  ? __lock_acquire+0xab9/0xd20
[  214.847835][T13007]  ? do_pipe2+0xf7/0x170
[  214.847878][T13007]  ? do_syscall_64+0xbe/0x3b0
[  214.847909][T13007]  do_syscall_64+0xfa/0x3b0
[  214.847932][T13007]  ? lockdep_hardirqs_on+0x9c/0x150
[  214.847990][T13007]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.848013][T13007]  ? exc_page_fault+0x9f/0xf0
[  214.848041][T13007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  214.848065][T13007] RIP: 0033:0x7f31ee38ebe9
[  214.848085][T13007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  214.848107][T13007] RSP: 002b:00007f31ef120038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  214.848131][T13007] RAX: ffffffffffffffda RBX: 00007f31ee5b5fa0 RCX: 00007f31ee38ebe9
[  214.848149][T13007] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  214.848170][T13007] RBP: 00007f31ee411e19 R08: 0000000000000000 R09: 0000000000000000
[  214.848184][T13007] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  214.848199][T13007] R13: 00007f31ee5b6038 R14: 00007f31ee5b5fa0 R15: 00007fffdb627388
[  214.848235][T13007]  </TASK>
[  214.891058][T13011] C speed is unknown, defaulting to 1000
[  215.055992][T13016] delete_channel: no stack
[  215.080501][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3035'.
[  215.341366][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'.
[  215.548335][T13011] wg1 speed is unknown, defaulting to 1000
[  215.725045][T13043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3045'.
[  215.757838][T13048] C speed is unknown, defaulting to 1000
[  215.831563][T13047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3045'.
[  216.190992][T13048] wg1 speed is unknown, defaulting to 1000
[  217.193236][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3084'.
[  217.231296][T13135] C speed is unknown, defaulting to 1000
[  217.362863][T13138] can: request_module (can-proto-4) failed.
[  217.598556][T13135] wg1 speed is unknown, defaulting to 1000
[  217.781936][T13151] C speed is unknown, defaulting to 1000
[  217.912719][T13151] wg1 speed is unknown, defaulting to 1000
[  218.744195][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'.
[  218.750892][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3100'.
[  218.958141][T13186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3104'.
[  219.223834][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3113'.
[  219.238024][T13204] smc: removing ib device syz1
[  220.438059][T13249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3131'.
[  220.635190][T13269] C speed is unknown, defaulting to 1000
[  220.641008][T13269] wg1 speed is unknown, defaulting to 1000
[  220.953180][T13287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3143'.
[  221.072384][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'.
[  221.156806][T13304] netlink: 'syz.0.3152': attribute type 32 has an invalid length.
[  221.161865][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'.
[  221.165758][T13304] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  221.225041][T13309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.253811][T13308] tipc: Disabling bearer <eth:syzkaller0>
[  221.463016][T13315] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.538334][T13315] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.567810][T13334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.576128][T13334] syzkaller0: entered promiscuous mode
[  221.578565][T13334] syzkaller0: entered allmulticast mode
[  221.608001][T13315] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.630350][T13334] tipc: Resetting bearer <eth:syzkaller0>
[  221.636881][T13333] tipc: Resetting bearer <eth:syzkaller0>
[  221.655408][T13333] tipc: Disabling bearer <eth:syzkaller0>
[  221.672211][T13315] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.828791][ T5747] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.873184][ T5747] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.895988][ T5747] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.927262][ T5747] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.084837][T13362] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  222.399952][T13384] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  222.407993][   T33] audit: type=1800 audit(1754988752.613:5): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3174" name="memory.events" dev="tmpfs" ino=4992 res=0 errno=0
[  222.552187][T13401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3191'.
[  222.595280][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3192'.
[  222.700222][T13409] netem: incorrect gi model size
[  222.710326][T13409] netem: change failed
[  224.156014][T13457] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.161649][T13457] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  224.164213][T13457] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  224.533393][T13478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3224'.
[  224.670362][T13485] netlink: 'syz.0.3227': attribute type 4 has an invalid length.
[  225.216133][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3234'.
[  225.285735][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3235'.
[  225.292155][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3235'.
[  225.295929][T13505] netlink: 'syz.0.3235': attribute type 5 has an invalid length.
[  225.437610][T13516] lo: entered allmulticast mode
[  225.447028][T13516] dvmrp1: entered allmulticast mode
[  225.454498][T13515] lo: left allmulticast mode
[  225.541298][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3243'.
