last executing test programs:

1.28932318s ago: executing program 1 (id=7113):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x65, 0x1, 0xc006, 0xcab, 0x8, 0xb, 0x80000001, 0x4}, 0x20)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 'bond0\x00'}}, 0x1e)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

879.686985ms ago: executing program 2 (id=7125):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

879.424359ms ago: executing program 2 (id=7126):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

429.775578ms ago: executing program 1 (id=7137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)

360.338562ms ago: executing program 1 (id=7139):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xbc7}]}}}]}, 0x40}}, 0x0)

308.727749ms ago: executing program 1 (id=7141):
syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x6b, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x7, 0x3, 0x0, [0x0, 0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x7727, 0x0, 0x0, {[@mss={0x2, 0x4, 0x8}, @eol, @exp_fastopen={0xfe, 0x5a, 0xf989, 'x.'}, @eol, @fastopen={0x22, 0xf, "2f95447b1cd3e351f40cce23cf"}]}}}}}}}, 0x0)

308.503614ms ago: executing program 1 (id=7142):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x10, "4372070000000000476fb2940acfbe4c"}})

190.324997ms ago: executing program 1 (id=7146):
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000009bc0)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000000500)="747b6af9", 0x4}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0xc236, 0x9, 0x7, 0x1}}], 0x18, 0x48080}], 0x1, 0x44001)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0)

109.418871ms ago: executing program 0 (id=7149):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a80)="aa57fe9d974aee576fc01305b70e8e942781ac1999c6194324ad", 0x1007, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r0, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20)

109.361083ms ago: executing program 0 (id=7150):
r0 = socket(0x840000000002, 0x3, 0xf8)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000680)=0x3, 0x4)

49.501605ms ago: executing program 0 (id=7151):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0)

49.340086ms ago: executing program 0 (id=7152):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x398, 0x100000c, 0x1e0, 0x1e0, 0xc0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'pimreg\x00', {}, {0xff}, 0xff, 0x3}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x1000000000000}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xc, 0x2, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0xfff8, 0x2, [0x30, 0x3, 0x1, 0x37, 0x811, 0x33, 0x37, 0x1a, 0x17, 0x3d, 0x4, 0x4, 0x2b, 0x21, 0x1c, 0x5], 0x0, 0x8000, 0x2004927}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xfffd, 0x1}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xffffffff, 0x7fffffff, 0xffffff00, 0xffffff00], 0x4e20, 0x67, 0x3, 0x4, 0x1, 0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7d, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8)
pipe(0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400000008000f28, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4010}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0)
close(r2)

49.257855ms ago: executing program 2 (id=7153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x12251, 0x1a001}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20009080)

396.149µs ago: executing program 2 (id=7154):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), 0x0, 0x2}, 0x20)

264.258µs ago: executing program 0 (id=7155):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)

185.033µs ago: executing program 2 (id=7156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

96.336µs ago: executing program 0 (id=7157):
r0 = socket$inet6(0xa, 0x3, 0x8)
setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000000), 0x4)

0s ago: executing program 2 (id=7158):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4)
listen(r0, 0xfff)
accept4(r0, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80, 0x80800)

kernel console output (not intermixed with test programs):

