last executing test programs:

987.306007ms ago: executing program 2 (id=2621):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)

880.672506ms ago: executing program 2 (id=2622):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x9, 0x9, 0xffff, 0x4, 0x2, 0x4, 0x6}, 0x1c)

880.382844ms ago: executing program 2 (id=2623):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

778.663519ms ago: executing program 2 (id=2624):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)

711.877283ms ago: executing program 2 (id=2625):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x40000002dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@remote}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x1fc}}, 0x0)

710.87968ms ago: executing program 2 (id=2627):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000)

310.141346ms ago: executing program 1 (id=2643):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

278.263135ms ago: executing program 1 (id=2645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7fff, 0xffffffff, 0x2, 0x78, 0x8, 0x8}}, {0xfffffffffffffea5, 0x2, [0x9, 0x7, 0x200, 0x6, 0x5, 0x6, 0x5fcd, 0x0]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010)

197.930849ms ago: executing program 1 (id=2646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

197.538865ms ago: executing program 0 (id=2648):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
write(r1, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000009c0)=0xfefffffb, 0x4)

90.541859ms ago: executing program 0 (id=2649):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0)

90.252798ms ago: executing program 1 (id=2650):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0)

90.024971ms ago: executing program 0 (id=2651):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x814)

77.528623ms ago: executing program 1 (id=2652):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc)

71.723423ms ago: executing program 0 (id=2653):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x14, r1, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x20000000)

494.072µs ago: executing program 0 (id=2654):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20)

226.643µs ago: executing program 1 (id=2655):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r3, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r4}, 0x20)