[  226.347415][T13601] geneve3: entered promiscuous mode
[  227.172747][T13667] bond0: entered promiscuous mode
[  227.175347][T13667] vlan3: entered promiscuous mode
[  227.178302][T13667] macvtap0: entered promiscuous mode
[  227.183191][T13667] bond0: left promiscuous mode
[  227.184928][T13667] vlan3: left promiscuous mode
[  227.186907][T13667] macvtap0: left promiscuous mode
[  227.226260][T13667] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  227.374901][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3315'.
[  227.514787][T13687] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  227.864892][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  228.082577][T13734] netlink: 'syz.1.3340': attribute type 10 has an invalid length.
[  228.830171][T13790] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.952952][T13790] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.039470][T13790] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.086690][T13790] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.135549][T13812] 8021q: adding VLAN 0 to HW filter on device bond7
[  229.167211][T13812] gretap0: left allmulticast mode
[  229.171580][T13812] gretap0: left promiscuous mode
[  229.173706][T13812] bridge0: port 2(gretap0) entered disabled state
[  229.180572][T13812] bond0: (slave bond_slave_0): Releasing backup interface
[  229.184040][T13812] bond_slave_0: left promiscuous mode
[  229.185848][T13812] bond_slave_0: left allmulticast mode
[  229.188742][T13812] bond0: (slave bond_slave_1): Releasing backup interface
[  229.194417][T13812] bond_slave_1: left promiscuous mode
[  229.196415][T13812] bond_slave_1: left allmulticast mode
[  229.201359][T13812] team0: Port device team_slave_0 removed
[  229.204340][T13812] team0: Port device team_slave_1 removed
[  229.206676][T13812] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.211433][T13812] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.214929][T13812] bond1: (slave gretap1): Releasing active interface
[  229.218293][T13812] batman_adv: batadv0: Removing interface: macvlan2
[  229.222540][T13812] bond2: (slave vti0): Releasing backup interface
[  229.272105][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.289399][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.306072][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.315733][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.340509][T13820] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3379'.
[  229.344599][T13820] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3379'.
[  229.348062][T13820] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3379'.
[  232.202505][T13913] netlink: 'syz.0.3424': attribute type 5 has an invalid length.
[  232.245501][T13915] pim6reg: entered allmulticast mode
[  232.251714][T13915] pim6reg: left allmulticast mode
[  232.437137][T13934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3434'.
[  232.585138][T13948] tc_dump_action: action bad kind
[  232.604213][T13944] v: renamed from ip6_vti0
[  232.701889][T13955] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  232.745309][T13957] netlink: 'syz.1.3444': attribute type 21 has an invalid length.
[  232.749237][T13957] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3444'.
[  232.753442][T13957] netlink: 'syz.1.3444': attribute type 4 has an invalid length.
[  232.757305][T13957] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3444'.
[  233.772745][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  234.018718][T14015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3468'.
[  234.036202][T14015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3468'.
[  234.279421][T14030] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.3475'.
[  234.372369][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3478'.
[  234.468322][T14041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3480'.
[  234.662437][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  234.764282][T14062] netlink: 'syz.0.3486': attribute type 10 has an invalid length.
[  234.775630][T14062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3486'.
[  234.785224][T14062] team0: Port device geneve0 added
[  234.792430][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.795944][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.800035][T14064] syz.2.3488 uses old SIOCAX25GETINFO
[  234.804513][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.823239][T14062] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  234.834451][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.632080][T14082] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  235.817996][T14088] C speed is unknown, defaulting to 1000
[  235.822378][T14088] wg1 speed is unknown, defaulting to 1000
[  235.941400][T14098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.946062][T14098] syzkaller0: entered promiscuous mode
[  235.948266][T14098] syzkaller0: entered allmulticast mode
[  235.989393][T14098] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  236.008520][T14103] pim6reg: entered allmulticast mode
[  236.015359][T14103] pim6reg: left allmulticast mode
[  236.044452][T14098] tipc: Resetting bearer <eth:syzkaller0>
[  236.051038][T14096] tipc: Resetting bearer <eth:syzkaller0>
[  236.064276][T14096] tipc: Disabling bearer <eth:syzkaller0>
[  236.542413][T14128] netlink: 'syz.1.3513': attribute type 9 has an invalid length.