over after parsing attributes in process `syz.1.2084'.
[  105.162553][T10599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.170243][T10599] syzkaller0: entered promiscuous mode
[  105.172204][T10599] syzkaller0: entered allmulticast mode
[  105.183698][T10599] tipc: Resetting bearer <eth:syzkaller0>
[  105.188574][T10598] tipc: Resetting bearer <eth:syzkaller0>
[  105.195243][T10598] tipc: Disabling bearer <eth:syzkaller0>
[  105.524447][T10613] bridge0: entered promiscuous mode
[  105.529672][T10613] bridge0: entered allmulticast mode
[  105.854984][ T5824] Bluetooth: hci2: command 0x0405 tx timeout
[  106.838724][T10705] syzkaller1: entered promiscuous mode
[  106.844971][T10705] syzkaller1: entered allmulticast mode
[  107.135302][T10740] netlink: 'syz.0.2144': attribute type 11 has an invalid length.
[  107.146138][T10740] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2144'.
[  107.299481][T10757] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2152'.
[  107.634631][T10787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2167'.
[  107.881571][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'.
[  107.901705][T10799] netlink: 'syz.2.2173': attribute type 4 has an invalid length.
[  108.076592][T10818] lo speed is unknown, defaulting to 1000
[  108.079165][T10818] lo speed is unknown, defaulting to 1000
[  108.081360][T10818] lo speed is unknown, defaulting to 1000
[  108.127292][T10824] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  108.206455][T10818] infiniband syz0: set down
[  108.208098][ T5884] lo speed is unknown, defaulting to 1000
[  108.210382][T10818] infiniband syz0: added lo
[  108.232316][T10818] RDS/IB: syz0: added
[  108.235007][T10818] smc: adding ib device syz0 with port count 1
[  108.237148][T10818] smc:    ib device syz0 port 1 has pnetid 
[  108.239153][ T5884] lo speed is unknown, defaulting to 1000
[  108.241628][T10818] lo speed is unknown, defaulting to 1000
[  108.345144][T10818] lo speed is unknown, defaulting to 1000
[  108.420768][T10847] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  108.423722][T10847] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  108.466800][T10818] lo speed is unknown, defaulting to 1000
[  108.549121][T10855] netlink: 'syz.1.2198': attribute type 2 has an invalid length.
[  108.584691][T10817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.684364][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2204'.
[  108.689412][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2204'.
[  108.711292][T10869] x_tables: ip_tables: udp match: only valid for protocol 17
[  108.739029][T10871] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2206'.
[  109.164605][T10881] netlink: 'syz.0.2209': attribute type 1 has an invalid length.
[  109.167837][T10881] netlink: 'syz.0.2209': attribute type 2 has an invalid length.
[  109.170493][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'.
[  109.262428][T10888] netlink: 'syz.2.2212': attribute type 29 has an invalid length.
[  109.266994][T10888] netlink: 'syz.2.2212': attribute type 29 has an invalid length.
[  109.320257][T10893] netlink: 'syz.2.2215': attribute type 1 has an invalid length.
[  109.413162][T10904] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  109.683692][T10919] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2224'.
[  109.825748][T10925] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2228'.
[  109.857363][T10929] syzkaller1: entered promiscuous mode
[  109.859294][T10929] syzkaller1: entered allmulticast mode
[  109.993420][T10941] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  110.033876][T10938] lo speed is unknown, defaulting to 1000
[  110.783094][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'.
[  110.808935][T10974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.813045][T10974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.821985][T10974] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  110.830841][T10974] bond0 (unregistering): Released all slaves
[  110.852754][T10982] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  110.989439][T11004] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2253'.
[  111.109408][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'.
[  111.118467][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2263'.
[  111.231032][T11043] netlink: 'syz.2.2274': attribute type 1 has an invalid length.
[  111.271557][T11050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.278245][T11050] syzkaller0: entered promiscuous mode
[  111.280060][T11050] syzkaller0: entered allmulticast mode
[  111.291382][T11050] tipc: Resetting bearer <eth:syzkaller0>
[  111.300214][T11048] tipc: Resetting bearer <eth:syzkaller0>
[  111.310714][T11048] tipc: Disabling bearer <eth:syzkaller0>
[  111.440183][T11064] block nbd0: Unsupported socket: shutdown callout must be supported.
[  111.526441][T11069] veth9: entered allmulticast mode
[  111.722857][T11087] netlink: 'syz.0.2292': attribute type 11 has an invalid length.
[  111.726633][T11085] atomic_op ffff8881052d6198 conn xmit_atomic 0000000000000000
[  111.729176][T11087] netlink: 'syz.0.2292': attribute type 4 has an invalid length.
[  111.884535][T11101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.012854][T11113] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.016198][T11113] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.058014][T11113] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.061586][T11113] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.124645][T11113] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.130926][T11113] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.178478][T11113] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.181737][T11113] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.249814][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.254198][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.266677][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.276618][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.285444][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.291062][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.305989][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.308708][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.428598][T11142] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  112.678228][T11175] netlink: 'syz.2.2331': attribute type 1 has an invalid length.
[  113.366463][T11229] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1
[  113.552004][T11248] erspan0: entered promiscuous mode
[  113.556444][T11248] batman_adv: batadv0: Adding interface: macvlan3
[  113.558605][T11248] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.569004][T11248] batman_adv: batadv0: Interface activated: macvlan3
[  113.579326][T11231] lo speed is unknown, defaulting to 1000
[  113.733798][T11265] validate_nla: 2 callbacks suppressed
[  113.733807][T11265] netlink: 'syz.1.2372': attribute type 9 has an invalid length.
[  113.917677][T11277] __nla_validate_parse: 9 callbacks suppressed
[  113.917686][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2379'.
[  113.922602][T11277] netlink: 'syz.0.2379': attribute type 7 has an invalid length.
[  113.941038][T11277] netlink: 'syz.0.2379': attribute type 8 has an invalid length.
[  113.944165][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2379'.
[  114.174339][T11308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2395'.
[  114.243221][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'.
[  114.285579][T11325] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2403'.
[  114.378813][T11335] netlink: 'syz.0.2406': attribute type 10 has an invalid length.
[  114.838537][T11383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.841906][T11383] syzkaller0: entered promiscuous mode
[  114.844073][T11383] syzkaller0: entered allmulticast mode
[  114.861192][T11382] tipc: Resetting bearer <eth:syzkaller0>
[  114.868955][T11382] tipc: Disabling bearer <eth:syzkaller0>
[  114.892252][T11389] syz.2.2431: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  114.897511][T11389] CPU: 0 UID: 0 PID: 11389 Comm: syz.2.2431 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  114.897524][T11389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.897529][T11389] Call Trace:
[  114.897533][T11389]  <TASK>
[  114.897536][T11389]  dump_stack_lvl+0x189/0x250
[  114.897549][T11389]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.897558][T11389]  ? __pfx__printk+0x10/0x10
[  114.897567][T11389]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  114.897577][T11389]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  114.897586][T11389]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  114.897602][T11389]  warn_alloc+0x214/0x310
[  114.897610][T11389]  ? stack_depot_save_flags+0x40/0x900
[  114.897620][T11389]  ? __pfx_warn_alloc+0x10/0x10
[  114.897628][T11389]  ? kasan_save_track+0x4f/0x80
[  114.897639][T11389]  ? xskq_create+0x56/0x170
[  114.897649][T11389]  ? xsk_init_queue+0xb0/0x110
[  114.897658][T11389]  ? xsk_setsockopt+0x4dc/0x8d0
[  114.897666][T11389]  ? do_sock_setsockopt+0x17c/0x1b0
[  114.897673][T11389]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  114.897680][T11389]  ? do_syscall_64+0xfa/0x3b0
[  114.897690][T11389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.897700][T11389]  __vmalloc_node_range_noprof+0x125/0x12f0
[  114.897719][T11389]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  114.897729][T11389]  ? __kasan_kmalloc+0x93/0xb0
[  114.897765][T11389]  vmalloc_user_noprof+0xad/0xf0
[  114.897774][T11389]  ? xskq_create+0xbf/0x170
[  114.897784][T11389]  xskq_create+0xbf/0x170
[  114.897796][T11389]  xsk_init_queue+0xb0/0x110
[  114.897806][T11389]  xsk_setsockopt+0x4dc/0x8d0
[  114.897817][T11389]  ? __pfx_xsk_setsockopt+0x10/0x10
[  114.897826][T11389]  ? __pfx_aa_sk_perm+0x10/0x10
[  114.897838][T11389]  ? aa_sock_opt_perm+0x74/0x110
[  114.897848][T11389]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  114.897858][T11389]  ? __pfx_xsk_setsockopt+0x10/0x10
[  114.897867][T11389]  do_sock_setsockopt+0x17c/0x1b0
[  114.897877][T11389]  __x64_sys_setsockopt+0x13f/0x1b0
[  114.897887][T11389]  do_syscall_64+0xfa/0x3b0
[  114.897914][T11389]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.897924][T11389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.897931][T11389]  ? exc_page_fault+0x9f/0xf0
[  114.897942][T11389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.897949][T11389] RIP: 0033:0x7fbf4218eb69
[  114.897957][T11389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.897964][T11389] RSP: 002b:00007fbf430da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  114.897973][T11389] RAX: ffffffffffffffda RBX: 00007fbf423b5fa0 RCX: 00007fbf4218eb69
[  114.897978][T11389] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  114.897982][T11389] RBP: 00007fbf42211df1 R08: 0000000000000004 R09: 0000000000000000
[  114.897986][T11389] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.897991][T11389] R13: 0000000000000000 R14: 00007fbf423b5fa0 R15: 00007fffb1927598
[  114.898002][T11389]  </TASK>
[  114.898805][T11389] Mem-Info:
[  115.000871][T11389] active_anon:13644 inactive_anon:0 isolated_anon:0
[  115.000871][T11389]  active_file:951 inactive_file:38235 isolated_file:0
[  115.000871][T11389]  unevictable:1768 dirty:224 writeback:0
[  115.000871][T11389]  slab_reclaimable:9983 slab_unreclaimable:58951
[  115.000871][T11389]  mapped:18171 shmem:2455 pagetables:988
[  115.000871][T11389]  sec_pagetables:0 bounce:0
[  115.000871][T11389]  kernel_misc_reclaimable:0
[  115.000871][T11389]  free:280691 free_pcp:20657 free_cma:0
[  115.015541][T11389] Node 0 active_anon:45992kB inactive_anon:0kB active_file:1172kB inactive_file:13380kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42272kB dirty:240kB writeback:0kB shmem:4972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4524kB pagetables:2300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  115.026219][T11389] Node 1 active_anon:8584kB inactive_anon:0kB active_file:2632kB inactive_file:139560kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30412kB dirty:656kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7264kB pagetables:1652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  115.036978][T11389] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  115.046064][T11389] lowmem_reserve[]: 0 814 814 814 814
[  115.047841][T11389] Node 0 DMA32 free:351364kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45992kB inactive_anon:0kB active_file:1172kB inactive_file:13380kB unevictable:3536kB writepending:240kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:50872kB local_pcp:35476kB free_cma:0kB
[  115.057929][T11389] lowmem_reserve[]: 0 0 0 0 0
[  115.059511][T11389] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  115.069220][T11389] lowmem_reserve[]: 0 0 854 854 854
[  115.070971][T11389] Node 1 Normal free:297548kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8584kB inactive_anon:0kB active_file:2632kB inactive_file:139560kB unevictable:3536kB writepending:656kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:31880kB local_pcp:16912kB free_cma:0kB
[  115.081354][T11389] lowmem_reserve[]: 0 0 0 0 0
[  115.082922][T11389] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  115.087174][T11389] Node 0 DMA32: 627*4kB (UME) 85*8kB (UM) 13*16kB (UM) 162*32kB (UM) 18*64kB (UM) 65*128kB (UME) 40*256kB (UM) 23*512kB (UM) 14*1024kB (UME) 13*2048kB (UME) 66*4096kB (UM) = 351364kB
[  115.093003][T11389] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  115.098427][T11389] Node 1 Normal: 1135*4kB (UM) 360*8kB (UME) 653*16kB (UME) 527*32kB (UME) 173*64kB (UME) 45*128kB (UME) 29*256kB (UM) 18*512kB (UME) 14*1024kB (UM) 7*2048kB (UM) 49*4096kB (UM) = 297580kB
[  115.104611][T11389] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  115.108922][T11389] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  115.111823][T11389] 41641 total pagecache pages
[  115.113330][T11389] 0 pages in swap cache
[  115.114670][T11389] Free swap  = 124996kB
[  115.116132][T11389] Total swap = 124996kB
[  115.117466][T11389] 786301 pages RAM
[  115.118653][T11389] 0 pages HighMem/MovableOnly
[  115.120120][T11389] 240546 pages reserved
[  115.121418][T11389] 0 pages cma reserved
[  115.308789][T11401] netlink: 'syz.0.2436': attribute type 2 has an invalid length.
[  115.509023][T11406] lo speed is unknown, defaulting to 1000
[  115.559448][T11430] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2444'.
[  115.562426][T11430] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2444'.
[  115.743990][T11418] lo speed is unknown, defaulting to 1000
[  116.250822][   T33] audit: type=1800 audit(1754308325.796:2): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2472" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=4430 res=0 errno=0
[  116.283284][T11501] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  116.286339][T11501] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  116.289207][T11501] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  116.394927][T11505] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2475'.
[  116.404166][T11505] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2475'.
[  116.412971][T11505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2475'.
[  116.500799][T11511] netlink: 'syz.1.2478': attribute type 1 has an invalid length.
[  117.390251][T11583] bridge_slave_0: invalid flags given to default FDB implementation
[  117.503915][T11604] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.645541][T11630] netlink: 'syz.0.2534': attribute type 22 has an invalid length.
[  117.687042][T11630] netlink: 'syz.0.2534': attribute type 22 has an invalid length.
[  117.745389][T11635] nbd0: detected capacity change from 0 to 127
[  117.751180][T11640] block nbd0: Receive control failed (result -104)
[  117.823600][T11656] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  117.979817][T11663] batman_adv: batadv0: Adding interface: ip6gretap1
[  117.982840][T11663] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.994065][T11663] batman_adv: batadv0: Interface activated: ip6gretap1
[  118.786650][T11784] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  119.028032][T11804] __nla_validate_parse: 16 callbacks suppressed
[  119.028042][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2614'.
[  119.062236][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'.
[  119.541844][T11862] 8021q: adding VLAN 0 to HW filter on device team0
[  119.546050][T11862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  119.551175][   T10] lo speed is unknown, defaulting to 1000
[  119.553084][   T10] syz0: Port: 1 Link ACTIVE
[  119.558485][   T10] lo speed is unknown, defaulting to 1000
[  119.594427][  T974] IPVS: starting estimator thread 0...
[  119.684899][T11865] IPVS: using max 80 ests per chain, 192000 per kthread
[  120.049618][T11890] syz_tun: entered promiscuous mode
[  120.131810][T11904] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2664'.
[  120.202129][T11913] netlink: 'syz.2.2668': attribute type 3 has an invalid length.
[  120.283982][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2674'.
[  120.740834][T11961] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  120.743982][T11961] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  121.752601][T12018] netlink: 'syz.1.2713': attribute type 11 has an invalid length.
[  121.780980][T12024] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  121.783479][T12024] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  121.836878][T12036] netlink: 'syz.0.2721': attribute type 4 has an invalid length.
[  121.856544][ T5287] lo speed is unknown, defaulting to 1000
[  121.857277][T12036] netlink: 'syz.0.2721': attribute type 4 has an invalid length.
[  121.859144][ T5287] syz0: Port: 1 Link DOWN
[  121.863221][ T5287] lo speed is unknown, defaulting to 1000
[  121.873986][  T974] lo speed is unknown, defaulting to 1000
[  121.878712][  T974] syz0: Port: 1 Link ACTIVE
[  121.948441][T12048] syzkaller1: entered promiscuous mode