0s ago: executing program 0 (id=2656):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001a00010000000000000000000220200000000000000000000c00090008000609", @ANYRES32=0x0, @ANYBLOB="080002"], 0x30}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1576' (ED25519) to the list of known hosts.
syzkaller login: [   40.595181][ T5770] cgroup: Unknown subsys name 'net'
[   40.698614][ T5770] cgroup: Unknown subsys name 'cpuset'
[   40.702782][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.030086][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   50.790660][ T5859] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.123758][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   51.199210][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.202213][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.204642][ T5877] bridge_slave_0: entered allmulticast mode
[   51.208032][ T5877] bridge_slave_0: entered promiscuous mode
[   51.213746][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.216233][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.218611][ T5877] bridge_slave_1: entered allmulticast mode
[   51.221353][ T5877] bridge_slave_1: entered promiscuous mode
[   51.317376][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.323569][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.363829][ T5882] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.381046][ T5877] team0: Port device team_slave_0 added
[   51.390031][ T5877] team0: Port device team_slave_1 added
[   51.439112][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.441462][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.476419][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.484086][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.488498][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.503296][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.579352][ T5877] hsr_slave_0: entered promiscuous mode
[   51.581751][ T5877] hsr_slave_1: entered promiscuous mode
[   51.757905][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.760679][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.799030][   T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.801624][   T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.809108][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   51.818581][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   51.831834][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   51.839189][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   51.925293][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.938596][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   51.944967][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.947544][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.954635][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.957083][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.048064][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.072102][ T5877] veth0_vlan: entered promiscuous mode
[   52.077473][ T5877] veth1_vlan: entered promiscuous mode
[   52.094352][ T5877] veth0_macvtap: entered promiscuous mode
[   52.098706][ T5877] veth1_macvtap: entered promiscuous mode
[   52.108278][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.114104][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.121306][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.124562][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.128423][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.131330][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.779018][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.866959][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.912020][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.915164][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.920935][ T5927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.923956][ T5930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.927838][ T5930] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.931005][ T5927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.938064][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.944813][ T5931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.948931][ T5931] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.964651][ T5927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.968819][ T5927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.990218][ T5927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.993367][ T5927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.996184][ T5927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.999338][ T5927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.002349][ T5927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.015711][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.245091][ T5925] chnl_net:caif_netlink_parms(): no params data found
[   53.281064][ T5928] chnl_net:caif_netlink_parms(): no params data found
[   53.304103][ T5932] chnl_net:caif_netlink_parms(): no params data found
[   53.358034][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.360365][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.362668][ T5925] bridge_slave_0: entered allmulticast mode
[   53.365437][ T5925] bridge_slave_0: entered promiscuous mode
[   53.381313][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.383631][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.385934][ T5925] bridge_slave_1: entered allmulticast mode
[   53.389003][ T5925] bridge_slave_1: entered promiscuous mode
[   53.441711][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.444076][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.447097][ T5932] bridge_slave_0: entered allmulticast mode
[   53.450011][ T5932] bridge_slave_0: entered promiscuous mode
[   53.455023][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.460492][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.470104][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.472354][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.474658][ T5928] bridge_slave_0: entered allmulticast mode
[   53.477888][ T5928] bridge_slave_0: entered promiscuous mode
[   53.481054][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.483336][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.485604][ T5932] bridge_slave_1: entered allmulticast mode
[   53.488935][ T5932] bridge_slave_1: entered promiscuous mode
[   53.500510][ T5925] team0: Port device team_slave_0 added
[   53.503715][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.506043][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.509581][ T5928] bridge_slave_1: entered allmulticast mode
[   53.512261][ T5928] bridge_slave_1: entered promiscuous mode
[   53.529963][ T5925] team0: Port device team_slave_1 added
[   53.541296][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.564513][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.569301][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.574081][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.614986][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.617491][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.625282][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.630260][ T5932] team0: Port device team_slave_0 added
[   53.632679][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.634890][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.642990][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.652140][ T5928] team0: Port device team_slave_0 added
[   53.655890][ T5928] team0: Port device team_slave_1 added
[   53.676265][ T5932] team0: Port device team_slave_1 added
[   53.709830][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.712091][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.721509][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.732006][ T5925] hsr_slave_0: entered promiscuous mode
[   53.734337][ T5925] hsr_slave_1: entered promiscuous mode
[   53.736799][ T5925] debugfs: 'hsr0' already exists in 'hsr'
[   53.738817][ T5925] Cannot create hsr debugfs directory
[   53.740888][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.743028][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.751280][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.755375][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.759673][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.769382][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.778468][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.780946][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.789159][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.835976][ T5928] hsr_slave_0: entered promiscuous mode
[   53.839571][ T5928] hsr_slave_1: entered promiscuous mode
[   53.841657][ T5928] debugfs: 'hsr0' already exists in 'hsr'
[   53.843476][ T5928] Cannot create hsr debugfs directory
[   53.882999][ T5932] hsr_slave_0: entered promiscuous mode
[   53.885309][ T5932] hsr_slave_1: entered promiscuous mode
[   53.888000][ T5932] debugfs: 'hsr0' already exists in 'hsr'
[   53.889819][ T5932] Cannot create hsr debugfs directory
[   54.049621][ T5925] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.057249][ T5925] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.061943][ T5925] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.069406][ T5925] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.091490][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.093960][ T5925] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.096639][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.098887][ T5925] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.129926][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.139651][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.142322][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.154544][ T5925] 8021q: adding VLAN 0 to HW filter on device team0
[   54.160098][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.162378][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.170103][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.172384][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.279133][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.303757][ T5925] veth0_vlan: entered promiscuous mode
[   54.309790][ T5925] veth1_vlan: entered promiscuous mode
[   54.328857][ T5925] veth0_macvtap: entered promiscuous mode
[   54.333250][ T5925] veth1_macvtap: entered promiscuous mode
[   54.343487][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.350528][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.358718][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.361853][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.365000][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.368500][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.408102][   T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.410653][   T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.428807][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.432075][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.513370][ T5969] warning: `syz.2.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.996854][ T5927] Bluetooth: hci1: command tx timeout