[  236.853652][T14146] bridge0: port 1(erspan0) entered blocking state
[  236.856708][T14146] bridge0: port 1(erspan0) entered disabled state
[  236.862100][T14146] erspan0: entered allmulticast mode
[  236.865738][T14146] erspan0: entered promiscuous mode
[  236.874946][T14146] erspan0: left allmulticast mode
[  236.876862][T14146] erspan0: left promiscuous mode
[  236.880342][T14146] bridge0: port 1(erspan0) entered disabled state
[  236.913067][T14149] netlink: 'syz.0.3520': attribute type 1 has an invalid length.
[  237.106263][T14163] netlink: 'syz.0.3527': attribute type 13 has an invalid length.
[  237.260691][T14180] netlink: 'syz.1.3534': attribute type 4 has an invalid length.
[  237.544240][T14195] tipc: Cannot configure node identity twice
[  237.558794][T14197] netlink: 'syz.1.3540': attribute type 5 has an invalid length.
[  237.562336][T14197] __nla_validate_parse: 6 callbacks suppressed
[  237.562360][T14197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3540'.
[  237.571316][T14195] delete_channel: no stack
[  237.985461][T14217] netlink: 'syz.1.3549': attribute type 11 has an invalid length.
[  238.037678][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3550'.
[  238.101733][T14222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3551'.
[  239.453542][T14299] netlink: 'syz.1.3587': attribute type 9 has an invalid length.
[  239.457070][T14299] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.3587'.
[  239.476671][T14301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3586'.
[  239.571093][T14308] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3588'.
[  239.656811][T14312] netlink: 'syz.0.3591': attribute type 4 has an invalid length.
[  239.672447][T14317] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3593'.
[  240.022129][T14344] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3606'.
[  240.084010][T14348] netlink: 'syz.2.3607': attribute type 83 has an invalid length.
[  240.320777][T14358] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  240.428929][T14362] netlink: 'syz.2.3614': attribute type 1 has an invalid length.
[  240.535275][T14366] only policy match revision 0 supported
[  240.535302][T14366] unable to load match
[  240.943466][T14385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3624'.
[  241.032640][T14392] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3629'.
[  241.384927][T14421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.387861][T14421] syzkaller0: entered promiscuous mode
[  241.390365][T14421] syzkaller0: entered allmulticast mode
[  241.411417][T14421] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  241.415779][T14421] tipc: Resetting bearer <eth:syzkaller0>
[  241.425661][T14420] tipc: Resetting bearer <eth:syzkaller0>
[  241.460864][T14420] tipc: Disabling bearer <eth:syzkaller0>
[  241.686377][   T46] tipc: Resetting bearer <eth:syzkaller0>
[  241.699797][T14437] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  242.653814][T14472] C speed is unknown, defaulting to 1000
[  242.657871][T14472] wg1 speed is unknown, defaulting to 1000
[  243.072692][T14492] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  243.509581][T14522] __nla_validate_parse: 7 callbacks suppressed
[  243.509597][T14522] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3684'.
[  243.820343][T14548] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  243.954681][T14560] netlink: 'syz.2.3704': attribute type 1 has an invalid length.
[  243.957301][T14560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.033531][T14566] netlink: 'syz.1.3705': attribute type 5 has an invalid length.
[  244.125728][T14572] netlink: 'syz.1.3709': attribute type 16 has an invalid length.
[  244.129834][T14572] netlink: 'syz.1.3709': attribute type 1 has an invalid length.
[  244.133405][T14572] netlink: 'syz.1.3709': attribute type 2 has an invalid length.
[  244.182217][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3710'.
[  245.196141][T14634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3738'.
[  245.715994][T14643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  245.812407][T14647] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  245.964564][T14649] C speed is unknown, defaulting to 1000
[  245.968165][T14649] wg1 speed is unknown, defaulting to 1000
[  245.983423][T14652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  247.507457][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3773'.
[  247.511582][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3773'.
[  247.627111][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'.
[  247.771378][T14734] netlink: 'syz.2.3784': attribute type 2 has an invalid length.
[  248.440367][T14780] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3805'.
[  248.563331][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'.
[  248.677970][T14788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  248.754220][T14790] syzkaller1: entered allmulticast mode
[  249.750160][T14841] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  249.755124][T14841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3832'.
[  249.768513][T14843] netlink: 'syz.1.3834': attribute type 1 has an invalid length.
[  250.063074][T14866] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3845'.
[  250.076564][T14866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  250.563466][T14903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3861'.