[  121.950337][T12048] syzkaller1: entered allmulticast mode
[  121.953786][T12050] delete_channel: no stack
[  122.105945][T12073] macsec1: entered promiscuous mode
[  122.161256][T12087] netlink: 'syz.2.2745': attribute type 2 has an invalid length.
[  122.163978][T12087] netlink: 'syz.2.2745': attribute type 1 has an invalid length.
[  122.169139][T12087] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2745'.
[  122.172070][T12086] netlink: 'syz.0.2746': attribute type 1 has an invalid length.
[  122.205956][T12086] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.227972][T12086] bond0: (slave dummy0): making interface the new active one
[  122.231288][T12086] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  122.256232][T12096] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2750'.
[  122.259418][T12096] bridge_slave_0: entered allmulticast mode
[  122.344149][T12109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.352424][ T5857] lo speed is unknown, defaulting to 1000
[  122.354307][ T5857] syz0: Port: 1 Link DOWN
[  122.358383][ T5857] lo speed is unknown, defaulting to 1000
[  122.789135][T12171] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2783'.
[  122.833611][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'.
[  122.841320][T12179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.934169][T12189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.941155][T12188] tipc: Resetting bearer <eth:syzkaller0>
[  123.077858][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2798'.
[  123.708162][T12188] tipc: Disabling bearer <eth:syzkaller0>
[  123.747283][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2803'.
[  124.053930][T12240] lo speed is unknown, defaulting to 1000
[  124.099248][T12259] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2823'.
[  124.210496][T12270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2828'.
[  124.215247][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2826'.
[  124.224466][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2828'.
[  124.284677][T12280] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  124.366423][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'.
[  124.404074][T12296] tipc: MTU too low for tipc bearer
[  124.623997][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2855'.
[  124.672086][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2859'.
[  124.678050][T12334] vlan3: entered promiscuous mode
[  124.680181][T12334] gretap0: entered promiscuous mode
[  124.728986][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'.
[  124.824424][T12361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2871'.
[  125.054363][T12375] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  125.057441][T12375] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  125.505989][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2882'.
[  125.689593][T12402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.697205][T12402] syzkaller0: entered promiscuous mode
[  125.699090][T12402] syzkaller0: entered allmulticast mode
[  125.779570][T12402] tipc: Resetting bearer <eth:syzkaller0>
[  125.782869][T12401] tipc: Resetting bearer <eth:syzkaller0>
[  125.796172][T12401] tipc: Disabling bearer <eth:syzkaller0>
[  125.834665][T12413] bridge4: left allmulticast mode
[  125.843220][T12413] vxlan0: left promiscuous mode
[  125.850390][T12413] vxlan0: left allmulticast mode
[  125.856224][T12413] bridge0: left promiscuous mode
[  125.857893][T12413] bridge0: left allmulticast mode
[  125.860121][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.863177][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.875235][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.883908][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  126.076289][T12442] netlink: 'syz.0.2906': attribute type 1 has an invalid length.
[  126.089011][T12442] netlink: 'syz.0.2906': attribute type 1 has an invalid length.
[  127.471527][T12551] lo speed is unknown, defaulting to 1000
[  127.710237][T12591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.977993][T12618] net veth1_virt_wifi : renamed from virt_wifi0
[  128.224488][T12655] netlink: 'syz.2.3001': attribute type 10 has an invalid length.
[  128.698703][T12714] tipc: Enabled bearer <ib:vxcan1>, priority 10
[  128.759280][T12724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.761794][T12724] syzkaller0: entered promiscuous mode
[  128.763543][T12724] syzkaller0: entered allmulticast mode
[  128.773319][T12724] tipc: Resetting bearer <eth:syzkaller0>
[  128.777303][T12723] tipc: Resetting bearer <eth:syzkaller0>
[  128.783455][T12723] tipc: Disabling bearer <eth:syzkaller0>
[  129.769607][T12748] batman_adv: batadv0: Adding interface: gretap1
[  129.771826][T12748] batman_adv: batadv0: The MTU of interface gretap1 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1340 would solve the problem.
[  129.780847][T12748] batman_adv: batadv0: Interface activated: gretap1
[  129.783449][T12750] __nla_validate_parse: 6 callbacks suppressed
[  129.783457][T12750] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3044'.
[  129.825455][ T5287] tipc: Node number set to 2531511846
[  129.900296][T12762] team0: Port device syz_tun added
[  130.548226][T12851] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  130.550674][T12851] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  131.088325][T12900] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  131.091908][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3108'.
[  132.258047][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.633922][T12968] sctp: [Deprecated]: syz.0.3139 (pid 12968) Use of int in maxseg socket option.
[  132.633922][T12968] Use struct sctp_assoc_value instead
[  133.181437][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3157'.
[  133.221875][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3160'.
[  133.678824][T13049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3174'.
[  133.830265][T13059] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  133.833045][T13059] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  134.098008][T13083] syzkaller1: entered promiscuous mode
[  134.099846][T13083] syzkaller1: entered allmulticast mode
[  134.105218][T13085] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3191'.
[  134.141444][T13087] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.144434][T13087] syzkaller0: entered promiscuous mode
[  134.146545][T13087] syzkaller0: entered allmulticast mode
[  134.157872][T13087] tipc: Resetting bearer <eth:syzkaller0>
[  134.160851][T13086] tipc: Resetting bearer <eth:syzkaller0>
[  134.176408][T13086] tipc: Disabling bearer <eth:syzkaller0>
[  134.428225][T13100] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  134.478281][T13108] netlink: 'syz.2.3202': attribute type 3 has an invalid length.
[  134.480826][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'.
[  134.743286][T13154] delete_channel: no stack
[  135.270239][T13224] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.592964][T13250] lo speed is unknown, defaulting to 1000
[  135.635907][T13265] netlink: 'syz.2.3272': attribute type 13 has an invalid length.
[  135.638718][T13265] netlink: 'syz.2.3272': attribute type 17 has an invalid length.
[  135.644349][T13265] gretap0: refused to change device tx_queue_len
[  135.649075][T13265] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  135.749891][T13276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  135.753564][   T10] IPVS: starting estimator thread 0...
[  135.845298][T13277] IPVS: using max 79 ests per chain, 189600 per kthread
[  135.949858][T13304] batadv_slave_0: entered promiscuous mode
[  135.952192][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3283'.
[  135.978997][T13304] batadv_slave_0 (unregistering): left promiscuous mode
[  136.090891][T13313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3285'.
[  136.093914][T13313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3285'.
[  136.249506][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'.
[  136.253843][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'.
[  136.264725][T13299] lo speed is unknown, defaulting to 1000
[  136.637381][T13372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.724245][T13379] netlink: 'syz.1.3315': attribute type 41 has an invalid length.
[  136.789898][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3319'.
[  136.842944][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'.
[  136.846113][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'.
[  137.917139][T13472] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3356'.
[  138.422509][T13514] netlink: 'syz.1.3375': attribute type 1 has an invalid length.
[  138.425492][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3375'.
[  138.666589][T13547] netlink: 'syz.1.3391': attribute type 5 has an invalid length.
[  138.669529][T13547] netlink: 'syz.1.3391': attribute type 6 has an invalid length.
[  139.008977][T13599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.011418][T13599] syzkaller0: entered promiscuous mode
[  139.016181][T13599] syzkaller0: entered allmulticast mode
[  139.042677][T13599] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  139.046666][T13599] tipc: Resetting bearer <eth:syzkaller0>
[  139.051997][T13597] tipc: Resetting bearer <eth:syzkaller0>
[  139.065084][T13597] tipc: Disabling bearer <eth:syzkaller0>
[  139.907942][T13700] bond0: option use_carrier: invalid value (2)
[  139.937782][T13707] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  140.002168][T13717] syzkaller1: entered promiscuous mode
[  140.004025][T13717] syzkaller1: entered allmulticast mode
[  140.107658][T13721] block nbd1: server does not support multiple connections per device.
[  140.113058][T13721] block nbd1: shutting down sockets
[  140.134238][T13733] bridge0: entered allmulticast mode
[  140.169749][T13737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.201724][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.211483][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.217989][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.221959][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.617753][T13785] IPVS: ovf: TCP 172.20.20.170:0 - no destination available
[  141.501756][T13807] __nla_validate_parse: 6 callbacks suppressed
[  141.501765][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'.
[  141.515750][T13807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3504'.
[  142.100346][T13835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3517'.
[  142.158320][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3522'.
[  142.234064][T13857] trusted_key: syz.2.3528 sent an empty control message without MSG_MORE.
[  142.441898][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'.
[  142.445250][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'.
[  142.579787][T13891] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3544'.
[  143.163160][T13909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3552'.
[  143.166944][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'.
[  143.190980][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3553'.
[  143.442276][T13939] netlink: 'syz.0.3566': attribute type 29 has an invalid length.
[  143.466124][T13943] netlink: 'syz.0.3568': attribute type 1 has an invalid length.
[  143.493679][T13943] 8021q: adding VLAN 0 to HW filter on device bond4
[  143.640749][T13968] netlink: 'syz.0.3578': attribute type 13 has an invalid length.
[  143.646727][T13968] netlink: 'syz.0.3578': attribute type 12 has an invalid length.
[  144.798824][T14081] netlink: zone id is out of range
[  144.800638][T14081] netlink: zone id is out of range
[  144.802422][T14081] netlink: zone id is out of range
[  144.804239][T14081] netlink: zone id is out of range
[  144.811728][T14081] netlink: zone id is out of range
[  144.814644][T14081] netlink: zone id is out of range
[  144.819331][T14081] netlink: zone id is out of range
[  144.833227][T14062] lo speed is unknown, defaulting to 1000
[  145.212852][T14127] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  146.146386][T14182] C: entered allmulticast mode
[  146.149315][T14182] tunl0: entered allmulticast mode
[  146.152040][T14182] gre0: entered allmulticast mode
[  146.155956][T14182] gretap0: entered allmulticast mode
[  146.162879][T14182] erspan0: entered allmulticast mode
[  146.164731][T14182] ip_vti0: entered allmulticast mode
[  146.166983][T14182] ip6_vti0: entered allmulticast mode
[  146.168885][T14182] sit0: entered allmulticast mode
[  146.170704][T14182] ip6tnl0: entered allmulticast mode
[  146.172513][T14182] ip6gre0: entered allmulticast mode
[  146.174299][T14182] ip6gretap0: entered allmulticast mode
[  146.176579][T14182] bond0: entered allmulticast mode
[  146.178414][T14182] team0: entered allmulticast mode
[  146.180532][T14182] dummy0: entered allmulticast mode
[  146.182544][T14182] nlmon0: entered allmulticast mode
[  146.187014][T14182] caif0: entered allmulticast mode
[  146.188940][T14182] batadv0: entered allmulticast mode
[  146.190798][T14182] vxcan0: entered allmulticast mode
[  146.192614][T14182] vxcan1: entered allmulticast mode
[  146.194457][T14182] veth0: entered allmulticast mode
[  146.196871][T14182] veth1: entered allmulticast mode
[  146.198669][T14182] wg1: entered allmulticast mode
[  146.200390][T14182] wg2: entered allmulticast mode
[  146.202124][T14182] veth0_to_bridge: entered allmulticast mode
[  146.204202][T14182] bridge_slave_0: entered allmulticast mode
[  146.207251][T14182] veth1_to_bridge: entered allmulticast mode
[  146.209616][T14182] bridge_slave_1: entered allmulticast mode
[  146.211689][T14182] veth0_to_bond: entered allmulticast mode
[  146.213765][T14182] bond_slave_0: entered allmulticast mode
[  146.216127][T14182] veth0_to_team: entered allmulticast mode
[  146.218109][T14182] team_slave_0: entered allmulticast mode
[  146.220183][T14182] veth1_to_team: entered allmulticast mode
[  146.222845][T14182] team_slave_1: entered allmulticast mode
[  146.225563][T14182] veth0_to_batadv: entered allmulticast mode
[  146.228177][T14182] batadv_slave_0: entered allmulticast mode
[  146.230769][T14182] veth1_to_batadv: entered allmulticast mode
[  146.233622][T14182] batadv_slave_1: entered allmulticast mode
[  146.236838][T14182] xfrm0: entered allmulticast mode
[  146.239119][T14182] veth0_to_hsr: entered allmulticast mode
[  146.241636][T14182] hsr_slave_0: entered allmulticast mode
[  146.244057][T14182] veth1_to_hsr: entered allmulticast mode
[  146.247015][T14182] hsr_slave_1: entered allmulticast mode
[  146.249449][T14182] hsr0: entered allmulticast mode
[  146.251646][T14182] veth1_virt_wifi: entered allmulticast mode
[  146.254253][T14182] veth0_virt_wifi: entered allmulticast mode
[  146.257561][T14182] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  146.260706][T14182] veth1_macvtap: entered allmulticast mode
[  146.263349][T14182] veth0_macvtap: entered allmulticast mode
[  146.266757][T14182] macvtap0: entered allmulticast mode
[  146.269279][T14182] macsec0: entered allmulticast mode
[  146.271769][T14182] geneve0: entered allmulticast mode
[  146.274115][T14182] geneve1: entered allmulticast mode
[  146.277175][T14182] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  146.281147][T14182] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  146.284289][T14182] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  146.288173][T14182] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  146.291382][T14182] mac80211_hwsim hwsim4 ": entered allmulticast mode
[  146.294404][T14182] batadv1: entered allmulticast mode
[  146.297144][T14182] bridge1: entered allmulticast mode
[  146.299573][T14182] bridge2: entered allmulticast mode
[  146.301956][T14182] ip6erspan0: entered allmulticast mode
[  146.304393][T14182] macsec1: entered allmulticast mode
[  146.306961][T14182] bridge3: entered allmulticast mode
[  146.309264][T14182] syztnl2: entered allmulticast mode
[  146.311562][T14182] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  146.314549][T14182] bridge4: entered allmulticast mode
[  146.317271][T14182] bond1: entered allmulticast mode
[  146.319473][T14182] bond2: entered allmulticast mode
[  146.321774][T14182] vxlan0: entered allmulticast mode
[  146.324064][T14182] bridge5: entered allmulticast mode
[  146.327087][T14182] macvtap1: entered allmulticast mode
[  146.329456][T14182] veth2: entered allmulticast mode
[  146.331623][T14182] veth3: entered allmulticast mode
[  146.333902][T14182] syztnl0: entered allmulticast mode
[  146.340480][T14182] bridge0.257: entered allmulticast mode
[  146.342933][T14182] bridge6: entered allmulticast mode
[  146.345461][T14182] syztnl1: entered allmulticast mode
[  146.347822][T14182] bridge7: entered allmulticast mode
[  146.350270][T14182] batman_adv: batadv0: Interface deactivated: gretap1
[  146.365815][T14182] gretap1: entered allmulticast mode
[  146.369931][T14182] vxlan1: entered allmulticast mode
[  146.374163][T14182] geneve2: entered allmulticast mode
[  146.378532][T12290] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.381485][T12290] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.384416][T12290] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.387653][T12290] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.864189][T14215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.879271][T14215] syzkaller0: entered promiscuous mode
[  146.881107][T14215] syzkaller0: entered allmulticast mode
[  146.907915][T14215] tipc: Resetting bearer <eth:syzkaller0>
[  146.911129][T14214] tipc: Resetting bearer <eth:syzkaller0>
[  146.927138][T14214] tipc: Disabling bearer <eth:syzkaller0>
[  147.308670][T14261] syzkaller1: entered promiscuous mode
[  147.310906][T14261] syzkaller1: entered allmulticast mode
[  147.412003][T14269] __nla_validate_parse: 5 callbacks suppressed
[  147.412016][T14269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3707'.
[  147.525538][T14284] netlink: 'syz.0.3713': attribute type 7 has an invalid length.