[   55.006671][ T5927] Bluetooth: hci0: command tx timeout
[   55.086364][ T5927] Bluetooth: hci2: command tx timeout
[   55.474824][ T5980] netlink: 60 bytes leftover after parsing attributes in process `syz.2.36'.
[   55.541275][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   55.666120][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.41'.
[   55.865530][ T6001] syz.2.45 uses obsolete (PF_INET,SOCK_PACKET)
[   55.909336][   T12] bridge_slave_1: left allmulticast mode
[   55.911795][   T12] bridge_slave_1: left promiscuous mode
[   55.914784][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.922008][   T12] bridge_slave_0: left allmulticast mode
[   55.924312][   T12] bridge_slave_0: left promiscuous mode
[   55.929007][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.084730][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.48'.
[   56.183037][ T6020] Zero length message leads to an empty skb
[   56.250293][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.257797][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   56.262524][   T12] bond0 (unregistering): Released all slaves
[   56.365168][   T12] hsr_slave_0: left promiscuous mode
[   56.370288][   T12] hsr_slave_1: left promiscuous mode
[   56.372951][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.375704][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   56.384029][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.389647][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.399940][   T12] veth1_macvtap: left promiscuous mode
[   56.401916][   T12] veth0_macvtap: left promiscuous mode
[   56.404021][   T12] veth1_vlan: left promiscuous mode
[   56.405864][   T12] veth0_vlan: left promiscuous mode
[   56.634188][   T12] team0 (unregistering): Port device team_slave_1 removed
[   56.651052][   T12] team0 (unregistering): Port device team_slave_0 removed
[   57.032884][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.051686][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.072359][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.076764][ T5927] Bluetooth: hci0: command tx timeout
[   57.077444][ T5234] Bluetooth: hci1: command tx timeout
[   57.087843][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.118187][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.122981][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.131009][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.135101][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.156266][ T5234] Bluetooth: hci2: command tx timeout
[   57.250257][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.264114][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   57.277507][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.279883][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.295703][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.298231][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.348763][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.371446][ T5932] 8021q: adding VLAN 0 to HW filter on device team0
[   57.390938][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.393363][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.417061][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.419464][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.480440][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.511016][ T5928] veth0_vlan: entered promiscuous mode
[   57.521042][ T5928] veth1_vlan: entered promiscuous mode
[   57.538096][ T5928] veth0_macvtap: entered promiscuous mode
[   57.542038][ T5928] veth1_macvtap: entered promiscuous mode
[   57.557247][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.565067][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.579371][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.589779][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.593350][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.599607][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.604691][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.642816][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.650491][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.671017][ T5932] veth0_vlan: entered promiscuous mode
[   57.674056][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.678586][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.679145][ T5932] veth1_vlan: entered promiscuous mode
[   57.705621][ T5932] veth0_macvtap: entered promiscuous mode
[   57.710010][ T5932] veth1_macvtap: entered promiscuous mode
[   57.722756][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.734461][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.745840][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.753805][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.760936][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.770360][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.863986][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.871592][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.902567][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.905519][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.124927][ T6091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.147295][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv1
[   58.154441][ T6100] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   58.167845][ T6100] team0: Failed to send options change via netlink (err -105)
[   58.173405][ T6100] team0: Port device batadv1 added
[   58.233620][ T6091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.315782][ T6091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.752352][ T6127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'.
[   58.755349][ T6127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.80'.
[   59.019416][ T6135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'.
[   59.022521][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'.
[   59.114478][ T6141] netlink: 256 bytes leftover after parsing attributes in process `syz.0.86'.
[   59.157907][ T5234] Bluetooth: hci0: command tx timeout
[   59.158476][ T5927] Bluetooth: hci1: command tx timeout
[   59.236655][ T5927] Bluetooth: hci2: command tx timeout
[   59.355216][ T6091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.425281][ T6166] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.941264][ T6216] macvlan0: entered allmulticast mode
[   59.941286][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.118'.
[   59.943251][ T6216] veth1_vlan: entered allmulticast mode
[   60.446244][ T6257] team0: Port device team_slave_0 removed
[   60.564509][ T6268] wireguard0: entered promiscuous mode
[   60.567296][ T6268] wireguard0: entered allmulticast mode
[   60.768978][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.786383][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.796290][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.805563][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.810033][ T6273] __nla_validate_parse: 4 callbacks suppressed
[   60.810047][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[   60.880341][ T6277] Bluetooth: MGMT ver 1.23
[   60.960645][ T6280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.147'.
[   61.236269][ T5927] Bluetooth: hci1: command tx timeout
[   61.237394][ T5234] Bluetooth: hci0: command tx timeout
[   61.318564][ T5234] Bluetooth: hci2: command tx timeout
[   61.536973][ T6308] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   61.634688][ T6315] Illegal XDP return value 4294967294 on prog  (id 25) dev N/A, expect packet loss!
[   61.793281][ T6328] netlink: 'syz.2.171': attribute type 7 has an invalid length.
[   62.040489][ T6353] netlink: 'syz.2.173': attribute type 1 has an invalid length.
[   62.042986][ T6353] netlink: 224 bytes leftover after parsing attributes in process `syz.2.173'.
[   62.979103][ T6380] netlink: 'syz.2.193': attribute type 4 has an invalid length.
[   62.981730][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'.
[   63.292275][ T6414] bridge0: entered promiscuous mode
[   63.295040][ T6414] bridge0: port 3(macvlan2) entered blocking state
[   63.298116][ T6414] bridge0: port 3(macvlan2) entered disabled state
[   63.300404][ T6414] macvlan2: entered allmulticast mode
[   63.302210][ T6414] bridge0: entered allmulticast mode
[   63.307975][ T6414] macvlan2: left allmulticast mode
[   63.310600][ T6414] bridge0: left allmulticast mode
[   63.312882][ T6414] bridge0: left promiscuous mode
[   63.640929][ T6446] tipc: Started in network mode
[   63.647307][ T6446] tipc: Node identity ca3e99db888c, cluster identity 4711
[   63.650555][ T6446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.653371][ T6446] syzkaller0: entered promiscuous mode
[   63.655208][ T6446] syzkaller0: entered allmulticast mode
[   63.668797][ T6446] tipc: Resetting bearer <eth:syzkaller0>
[   63.674199][ T6445] tipc: Resetting bearer <eth:syzkaller0>
[   63.683329][ T6445] tipc: Disabling bearer <eth:syzkaller0>
[   63.762927][ T6458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.230'.
[   63.881825][ T6472] netlink: set zone limit has 4 unknown bytes
[   63.911395][ T6477] netlink: 72 bytes leftover after parsing attributes in process `syz.1.239'.
[   63.920853][ T6477] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   64.008803][ T6486] netlink: 52 bytes leftover after parsing attributes in process `syz.0.240'.
[   64.465680][ T6510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'.
[   65.075433][ T6545] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.266'.
[   65.179029][ T6549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.268'.
[   65.185644][ T6549] netem: unknown loss type 13
[   65.192164][ T6549] netem: change failed
[   65.617977][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.620933][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.747329][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.753604][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.799160][ T6562] veth1_vlan: left allmulticast mode
[   65.858627][ T5892] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.861584][ T5892] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.864455][ T5892] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.868712][ T5892] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.927487][ T6562] syz.0.272 (6562) used greatest stack depth: 19960 bytes left
[   66.073796][ T6593] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   66.097872][ T6593] bridge_slave_0: left allmulticast mode