[  250.564993][T14905] netlink: 'syz.2.3863': attribute type 1 has an invalid length.
[  250.575396][T14905] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3863'.
[  250.763996][T14918] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  251.853203][T14939] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  251.878168][T14941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3878'.
[  251.883307][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3878'.
[  251.897751][T14941] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  252.000263][T14943] C speed is unknown, defaulting to 1000
[  252.010719][T14943] wg1 speed is unknown, defaulting to 1000
[  252.233361][T14957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3884'.
[  252.280304][T14961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.798897][T15030] pim6reg1: entered promiscuous mode
[  253.801612][T15030] pim6reg1: entered allmulticast mode
[  254.025049][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3921'.
[  254.030299][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3921'.
[  254.905369][T15082] netlink: 'syz.0.3936': attribute type 2 has an invalid length.
[  255.286266][T15111] netlink: ct family unspecified
[  255.288420][T15111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.538680][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3957'.
[  256.162093][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3976'.
[  256.188436][T15178] bond8: entered promiscuous mode
[  256.191406][T15178] 8021q: adding VLAN 0 to HW filter on device bond8
[  256.306008][T15178] bond8 (unregistering): Released all slaves
[  256.533022][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3982'.
[  256.663250][T15200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.671052][T15200] syzkaller0: entered promiscuous mode
[  256.672876][T15200] syzkaller0: entered allmulticast mode
[  256.693015][T15200] tipc: Resetting bearer <eth:syzkaller0>
[  256.697801][T15199] tipc: Resetting bearer <eth:syzkaller0>
[  256.714900][T15199] tipc: Disabling bearer <eth:syzkaller0>
[  256.732839][T15204] netlink: 'syz.0.3988': attribute type 21 has an invalid length.
[  256.736363][T15204] netlink: 'syz.0.3988': attribute type 22 has an invalid length.
[  256.742558][T15204] netlink: 'syz.0.3988': attribute type 23 has an invalid length.
[  256.745811][T15204] netlink: 'syz.0.3988': attribute type 25 has an invalid length.
[  256.750734][T15204] netlink: 'syz.0.3988': attribute type 26 has an invalid length.
[  256.754468][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3988'.
[  256.817842][T15208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3990'.
[  256.875934][T15212] !: renamed from dummy0
[  256.921715][T15215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.936750][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3993'.
[  256.977917][T15218] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  257.070239][T15218] C speed is unknown, defaulting to 1000
[  257.098024][T15218] wg1 speed is unknown, defaulting to 1000
[  257.597925][T15247] netlink: 'syz.1.3999': attribute type 4 has an invalid length.
[  257.683825][T15251] netlink: 'syz.1.4000': attribute type 1 has an invalid length.
[  257.704271][T15251] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4000'.
[  258.155360][T15277] netlink: 'syz.0.4008': attribute type 29 has an invalid length.
[  258.158776][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4008'.
[  258.411615][T15294] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  258.415326][T15294] openvswitch: netlink: Message has 8454 unknown bytes.
[  258.645887][T15307] !: entered promiscuous mode
[  258.648760][T15307] team0: entered promiscuous mode
[  258.651931][T15307] geneve0: entered promiscuous mode
[  258.656534][T15307] debugfs: 'hsr0' already exists in 'hsr'
[  258.660796][T15307] Cannot create hsr debugfs directory
[  258.664753][T15307] hsr0: Slave A (0!) is not up; please bring it up to get a fully working HSR network
[  258.668968][T15307] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  259.133435][T15333] veth7: entered promiscuous mode
[  259.297477][T15343] netlink: 'syz.0.4041': attribute type 1 has an invalid length.
[  259.301219][T15343] __nla_validate_parse: 4 callbacks suppressed
[  259.301232][T15343] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4041'.
[  259.659433][T15364] nbd2: detected capacity change from 0 to 63
[  259.673753][   T57] block nbd2: Receive control failed (result -104)
[  259.824410][T15382] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.4058'.
[  259.908793][T15389] netlink: del zone limit has 4 unknown bytes
[  259.917580][T15386] team0: Mode "a" not found
[  260.120730][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4067'.
[  260.124737][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4067'.
[  260.128459][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4067'.
[  260.140180][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4067'.
[  260.144886][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4067'.
[  260.150087][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4067'.
[  260.153887][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4067'.
[  260.157378][T15404] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4067'.