[  147.716700][T14319] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3731'.
[  147.832877][T14335] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  147.838564][T14335] mac80211_hwsim hwsim9 wlan0: left allmulticast mode
[  147.841564][T14335] net_ratelimit: 17 callbacks suppressed
[  147.841571][T14335] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  147.852919][T14337] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3740'.
[  147.957208][T14351] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3746'.
[  148.172038][T14365] lo speed is unknown, defaulting to 1000
[  148.260296][   T25] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 30 seconds
[  148.264236][   T25] block nbd0: Possible stuck request ffff888022038200: control (read@1024,1024B). Runtime 30 seconds
[  148.267963][   T25] block nbd0: Possible stuck request ffff888022038400: control (read@2048,1024B). Runtime 30 seconds
[  148.271640][   T25] block nbd0: Possible stuck request ffff888022038600: control (read@3072,1024B). Runtime 30 seconds
[  148.824558][T14399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3767'.
[  148.827670][T14399] netlink: 'syz.1.3767': attribute type 2 has an invalid length.
[  148.977621][T14419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3776'.
[  149.050094][T14423] netlink: 'syz.2.3778': attribute type 1 has an invalid length.
[  149.053141][T14423] netlink: 'syz.2.3778': attribute type 2 has an invalid length.
[  149.168752][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'.
[  149.198111][T14438] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  149.219964][T14442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3786'.
[  149.223020][T14442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3786'.
[  149.239860][T14444] netlink: 'syz.1.3787': attribute type 1 has an invalid length.
[  149.242467][T14444] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3787'.
[  149.434734][T14458] batman_adv: batadv0: Interface deactivated: macvlan3
[  149.445945][T14458] batman_adv: batadv0: Removing interface: macvlan3
[  149.452069][T14458] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  149.461392][T14458] batman_adv: batadv0: Removing interface: ip6gretap1
[  149.762733][T14479] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.772860][T14479] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.891390][T14498] team0: Port device syz_tun removed
[  149.894578][T14498] bond0: (slave dummy0): Releasing active interface
[  149.900952][T14498] bridge_slave_0: left allmulticast mode
[  149.903012][T14498] bridge_slave_0: left promiscuous mode
[  149.906507][T14498] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.910858][T14498] bridge_slave_1: left allmulticast mode
[  149.912867][T14498] bridge_slave_1: left promiscuous mode
[  149.915880][T14498] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.920699][T14498] team0: Port device team_slave_0 removed
[  149.923732][T14498] team0: Port device team_slave_1 removed
[  149.926039][T14498] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.928795][T14498] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.932793][T14498] bond1: (slave bridge1): Releasing backup interface
[  149.940493][T14501] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.944251][T14501] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.951682][T14498] netlink: 'syz.0.3810': attribute type 10 has an invalid length.
[  149.989251][T14501] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.992913][T14501] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.039957][T14501] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.043097][T14501] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.088627][T14501] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.091887][T14501] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.163746][ T5849] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.167124][ T5849] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.176786][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.179601][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.188215][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.191107][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.199264][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.201997][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.244500][T14507] sit0: entered promiscuous mode
[  150.652630][T14530] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.656280][T14530] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  150.759412][T14539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.104430][T14554] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  151.431010][T14582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.434359][T14582] syzkaller0: entered promiscuous mode
[  151.437399][T14582] syzkaller0: entered allmulticast mode
[  151.450396][T14582] tipc: Resetting bearer <eth:syzkaller0>
[  151.454521][T14581] tipc: Resetting bearer <eth:syzkaller0>
[  151.464052][T14581] tipc: Disabling bearer <eth:syzkaller0>
[  151.510659][T14584] netlink: 'syz.0.3847': attribute type 30 has an invalid length.
[  151.786569][T14588] syzkaller1: entered promiscuous mode
[  151.788437][T14588] syzkaller1: entered allmulticast mode
[  152.149217][T14601] lo speed is unknown, defaulting to 1000
[  152.536115][T14622] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  152.666028][T14636] netlink: 'syz.2.3870': attribute type 10 has an invalid length.
[  152.668566][T14636] dummy0: left allmulticast mode
[  152.671131][T14636] dummy0: entered allmulticast mode
[  152.673098][T14636] team0: Port device dummy0 added
[  152.928213][T14651] netlink: 'syz.2.3876': attribute type 4 has an invalid length.
[  153.050067][T14669] netlink: 'syz.0.3884': attribute type 3 has an invalid length.
[  153.253338][T14693] __nla_validate_parse: 12 callbacks suppressed
[  153.253349][T14693] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3896'.
[  153.367600][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3901'.
[  153.370374][T14705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3901'.
[  153.373141][T14705] netlink: 'syz.0.3901': attribute type 19 has an invalid length.
[  154.064325][T14732] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3914'.
[  154.220011][T14746] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3920'.
[  154.547855][T14791] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  154.550697][T14791] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  154.580801][T14795] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  154.583445][T14795] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  154.594517][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3946'.
[  154.602412][T14797] gtp0: entered promiscuous mode
[  154.604119][T14797] gtp0: entered allmulticast mode
[  154.644602][T14801] tipc: Enabled bearer <eth:team0>, priority 0
[  154.746849][T14808] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.749414][T14808] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  154.755081][T14808] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  154.757718][T14808] tipc: Resetting bearer <eth:syzkaller0>
[  154.767415][T14808] tipc: Resetting bearer <eth:syzkaller0>
[  154.908879][T14835] ieee802154 phy0 wpan0: encryption failed: -22
[  154.911209][T14835] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3963'.
[  154.918439][T14835] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  154.920959][T14835] gtp0: left promiscuous mode
[  155.165325][T14856] syz.1.3973 (14856) used greatest stack depth: 17752 bytes left
[  155.305540][T14880] netlink: 'syz.1.3983': attribute type 39 has an invalid length.
[  155.755285][    T9] tipc: Node number set to 3514680837
[  156.676420][T14990] lo speed is unknown, defaulting to 1000
[  156.707301][T15019] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  156.907502][T15037] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4055'.
[  156.997658][T15047] netlink: 'syz.2.4059': attribute type 7 has an invalid length.
[  157.000333][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4059'.
[  157.768261][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4064'.
[  158.300932][T15114] lo speed is unknown, defaulting to 1000
[  158.566338][T15136] __nla_validate_parse: 2 callbacks suppressed
[  158.566348][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4097'.
[  158.571458][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4097'.
[  158.574360][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4097'.
[  158.969570][T15158] netlink: 'syz.0.4106': attribute type 1 has an invalid length.
[  158.972190][T15158] netlink: 'syz.0.4106': attribute type 2 has an invalid length.
[  159.098525][T15168] wg1: entered promiscuous mode
[  159.100757][T15168] wg1: entered allmulticast mode
[  159.346686][T15179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4114'.
[  159.653594][T15221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4127'.
[  159.733521][T15237] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  160.898838][T15288] pim6reg: entered allmulticast mode
[  161.907066][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4174'.
[  161.931474][T15322] tipc: Disabling bearer <ib:vxcan1>
[  161.988022][T15333] tls_set_device_offload_rx: netdev not found
[  162.019133][T15337] xfrm1: entered allmulticast mode
[  163.060701][T15378] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  163.123720][T15386] netlink: 'syz.1.4201': attribute type 3 has an invalid length.
[  163.138320][T15386] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.141532][T15386] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.179845][T15386] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.183229][T15386] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.210202][T15396] netlink: 'syz.0.4205': attribute type 1 has an invalid length.
[  163.212803][T15396] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4205'.
[  163.281016][T15386] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.284383][T15386] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.356407][T15386] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  163.359873][T15386] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.429005][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.431800][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.440729][T12290] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.444718][T12290] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.451433][T12290] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.454227][T12290] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.463333][T12290] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.466394][T12290] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.726250][T15427] lo speed is unknown, defaulting to 1000
[  163.771253][T15438] syzkaller1: entered promiscuous mode
[  163.776409][T15438] syzkaller1: entered allmulticast mode
[  163.973085][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'.
[  164.083823][T15464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4227'.
[  164.096466][T15464] netlink: 'syz.2.4227': attribute type 1 has an invalid length.
[  164.110422][T15464] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4227'.
[  164.210982][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4236'.
[  164.348521][T15486] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  164.350789][T15486] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  164.398068][T15499] ip6tnl1: entered promiscuous mode
[  164.399853][T15499] ip6tnl1: entered allmulticast mode
[  164.472342][T15517] netlink: 'syz.0.4254': attribute type 21 has an invalid length.
[  164.476068][T15517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4254'.
[  164.863278][T15581] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4282'.
[  164.869930][T15581] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  164.928955][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4286'.
[  165.050497][T15603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4293'.
[  165.212958][T15619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4297'.
[  165.364208][T15646] netlink: 'syz.2.4308': attribute type 1 has an invalid length.
[  165.378961][T15646] 8021q: adding VLAN 0 to HW filter on device bond3
[  165.387236][T15646] bond3: (slave geneve3): making interface the new active one
[  165.390493][T15646] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  165.393448][T12290] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.400932][T12290] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.409301][T12290] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.413502][T12290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.444188][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'.
[  165.766320][T15692] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  166.123947][T15730] sctp: [Deprecated]: syz.0.4346 (pid 15730) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.123947][T15730] Use struct sctp_sack_info instead
[  166.588515][T15782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.591151][T15782] syzkaller0: entered promiscuous mode
[  166.592966][T15782] syzkaller0: entered allmulticast mode
[  166.616016][T15782] tipc: Resetting bearer <eth:syzkaller0>
[  166.619134][T15781] tipc: Resetting bearer <eth:syzkaller0>
[  166.643132][T15781] tipc: Disabling bearer <eth:syzkaller0>
[  166.803989][T15788] lo speed is unknown, defaulting to 1000
[  166.966869][T15794] lo speed is unknown, defaulting to 1000
[  167.200924][ T5827] Bluetooth: hci2: link tx timeout
[  167.202670][ T5827] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.205842][T15827] nbd1: detected capacity change from 0 to 63
[  167.217442][T15835] block nbd1: NBD_DISCONNECT
[  167.226123][T15835] block nbd1: Disconnected due to user request.
[  167.228333][T15835] block nbd1: shutting down sockets
[  167.235419][T10491] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.239747][T10491] Buffer I/O error on dev nbd1, logical block 0, async page read
[  167.257437][   T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0
[  167.260402][   T25] Buffer I/O error on dev nbd1, logical block 1, async page read
[  167.263067][   T25] Buffer I/O error on dev nbd1, logical block 2, async page read
[  167.265769][   T25] Buffer I/O error on dev nbd1, logical block 3, async page read
[  167.268394][T10491] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.271364][T10491] Buffer I/O error on dev nbd1, logical block 0, async page read
[  167.284164][T15827] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  167.291933][T10491] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.296697][T10491] Buffer I/O error on dev nbd1, logical block 1, async page read
[  167.299361][T10491] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.302206][T10491] Buffer I/O error on dev nbd1, logical block 2, async page read
[  167.332378][T10491] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.348733][T10491] Buffer I/O error on dev nbd1, logical block 3, async page read
[  167.351364][T10491] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.354317][T10491] Buffer I/O error on dev nbd1, logical block 0, async page read
[  167.368402][T10491] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.371479][T10491] Buffer I/O error on dev nbd1, logical block 1, async page read
[  167.383196][T15848] 0: renamed from hsr0 (while UP)
[  167.387809][T10491] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.393946][T10491] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  167.412944][T10491] ldm_validate_partition_table(): Disk read failed.
[  167.418316][T10491] Dev nbd1: unable to read RDB block 0
[  167.421284][T10491]  nbd1: unable to read partition table
[  167.435558][T10491] ldm_validate_partition_table(): Disk read failed.
[  167.446572][T10491] Dev nbd1: unable to read RDB block 0
[  167.449217][T10491]  nbd1: unable to read partition table
[  167.465153][T15848] 0: entered allmulticast mode
[  167.466793][T15848] hsr_slave_0: entered allmulticast mode
[  167.468850][T15848] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  167.671363][T15877] syzkaller0: entered promiscuous mode
[  167.673167][T15877] syzkaller0: entered allmulticast mode
[  167.746070][T15885] netlink: 'syz.2.4401': attribute type 1 has an invalid length.
[  168.626744][T15885] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  168.691849][T15915] netlink: 'syz.1.4409': attribute type 8 has an invalid length.
[  169.220830][ T5209] Bluetooth: hci2: command 0x0405 tx timeout
[  169.798099][T15949] netlink: 'syz.2.4423': attribute type 1 has an invalid length.
[  169.807591][T15952] openvswitch: netlink: Missing valid actions attribute.
[  169.810095][T15952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.820856][T15949] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.829548][T15949] bond4: entered promiscuous mode
[  170.021168][T15982] __nla_validate_parse: 5 callbacks suppressed
[  170.021178][T15982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4437'.
[  170.035626][T15982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4437'.
[  170.103854][T15971] lo speed is unknown, defaulting to 1000
[  170.162381][T15998] syzkaller1: entered promiscuous mode
[  170.166009][T15998] syzkaller1: entered allmulticast mode
[  170.177354][ T5824] Bluetooth: hci0: command 0x0406 tx timeout
[  170.184958][ T5827] Bluetooth: hci1: command 0x0406 tx timeout
[  170.236775][T16002] netlink: 'syz.1.4444': attribute type 1 has an invalid length.
[  170.288653][T16010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4447'.
[  170.341690][T16016] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  170.546677][T16037] openvswitch: netlink: IP tunnel TTL not specified.
[  170.677384][T16032] lo speed is unknown, defaulting to 1000
[  170.839250][T16036] lo speed is unknown, defaulting to 1000
[  170.910094][T16061] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4469'.