[   66.102919][ T6593] bridge_slave_0: left promiscuous mode
[   66.104837][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.154657][ T6593] bridge_slave_1: left allmulticast mode
[   66.163013][ T6593] bridge_slave_1: left promiscuous mode
[   66.165019][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.170445][ T6593] bond0: (slave bond_slave_0): Releasing backup interface
[   66.176165][ T6593] bond0: (slave bond_slave_1): Releasing backup interface
[   66.180086][ T6593] team0: Port device team_slave_1 removed
[   66.182205][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.185211][ T6593] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.193350][ T6593] netlink: 'syz.0.284': attribute type 10 has an invalid length.
[   66.196030][ T6593] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   66.201448][ T6593] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.852549][ T6618] netlink: 'syz.1.294': attribute type 12 has an invalid length.
[   66.925033][   T52] cfg80211: failed to load regulatory.db
[   67.125238][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.300'.
[   67.128565][ T6631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.300'.
[   67.295506][ T6641] bridge: RTM_NEWNEIGH with invalid ether address
[   67.608553][ T6658] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   67.770038][ T6672] netlink: 'syz.2.320': attribute type 3 has an invalid length.
[   67.787310][ T6672] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.856691][ T6672] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.904113][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'.
[   67.922182][ T6672] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.970787][ T6682] netlink: 'syz.0.324': attribute type 1 has an invalid length.
[   67.974601][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'.
[   67.999910][ T6672] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.074315][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.082390][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.093303][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.105006][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.633572][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'.
[   69.333289][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.360'.
[   69.369663][ T6766] netlink: 'syz.1.361': attribute type 21 has an invalid length.
[   69.373541][ T6766] netlink: 128 bytes leftover after parsing attributes in process `syz.1.361'.
[   69.379749][ T6766] netlink: 'syz.1.361': attribute type 5 has an invalid length.
[   69.383383][ T6766] netlink: 3 bytes leftover after parsing attributes in process `syz.1.361'.
[   70.270567][ T6789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.273422][ T6789] syzkaller0: entered promiscuous mode
[   70.275234][ T6789] syzkaller0: entered allmulticast mode
[   70.284790][ T6789] tipc: Resetting bearer <eth:syzkaller0>
[   70.289373][ T6788] tipc: Resetting bearer <eth:syzkaller0>
[   70.296819][ T6788] tipc: Disabling bearer <eth:syzkaller0>
[   70.416991][ T6795] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.375'.
[   70.481719][ T6805] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.380'.
[   70.772940][ T6840] netlink: 'syz.0.396': attribute type 3 has an invalid length.
[   70.817611][ T6842] bond0: (slave wlan1): Releasing backup interface
[   70.832991][ T6842] team0: Mode changed to "broadcast"
[   70.835514][ T6842] vlan0: entered promiscuous mode
[   70.838891][ T6842] tipc: Enabled bearer <eth:team0>, priority 0
[   71.158588][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.653729][ T6908] netlink: 'syz.1.426': attribute type 4 has an invalid length.
[   71.847074][ T1845] tipc: Node number set to 1119001051
[   72.053227][ T6944] tun0: tun_chr_ioctl cmd 21731
[   73.095388][ T6999] syzkaller1: entered promiscuous mode
[   73.098742][ T6999] syzkaller1: entered allmulticast mode
[   73.103594][ T6999] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   73.184195][ T7008] __nla_validate_parse: 7 callbacks suppressed
[   73.184204][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.475'.
[   73.754349][ T7071] syzkaller0: entered promiscuous mode
[   73.757704][ T7071] syzkaller0: entered allmulticast mode
[   73.864682][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.510'.
[   74.006179][ T7083] nbd0: detected capacity change from 0 to 127
[   74.011996][   T56] block nbd0: Receive control failed (result -104)
[   74.732209][ T7106] ip6gre1: entered promiscuous mode
[   74.771980][ T7108] netlink: 36 bytes leftover after parsing attributes in process `syz.1.521'.
[   74.834371][ T7118] ieee802154 phy1 wpan1: encryption failed: -22
[   75.040782][    T9] IPVS: starting estimator thread 0...
[   75.126580][ T7139] IPVS: using max 78 ests per chain, 187200 per kthread
[   75.141488][ T7151] block nbd2: not configured, cannot reconfigure
[   75.171294][ T7154] veth0_to_bond: entered allmulticast mode
[   75.301905][ T7175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.306750][ T7175] syzkaller0: entered promiscuous mode
[   75.308660][ T7175] syzkaller0: entered allmulticast mode
[   75.356518][ T7175] tipc: Resetting bearer <eth:syzkaller0>
[   75.365597][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.368460][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   75.386546][ T7174] tipc: Resetting bearer <eth:syzkaller0>
[   75.394264][ T7174] tipc: Disabling bearer <eth:syzkaller0>
[   75.409742][ T7185] IPv6: sit1: Disabled Multicast RS
[   75.412086][ T7185] sit1: entered allmulticast mode
[   76.674969][ T7269] netlink: 204 bytes leftover after parsing attributes in process `syz.2.590'.
[   76.761359][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'.
[   77.265052][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[   77.268333][ T7319] netlink: 312 bytes leftover after parsing attributes in process `syz.0.610'.
[   77.271666][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[   77.365838][ T7327] netlink: 6 bytes leftover after parsing attributes in process `syz.0.614'.
[   77.575521][ T7351] netlink: 348 bytes leftover after parsing attributes in process `syz.2.626'.
[   77.585271][ T7353] sctp: [Deprecated]: syz.0.627 (pid 7353) Use of int in max_burst socket option.
[   77.585271][ T7353] Use struct sctp_assoc_value instead
[   77.761936][ T7368] netlink: 'syz.2.634': attribute type 2 has an invalid length.
[   78.301691][ T7412] __nla_validate_parse: 2 callbacks suppressed
[   78.301701][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[   78.559673][ T7434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.657'.
[   79.438331][ T7440] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   79.513448][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'.
[   80.566483][ T7513] netlink: 'syz.1.690': attribute type 10 has an invalid length.
[   80.578218][ T7513] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.690'.
[   80.701589][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.700'.
[   80.792192][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'.
[   80.801578][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.706'.
[   80.815894][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.822507][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.826907][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.845181][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.923352][ T7554] netlink: 156 bytes leftover after parsing attributes in process `syz.2.710'.
[   80.934171][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'.
[   81.082079][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'.
[   81.659090][ T7609] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   81.662951][ T7609] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.111743][ T7631] netlink: 'syz.2.742': attribute type 1 has an invalid length.
[   82.522755][ T7656] pim6reg: entered allmulticast mode
[   82.528753][ T7656] pim6reg: left allmulticast mode
[   83.411359][ T7722] netlink: 'syz.1.784': attribute type 2 has an invalid length.
[   83.437121][ T7726] netlink: 'syz.1.786': attribute type 21 has an invalid length.
[   83.439797][ T7726] __nla_validate_parse: 6 callbacks suppressed
[   83.439805][ T7726] netlink: 128 bytes leftover after parsing attributes in process `syz.1.786'.
[   83.444900][ T7726] netlink: 3 bytes leftover after parsing attributes in process `syz.1.786'.
[   83.937003][ T7756] policy can only be matched on NF_INET_PRE_ROUTING
[   83.937016][ T7756] unable to load match
[   83.984452][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'.
[   84.376975][ T7810] syzkaller1: entered promiscuous mode
[   84.378779][ T7810] syzkaller1: entered allmulticast mode
[   84.525943][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'.
[   84.580390][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'.
[   84.758916][ T7849] netlink: 'syz.1.837': attribute type 2 has an invalid length.
[   84.815378][ T7853] netlink: 240 bytes leftover after parsing attributes in process `syz.1.837'.
[   85.263148][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.853'.
[   85.268990][ T7870] team0: entered promiscuous mode
[   85.270632][ T7870] team_slave_0: entered promiscuous mode
[   85.272627][ T7870] team_slave_1: entered promiscuous mode
[   85.275416][ T7870] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.284500][ T7870] team0: left promiscuous mode
[   85.286268][ T7870] team_slave_0: left promiscuous mode
[   85.288326][ T7870] team_slave_1: left promiscuous mode
[   85.319063][ T7872] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'.
[   85.427053][ T7881] netlink: 248 bytes leftover after parsing attributes in process `syz.2.858'.
[   85.580954][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.863'.
[   85.737015][ T7910] netlink: zone id is out of range
[   85.738818][ T7910] netlink: zone id is out of range
[   85.740522][ T7910] netlink: zone id is out of range
[   85.743131][ T7910] netlink: zone id is out of range
[   85.750114][ T7913] ip6tnl1: entered promiscuous mode
[   85.751990][ T7913] ip6tnl1: entered allmulticast mode
[   85.779964][ T7910] netlink: zone id is out of range
[   85.781854][ T7910] netlink: zone id is out of range
[   85.783565][ T7910] netlink: zone id is out of range
[   85.785464][ T7910] netlink: zone id is out of range
[   85.792302][ T7910] netlink: zone id is out of range
[   85.794056][ T7910] netlink: zone id is out of range
[   87.340389][ T8047] netlink: 'syz.1.912': attribute type 1 has an invalid length.
[   87.597917][ T8074] batadv_slave_1: entered promiscuous mode
[   88.033338][ T8123] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.036800][ T8123] syzkaller0: entered promiscuous mode
[   88.038701][ T8123] syzkaller0: entered allmulticast mode