[  260.235089][T15404] veth0_macvtap: left allmulticast mode
[  260.705078][T15433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.849913][T15439] validate_nla: 3 callbacks suppressed
[  260.849988][T15439] netlink: 'syz.2.4084': attribute type 10 has an invalid length.
[  260.954438][T15444] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  260.997842][T15446] veth1: entered promiscuous mode
[  261.000465][T15446] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  261.376442][T15464] veth1: left promiscuous mode
[  261.378704][T15464] vlan0: left promiscuous mode
[  261.395699][T15464] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  261.415206][T15464] ip6gre1: left promiscuous mode
[  261.422298][T15464] vlan2: left promiscuous mode
[  261.424740][T15464] bridge0: left promiscuous mode
[  261.432194][T15464] bridge5: left promiscuous mode
[  261.452179][T15464] geneve3: left promiscuous mode
[  261.471834][ T5903] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.476827][ T5903] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.493847][ T5903] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.497572][ T5903] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  261.972669][T15502] 8021q: adding VLAN 0 to HW filter on device batadv1
[  261.977103][T15502] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  261.981812][T15502] team0: Failed to send options change via netlink (err -105)
[  261.985025][T15502] team0: Port device batadv1 added
[  262.008691][T15504] netlink: 'syz.0.4114': attribute type 1 has an invalid length.
[  262.544765][T15534] lo: entered allmulticast mode
[  262.548188][T15534] lo: left allmulticast mode
[  262.945685][T15556] vlan4: entered allmulticast mode
[  262.947837][T15556] gretap0: entered allmulticast mode
[  264.418367][T15628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.598329][T15640] netlink: 'syz.1.4173': attribute type 21 has an invalid length.
[  264.602563][T15640] __nla_validate_parse: 126 callbacks suppressed
[  264.602579][T15640] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4173'.
[  265.366920][T15661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4182'.
[  265.456007][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'.
[  265.578947][T15673] svc: failed to register nfsdv3 RPC service (errno 111).
[  265.584927][T15673] svc: failed to register nfsaclv3 RPC service (errno 111).
[  265.734161][T15449] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  266.157450][T15721] netlink: 'syz.2.4204': attribute type 9 has an invalid length.
[  266.164698][T15721] netlink: 'syz.2.4204': attribute type 9 has an invalid length.
[  266.188739][T15723] netlink: 'syz.1.4205': attribute type 1 has an invalid length.
[  266.192797][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4205'.
[  266.852246][T15763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4223'.
[  266.855680][T15763] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  267.763494][T15832] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.775462][T15828] syzkaller0: entered promiscuous mode
[  267.777417][T15828] syzkaller0: entered allmulticast mode
[  269.445709][T15842] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  269.525307][T15853] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4263'.
[  269.526985][T15852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4264'.
[  269.793972][T15856] bpq0: entered promiscuous mode
[  269.884357][T15871] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4271'.
[  270.063984][T15885] netlink: 424 bytes leftover after parsing attributes in process `syz.1.4278'.
[  270.076722][T15885] netlink: 424 bytes leftover after parsing attributes in process `syz.1.4278'.
[  270.343083][T15860] ==================================================================
[  270.346506][T15860] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  270.349881][T15860] Read of size 1 at addr ffff88810fb86432 by task syz.2.4262/15860
[  270.353786][T15860] 
[  270.355308][T15860] CPU: 0 UID: 0 PID: 15860 Comm: syz.2.4262 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  270.355330][T15860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.355342][T15860] Call Trace:
[  270.355349][T15860]  <TASK>