[  171.016099][T16070] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4473'.
[  171.026109][T16070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4473'.
[  171.536457][T16106] netlink: 'syz.0.4486': attribute type 4 has an invalid length.
[  171.551083][T16106] netlink: 'syz.0.4486': attribute type 4 has an invalid length.
[  171.559133][   T24] lo speed is unknown, defaulting to 1000
[  171.561112][   T24] syz0: Port: 1 Link ACTIVE
[  171.562705][   T24] lo speed is unknown, defaulting to 1000
[  171.568369][    T9] lo speed is unknown, defaulting to 1000
[  171.570272][    T9] syz0: Port: 1 Link DOWN
[  171.571686][    T9] lo speed is unknown, defaulting to 1000
[  171.801584][T16119] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4492'.
[  172.237201][T16147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.239947][T16147] syzkaller0: entered promiscuous mode
[  172.241802][T16147] syzkaller0: entered allmulticast mode
[  172.247241][T16147] tipc: Resetting bearer <eth:syzkaller0>
[  172.250408][T16146] tipc: Resetting bearer <eth:syzkaller0>
[  172.259167][T16146] tipc: Disabling bearer <eth:syzkaller0>
[  172.930119][T16157] bridge0: entered allmulticast mode
[  172.932223][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4508'.
[  172.950334][T16157] bridge0 (unregistering): left allmulticast mode
[  173.119136][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4510'.
[  173.320340][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4514'.
[  173.551945][T16221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.679279][T16238] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  174.352157][T16270] netlink: 'syz.2.4553': attribute type 7 has an invalid length.
[  174.354685][T16270] netlink: 'syz.2.4553': attribute type 8 has an invalid length.
[  174.360287][T16270] gretap0: entered promiscuous mode
[  174.362772][T16270] batadv_slave_1: entered promiscuous mode
[  174.370400][T16270] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  174.373808][T16270] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.542734][T16288] vlan2: entered promiscuous mode
[  174.544573][T16288] team0: entered promiscuous mode
[  175.027657][T16354] __nla_validate_parse: 14 callbacks suppressed
[  175.027667][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4590'.
[  175.164395][T16374] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  175.164619][T16372] IPVS: stopping backup sync thread 16374 ...
[  175.176479][T16372] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4598'.
[  175.182128][T16372] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4598'.
[  175.186468][T16372] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4598'.
[  175.188716][T16376] netlink: 'syz.2.4600': attribute type 21 has an invalid length.
[  175.191945][T16376] netlink: 'syz.2.4600': attribute type 6 has an invalid length.
[  175.194420][T16376] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4600'.
[  175.813648][T16433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.151288][T16450] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4635'.
[  176.831084][T16518] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4658'.
[  176.841289][T16520] sch_tbf: peakrate 6 is lower than or equals to rate 3062 !
[  176.954379][T16538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4667'.
[  176.957917][T16538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4667'.
[  176.979258][T16541] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.4668'.
[  177.446672][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.450130][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.452942][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.456229][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.458805][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.461659][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.464441][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.470396][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  177.576901][T16570] lo: entered allmulticast mode
[  177.953062][T16595] syzkaller0: entered promiscuous mode
[  177.961883][T16595] syzkaller0: entered allmulticast mode
[  178.336164][   T25] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 60 seconds
[  178.339513][   T25] block nbd0: Possible stuck request ffff888022038200: control (read@1024,1024B). Runtime 60 seconds
[  178.342899][   T25] block nbd0: Possible stuck request ffff888022038400: control (read@2048,1024B). Runtime 60 seconds
[  178.346808][   T25] block nbd0: Possible stuck request ffff888022038600: control (read@3072,1024B). Runtime 60 seconds
[  178.846025][T16615] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  178.863587][T16619] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  178.910809][T16627] netlink: 'syz.2.4704': attribute type 1 has an invalid length.
[  178.977416][T16639] C: left allmulticast mode
[  178.980395][T16639] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  179.136789][T16656] netlink: 'syz.2.4719': attribute type 1 has an invalid length.
[  179.826176][T16679] netlink: 'syz.1.4730': attribute type 1 has an invalid length.
[  180.210464][T16679] nbd: socks must be embedded in a SOCK_ITEM attr
[  180.213773][T16679] block nbd1: shutting down sockets
[  180.241721][T16690] veth1: mtu greater than device maximum
[  180.361699][T16704] netlink: 'syz.0.4740': attribute type 29 has an invalid length.
[  180.365721][T16704] netlink: 'syz.0.4740': attribute type 29 has an invalid length.
[  180.368662][T16704] __nla_validate_parse: 12 callbacks suppressed
[  180.368669][T16704] netlink: 508 bytes leftover after parsing attributes in process `syz.0.4740'.
[  180.420540][T16712] netlink: 'syz.2.4744': attribute type 4 has an invalid length.
[  180.463621][T16718] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4747'.
[  180.873274][T16773] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4764'.
[  181.324447][T16823] syzkaller1: entered promiscuous mode
[  181.326861][T16823] syzkaller1: entered allmulticast mode
[  181.910022][ T5269] udevd[5269]: worker [11055] /devices/virtual/block/nbd0 is taking a long time
[  182.008307][T16871] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4808'.
[  182.565716][T16898] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4819'.
[  182.719383][T16912] syzkaller0: entered promiscuous mode
[  182.721282][T16912] syzkaller0: entered allmulticast mode
[  184.488686][T16934] netlink: 'syz.1.4834': attribute type 16 has an invalid length.
[  184.491344][T16934] netlink: 'syz.1.4834': attribute type 17 has an invalid length.
[  184.512184][T16934] erspan0: left promiscuous mode
[  184.522224][T16934] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.526430][T16934] 8021q: adding VLAN 0 to HW filter on device team0
[  184.531529][T16934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.656538][T16953] netlink: 'syz.1.4843': attribute type 1 has an invalid length.
[  184.846904][T16961] netlink: 'syz.1.4846': attribute type 1 has an invalid length.
[  184.849496][T16961] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4846'.
[  184.882661][T16966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4848'.
[  185.178739][T16988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4858'.
[  185.181785][T16988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4858'.
[  185.211469][T16990] tipc: Resetting bearer <eth:team0>
[  185.267481][T16990] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  185.281047][T16991] tipc: Resetting bearer <eth:team0>
[  185.286175][T16991] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  185.416498][T16995] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4861'.
[  185.659341][T17009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4868'.
[  185.817139][T17021] netlink: 'syz.2.4874': attribute type 1 has an invalid length.
[  186.579656][T17087] netlink: 'syz.0.4903': attribute type 1 has an invalid length.
[  186.637560][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4908'.
[  186.715553][T17106] netlink: 'syz.0.4909': attribute type 13 has an invalid length.
[  186.718248][T17106] netlink: 'syz.0.4909': attribute type 17 has an invalid length.
[  186.742394][T17106] tipc: Resetting bearer <eth:team0>
[  186.744594][T17106] tipc: Resetting bearer <eth:team0>
[  186.749724][T17106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.756197][   T24] lo speed is unknown, defaulting to 1000
[  186.758747][   T24] syz0: Port: 1 Link ACTIVE
[  186.762631][   T24] lo speed is unknown, defaulting to 1000
[  186.912434][T17098] lo speed is unknown, defaulting to 1000
[  187.410218][T17171] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.4937'.
[  187.598100][T17188] nbd1: detected capacity change from 0 to 127
[  187.608412][   T57] block nbd1: Receive control failed (result -104)
[  188.002380][T17221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4952'.
[  188.060337][T17222] tipc: New replicast peer: 255.255.255.255
[  188.063036][T17222] tipc: Enabled bearer <udp:syz2>, priority 10
[  188.956559][T17251] netlink: 'syz.2.4964': attribute type 11 has an invalid length.
[  189.023888][T17265] netlink: 'syz.1.4971': attribute type 1 has an invalid length.
[  189.027110][T17265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4971'.
[  189.088339][T17273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4974'.
[  189.095057][T17273] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4974'.
[  189.097895][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4974'.
[  190.302155][T17336] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  190.630500][T17361] netlink: 'syz.2.5014': attribute type 8 has an invalid length.
[  191.031526][T17381] tipc: Resetting bearer <eth:syzkaller0>
[  191.065846][T17383] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5024'.
[  191.120967][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5026'.
[  191.170983][T17391] netlink: 'syz.1.5028': attribute type 3 has an invalid length.
[  191.561769][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5045'.
[  191.565297][T17425] netlink: 'syz.0.5045': attribute type 7 has an invalid length.
[  191.567860][T17425] netlink: 'syz.0.5045': attribute type 8 has an invalid length.
[  191.570481][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5045'.
[  191.578271][T17425] batadv_slave_1: entered promiscuous mode
[  191.580620][T17425] erspan0: entered promiscuous mode
[  191.582964][T17425] debugfs: 'hsr1' already exists in 'hsr'
[  191.586830][T17425] Cannot create hsr debugfs directory
[  191.588598][T17425] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.654709][T17433] pimreg: entered allmulticast mode
[  191.658258][T17433] pimreg: left allmulticast mode
[  192.069873][T17467] netlink: 'syz.2.5063': attribute type 15 has an invalid length.
[  192.072468][T17467] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5063'.
[  192.204055][T17478] syzkaller0: entered promiscuous mode
[  192.206380][T17478] syzkaller0: entered allmulticast mode
[  192.209646][T12290] syzkaller0: tun_net_xmit 70
[  192.212346][T17478] syzkaller0: tun_chr_ioctl cmd 1074025677
[  192.214317][T17478] syzkaller0: Linktype set failed because interface is up
[  192.471882][T17493] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  192.787064][T17504] tipc: Resetting bearer <eth:syzkaller0>
[  192.881041][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5083'.
[  193.961002][T17532] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5091'.
[  194.039431][T17538] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  194.453054][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5108'.
[  194.529900][T17574] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5112'.
[  194.745775][T17604] netlink: 'syz.1.5126': attribute type 1 has an invalid length.
[  194.806964][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5128'.
[  195.053903][T17643] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  195.057229][T17643] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  195.060303][T17643] tipc: Resetting bearer <eth:syzkaller0>
[  195.071762][T17643] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.179875][T17654] vlan3: entered promiscuous mode
[  195.181620][T17654] team0: entered promiscuous mode
[  195.238297][T17666] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  195.287825][T17668] netlink: 'syz.0.5155': attribute type 2 has an invalid length.
[  195.635514][T17715] nbd: must specify a size in bytes for the device
[  195.648840][T17713] netlink: 'syz.2.5175': attribute type 1 has an invalid length.
[  195.670881][T17713] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  195.675041][T17713] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  195.709597][T17713] gretap2: entered promiscuous mode
[  195.712622][T17713] bond5: (slave gretap2): making interface the new active one
[  195.718064][T17713] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  195.910559][T17752] bridge0: port 1(macvlan0) entered blocking state
[  195.912864][T17752] bridge0: port 1(macvlan0) entered disabled state
[  195.918889][T17752] macvlan0: entered allmulticast mode
[  195.921239][T17752] bridge0: entered allmulticast mode
[  195.924330][T17752] macvlan0: left allmulticast mode
[  195.926278][T17752] bridge0: left allmulticast mode
[  196.095207][  T974] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec
[  196.168273][T17780] __nla_validate_parse: 6 callbacks suppressed
[  196.168285][T17780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5206'.
[  196.718576][T17801] netlink: 'syz.0.5216': attribute type 1 has an invalid length.
[  196.737179][T17801] 8021q: adding VLAN 0 to HW filter on device bond6
[  196.751320][T17801] bond6: (slave geneve0): making interface the new active one
[  196.756277][T17801] bond6: (slave geneve0): Enslaving as an active interface with an up link
[  196.759486][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.762368][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.767798][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.771858][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.111386][T17901] bridge10: entered promiscuous mode
[  198.113278][T17901] bridge10: entered allmulticast mode
[  198.119974][T17901] team0: Port device bridge10 added
[  198.183687][T17905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5262'.
[  198.478240][T17932] C: entered allmulticast mode
[  198.493831][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5274'.
[  198.497385][T17931] C: left allmulticast mode
[  198.557090][T17943] macsec0: entered promiscuous mode
[  198.558868][T17943] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  198.561120][T17943] macsec0: entered allmulticast mode
[  198.563006][T17943] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  198.579548][T17946] syzkaller1: entered promiscuous mode
[  198.581434][T17946] syzkaller1: entered allmulticast mode
[  198.591167][T17940] netlink: 'syz.1.5278': attribute type 11 has an invalid length.
[  198.599202][T17946] netlink: 'syz.0.5279': attribute type 15 has an invalid length.
[  198.612090][T17940] netlink: 308 bytes leftover after parsing attributes in process `syz.1.5278'.
[  198.615311][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5278'.
[  198.633540][T17940] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  198.643460][T17952] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  198.757885][T17969] openvswitch: netlink: IP tunnel dst address not specified
[  198.820176][T17979] netlink: 'syz.1.5296': attribute type 32 has an invalid length.
[  199.053780][T17985] lo speed is unknown, defaulting to 1000
[  199.080476][T18008] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[  199.103371][T18010] netlink: 'syz.2.5308': attribute type 83 has an invalid length.
[  199.327732][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5314'.
[  199.941101][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5328'.
[  199.978258][T18059] netlink: 'syz.0.5329': attribute type 1 has an invalid length.
[  199.980772][T18059] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5329'.
[  199.983625][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5329'.
[  200.263369][T18075] netlink: 'syz.0.5337': attribute type 1 has an invalid length.
[  200.266233][T18075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5337'.
[  201.219475][T18176] __nla_validate_parse: 3 callbacks suppressed
[  201.219487][T18176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5386'.
[  201.335209][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5389'.
[  201.710829][T18202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5396'.
[  201.721687][T18202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5396'.
[  201.830342][T18206] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  202.172054][T18217] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  202.305062][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5413'.
[  202.332245][T18241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5414'.
[  202.370302][T18249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5417'.
[  202.620175][T18290] tipc: Resetting bearer <eth:syzkaller0>
[  202.860027][T18328] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5454'.
[  202.908711][T18332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.915587][T18332] syzkaller0: entered promiscuous mode
[  202.918409][T18332] syzkaller0: entered allmulticast mode
[  202.932709][T18332] tipc: Resetting bearer <eth:syzkaller0>
[  202.938178][T18331] tipc: Resetting bearer <eth:syzkaller0>
[  202.954658][T18331] tipc: Disabling bearer <eth:syzkaller0>
[  203.121789][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5464'.
[  204.150689][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.156706][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.848248][T18421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5493'.
[  205.355672][T18455] sctp: [Deprecated]: syz.1.5508 (pid 18455) Use of int in max_burst socket option deprecated.
[  205.355672][T18455] Use struct sctp_assoc_value instead