[   88.063730][ T8123] tipc: Resetting bearer <eth:syzkaller0>
[   88.067986][ T8122] tipc: Resetting bearer <eth:syzkaller0>
[   88.097668][ T8122] tipc: Disabling bearer <eth:syzkaller0>
[   89.314365][ T8179] __nla_validate_parse: 10 callbacks suppressed
[   89.314377][ T8179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.974'.
[   89.782053][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'.
[   89.784951][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.999'.
[   89.792612][ T8233] gretap1: entered promiscuous mode
[   89.918671][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'.
[   89.951756][ T8246] bridge_slave_1: left allmulticast mode
[   89.953824][ T8246] bridge_slave_1: left promiscuous mode
[   89.956394][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.962891][ T8246] bridge_slave_0: left allmulticast mode
[   89.964972][ T8246] bridge_slave_0: left promiscuous mode
[   89.967443][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.527774][ T8291] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   90.546598][ T8291] Bluetooth: MGMT ver 1.23
[   90.549464][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.554824][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'.
[   90.562775][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.568383][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.579212][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'.
[   90.583021][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.770519][ T8310] netlink: 'syz.0.1025': attribute type 2 has an invalid length.
[   91.405088][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[   92.398443][ T8391] net_ratelimit: 9 callbacks suppressed
[   92.398453][ T8391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.596957][ T5234] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   92.606291][ T5234] Bluetooth: hci2: command 0x0401 tx timeout
[   92.683602][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'.
[   92.740435][ T8418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1064'.
[   92.783287][ T8423] netlink: 'syz.1.1066': attribute type 11 has an invalid length.
[   93.044027][ T8439] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1074'.
[   93.194527][ T8441] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   93.201514][ T8441] bond0: (slave lo): Enslaving as an active interface with an up link
[   94.486449][ T8516] __nla_validate_parse: 3 callbacks suppressed
[   94.486462][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'.
[   94.906902][ T8540] netlink: 'syz.1.1117': attribute type 1 has an invalid length.
[   94.909623][ T8540] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1117'.
[   94.912656][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1117'.
[   95.161045][ T8553] bridge_slave_1: default FDB implementation only supports local addresses
[   95.545814][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'.
[   95.549977][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'.
[   95.553031][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'.
[   96.280981][ T8580] syzkaller0: entered promiscuous mode
[   96.282784][ T8580] syzkaller0: entered allmulticast mode
[   96.288236][ T8580] syzkaller0: left promiscuous mode
[   96.290058][ T8580] syzkaller0: left allmulticast mode
[   96.437682][ T8586] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1136'.
[   96.560005][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'.
[   96.589209][ T8600] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.1140'.
[   96.711394][ T8620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1151'.
[   96.858099][ T8639] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   96.865788][ T8639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.485570][ T8715] netlink: 'syz.2.1194': attribute type 1 has an invalid length.
[   97.517638][ T8720] pimreg: entered allmulticast mode
[   97.520365][ T8720] pimreg: left allmulticast mode
[   97.951155][ T8761] netlink: 'syz.1.1214': attribute type 1 has an invalid length.
[   98.180075][ T8785] netlink: 'syz.2.1223': attribute type 4 has an invalid length.
[   98.189009][ T8785] netlink: 'syz.2.1223': attribute type 4 has an invalid length.
[   98.207048][ T8789] netlink: 'syz.1.1226': attribute type 10 has an invalid length.
[   98.223586][ T8789] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   98.384596][ T8810] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[   98.388602][ T8810] netlink: 'syz.1.1234': attribute type 10 has an invalid length.
[   98.421170][ T8814] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   99.100618][ T8870] netlink: 'syz.2.1256': attribute type 1 has an invalid length.
[   99.194466][ T8878] trusted_key: syz.2.1260 sent an empty control message without MSG_MORE.
[   99.335147][    T9] IPVS: starting estimator thread 0...
[   99.427201][ T8904] IPVS: using max 78 ests per chain, 187200 per kthread
[   99.493502][ T8922] netlink: 'syz.2.1280': attribute type 31 has an invalid length.
[   99.523818][ T8925] __nla_validate_parse: 12 callbacks suppressed
[   99.523827][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'.
[   99.604852][ T8941] netlink: 'syz.2.1289': attribute type 1 has an invalid length.
[   99.609343][ T8941] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1289'.
[   99.670794][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1293'.
[   99.744246][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1296'.
[   99.748848][ T8956] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1296'.
[   99.752456][ T8956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1296'.
[   99.911205][ T8978] sctp: [Deprecated]: syz.2.1306 (pid 8978) Use of int in maxseg socket option.
[   99.911205][ T8978] Use struct sctp_assoc_value instead
[  100.053423][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'.
[  100.062566][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'.
[  100.078818][ T8992] gretap0: entered promiscuous mode
[  100.082863][ T8992] gretap0: left promiscuous mode
[  100.243946][ T9014] openvswitch: netlink: IP tunnel dst address not specified
[  100.259580][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'.
[  100.262542][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1323'.
[  100.304581][ T9020] dummy0: entered promiscuous mode
[  100.306613][ T9020] macsec1: entered promiscuous mode
[  100.309268][ T9020] macsec1: entered allmulticast mode
[  100.310986][ T9020] dummy0: entered allmulticast mode
[  100.314248][ T9020] dummy0: left allmulticast mode
[  100.316480][ T9020] dummy0: left promiscuous mode
[  100.515206][ T9037] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  100.538387][ T9037] veth3: entered promiscuous mode
[  100.546363][ T9037] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  100.607916][ T9051] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  101.173654][ T9122] tipc: Started in network mode
[  101.175862][ T9122] tipc: Node identity , cluster identity 4711
[  101.178518][ T9122] tipc: Failed to obtain node identity
[  101.180355][ T9122] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  101.314497][ T9136] syzkaller1: entered promiscuous mode
[  101.324428][ T9136] syzkaller1: entered allmulticast mode
[  101.407178][ T9142] bridge1: entered allmulticast mode
[  101.773287][ T9162] pim6reg1: entered promiscuous mode
[  101.775081][ T9162] pim6reg1: entered allmulticast mode
[  102.002286][ T9182] tipc: Started in network mode
[  102.003899][ T9182] tipc: Node identity 429ab389072b, cluster identity 4711
[  102.007181][ T9182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.010925][ T9182] syzkaller0: entered promiscuous mode
[  102.012886][ T9182] syzkaller0: entered allmulticast mode
[  102.030476][ T9182] tipc: Resetting bearer <eth:syzkaller0>
[  102.034697][ T9181] tipc: Resetting bearer <eth:syzkaller0>
[  102.048221][ T9181] tipc: Disabling bearer <eth:syzkaller0>
[  102.665536][ T9257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.981562][ T9298] vlan2: entered promiscuous mode
[  102.986991][ T9298] vlan2: entered allmulticast mode
[  102.989234][ T9298] hsr_slave_1: entered allmulticast mode
[  103.014294][ T9300] validate_nla: 5 callbacks suppressed
[  103.014307][ T9300] netlink: 'syz.0.1455': attribute type 1 has an invalid length.
[  104.046288][ T5234] Bluetooth: hci2: command 0x0401 tx timeout
[  104.320804][ T9332] netlink: 'syz.2.1468': attribute type 5 has an invalid length.
[  104.407455][ T9338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.437958][   T61] block nbd0: Possible stuck request ffff888021318000: control (read@0,1024B). Runtime 30 seconds
[  104.442452][   T61] block nbd0: Possible stuck request ffff888021318200: control (read@1024,1024B). Runtime 30 seconds
[  104.446850][   T61] block nbd0: Possible stuck request ffff888021318400: control (read@2048,1024B). Runtime 30 seconds
[  104.450455][   T61] block nbd0: Possible stuck request ffff888021318600: control (read@3072,1024B). Runtime 30 seconds
[  104.489415][   T52] IPVS: starting estimator thread 0...
[  104.586217][ T9349] IPVS: using max 79 ests per chain, 189600 per kthread
[  104.608036][ T9361] bond0: entered promiscuous mode
[  104.609788][ T9361] bond_slave_0: entered promiscuous mode
[  104.611841][ T9361] bond_slave_1: entered promiscuous mode
[  104.613801][ T9361] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  104.619210][ T9361] batadv0: entered promiscuous mode
[  104.622230][ T9361] hsr1: entered allmulticast mode
[  104.623942][ T9361] bond0: entered allmulticast mode
[  104.625640][ T9361] bond_slave_0: entered allmulticast mode
[  104.628169][ T9361] bond_slave_1: entered allmulticast mode
[  104.630087][ T9361] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  104.632563][ T9361] batadv0: entered allmulticast mode
[  104.634687][ T9361] 8021q: adding VLAN 0 to HW filter on device hsr1
[  105.338619][ T9361] bond0: left promiscuous mode
[  105.343780][ T9361] bond_slave_0: left promiscuous mode
[  105.350752][ T9361] bond_slave_1: left promiscuous mode
[  105.354019][ T9361] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  105.357573][ T9361] batadv0: left promiscuous mode
[  105.441859][ T9370] __nla_validate_parse: 15 callbacks suppressed
[  105.441872][ T9370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1485'.
[  105.532849][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'.
[  105.535920][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'.
[  105.539530][ T9377] netlink: 'syz.1.1488': attribute type 11 has an invalid length.
[  105.599004][ T9381] netlink: 'syz.1.1490': attribute type 2 has an invalid length.
[  105.685038][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1493'.
[  105.688386][ T9387] tc_dump_action: action bad kind
[  106.073571][ T9413] netlink: 'syz.1.1506': attribute type 16 has an invalid length.