[  270.355357][T15860]  dump_stack_lvl+0x189/0x250
[  270.355382][T15860]  ? __virt_addr_valid+0x1c8/0x5c0
[  270.355403][T15860]  ? rcu_is_watching+0x15/0xb0
[  270.355420][T15860]  ? __kasan_check_byte+0x12/0x40
[  270.355442][T15860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.355460][T15860]  ? rcu_is_watching+0x15/0xb0
[  270.355474][T15860]  ? lock_release+0x4b/0x3e0
[  270.355496][T15860]  ? __virt_addr_valid+0x1c8/0x5c0
[  270.355513][T15860]  ? __virt_addr_valid+0x4a5/0x5c0
[  270.355532][T15860]  print_report+0xca/0x240
[  270.355545][T15860]  ? rose_transmit_link+0x5c3/0x740
[  270.355566][T15860]  kasan_report+0x118/0x150
[  270.355586][T15860]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  270.355608][T15860]  ? rose_transmit_link+0x5c3/0x740
[  270.355631][T15860]  rose_transmit_link+0x5c3/0x740
[  270.355654][T15860]  ? skb_put+0x11b/0x210
[  270.355674][T15860]  rose_write_internal+0x11dc/0x1ac0
[  270.355696][T15860]  ? __pfx_rose_write_internal+0x10/0x10
[  270.355713][T15860]  ? __timer_delete+0x5d/0x390
[  270.355734][T15860]  rose_release+0x24e/0x520
[  270.355754][T15860]  sock_close+0xc3/0x240
[  270.355770][T15860]  ? __pfx_sock_close+0x10/0x10
[  270.355783][T15860]  __fput+0x44c/0xa70
[  270.355803][T15860]  task_work_run+0x1d4/0x260
[  270.355824][T15860]  ? __pfx_task_work_run+0x10/0x10
[  270.355843][T15860]  ? task_work_add+0x281/0x420
[  270.355862][T15860]  ? __pfx_task_work_add+0x10/0x10
[  270.355881][T15860]  get_signal+0x11ed/0x1340
[  270.355902][T15860]  arch_do_signal_or_restart+0x9a/0x750
[  270.355928][T15860]  ? __pfx___sys_connect+0x10/0x10
[  270.355949][T15860]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  270.355976][T15860]  ? exit_to_user_mode_loop+0x40/0x110
[  270.355997][T15860]  exit_to_user_mode_loop+0x75/0x110
[  270.356017][T15860]  do_syscall_64+0x2bd/0x3b0
[  270.356037][T15860]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.356056][T15860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.356073][T15860]  ? exc_page_fault+0x9f/0xf0
[  270.356090][T15860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.356105][T15860] RIP: 0033:0x7f325b98ebe9
[  270.356121][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.356183][T15860] RSP: 002b:00007f325c7e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  270.356202][T15860] RAX: fffffffffffffe00 RBX: 00007f325bbb6180 RCX: 00007f325b98ebe9
[  270.356215][T15860] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d
[  270.356225][T15860] RBP: 00007f325ba11e19 R08: 0000000000000000 R09: 0000000000000000
[  270.356234][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.356243][T15860] R13: 00007f325bbb6218 R14: 00007f325bbb6180 R15: 00007ffd8e9ab718
[  270.356260][T15860]  </TASK>
[  270.356266][T15860] 
[  270.482337][T15860] Allocated by task 14451:
[  270.484383][T15860]  kasan_save_track+0x3e/0x80
[  270.486661][T15860]  __kasan_kmalloc+0x93/0xb0
[  270.488867][T15860]  __kmalloc_cache_noprof+0x230/0x3d0
[  270.491431][T15860]  rose_add_node+0x23a/0xde0
[  270.493503][T15860]  rose_rt_ioctl+0xa48/0xfb0
[  270.495305][T15860]  rose_ioctl+0x3ce/0x8b0
[  270.497010][T15860]  sock_do_ioctl+0xdc/0x300
[  270.498845][T15860]  sock_ioctl+0x576/0x790
[  270.500601][T15860]  __se_sys_ioctl+0xfc/0x170
[  270.502460][T15860]  do_syscall_64+0xfa/0x3b0
[  270.504314][T15860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.506728][T15860] 
[  270.507749][T15860] Freed by task 15856:
[  270.509382][T15860]  kasan_save_track+0x3e/0x80
[  270.511282][T15860]  kasan_save_free_info+0x46/0x50
[  270.513293][T15860]  __kasan_slab_free+0x5b/0x80
[  270.515210][T15860]  kfree+0x18e/0x440
[  270.516792][T15860]  rose_rt_device_down+0x473/0x4c0
[  270.518903][T15860]  rose_device_event+0x603/0x6a0
[  270.520941][T15860]  notifier_call_chain+0x1b6/0x3e0
[  270.523000][T15860]  __dev_notify_flags+0x18d/0x2e0
[  270.525033][T15860]  netif_change_flags+0xe8/0x1a0
[  270.526996][T15860]  dev_change_flags+0x130/0x260
[  270.528933][T15860]  dev_ioctl+0x7b4/0x1150
[  270.530690][T15860]  sock_do_ioctl+0x22c/0x300
[  270.532673][T15860]  sock_ioctl+0x576/0x790
[  270.534522][T15860]  __se_sys_ioctl+0xfc/0x170
[  270.536424][T15860]  do_syscall_64+0xfa/0x3b0