[  205.356308][T18454] dvmrp1: entered allmulticast mode
[  205.365604][T18454] dvmrp1: left allmulticast mode
[  205.480574][T18457] mac80211_hwsim hwsim9 wlan0: left allmulticast mode
[  205.483547][T18457] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  205.487425][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.490219][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.492884][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  205.496656][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  206.523251][T18507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.528817][T18507] syzkaller0: entered promiscuous mode
[  206.531296][T18507] syzkaller0: entered allmulticast mode
[  206.549401][T18507] tipc: Resetting bearer <eth:syzkaller0>
[  206.553466][T18506] tipc: Resetting bearer <eth:syzkaller0>
[  206.566240][T18506] tipc: Disabling bearer <eth:syzkaller0>
[  206.588342][T18509] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  206.591676][T18509] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  206.594105][T18509] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  206.596851][T18509] tipc: Resetting bearer <eth:syzkaller0>
[  206.688100][T18524] __nla_validate_parse: 3 callbacks suppressed
[  206.688110][T18524] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5540'.
[  206.744393][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5542'.
[  206.799539][T18540] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5545'.
[  207.084352][T18558] netlink: 'syz.2.5554': attribute type 1 has an invalid length.
[  207.088534][T18558] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5554'.
[  207.199262][T18577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5561'.
[  207.546612][T18627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5584'.
[  207.568105][T18629] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5585'.
[  208.013315][T18674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.020690][T18674] syzkaller0: entered promiscuous mode
[  208.022796][T18674] syzkaller0: entered allmulticast mode
[  208.032427][T18674] tipc: Resetting bearer <eth:syzkaller0>
[  208.036602][T18673] tipc: Resetting bearer <eth:syzkaller0>
[  208.043937][T18673] tipc: Disabling bearer <eth:syzkaller0>
[  208.063459][T18680] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.072351][T18680] tipc: Resetting bearer <eth:syzkaller0>
[  208.221980][T18694] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5616'.
[  208.259349][T18698] sch_fq: defrate 4294967295 ignored.
[  208.418397][   T25] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 90 seconds
[  208.421871][   T25] block nbd0: Possible stuck request ffff888022038200: control (read@1024,1024B). Runtime 90 seconds
[  208.425526][   T25] block nbd0: Possible stuck request ffff888022038400: control (read@2048,1024B). Runtime 90 seconds
[  208.429074][   T25] block nbd0: Possible stuck request ffff888022038600: control (read@3072,1024B). Runtime 90 seconds
[  208.597790][T18738] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5637'.
[  208.798897][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5652'.
[  208.852305][T18775] tipc: Invalid UDP bearer configuration
[  208.852331][T18775] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  208.955979][T18769] lo speed is unknown, defaulting to 1000
[  211.628244][T18909] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  211.941802][T18933] netlink: 'syz.1.5720': attribute type 1 has an invalid length.
[  211.946412][T18933] __nla_validate_parse: 9 callbacks suppressed
[  211.946421][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5720'.
[  212.102909][T18957] tipc: New replicast peer: 255.255.255.83
[  212.105941][T18957] tipc: Enabled bearer <udp:>, priority 10
[  212.229590][T18974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.352897][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5743'.
[  212.424038][T18997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5746'.
[  212.428836][T18997] netlink: 'syz.1.5746': attribute type 1 has an invalid length.
[  212.601227][T19012] netlink: 'syz.1.5754': attribute type 21 has an invalid length.
[  212.623410][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5755'.
[  212.744473][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5758'.
[  212.747648][T19021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.778170][T19023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  213.697257][   T55] Bluetooth: hci0: command tx timeout
[  214.019590][T19064] netlink: 'syz.2.5779': attribute type 1 has an invalid length.
[  214.022145][T19064] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5779'.
[  214.025679][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5779'.
[  214.031980][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5779'.
[  214.035087][T19064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5779'.
[  214.149670][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5786'.
[  214.785147][   T33] audit: type=1800 audit(1754308424.326:3): pid=19128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5802" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9569 res=0 errno=0
[  215.113690][T19138] lo speed is unknown, defaulting to 1000
[  215.358270][T19147] bridge7: entered promiscuous mode
[  215.360523][T19147] bridge7: entered allmulticast mode
[  216.580888][T19191] netlink: 'syz.0.5828': attribute type 1 has an invalid length.
[  216.595405][T19191] 8021q: adding VLAN 0 to HW filter on device bond7
[  216.612845][T19191] 8021q: adding VLAN 0 to HW filter on device bond7
[  216.615384][T19191] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  216.619373][T19191] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  216.670285][T19195] veth3: entered promiscuous mode
[  216.673679][T19195] bond7: (slave veth3): Enslaving as an active interface with a down link
[  216.724874][T19191] erspan0: entered allmulticast mode
[  216.792328][T19210] netlink: 'syz.2.5833': attribute type 13 has an invalid length.
[  216.811026][T19210] netlink: 'syz.2.5833': attribute type 17 has an invalid length.
[  216.816207][T19210] tunl0: left allmulticast mode
[  216.819102][T19210] gre0: left allmulticast mode
[  216.821204][T19210] gretap0: left allmulticast mode
[  216.827610][T19210] erspan0: left promiscuous mode
[  216.829379][T19210] erspan0: left allmulticast mode
[  216.836931][T19210] ip_vti0: left allmulticast mode
[  216.839341][T19210] ip6_vti0: left allmulticast mode
[  216.841662][T19210] sit0: left allmulticast mode
[  216.844372][T19210] ip6tnl0: left allmulticast mode
[  216.847222][T19210] ip6gre0: left allmulticast mode
[  216.849593][T19210] ip6gretap0: left allmulticast mode
[  216.855763][T19210] bond0: left allmulticast mode
[  216.857844][T19210] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.861356][T19210] team0: left allmulticast mode
[  216.863163][T19210] dummy0: left allmulticast mode
[  216.865709][T19210] 8021q: adding VLAN 0 to HW filter on device team0
[  216.870424][T19210] nlmon0: left allmulticast mode
[  216.873108][T19210] caif0: left allmulticast mode
[  216.875129][T19210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.920901][T19210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.929663][T19210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.082807][T19231] netlink: 788 bytes leftover after parsing attributes in process `syz.1.5844'.
[  217.630437][T19212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.018623][   T25] block nbd1: Possible stuck request ffff888022068000: control (read@0,1024B). Runtime 30 seconds
[  218.022022][   T25] block nbd1: Possible stuck request ffff888022068200: control (read@1024,1024B). Runtime 30 seconds
[  218.025566][   T25] block nbd1: Possible stuck request ffff888022068400: control (read@2048,1024B). Runtime 30 seconds
[  218.028990][   T25] block nbd1: Possible stuck request ffff888022068600: control (read@3072,1024B). Runtime 30 seconds
[  218.087329][T19242] netlink: 'syz.2.5847': attribute type 21 has an invalid length.
[  218.089978][T19242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5847'.
[  219.051183][T19281] syzkaller1: tun_chr_ioctl cmd 1074025677
[  219.053199][T19281] syzkaller1: linktype set to 6
[  219.155995][T19294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5869'.
[  219.301409][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5876'.
[  219.304244][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5876'.
[  219.880186][T19351] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5896'.
[  219.907138][T19355] bond0: Device is already in use.
[  219.909755][T19347] lo speed is unknown, defaulting to 1000
[  219.948856][T19360] batadv_slave_1: left allmulticast mode
[  220.000607][T19366] netlink: 'syz.1.5903': attribute type 1 has an invalid length.
[  220.003207][T19366] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5903'.
[  220.032608][T19340] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5892'.
[  220.036191][T19368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.038853][T19368] syzkaller0: entered promiscuous mode
[  220.040640][T19368] syzkaller0: entered allmulticast mode
[  220.058970][T19368] tipc: Resetting bearer <eth:syzkaller0>
[  220.062043][T19367] tipc: Resetting bearer <eth:syzkaller0>
[  220.071077][T19367] tipc: Disabling bearer <eth:syzkaller0>
[  220.318020][T19384] lo speed is unknown, defaulting to 1000
[  220.319991][T19384] lo speed is unknown, defaulting to 1000
[  220.322942][T19384] lo speed is unknown, defaulting to 1000
[  220.328412][T19384] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  220.342144][T19384] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  220.365727][T19384] lo speed is unknown, defaulting to 1000
[  220.368577][T19384] lo speed is unknown, defaulting to 1000
[  220.371776][T19384] lo speed is unknown, defaulting to 1000
[  220.374670][T19384] lo speed is unknown, defaulting to 1000
[  220.685671][T19395] lo speed is unknown, defaulting to 1000
[  220.830859][T19402] lo speed is unknown, defaulting to 1000
[  220.831187][T19395] lo speed is unknown, defaulting to 1000
[  220.940560][   T33] audit: type=1800 audit(1754308430.486:4): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5918" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=9436 res=0 errno=0
[  220.945059][T19402] lo speed is unknown, defaulting to 1000
[  221.393742][T19458] netlink: 'syz.0.5932': attribute type 6 has an invalid length.
[  221.483684][T19465] netlink: 'syz.0.5936': attribute type 22 has an invalid length.
[  221.496668][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5936'.
[  221.559082][T19465] netlink: 'syz.0.5936': attribute type 22 has an invalid length.
[  221.561809][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5936'.
[  221.684448][T19481] netlink: 'syz.2.5944': attribute type 12 has an invalid length.
[  221.929363][T19513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.952107][T19519] sock: sock_timestamping_bind_phc: sock not bind to device
[  221.978563][T19524] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  221.978646][T19523] IPVS: stopping backup sync thread 19524 ...
[  222.143490][T19546] syz.1.5972: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  222.149337][T19546] CPU: 0 UID: 0 PID: 19546 Comm: syz.1.5972 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  222.149351][T19546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  222.149357][T19546] Call Trace:
[  222.149362][T19546]  <TASK>
[  222.149365][T19546]  dump_stack_lvl+0x189/0x250
[  222.149383][T19546]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.149415][T19546]  ? __pfx__printk+0x10/0x10
[  222.149429][T19546]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  222.149441][T19546]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  222.149452][T19546]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  222.149463][T19546]  warn_alloc+0x214/0x310
[  222.149472][T19546]  ? stack_depot_save_flags+0x40/0x900
[  222.149482][T19546]  ? __pfx_warn_alloc+0x10/0x10
[  222.149491][T19546]  ? kasan_save_track+0x4f/0x80
[  222.149501][T19546]  ? xskq_create+0x56/0x170
[  222.149512][T19546]  ? xsk_init_queue+0xb0/0x110
[  222.149521][T19546]  ? xsk_setsockopt+0x4dc/0x8d0
[  222.149531][T19546]  ? do_sock_setsockopt+0x17c/0x1b0
[  222.149538][T19546]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  222.149546][T19546]  ? do_syscall_64+0xfa/0x3b0
[  222.149559][T19546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.149569][T19546]  __vmalloc_node_range_noprof+0x125/0x12f0
[  222.149589][T19546]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  222.149605][T19546]  ? __kasan_kmalloc+0x93/0xb0
[  222.149616][T19546]  vmalloc_user_noprof+0xad/0xf0
[  222.149624][T19546]  ? xskq_create+0xbf/0x170
[  222.149634][T19546]  xskq_create+0xbf/0x170
[  222.149645][T19546]  xsk_init_queue+0xb0/0x110
[  222.149655][T19546]  xsk_setsockopt+0x4dc/0x8d0
[  222.149666][T19546]  ? __pfx_xsk_setsockopt+0x10/0x10
[  222.149676][T19546]  ? __pfx_aa_sk_perm+0x10/0x10
[  222.149689][T19546]  ? aa_sock_opt_perm+0x74/0x110
[  222.149700][T19546]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  222.149712][T19546]  ? __pfx_xsk_setsockopt+0x10/0x10
[  222.149723][T19546]  do_sock_setsockopt+0x17c/0x1b0
[  222.149750][T19546]  __x64_sys_setsockopt+0x13f/0x1b0
[  222.149761][T19546]  do_syscall_64+0xfa/0x3b0
[  222.149772][T19546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.149779][T19546]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  222.149788][T19546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.149795][T19546] RIP: 0033:0x7f58c538eb69
[  222.149803][T19546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.149809][T19546] RSP: 002b:00007f58c6238038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  222.149818][T19546] RAX: ffffffffffffffda RBX: 00007f58c55b5fa0 RCX: 00007f58c538eb69
[  222.149823][T19546] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  222.149828][T19546] RBP: 00007f58c5411df1 R08: 0000000000000004 R09: 0000000000000000
[  222.149832][T19546] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.149837][T19546] R13: 0000000000000000 R14: 00007f58c55b5fa0 R15: 00007ffe02e58518
[  222.149850][T19546]  </TASK>
[  222.149895][T19546] Mem-Info:
[  222.252147][T19546] active_anon:16083 inactive_anon:0 isolated_anon:0
[  222.252147][T19546]  active_file:951 inactive_file:38279 isolated_file:0
[  222.252147][T19546]  unevictable:1768 dirty:173 writeback:0
[  222.252147][T19546]  slab_reclaimable:10121 slab_unreclaimable:82688
[  222.252147][T19546]  mapped:18264 shmem:2435 pagetables:960
[  222.252147][T19546]  sec_pagetables:0 bounce:0
[  222.252147][T19546]  kernel_misc_reclaimable:0
[  222.252147][T19546]  free:246865 free_pcp:21620 free_cma:0
[  222.266877][T19546] Node 0 active_anon:47348kB inactive_anon:0kB active_file:1172kB inactive_file:13528kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42456kB dirty:208kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4936kB pagetables:2004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  222.277520][T19546] Node 1 active_anon:16916kB inactive_anon:0kB active_file:2632kB inactive_file:139588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30556kB dirty:484kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7184kB pagetables:1780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  222.288234][T19546] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  222.297545][T19546] lowmem_reserve[]: 0 814 814 814 814
[  222.299315][T19546] Node 0 DMA32 free:306044kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47348kB inactive_anon:0kB active_file:1172kB inactive_file:13528kB unevictable:3536kB writepending:208kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:33144kB local_pcp:18168kB free_cma:0kB
[  222.313593][T19546] lowmem_reserve[]: 0 0 0 0 0
[  222.313775][T19554] netlink: 'syz.0.5976': attribute type 1 has an invalid length.
[  222.315446][T19546] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  222.318009][T19554] __nla_validate_parse: 4 callbacks suppressed
[  222.318016][T19554] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5976'.
[  222.327649][T19546] lowmem_reserve[]: 0 0 854 854 854
[  222.327673][T19546] Node 1 Normal free:209380kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16916kB inactive_anon:0kB active_file:2632kB inactive_file:139588kB unevictable:3536kB writepending:484kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:51736kB local_pcp:15980kB free_cma:0kB
[  222.327701][T19546] lowmem_reserve[]: 0 0 0 0 0
[  222.327719][T19546] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  222.327779][T19546] Node 0 DMA32: 721*4kB (UME) 369*8kB (UME) 7*16kB (UME) 185*32kB (UME) 326*64kB (UME) 113*128kB (UM) 61*256kB (UME) 29*512kB (UM) 15*1024kB (UM) 6*2048kB (UME) 49*4096kB (M) = 306012kB
[  222.327861][T19546] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  222.327936][T19546] Node 1 Normal: 702*4kB (U) 504*8kB (UME) 482*16kB (U) 465*32kB (UME) 171*64kB (UE) 81*128kB (UM) 22*256kB (UM) 17*512kB (UE) 9*1024kB (U) 2*2048kB (UM) 32*4096kB (M) = 209464kB
[  222.328008][T19546] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  222.328015][T19546] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  222.328021][T19546] 41665 total pagecache pages
[  222.328025][T19546] 0 pages in swap cache
[  222.328028][T19546] Free swap  = 124996kB
[  222.328031][T19546] Total swap = 124996kB
[  222.328035][T19546] 786301 pages RAM
[  222.328038][T19546] 0 pages HighMem/MovableOnly
[  222.328041][T19546] 240546 pages reserved
[  222.328044][T19546] 0 pages cma reserved
[  223.790550][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6026'.
[  223.793623][T19663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6026'.
[  223.930566][T19670] syzkaller0: entered promiscuous mode
[  223.932442][T19670] syzkaller0: entered allmulticast mode
[  224.791407][T19665] lo speed is unknown, defaulting to 1000
[  224.885019][T19665] lo speed is unknown, defaulting to 1000
[  225.076975][T19699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6039'.