[  106.077487][ T9413] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1506'.
[  106.181954][ T9421] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.184753][ T9421] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  106.187697][ T9421] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  106.190671][ T9421] tipc: Resetting bearer <eth:syzkaller0>
[  106.194563][ T9421] tipc: Resetting bearer <eth:syzkaller0>
[  106.333850][ T9431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1515'.
[  106.472612][ T9454] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1526'.
[  106.506712][   T89] tipc: Resetting bearer <eth:syzkaller0>
[  106.567740][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'.
[  106.571503][ T9469] netlink: 'syz.0.1532': attribute type 3 has an invalid length.
[  106.574160][ T9469] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1532'.
[  107.206180][ T6069] tipc: Node number set to 1169273737
[  107.318765][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'.
[  107.471274][ T9524] IPv6: addrconf: prefix option has invalid lifetime
[  107.627987][ T9533] openvswitch: netlink: Missing key (keys=40, expected=80)
[  107.634789][ T9533] netlink: 'syz.0.1563': attribute type 10 has an invalid length.
[  107.639631][ T9533] dummy0: entered promiscuous mode
[  107.643609][ T9533] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  107.710822][ T9538] netlink: 'syz.1.1565': attribute type 10 has an invalid length.
[  107.734342][ T9538] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.740097][ T9538] team0: Port device bond0 added
[  108.059570][ T9567] syzkaller1: entered promiscuous mode
[  108.061658][ T9567] syzkaller1: entered allmulticast mode
[  108.196977][ T9574] netlink: 'syz.1.1581': attribute type 33 has an invalid length.
[  108.199747][ T9574] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  108.219785][   T13] bond0: (slave wlan1): link status definitely down, disabling slave
[  108.260140][ T9576] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  108.751085][ T9630] Bluetooth: MGMT ver 1.23
[  108.780781][ T9634] netlink: 'syz.1.1607': attribute type 3 has an invalid length.
[  110.387302][ T9703] syzkaller1: entered promiscuous mode
[  110.392388][ T9703] syzkaller1: entered allmulticast mode
[  110.530640][ T9724] netlink: 'syz.1.1646': attribute type 7 has an invalid length.
[  110.533667][ T9724] netlink: 'syz.1.1646': attribute type 8 has an invalid length.
[  110.536992][ T9724] netlink: 'syz.1.1646': attribute type 15 has an invalid length.
[  110.606710][ T9732] netlink: 'syz.2.1650': attribute type 1 has an invalid length.
[  110.609407][ T9732] __nla_validate_parse: 12 callbacks suppressed
[  110.609417][ T9732] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1650'.
[  110.717601][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'.
[  110.813752][ T9739] team0 (unregistering): Port device team_slave_0 removed
[  110.822945][ T9739] team0 (unregistering): Port device team_slave_1 removed
[  110.832866][ T9739] team0 (unregistering): Port device batadv1 removed
[  110.843002][ T9739] team0 (unregistering): Port device bond0 removed
[  111.352270][   T33] audit: type=1107 audit(1754948402.059:2): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  111.393184][ T9779] tipc: Started in network mode
[  111.394836][ T9779] tipc: Node identity 26f78a8e2f38, cluster identity 4711
[  111.399735][ T9779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.402751][ T9779] syzkaller0: entered promiscuous mode
[  111.404572][ T9779] syzkaller0: entered allmulticast mode
[  111.439475][ T9779] tipc: Resetting bearer <eth:syzkaller0>
[  111.445512][ T9778] tipc: Resetting bearer <eth:syzkaller0>
[  111.462513][ T9778] tipc: Disabling bearer <eth:syzkaller0>
[  111.483400][ T9787] syzkaller1: entered promiscuous mode
[  111.485267][ T9787] syzkaller1: entered allmulticast mode
[  111.597349][ T9801] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1682'.
[  111.787668][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'.
[  111.792491][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'.
[  111.828969][ T9835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1699'.
[  112.139131][ T9875] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1717'.
[  113.044526][ T9913] netlink: 'syz.1.1733': attribute type 6 has an invalid length.
[  113.254488][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'.
[  113.309811][ T9934] netlink: 'syz.2.1743': attribute type 25 has an invalid length.
[  113.499732][ T6069] IPVS: starting estimator thread 0...
[  113.586246][ T9945] IPVS: using max 79 ests per chain, 189600 per kthread
[  113.692358][   T12] IPVS: stop unused estimator thread 0...
[  113.950786][ T9980] netlink: 'syz.0.1762': attribute type 178 has an invalid length.
[  114.071269][ T9988] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.149915][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'.
[  114.252812][T10010] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  114.280544][T10013] netlink: 'syz.1.1774': attribute type 11 has an invalid length.
[  114.362187][T10011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1771'.
[  114.491336][ T5234] Bluetooth: hci2: link tx timeout
[  114.493286][ T5234] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  114.497107][ T5234] Bluetooth: hci2: link tx timeout
[  114.498847][ T5234] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.548304][   T33] audit: type=1800 audit(1754948405.259:3): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1771" name="cgroup.controllers" dev="tmpfs" ino=2922 res=0 errno=0
[  115.453994][T10077] netlink: 'syz.2.1804': attribute type 13 has an invalid length.
[  115.559941][T10084] netlink: 'syz.2.1807': attribute type 21 has an invalid length.
[  115.563124][T10084] netlink: 'syz.2.1807': attribute type 5 has an invalid length.
[  115.565628][T10084] netlink: 'syz.2.1807': attribute type 6 has an invalid length.
[  115.656997][T10090] syzkaller1: entered promiscuous mode
[  115.659370][T10090] syzkaller1: entered allmulticast mode
[  115.723500][T10096] __nla_validate_parse: 3 callbacks suppressed
[  115.723513][T10096] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1813'.
[  115.823007][T10108] netlink: 'syz.1.1819': attribute type 10 has an invalid length.
[  115.834025][T10108] geneve1: entered allmulticast mode
[  115.836247][T10108] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  116.518965][ T5234] Bluetooth: hci2: command 0x0401 tx timeout
[  116.906707][T10130] veth0_to_team: entered promiscuous mode
[  116.937424][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'.
[  116.966164][T10138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1833'.
[  117.013307][T10144] netlink: 'syz.1.1836': attribute type 4 has an invalid length.
[  117.171789][T10165] tipc: Resetting bearer <eth:syzkaller0>
[  117.334512][T10188] openvswitch: netlink: Multiple metadata blocks provided
[  117.529882][T10218] pim6reg9: entered allmulticast mode
[  117.584574][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'.
[  117.783650][T10244] IPVS: Error connecting to the multicast addr
[  117.790486][T10244] netlink: 'syz.0.1883': attribute type 16 has an invalid length.
[  117.816304][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.821630][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.830030][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.832985][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.850045][T10251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1886'.
[  118.020104][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'.
[  118.131262][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'.
[  118.140234][T10282] geneve2: entered promiscuous mode
[  118.142066][T10282] geneve2: entered allmulticast mode
[  118.444154][T10297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.596440][ T5234] Bluetooth: hci2: command 0x0401 tx timeout
[  118.925144][T10313] wg1 speed is unknown, defaulting to 1000
[  118.928422][T10313] wg1 speed is unknown, defaulting to 1000
[  118.933760][T10313] wg1 speed is unknown, defaulting to 1000
[  118.942641][T10313] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  118.951896][T10313] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  118.974551][T10313] wg1 speed is unknown, defaulting to 1000
[  118.981788][T10313] wg1 speed is unknown, defaulting to 1000
[  118.988551][T10313] wg1 speed is unknown, defaulting to 1000
[  118.993265][T10318] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  119.002263][T10318] bond0: (slave lo): Releasing backup interface
[  119.005129][T10318] bond0: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  119.019838][T10318] bond1: (slave ip6gretap1): Releasing backup interface
[  119.022236][T10318] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 1a:45:16:03:f4:bf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  119.037084][T10318] bond1: (slave veth3): Releasing backup interface
[  119.045386][T10318] validate_nla: 2 callbacks suppressed
[  119.045398][T10318] netlink: 'syz.0.1916': attribute type 10 has an invalid length.
[  119.052335][T10318] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  119.056857][T10318] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  119.084031][T10318] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.089279][T10318] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.122129][T10331] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1922'.
[  119.949311][T10358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.973480][T10360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1934'.
[  120.073110][T10368] wg1: entered promiscuous mode
[  120.074921][T10368] wg1: entered allmulticast mode
[  120.077035][T10370] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  120.083267][    T9] wg1 speed is unknown, defaulting to 1000
[  120.565321][T10422] bridge0: entered promiscuous mode
[  120.567632][T10422] bridge0: entered allmulticast mode
[  120.756758][T10438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.281898][T10490] netlink: 'syz.1.1994': attribute type 14 has an invalid length.
[  121.305820][T10490] netlink: 'syz.1.1994': attribute type 14 has an invalid length.
[  121.454877][T10514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.459345][T10514] syzkaller0: entered promiscuous mode
[  121.461329][T10514] syzkaller0: entered allmulticast mode
[  121.474749][T10514] tipc: Resetting bearer <eth:syzkaller0>
[  121.479630][T10513] tipc: Resetting bearer <eth:syzkaller0>
[  121.491054][T10513] tipc: Disabling bearer <eth:syzkaller0>
[  122.483992][T10564] bond0: (slave bond_slave_0): Releasing backup interface
[  122.486985][T10564] bond_slave_0: left allmulticast mode
[  122.491473][T10564] bond0: (slave bond_slave_1): Releasing backup interface