[  270.538321][T15860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.540756][T15860] 
[  270.541753][T15860] The buggy address belongs to the object at ffff88810fb86400
[  270.541753][T15860]  which belongs to the cache kmalloc-512 of size 512
[  270.547384][T15860] The buggy address is located 50 bytes inside of
[  270.547384][T15860]  freed 512-byte region [ffff88810fb86400, ffff88810fb86600)
[  270.552832][T15860] 
[  270.553848][T15860] The buggy address belongs to the physical page:
[  270.556477][T15860] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fb84
[  270.560001][T15860] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  270.564146][T15860] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  270.567772][T15860] page_type: f5(slab)
[  270.569698][T15860] raw: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  270.573539][T15860] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  270.577680][T15860] head: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122
[  270.581887][T15860] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  270.585755][T15860] head: 057ff00000000002 ffffea00043ee101 00000000ffffffff 00000000ffffffff
[  270.589490][T15860] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  270.593628][T15860] page dumped because: kasan: bad access detected
[  270.596673][T15860] page_owner tracks the page as allocated
[  270.599354][T15860] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6516, tgid 6515 (syz.2.263), ts 87629427293, free_ts 87186277997
[  270.607844][T15860]  post_alloc_hook+0x240/0x2a0
[  270.610174][T15860]  get_page_from_freelist+0x21e4/0x22c0
[  270.612810][T15860]  __alloc_frozen_pages_noprof+0x181/0x370
[  270.615476][T15860]  alloc_pages_mpol+0x232/0x4a0
[  270.617781][T15860]  allocate_slab+0x8a/0x370
[  270.619830][T15860]  ___slab_alloc+0xbeb/0x1410
[  270.621854][T15860]  __kmalloc_noprof+0x305/0x4f0
[  270.624042][T15860]  hash_ip4_add+0x18ba/0x1ec0
[  270.626283][T15860]  hash_ip4_uadt+0x640/0x850
[  270.628457][T15860]  call_ad+0x383/0xb00
[  270.630411][T15860]  ip_set_ad+0x791/0x930
[  270.632495][T15860]  nfnetlink_rcv_msg+0xb4d/0x1130
[  270.634622][T15860]  netlink_rcv_skb+0x208/0x470
[  270.636399][T15860]  nfnetlink_rcv+0x26a/0x2520
[  270.638268][T15860]  netlink_unicast+0x82f/0x9e0
[  270.640229][T15860]  netlink_sendmsg+0x805/0xb30
[  270.642298][T15860] page last free pid 5857 tgid 5857 stack trace:
[  270.645001][T15860]  __free_frozen_pages+0xbc4/0xd30
[  270.647042][T15860]  __slab_free+0x303/0x3c0
[  270.649081][T15860]  qlist_free_all+0x97/0x140
[  270.651202][T15860]  kasan_quarantine_reduce+0x148/0x160
[  270.653610][T15860]  __kasan_slab_alloc+0x22/0x80
[  270.655801][T15860]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  270.658359][T15860]  getname_flags+0xb8/0x540
[  270.660518][T15860]  __x64_sys_mkdirat+0x7a/0xa0
[  270.662766][T15860]  do_syscall_64+0xfa/0x3b0
[  270.664894][T15860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.667562][T15860] 
[  270.668696][T15860] Memory state around the buggy address:
[  270.671356][T15860]  ffff88810fb86300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  270.674975][T15860]  ffff88810fb86380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  270.678707][T15860] >ffff88810fb86400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.682317][T15860]                                      ^
[  270.684968][T15860]  ffff88810fb86480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.688947][T15860]  ffff88810fb86500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  270.692739][T15860] ==================================================================
[  270.722779][T15860] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  270.725922][T15860] CPU: 0 UID: 0 PID: 15860 Comm: syz.2.4262 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  270.731270][T15860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.735988][T15860] Call Trace:
[  270.737579][T15860]  <TASK>
[  270.738980][T15860]  dump_stack_lvl+0x99/0x250
[  270.740961][T15860]  ? __asan_memcpy+0x40/0x70
[  270.742943][T15860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.745203][T15860]  ? __pfx__printk+0x10/0x10
[  270.747300][T15860]  vpanic+0x281/0x750