[  225.215132][T19713] netlink: 'syz.2.6046': attribute type 1 has an invalid length.
[  225.217747][T19713] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6046'.
[  225.220542][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6046'.
[  225.239860][T19715] wireguard0: entered promiscuous mode
[  225.241721][T19715] wireguard0: entered allmulticast mode
[  225.429172][T19731] DL<Y: renamed from lo
[  225.485180][T19724] lo speed is unknown, defaulting to 1000
[  225.572775][T19724] lo speed is unknown, defaulting to 1000
[  225.744729][T19764] sctp: [Deprecated]: syz.0.6069 (pid 19764) Use of struct sctp_assoc_value in delayed_ack socket option.
[  225.744729][T19764] Use struct sctp_sack_info instead
[  225.787728][T19767] IPv6: Can't replace route, no match found
[  225.808741][T19769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6071'.
[  226.049252][T19800] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6086'.
[  226.081221][T19806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6089'.
[  226.211783][T19820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6095'.
[  226.338338][T19836] sit0: left promiscuous mode
[  226.355585][T19836] bridge_slave_0: left allmulticast mode
[  226.358333][T19836] 0: left allmulticast mode
[  226.359859][T19836] hsr_slave_0: left allmulticast mode
[  226.366764][T19836] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  226.368962][T19836] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  226.371691][T19836] vlan2: left allmulticast mode
[  226.373221][T19836] veth1: left allmulticast mode
[  226.381319][T19836] veth9: left allmulticast mode
[  226.384370][T19836] xfrm1: left allmulticast mode
[  226.461727][T19849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.466812][    T9] lo speed is unknown, defaulting to 1000
[  226.527269][T19861] netlink: 'syz.0.6115': attribute type 1 has an invalid length.
[  226.533797][T19863] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.724882][T19886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.892735][T19892] lo speed is unknown, defaulting to 1000
[  226.968391][T19892] lo speed is unknown, defaulting to 1000
[  227.438303][T19923] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.472383][T19927] __nla_validate_parse: 3 callbacks suppressed
[  227.472394][T19927] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6144'.
[  227.504684][T19933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6147'.
[  228.018446][T20005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6182'.
[  228.214203][T20031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.217826][T20031] syzkaller0: entered promiscuous mode
[  228.220239][T20031] syzkaller0: entered allmulticast mode
[  228.238171][T20031] tipc: Resetting bearer <eth:syzkaller0>
[  228.243266][T20030] tipc: Resetting bearer <eth:syzkaller0>
[  228.265262][T20030] tipc: Disabling bearer <eth:syzkaller0>
[  228.501822][T20041] lo speed is unknown, defaulting to 1000
[  228.593749][T20064] netlink: 'syz.1.6208': attribute type 66 has an invalid length.
[  228.623037][T20041] lo speed is unknown, defaulting to 1000
[  229.326683][T20114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6231'.
[  229.508208][T20137] netlink: 268 bytes leftover after parsing attributes in process `syz.0.6240'.
[  229.619573][T20147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.950785][T20169] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.6256'.
[  231.323435][T20307] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  231.401394][T20311] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6317'.
[  231.440628][T20313] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6318'.
[  231.527739][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6324'.
[  231.678205][T20350] veth1_to_team: entered allmulticast mode
[  231.680331][T20350] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  232.600615][T20377] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6348'.
[  234.080591][T20489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6394'.
[  234.083671][T20489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6394'.
[  234.137511][T20491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6395'.
[  234.707902][T20530] openvswitch: netlink: Missing key (keys=40, expected=80)
[  235.070946][T20545] lo speed is unknown, defaulting to 1000
[  235.162054][T20545] lo speed is unknown, defaulting to 1000
[  235.224150][T20557] netlink: 'syz.2.6424': attribute type 13 has an invalid length.
[  235.228548][T20557] netlink: 'syz.2.6424': attribute type 17 has an invalid length.
[  235.243644][T20557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.342661][T20569] netlink: 'syz.1.6430': attribute type 11 has an invalid length.
[  235.347023][T20569] netlink: 'syz.1.6430': attribute type 12 has an invalid length.
[  235.349844][T20569] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6430'.
[  235.381310][T20571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6431'.
[  235.422018][T20571] bond7: entered promiscuous mode
[  235.423687][T20571] bond7: entered allmulticast mode
[  235.426482][T20571] 8021q: adding VLAN 0 to HW filter on device bond7
[  235.455287][T20576] batadv_slave_0: entered promiscuous mode
[  235.467210][T20578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6434'.
[  235.470546][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6433'.
[  235.475035][T20578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6434'.
[  235.502331][T20576] batadv_slave_0 (unregistering): left promiscuous mode
[  235.598818][T20585] netlink: 'syz.1.6435': attribute type 13 has an invalid length.
[  235.601409][T20585] netlink: 'syz.1.6435': attribute type 17 has an invalid length.
[  235.644278][T20585] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.649268][T20585] 8021q: adding VLAN 0 to HW filter on device team0
[  235.652869][T20585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.769793][T20609] Bluetooth: MGMT ver 1.23
[  235.970196][T20631] netlink: 'syz.1.6459': attribute type 2 has an invalid length.
[  236.540809][T20689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6486'.
[  236.594004][T20693] netlink: 'syz.0.6488': attribute type 39 has an invalid length.
[  236.914634][T20727] netlink: 'syz.0.6503': attribute type 10 has an invalid length.
[  236.921181][T20727] syz_tun: entered promiscuous mode
[  237.123569][T20758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  237.130696][T20758] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  237.269832][T20779] tap0: tun_chr_ioctl cmd 1074025677
[  237.276278][T20779] tap0: linktype set to 804
[  237.308794][T20783] netlink: 'syz.2.6530': attribute type 1 has an invalid length.
[  237.709735][T20822] netlink: 'syz.2.6548': attribute type 9 has an invalid length.
[  238.171513][T20862] lo speed is unknown, defaulting to 1000
[  238.268775][T20862] lo speed is unknown, defaulting to 1000
[  238.390419][T20888] __nla_validate_parse: 3 callbacks suppressed
[  238.390430][T20888] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6574'.
[  238.495291][   T25] block nbd0: Possible stuck request ffff888022038000: control (read@0,1024B). Runtime 120 seconds
[  238.498788][   T25] block nbd0: Possible stuck request ffff888022038200: control (read@1024,1024B). Runtime 120 seconds
[  238.502302][   T25] block nbd0: Possible stuck request ffff888022038400: control (read@2048,1024B). Runtime 120 seconds
[  238.504417][T20897] bond0: option use_carrier: invalid value (2)
[  238.509293][   T25] block nbd0: Possible stuck request ffff888022038600: control (read@3072,1024B). Runtime 120 seconds
[  238.723252][T20919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6588'.
[  238.792480][T20928] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.6592'.
[  239.274234][T20989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6618'.
[  239.278093][T20989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.449235][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6628'.
[  239.452482][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6628'.
[  239.496382][T21017] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6632'.
[  239.840850][T21061] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  239.964101][T21078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6663'.
[  240.026917][T21091] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6668'.
[  240.029814][T21091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6668'.
[  240.443463][T21137] sctp: [Deprecated]: syz.1.6691 (pid 21137) Use of struct sctp_assoc_value in delayed_ack socket option.
[  240.443463][T21137] Use struct sctp_sack_info instead
[  240.895445][T21095] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  241.520961][T21209] lo speed is unknown, defaulting to 1000
[  241.607525][T21209] lo speed is unknown, defaulting to 1000
[  242.387737][T21313] validate_nla: 4 callbacks suppressed
[  242.387749][T21313] netlink: 'syz.1.6771': attribute type 17 has an invalid length.
[  242.876936][T21364] lo speed is unknown, defaulting to 1000
[  242.956563][T21364] lo speed is unknown, defaulting to 1000
[  244.009808][T21398] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20003
[  244.121734][T21416] __nla_validate_parse: 6 callbacks suppressed
[  244.121745][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6814'.
[  244.270142][T21438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6825'.
[  244.273101][T21438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6825'.
[  244.280377][T21438] bond0: entered promiscuous mode
[  244.282612][T21438] bond0: left promiscuous mode
[  244.294530][T21440] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  244.446825][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6832'.
[  244.449825][T21454] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6832'.
[  244.465068][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6832'.
[  244.863276][T21515] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  244.863746][T21514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6860'.
[  244.875182][T21514] smc: net device bond0 applied user defined pnetid SYZ
[  245.087764][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6875'.
[  246.201419][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6889'.
[  247.124737][T21607] lo: entered allmulticast mode
[  247.132141][T21607] tunl0: entered allmulticast mode
[  247.137260][T21607] gre0: entered allmulticast mode
[  247.148708][T21607] gretap0: entered allmulticast mode
[  247.158616][T21607] ip_vti0: entered allmulticast mode
[  247.163851][T21607] ip6_vti0: entered allmulticast mode
[  247.171299][T21607] sit0: entered allmulticast mode
[  247.181631][T21607] ip6tnl0: entered allmulticast mode
[  247.190917][T21607] ip6gre0: entered allmulticast mode
[  247.195992][T21607] syz_tun: left promiscuous mode
[  247.198386][T21607] syz_tun: entered allmulticast mode
[  247.200706][T21607] ip6gretap0: entered allmulticast mode
[  247.204584][T21607] tipc: Resetting bearer <eth:team0>
[  247.208569][T21607] team0: entered allmulticast mode
[  247.212529][T21607] dummy0: entered allmulticast mode
[  247.219689][T21607] nlmon0: entered allmulticast mode
[  247.222501][T21607] caif0: entered allmulticast mode
[  247.224276][T21607] batadv0: entered allmulticast mode
[  247.228240][T21607] vxcan0: entered allmulticast mode
[  247.230799][T21607] vxcan1: entered allmulticast mode
[  247.233249][T21607] veth0: entered allmulticast mode
[  247.236323][T21607] veth1: entered allmulticast mode
[  247.239417][T21607] wg1: left promiscuous mode
[  247.243866][T21607] wg2: entered allmulticast mode
[  247.250005][T21607] veth0_to_bridge: entered allmulticast mode
[  247.252813][T21607] bridge_slave_0: entered allmulticast mode
[  247.255843][T21607] veth1_to_bridge: entered allmulticast mode
[  247.258701][T21607] bridge_slave_1: entered allmulticast mode
[  247.262172][T21607] bond_slave_0: entered allmulticast mode
[  247.266055][T21607] veth1_to_bond: entered allmulticast mode
[  247.268055][T21607] bond_slave_1: entered allmulticast mode
[  247.270001][T21607] veth0_to_team: entered allmulticast mode
[  247.271960][T21607] team_slave_0: entered allmulticast mode
[  247.273839][T21607] veth1_to_team: entered allmulticast mode
[  247.276264][T21607] team_slave_1: entered allmulticast mode
[  247.278177][T21607] veth0_to_batadv: entered allmulticast mode
[  247.280173][T21607] batadv_slave_0: entered allmulticast mode
[  247.282174][T21607] veth1_to_batadv: entered allmulticast mode
[  247.284467][T21607] batadv_slave_1: entered allmulticast mode
[  247.291279][T21607] xfrm0: entered allmulticast mode
[  247.293010][T21607] veth0_to_hsr: entered allmulticast mode
[  247.295619][T21607] hsr_slave_0: entered allmulticast mode
[  247.298296][T21607] veth1_to_hsr: entered allmulticast mode
[  247.300327][T21607] hsr_slave_1: entered allmulticast mode
[  247.302201][T21607] hsr0: entered allmulticast mode
[  247.303863][T21607] veth1_virt_wifi: entered allmulticast mode
[  247.306104][T21607] veth0_virt_wifi: entered allmulticast mode
[  247.308182][T21607] net veth1_virt_wifi : entered allmulticast mode
[  247.310606][T21607] veth1_vlan: entered allmulticast mode
[  247.312466][T21607] veth0_vlan: entered allmulticast mode
[  247.314298][T21607] vlan0: entered allmulticast mode
[  247.316379][T21607] vlan1: entered allmulticast mode
[  247.318217][T21607] macvlan0: entered allmulticast mode
[  247.320138][T21607] macvlan1: entered allmulticast mode
[  247.322384][T21607] ipvlan1: entered allmulticast mode
[  247.326239][T21607] veth1_macvtap: entered allmulticast mode
[  247.328856][T21607] veth0_macvtap: entered allmulticast mode
[  247.330948][T21607] macvtap0: entered allmulticast mode
[  247.332902][T21607] macsec0: entered allmulticast mode
[  247.334745][T21607] geneve1: entered allmulticast mode
[  247.336930][T21607] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  247.339262][T21607] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  247.341827][T21607] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  247.344381][T21607] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  247.347432][T21607] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  247.352475][T21607] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  247.355329][T21607] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  247.359215][T21607] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  247.361620][T21607] syztnl0: entered allmulticast mode
[  247.363552][T21607] sit1: entered allmulticast mode
[  247.365586][T21607] gtp0: entered allmulticast mode
[  247.367406][T21607] vxlan0: entered allmulticast mode
[  247.369573][T21607] bond1: entered allmulticast mode
[  247.371468][T21607] bridge1: entered allmulticast mode
[  247.373322][T21607] _Z`Ԁ@: entered allmulticast mode
[  247.375465][T21607] bond2: entered allmulticast mode
[  247.377180][T21607] ip6gre1: entered allmulticast mode
[  247.379608][T21607] vxlan1: entered allmulticast mode
[  247.384254][T21607] gre1: entered allmulticast mode
[  247.387342][T21607] erspan1: entered allmulticast mode
[  247.389408][T21607] vlan3: entered allmulticast mode
[  247.393460][T21607] tipc: Resetting bearer <eth:syzkaller0>
[  247.402467][T21607] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  247.407230][T21607] gretap1: entered allmulticast mode
[  247.409266][T21607] gre2: entered allmulticast mode
[  247.412623][T21607] bond0: entered allmulticast mode
[  247.417975][T21607] bridge2: entered allmulticast mode
[  247.421717][T21623] netlink: 'syz.2.6910': attribute type 4 has an invalid length.
[  247.425363][T21607] ip6gretap1: entered allmulticast mode
[  247.429576][T21607] bond3: entered allmulticast mode
[  247.431307][T21607] macvlan2: entered allmulticast mode
[  247.433432][T21607] bond4: entered allmulticast mode
[  247.436422][T21607] vxlan2: entered allmulticast mode
[  247.438226][T21607] bridge3: entered allmulticast mode
[  247.440005][T21607] bond5: entered allmulticast mode
[  247.441712][T21607] bridge4: entered allmulticast mode
[  247.449412][T21607] bridge5: entered allmulticast mode
[  247.453727][T21607] ip6tnl1: left promiscuous mode
[  247.457820][T21607] sit2: entered allmulticast mode
[  247.459540][T21607] xfrm1: entered allmulticast mode
[  247.461262][T21607] bridge0: entered allmulticast mode
[  247.463479][T21607] gre3: entered allmulticast mode
[  247.466391][T21607] hsr1: entered allmulticast mode
[  247.469705][T21607] macvlan3: entered allmulticast mode
[  247.472540][T21607] bridge6: entered allmulticast mode
[  247.476285][T21607] syztnl2: entered allmulticast mode
[  247.480604][T21607] bond6: entered allmulticast mode
[  247.482413][T21607] geneve0: entered allmulticast mode
[  247.489094][T21607] macvlan4: entered allmulticast mode
[  247.491819][T21607] bridge7: left promiscuous mode
[  247.493782][T21607] bond7: entered allmulticast mode
[  247.496042][T21607] veth2: entered allmulticast mode
[  247.497974][T21607] veth3: left promiscuous mode
[  247.499647][T21607] veth3: entered allmulticast mode
[  247.503382][T21607] sit3: entered allmulticast mode
[  247.514853][T21607] bridge8: entered allmulticast mode
[  247.525505][T21607] vti60: entered allmulticast mode
[  247.528557][T21607] gtp1: entered allmulticast mode
[  247.530360][T21607] geneve2: entered allmulticast mode
[  247.532690][ T5287] lo speed is unknown, defaulting to 1000
[  247.536578][ T5287] syz2: Port: 1 Link DOWN
[  247.538010][ T5650] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.541094][ T5650] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.545720][ T5650] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.548554][ T5650] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.554837][ T5650] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.557693][ T5650] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.567336][ T5650] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.570235][ T5650] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.618710][T21631] netlink: 'syz.1.6914': attribute type 8 has an invalid length.