[  122.494226][T10564] bond_slave_1: left allmulticast mode
[  122.499066][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.501622][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.504918][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.508663][T10564] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.515680][T10564] bond0: (slave geneve1): Releasing backup interface
[  122.518827][T10564] geneve1: left allmulticast mode
[  122.523828][T10564] bond0: (slave wlan1): Releasing backup interface
[  122.527732][T10564] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  122.537597][T10564] tipc: Resetting bearer <eth:syzkaller0>
[  122.558823][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2026'.
[  122.683587][T10575] netlink: 'syz.2.2031': attribute type 21 has an invalid length.
[  122.687701][T10575] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2031'.
[  122.697071][T10573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2030'.
[  122.732053][T10577] wg1 speed is unknown, defaulting to 1000
[  122.788519][T10577] netlink: 'syz.2.2032': attribute type 9 has an invalid length.
[  122.791245][T10577] netlink: 'syz.2.2032': attribute type 6 has an invalid length.
[  122.903592][T10594] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  122.907666][T10593] IPVS: stopping backup sync thread 10594 ...
[  123.431888][T10642] netlink: 'syz.2.2062': attribute type 1 has an invalid length.
[  123.483661][T10648] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2064'.
[  123.512768][T10651] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2065'.
[  123.551041][T10654] netlink: 'syz.1.2066': attribute type 39 has an invalid length.
[  123.833600][T10668] netlink: 'syz.2.2073': attribute type 4 has an invalid length.
[  124.305585][T10712] netlink: 'syz.2.2094': attribute type 11 has an invalid length.
[  124.514661][T10731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2103'.
[  124.521157][T10731] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2103'.
[  124.984019][T10780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.986875][T10780] syzkaller0: entered promiscuous mode
[  124.988773][T10780] syzkaller0: entered allmulticast mode
[  125.003443][T10780] tipc: Resetting bearer <eth:syzkaller0>
[  125.014841][T10779] tipc: Resetting bearer <eth:syzkaller0>
[  125.033894][T10779] tipc: Disabling bearer <eth:syzkaller0>
[  125.070376][T10790] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  125.429633][T10836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.432341][T10836] IPv6: NLM_F_CREATE should be set when creating new route
[  125.449339][T10836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.765238][T10857] wg1 speed is unknown, defaulting to 1000
[  125.932725][T10857] netlink: 'syz.2.2164': attribute type 13 has an invalid length.
[  125.935376][T10857] netlink: 'syz.2.2164': attribute type 17 has an invalid length.
[  125.942960][T10857] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  126.263436][T10882] delete_channel: no stack
[  126.320193][T10888] netlink: 566 bytes leftover after parsing attributes in process `syz.0.2179'.
[  126.374434][T10890] netlink: 'syz.0.2180': attribute type 42 has an invalid length.
[  126.634853][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'.
[  127.253694][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'.
[  127.275952][T10940] netlink: 'syz.0.2203': attribute type 5 has an invalid length.
[  127.350867][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  127.353016][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.355561][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.358118][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.360751][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.363192][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.365842][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.368425][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.370971][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.373466][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.376000][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.378507][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.381055][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.383459][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.385939][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.388429][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.390908][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.393400][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.396243][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.399010][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.401647][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.404199][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.406845][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.409333][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.411922][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.414377][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.416994][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.419438][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.422032][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.424493][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.427106][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.429557][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.432026][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.434478][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.437145][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.439561][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.442083][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.444523][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.447127][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.449611][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.452138][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.454758][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.457446][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.459947][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.462643][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.465158][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.467863][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.470838][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.473480][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.475939][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.478692][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.481303][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.484078][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.486954][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.489828][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.492393][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.495003][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  127.497717][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  127.692235][T10984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.863984][T10999] __nla_validate_parse: 4 callbacks suppressed
[  127.863997][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2230'.
[  127.874440][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2230'.
[  127.883799][T11001] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2231'.
[  127.891987][T11001] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  127.947496][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'.
[  127.951000][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'.
[  127.962341][T11007] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.966292][T11007] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.025822][T11007] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.031303][T11007] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.040605][T11016] netlink: 'syz.0.2238': attribute type 3 has an invalid length.
[  128.043165][T11016] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2238'.
[  128.071602][T11019] netlink: 'syz.0.2239': attribute type 1 has an invalid length.
[  128.074275][T11019] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2239'.
[  128.095574][T11007] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.099183][T11007] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.150823][T11007] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  128.154414][T11007] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  128.219395][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.221958][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  128.235244][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.239698][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.249316][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.252065][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.268831][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.271437][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.421687][T11041] : entered promiscuous mode
[  128.477245][T11037] nbd1: detected capacity change from 0 to 127
[  128.481089][   T56] block nbd1: Receive control failed (result -32)
[  128.532395][T11051] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.2255'.
[  128.866293][T11076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.973212][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2271'.
[  129.504375][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'.
[  129.928748][T11119] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  130.082466][T11128] openvswitch: netlink: Message has 20 unknown bytes.
[  130.086730][T11128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.670206][T11187] veth1_macvtap: left promiscuous mode
[  131.611377][T11234] netlink: 'syz.0.2338': attribute type 1 has an invalid length.
[  131.744818][T11240] wg1 speed is unknown, defaulting to 1000
[  132.205955][T11247] netlink: 'syz.1.2343': attribute type 1 has an invalid length.
[  132.234624][T11249] _Z`Ԁ@: entered promiscuous mode
[  132.305243][T11255] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  133.353093][T11287] geneve2: entered allmulticast mode
[  133.568259][T11311] wg1 speed is unknown, defaulting to 1000
[  133.734713][T11330] __nla_validate_parse: 4 callbacks suppressed
[  133.734728][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'.
[  133.753616][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'.
[  133.833587][T11342] netlink: 'syz.2.2382': attribute type 1 has an invalid length.
[  133.838131][T11342] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2382'.
[  133.902494][T11348] netlink: 'syz.0.2385': attribute type 10 has an invalid length.
[  133.905466][T11348] syz_tun: entered promiscuous mode
[  133.911959][T11348] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  134.084241][T11365] siw: device registration error -23