[  270.749149][T15860]  ? __pfx_print_hex_dump+0x10/0x10
[  270.751562][T15860]  ? __pfx_vpanic+0x10/0x10
[  270.753701][T15860]  ? preempt_schedule_common+0x83/0xd0
[  270.756066][T15860]  ? preempt_schedule+0xae/0xc0
[  270.758147][T15860]  panic+0xb9/0xc0
[  270.759764][T15860]  ? __pfx_panic+0x10/0x10
[  270.761737][T15860]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.764593][T15860]  ? rose_transmit_link+0x5c3/0x740
[  270.767004][T15860]  check_panic_on_warn+0x89/0xb0
[  270.769273][T15860]  ? rose_transmit_link+0x5c3/0x740
[  270.771534][T15860]  end_report+0x78/0x160
[  270.773370][T15860]  kasan_report+0x129/0x150
[  270.775399][T15860]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  270.777890][T15860]  ? rose_transmit_link+0x5c3/0x740
[  270.780279][T15860]  rose_transmit_link+0x5c3/0x740
[  270.782562][T15860]  ? skb_put+0x11b/0x210
[  270.784442][T15860]  rose_write_internal+0x11dc/0x1ac0
[  270.786576][T15860]  ? __pfx_rose_write_internal+0x10/0x10
[  270.788848][T15860]  ? __timer_delete+0x5d/0x390
[  270.790782][T15860]  rose_release+0x24e/0x520
[  270.792766][T15860]  sock_close+0xc3/0x240
[  270.794579][T15860]  ? __pfx_sock_close+0x10/0x10
[  270.796627][T15860]  __fput+0x44c/0xa70
[  270.798532][T15860]  task_work_run+0x1d4/0x260
[  270.800358][T15860]  ? __pfx_task_work_run+0x10/0x10
[  270.802320][T15860]  ? task_work_add+0x281/0x420
[  270.804369][T15860]  ? __pfx_task_work_add+0x10/0x10
[  270.806592][T15860]  get_signal+0x11ed/0x1340
[  270.808626][T15860]  arch_do_signal_or_restart+0x9a/0x750
[  270.811005][T15860]  ? __pfx___sys_connect+0x10/0x10
[  270.813137][T15860]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  270.815567][T15860]  ? exit_to_user_mode_loop+0x40/0x110
[  270.817900][T15860]  exit_to_user_mode_loop+0x75/0x110
[  270.820140][T15860]  do_syscall_64+0x2bd/0x3b0
[  270.822017][T15860]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.824139][T15860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.826620][T15860]  ? exc_page_fault+0x9f/0xf0
[  270.828554][T15860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.830847][T15860] RIP: 0033:0x7f325b98ebe9
[  270.832591][T15860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.840210][T15860] RSP: 002b:00007f325c7e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  270.843514][T15860] RAX: fffffffffffffe00 RBX: 00007f325bbb6180 RCX: 00007f325b98ebe9
[  270.846613][T15860] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000d
[  270.849679][T15860] RBP: 00007f325ba11e19 R08: 0000000000000000 R09: 0000000000000000
[  270.852734][T15860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.855768][T15860] R13: 00007f325bbb6218 R14: 00007f325bbb6180 R15: 00007ffd8e9ab718
[  270.858814][T15860]  </TASK>
[  270.860776][T15860] Kernel Offset: disabled
[  270.862563][T15860] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:53:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015b7 RDI=00000000000015b8 RBP=00000000000003f8 RSP=ffffc90004607210
R8 =ffff88801fdb8237 R9 =1ffff11003fb7046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af490e R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f325c7e76c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32b23ffc CR3=0000000107eb6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000030717062
XMM02=00007f325bb87498 00007f325bb87470 XMM03=00007f325bb874a8 00007f325bb874a0
XMM04=00007f325c6ed100 00007f325bb87460 XMM05=00007f325bb87478 00007f325bb874c0
XMM06=00007f325bb874b8 00007f325bb874b0 XMM07=00007f325bb874a8 00007f325bb874a0
XMM08=0000000000000000 00007f325ba12ee7 XMM09=0000000000000000 00007f325ba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d6b RBX=1ffff11009608341 RCX=ffff8880229f9cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90004477600 RSP=ffffc90004477480
R8 =ffffffff8fa34737 R9 =1ffffffff1f468e6 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f001f9cd6c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000107eb6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f001ec12e53
XMM06=0000000000000000 00007f001ec12e4d XMM07=0000000000000000 00007f001ec12e61
XMM08=0000000000000000 00007f001ec12ee7 XMM09=0000000000000000 00007f001ec12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