[  248.097496][   T25] block nbd1: Possible stuck request ffff888022068000: control (read@0,1024B). Runtime 60 seconds
[  248.100949][   T25] block nbd1: Possible stuck request ffff888022068200: control (read@1024,1024B). Runtime 60 seconds
[  248.104358][   T25] block nbd1: Possible stuck request ffff888022068400: control (read@2048,1024B). Runtime 60 seconds
[  248.108743][   T25] block nbd1: Possible stuck request ffff888022068600: control (read@3072,1024B). Runtime 60 seconds
[  249.232370][T21742] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  249.300962][T21750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6965'.
[  249.343897][T21752] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6966'.
[  249.379316][T21754] DL<Y: left allmulticast mode
[  250.409950][T21796] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  250.412649][T21796] tipc: Resetting bearer <eth:syzkaller0>
[  250.556666][T21812] tipc: Resetting bearer <eth:syzkaller0>
[  250.564121][T21812] bond6: (slave geneve0): Releasing active interface
[  250.660485][T21816] netlink: 'syz.0.6993': attribute type 10 has an invalid length.
[  251.350197][T21812] bond7: (slave veth3): Releasing active interface
[  251.353479][T21814] netlink: 'syz.1.6994': attribute type 10 has an invalid length.
[  251.361801][T21816] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  251.367622][T21817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  251.371134][T21817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  252.378844][T21882] netlink: 'syz.1.7023': attribute type 10 has an invalid length.
[  252.381470][T21882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7023'.
[  253.060790][T21986] delete_channel: no stack
[  253.112746][T21990] wireguard0: entered promiscuous mode
[  253.114543][T21990] wireguard0: entered allmulticast mode
[  253.118387][T21993] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7076'.
[  253.404387][T22038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.409580][T22038] syzkaller0: entered promiscuous mode
[  253.411422][T22038] syzkaller0: entered allmulticast mode
[  253.423397][T22038] tipc: Resetting bearer <eth:syzkaller0>
[  253.427678][T22037] tipc: Resetting bearer <eth:syzkaller0>
[  253.436281][T22037] tipc: Disabling bearer <eth:syzkaller0>
[  253.523093][T22054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7105'.
[  253.565911][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7107'.
[  253.571641][T22058] gtp1: entered promiscuous mode
[  253.573363][T22058] gtp1: entered allmulticast mode
[  253.839872][T22074] netlink: 'syz.2.7114': attribute type 11 has an invalid length.
[  254.117202][T22095] netlink: 'syz.2.7124': attribute type 13 has an invalid length.
[  254.124734][T22095] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.127923][T22095] 8021q: adding VLAN 0 to HW filter on device team0
[  254.131549][T22095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  254.464502][T22112] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.475777][T22112] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  254.478232][T22112] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  254.485030][T22112] tipc: Resetting bearer <eth:syzkaller0>
[  254.633343][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7136'.
[  254.684074][T22126] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7138'.
[  254.694842][T22126] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7138'.
[  254.778558][T22137] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  254.992961][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7151'.
[  255.136324][    C1] ==================================================================
[  255.139097][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  255.141689][    C1] Read of size 2 at addr ffff88810073982a by task swapper/1/0
[  255.144577][    C1] 
[  255.145696][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  255.145706][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.145711][    C1] Call Trace:
[  255.145715][    C1]  <IRQ>
[  255.145719][    C1]  dump_stack_lvl+0x189/0x250
[  255.145730][    C1]  ? rcu_is_watching+0x15/0xb0
[  255.145741][    C1]  ? __kasan_check_byte+0x12/0x40
[  255.145753][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.145759][    C1]  ? rcu_is_watching+0x15/0xb0
[  255.145769][    C1]  ? lock_release+0x4b/0x3e0
[  255.145779][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  255.145788][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  255.145795][    C1]  print_report+0xca/0x240
[  255.145806][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.145815][    C1]  kasan_report+0x118/0x150
[  255.145824][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.145834][    C1]  rose_timer_expiry+0x471/0x4b0
[  255.145843][    C1]  call_timer_fn+0x17e/0x5f0
[  255.145853][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  255.145861][    C1]  ? call_timer_fn+0xbe/0x5f0
[  255.145870][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  255.145880][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.145889][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.145898][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  255.145907][    C1]  __run_timer_base+0x61a/0x860
[  255.145914][    C1]  ? ktime_get+0x3e/0x1f0
[  255.145923][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  255.145930][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  255.145940][    C1]  run_timer_softirq+0xb7/0x180
[  255.145948][    C1]  handle_softirqs+0x286/0x870
[  255.145959][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  255.145969][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  255.146001][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  255.146011][    C1]  __irq_exit_rcu+0xca/0x1f0
[  255.146021][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  255.146031][    C1]  irq_exit_rcu+0x9/0x30
[  255.146040][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  255.146049][    C1]  </IRQ>
[  255.146052][    C1]  <TASK>
[  255.146055][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  255.146063][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  255.146073][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 6f 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  255.146079][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  255.146087][    C1] RAX: 6ed0482eed6a7b00 RBX: ffffffff81969b18 RCX: 6ed0482eed6a7b00
[  255.146092][    C1] RDX: 0000000000000001 RSI: ffffffff8d979139 RDI: ffffffff8be30a00
[  255.146097][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  255.146101][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa07af0
[  255.146106][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  255.146111][    C1]  ? do_idle+0x1e8/0x510
[  255.146123][    C1]  default_idle+0x13/0x20
[  255.146129][    C1]  default_idle_call+0x74/0xb0
[  255.146135][    C1]  do_idle+0x1e8/0x510
[  255.146144][    C1]  ? __pfx_do_idle+0x10/0x10
[  255.146158][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.146170][    C1]  cpu_startup_entry+0x44/0x60
[  255.146179][    C1]  start_secondary+0x101/0x110
[  255.146190][    C1]  common_startup_64+0x13e/0x147
[  255.146201][    C1]  </TASK>
[  255.146204][    C1] 
[  255.253996][    C1] Allocated by task 22095:
[  255.255425][    C1]  kasan_save_track+0x3e/0x80
[  255.257000][    C1]  __kasan_kmalloc+0x93/0xb0
[  255.258539][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  255.260345][    C1]  rxrpc_alloc_peer+0x7d/0x330
[  255.261943][    C1]  rxrpc_lookup_peer+0x3fd/0xa60
[  255.263568][    C1]  rxrpc_do_sendmsg+0xb0a/0x1220
[  255.265181][    C1]  __sock_sendmsg+0x21c/0x270
[  255.266750][    C1]  ____sys_sendmsg+0x52d/0x830
[  255.268351][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  255.269849][    C1]  __sys_sendmmsg+0x227/0x430
[  255.271415][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  255.273000][    C1]  do_syscall_64+0xfa/0x3b0
[  255.274452][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.276389][    C1] 
[  255.277185][    C1] Freed by task 40:
[  255.278431][    C1]  kasan_save_track+0x3e/0x80
[  255.280005][    C1]  kasan_save_free_info+0x46/0x50
[  255.281671][    C1]  __kasan_slab_free+0x62/0x70
[  255.283232][    C1]  kmem_cache_free_bulk+0x2d1/0x520
[  255.284928][    C1]  kvfree_rcu_bulk+0xe5/0x1f0
[  255.286501][    C1]  kfree_rcu_monitor+0x211/0x2a0
[  255.288156][    C1]  process_scheduled_works+0xae1/0x17b0
[  255.290005][    C1]  worker_thread+0x8a0/0xda0
[  255.291539][    C1]  kthread+0x711/0x8a0
[  255.292909][    C1]  ret_from_fork+0x3fc/0x770
[  255.294461][    C1]  ret_from_fork_asm+0x1a/0x30
[  255.296063][    C1] 
[  255.296864][    C1] Last potentially related work creation:
[  255.298747][    C1]  kasan_save_stack+0x3e/0x60
[  255.300319][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  255.302042][    C1]  kvfree_call_rcu+0xbb/0x410
[  255.303600][    C1]  rxrpc_clean_up_connection+0x466/0x6b0
[  255.305464][    C1]  rxrpc_clean_up_local_conns+0x19c/0x200
[  255.307356][    C1]  rxrpc_destroy_local+0x178/0x2a0
[  255.309063][    C1]  rxrpc_io_thread+0x34ef/0x35e0
[  255.310714][    C1]  kthread+0x711/0x8a0
[  255.312081][    C1]  ret_from_fork+0x3fc/0x770
[  255.313601][    C1]  ret_from_fork_asm+0x1a/0x30
[  255.315157][    C1] 
[  255.315960][    C1] The buggy address belongs to the object at ffff888100739800
[  255.315960][    C1]  which belongs to the cache kmalloc-512 of size 512
[  255.320474][    C1] The buggy address is located 42 bytes inside of
[  255.320474][    C1]  freed 512-byte region [ffff888100739800, ffff888100739a00)
[  255.324761][    C1] 
[  255.325558][    C1] The buggy address belongs to the physical page:
[  255.327582][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x100738
[  255.330479][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  255.333121][    C1] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  255.335733][    C1] page_type: f5(slab)
[  255.337073][    C1] raw: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  255.339864][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  255.342672][    C1] head: 057ff00000000040 ffff88801a441c80 0000000000000000 dead000000000001
[  255.345421][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  255.348207][    C1] head: 057ff00000000002 ffffea000401ce01 00000000ffffffff 00000000ffffffff
[  255.350930][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  255.353772][    C1] page dumped because: kasan: bad access detected
[  255.355875][    C1] page_owner tracks the page as allocated
[  255.357742][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5822, tgid 5822 (syz-executor), ts 47571739318, free_ts 47546083183
[  255.364605][    C1]  post_alloc_hook+0x240/0x2a0
[  255.366216][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  255.368042][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  255.369961][    C1]  alloc_pages_mpol+0x232/0x4a0
[  255.371544][    C1]  allocate_slab+0x8a/0x3b0
[  255.373054][    C1]  ___slab_alloc+0xbfc/0x1480
[  255.374613][    C1]  __kmalloc_noprof+0x305/0x4f0
[  255.376220][    C1]  fib6_info_alloc+0x30/0xf0
[  255.377747][    C1]  ip6_route_info_create+0x142/0x860
[  255.379500][    C1]  addrconf_f6i_alloc+0x1d2/0x450
[  255.381167][    C1]  ipv6_add_addr+0x56e/0x1090
[  255.382724][    C1]  add_addr+0x8b/0x2d0
[  255.384084][    C1]  add_v4_addrs+0x70c/0xbd0
[  255.385600][    C1]  addrconf_init_auto_addrs+0x2c4/0xa30
[  255.387431][    C1]  addrconf_notify+0xacc/0x1010
[  255.389048][    C1]  notifier_call_chain+0x1b6/0x3e0
[  255.390747][    C1] page last free pid 5822 tgid 5822 stack trace:
[  255.392838][    C1]  __free_frozen_pages+0xc71/0xe70
[  255.394544][    C1]  __put_partials+0x161/0x1c0
[  255.396112][    C1]  put_cpu_partial+0x17c/0x250
[  255.397682][    C1]  __slab_free+0x2f7/0x400
[  255.399176][    C1]  qlist_free_all+0x97/0x140
[  255.400721][    C1]  kasan_quarantine_reduce+0x148/0x160
[  255.402513][    C1]  __kasan_slab_alloc+0x22/0x80
[  255.404145][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  255.406114][    C1]  __alloc_skb+0x112/0x2d0
[  255.407592][    C1]  netlink_ack+0x146/0xa50
[  255.409081][    C1]  netlink_rcv_skb+0x28c/0x470
[  255.410669][    C1]  genl_rcv+0x28/0x40
[  255.412021][    C1]  netlink_unicast+0x82f/0x9e0
[  255.413606][    C1]  netlink_sendmsg+0x805/0xb30
[  255.415202][    C1]  __sock_sendmsg+0x21c/0x270
[  255.416744][    C1]  __sys_sendto+0x3bd/0x520
[  255.418269][    C1] 
[  255.419083][    C1] Memory state around the buggy address:
[  255.420928][    C1]  ffff888100739700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  255.423542][    C1]  ffff888100739780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  255.426037][    C1] >ffff888100739800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.428523][    C1]                                   ^
[  255.430294][    C1]  ffff888100739880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.432908][    C1]  ffff888100739900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.435532][    C1] ==================================================================
[  255.438443][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  255.440812][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  255.444639][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.447961][    C1] Call Trace:
[  255.449065][    C1]  <IRQ>
[  255.449994][    C1]  dump_stack_lvl+0x99/0x250
[  255.451504][    C1]  ? __asan_memcpy+0x40/0x70
[  255.453022][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.454735][    C1]  ? __pfx__printk+0x10/0x10
[  255.456283][    C1]  panic+0x2db/0x790
[  255.457593][    C1]  ? __pfx_panic+0x10/0x10
[  255.459088][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  255.461041][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  255.462998][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  255.465083][    C1]  ? print_memory_metadata+0x314/0x400
[  255.466960][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.468667][    C1]  check_panic_on_warn+0x89/0xb0
[  255.470315][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.471955][    C1]  end_report+0x78/0x160
[  255.473357][    C1]  kasan_report+0x129/0x150
[  255.474862][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  255.476556][    C1]  rose_timer_expiry+0x471/0x4b0
[  255.478191][    C1]  call_timer_fn+0x17e/0x5f0
[  255.479725][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  255.481522][    C1]  ? call_timer_fn+0xbe/0x5f0
[  255.483034][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  255.484733][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.486473][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.488173][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  255.489967][    C1]  __run_timer_base+0x61a/0x860
[  255.491612][    C1]  ? ktime_get+0x3e/0x1f0
[  255.493065][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  255.494833][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  255.496899][    C1]  run_timer_softirq+0xb7/0x180
[  255.498532][    C1]  handle_softirqs+0x286/0x870
[  255.500142][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  255.501709][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  255.503417][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  255.505173][    C1]  __irq_exit_rcu+0xca/0x1f0
[  255.506657][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  255.508326][    C1]  irq_exit_rcu+0x9/0x30
[  255.509666][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  255.511520][    C1]  </IRQ>
[  255.512512][    C1]  <TASK>
[  255.513524][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  255.515501][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  255.517380][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 13 6f 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  255.523647][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  255.525663][    C1] RAX: 6ed0482eed6a7b00 RBX: ffffffff81969b18 RCX: 6ed0482eed6a7b00
[  255.528272][    C1] RDX: 0000000000000001 RSI: ffffffff8d979139 RDI: ffffffff8be30a00
[  255.530879][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  255.533488][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa07af0
[  255.536106][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  255.538728][    C1]  ? do_idle+0x1e8/0x510
[  255.540171][    C1]  default_idle+0x13/0x20
[  255.541606][    C1]  default_idle_call+0x74/0xb0
[  255.543210][    C1]  do_idle+0x1e8/0x510
[  255.544573][    C1]  ? __pfx_do_idle+0x10/0x10
[  255.546105][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.547828][    C1]  cpu_startup_entry+0x44/0x60
[  255.549421][    C1]  start_secondary+0x101/0x110
[  255.551020][    C1]  common_startup_64+0x13e/0x147
[  255.552626][    C1]  </TASK>
[  255.554336][    C1] Kernel Offset: disabled
[  255.555783][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:54:24  Registers:
info registers vcpu 0

CPU#0
RAX=027c0d679fc50a00 RBX=ffffffff81969b18 RCX=027c0d679fc50a00 RDX=0000000000000001
RSI=ffffffff8d979139 RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07af0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb47ffb7bac CR3=000000002736c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f58c5412e17
XMM06=0000000000000000 00007f58c5412e11 XMM07=0000000000000000 00007f58c5412e25
XMM08=0000000000000000 00007f58c5412eab XMM09=0000000000000000 00007f58c5412f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0470
R8 =ffff888106c28237 R9 =1ffff11020d85046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958e5 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c29e27e CR3=0000000124d68000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbf42387498 00007fbf42387470 XMM03=00007fbf423874a8 00007fbf423874a0
XMM04=00007fbf42eed100 00007fbf42387460 XMM05=00007fbf42387478 00007fbf423874c0
XMM06=00007fbf423874b8 00007fbf423874b0 XMM07=00007fbf423874a8 00007fbf423874a0
XMM08=0000000000000000 00007fbf42212eab XMM09=0000000000000000 00007fbf42212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