[  134.089486][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2391'.
[  134.521732][   T61] block nbd0: Possible stuck request ffff888021318000: control (read@0,1024B). Runtime 60 seconds
[  134.525287][   T61] block nbd0: Possible stuck request ffff888021318200: control (read@1024,1024B). Runtime 60 seconds
[  134.528916][   T61] block nbd0: Possible stuck request ffff888021318400: control (read@2048,1024B). Runtime 60 seconds
[  134.532999][   T61] block nbd0: Possible stuck request ffff888021318600: control (read@3072,1024B). Runtime 60 seconds
[  134.914823][T11375] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  134.918447][T11374] IPVS: stopping backup sync thread 11375 ...
[  134.924278][T11374] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2396'.
[  134.929080][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2396'.
[  134.932083][T11374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2396'.
[  135.289765][T11407] netlink: 'syz.1.2412': attribute type 21 has an invalid length.
[  135.292402][T11407] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2412'.
[  135.382634][T11415] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.385802][T11415] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.684544][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2427'.
[  135.712945][T11441] bridge0: port 1(veth1) entered blocking state
[  135.715280][T11441] bridge0: port 1(veth1) entered disabled state
[  135.719259][T11441] veth1: entered allmulticast mode
[  135.721998][T11441] veth1: entered promiscuous mode
[  135.733793][T11441] veth0_to_bond: left allmulticast mode
[  135.736593][T11441] bridge0: port 2(veth0_to_bond) entered blocking state
[  135.739254][T11441] bridge0: port 2(veth0_to_bond) entered disabled state
[  135.741791][T11441] veth0_to_bond: entered allmulticast mode
[  135.745696][T11441] veth0_to_bond: entered promiscuous mode
[  135.756471][T11441] vlan2: entered allmulticast mode
[  135.758489][T11441] bridge0: port 3(vlan2) entered blocking state
[  135.760882][T11441] bridge0: port 3(vlan2) entered disabled state
[  135.764199][T11441] vlan2: entered promiscuous mode
[  136.313683][T11476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.392059][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'.
[  136.483556][T11501] netlink: 'syz.2.2455': attribute type 15 has an invalid length.
[  136.488050][T11501] netlink: 'syz.2.2455': attribute type 18 has an invalid length.
[  136.547863][T11510] @: renamed from veth0_vlan
[  136.954383][T11540] netlink: 'syz.2.2472': attribute type 3 has an invalid length.
[  137.205298][T11548] dvmrp8: entered allmulticast mode
[  137.218403][T11548] openvswitch: netlink: Flow key attr not present in new flow.
[  137.223381][T11547] dvmrp8: left allmulticast mode
[  137.519783][T11565] netlink: 'syz.2.2484': attribute type 19 has an invalid length.
[  137.537975][T11565] netlink: 'syz.2.2484': attribute type 19 has an invalid length.
[  137.726458][T11579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.729998][T11579] syzkaller0: entered promiscuous mode
[  137.736171][T11579] syzkaller0: entered allmulticast mode
[  137.766955][T11579] tipc: Resetting bearer <eth:syzkaller0>
[  137.775150][T11578] tipc: Resetting bearer <eth:syzkaller0>
[  137.805275][T11578] tipc: Disabling bearer <eth:syzkaller0>
[  138.091246][T11629] netlink: 'syz.1.2513': attribute type 10 has an invalid length.
[  138.093995][T11629] netlink: 'syz.1.2513': attribute type 49 has an invalid length.
[  138.121453][T11633] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  138.170068][T11620] netlink: 'syz.2.2510': attribute type 13 has an invalid length.
[  138.173601][T11620] netlink: 'syz.2.2510': attribute type 17 has an invalid length.
[  138.224830][T11620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.281204][T11620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.337366][T11620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.393560][T11631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.545759][T11656] tipc: Resetting bearer <eth:syzkaller0>
[  138.553116][T11656] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  138.965652][T11682] _Z`Ԁ@: entered promiscuous mode
[  139.079643][T11698] bond0: option arp_validate: invalid value (18446744073491447809)
[  139.172650][T11706] netlink: 'syz.2.2548': attribute type 21 has an invalid length.
[  139.175614][T11706] __nla_validate_parse: 7 callbacks suppressed
[  139.175630][T11706] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2548'.
[  139.210600][T11709] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  139.231330][T11712] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  139.659740][T11752] netlink: 'syz.1.2567': attribute type 1 has an invalid length.
[  139.662498][T11752] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2567'.
[  139.692034][T11754] netlink: 'syz.1.2568': attribute type 3 has an invalid length.
[  139.694751][T11754] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2568'.
[  139.872273][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2573'.
[  139.961352][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'.
[  140.438185][T11811] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  140.472165][T11816] vcan0: tx drop: invalid da for name 0x00000000000006f9
[  140.526465][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2600'.
[  140.529555][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2600'.
[  140.623989][T11828] syzkaller0: entered promiscuous mode
[  140.625917][T11828] syzkaller0: entered allmulticast mode
[  141.159553][T11851] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2614'.
[  141.163272][T11851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2614'.
[  141.462711][T11858] wg1 speed is unknown, defaulting to 1000
[  141.931162][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2623'.
[  142.254847][T11895] validate_nla: 1 callbacks suppressed
[  142.254860][T11895] netlink: 'syz.1.2633': attribute type 2 has an invalid length.
[  142.259243][T11895] netlink: 'syz.1.2633': attribute type 1 has an invalid length.
[  142.443415][T11911] netlink: 'syz.1.2641': attribute type 3 has an invalid length.
[  142.551433][T11923] bridge0: port 1(macvlan0) entered blocking state
[  142.570060][T11923] bridge0: port 1(macvlan0) entered disabled state
[  142.572373][T11923] macvlan0: entered allmulticast mode
[  142.575397][T11923] macvlan0: left allmulticast mode
[  142.820702][T11945] ==================================================================
[  142.823281][T11945] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  142.825775][T11945] Read of size 2 at addr ffff888105e75c42 by task syz.0.2658/11945
[  142.829117][T11945] 
[  142.829897][T11945] CPU: 0 UID: 0 PID: 11945 Comm: syz.0.2658 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  142.829911][T11945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.829917][T11945] Call Trace:
[  142.829922][T11945]  <TASK>
[  142.829927][T11945]  dump_stack_lvl+0x189/0x250
[  142.829942][T11945]  ? __kasan_check_byte+0x12/0x40
[  142.829956][T11945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.829965][T11945]  ? lock_release+0x4b/0x3e0
[  142.829981][T11945]  ? __virt_addr_valid+0x4a5/0x5c0
[  142.829993][T11945]  print_report+0xca/0x240
[  142.830002][T11945]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  142.830012][T11945]  kasan_report+0x118/0x150
[  142.830022][T11945]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  142.830032][T11945]  __xfrm_state_lookup+0x6ad/0x8d0
[  142.830043][T11945]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  142.830054][T11945]  xfrm_state_add+0x27d/0xc40
[  142.830066][T11945]  pfkey_add+0x1edd/0x2e00
[  142.830079][T11945]  ? __pfx_pfkey_add+0x10/0x10
[  142.830089][T11945]  ? kmem_cache_free+0x18f/0x400
[  142.830103][T11945]  pfkey_sendmsg+0xbfe/0x1090
[  142.830112][T11945]  ? trace_sched_exit_tp+0x36/0x110
[  142.830124][T11945]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  142.830137][T11945]  ? aa_sock_msg_perm+0xf1/0x1d0
[  142.830148][T11945]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  142.830162][T11945]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  142.830172][T11945]  __sock_sendmsg+0x21c/0x270
[  142.830182][T11945]  ____sys_sendmsg+0x505/0x830
[  142.830193][T11945]  ? __pfx_____sys_sendmsg+0x10/0x10
[  142.830204][T11945]  ? import_iovec+0x74/0xa0
[  142.830212][T11945]  ___sys_sendmsg+0x21f/0x2a0
[  142.830223][T11945]  ? __pfx____sys_sendmsg+0x10/0x10
[  142.830241][T11945]  ? __fget_files+0x2a/0x420
[  142.830254][T11945]  ? __fget_files+0x3a0/0x420
[  142.830267][T11945]  __x64_sys_sendmsg+0x19b/0x260
[  142.830279][T11945]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  142.830290][T11945]  ? rcu_is_watching+0x15/0xb0
[  142.830298][T11945]  ? do_syscall_64+0xbe/0x3b0
[  142.830309][T11945]  do_syscall_64+0xfa/0x3b0
[  142.830318][T11945]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.830327][T11945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.830334][T11945]  ? exc_page_fault+0x9f/0xf0
[  142.830342][T11945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.830349][T11945] RIP: 0033:0x7fe4adb8ebe9
[  142.830358][T11945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.830366][T11945] RSP: 002b:00007fe4aea30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.830375][T11945] RAX: ffffffffffffffda RBX: 00007fe4addb5fa0 RCX: 00007fe4adb8ebe9
[  142.830380][T11945] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  142.830385][T11945] RBP: 00007fe4adc11e19 R08: 0000000000000000 R09: 0000000000000000
[  142.830389][T11945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.830394][T11945] R13: 00007fe4addb6038 R14: 00007fe4addb5fa0 R15: 00007ffded4f9958
[  142.830401][T11945]  </TASK>
[  142.830404][T11945] 
[  142.924052][T11945] Allocated by task 9012:
[  142.925382][T11945]  kasan_save_track+0x3e/0x80
[  142.926898][T11945]  __kasan_slab_alloc+0x6c/0x80
[  142.928420][T11945]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  142.930132][T11945]  xfrm_state_alloc+0x24/0x2f0
[  142.931669][T11945]  __find_acq_core+0x8a7/0x1c00
[  142.933228][T11945]  xfrm_find_acq+0x78/0xa0
[  142.934616][T11945]  xfrm_alloc_userspi+0x6b3/0xc90
[  142.936214][T11945]  xfrm_user_rcv_msg+0x7a3/0xab0
[  142.937801][T11945]  netlink_rcv_skb+0x208/0x470
[  142.939317][T11945]  xfrm_netlink_rcv+0x79/0x90
[  142.940863][T11945]  netlink_unicast+0x82f/0x9e0
[  142.942411][T11945]  netlink_sendmsg+0x805/0xb30
[  142.943948][T11945]  __sock_sendmsg+0x21c/0x270
[  142.945472][T11945]  ____sys_sendmsg+0x505/0x830
[  142.947033][T11945]  ___sys_sendmsg+0x21f/0x2a0
[  142.948552][T11945]  __x64_sys_sendmsg+0x19b/0x260
[  142.950143][T11945]  do_syscall_64+0xfa/0x3b0
[  142.951634][T11945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.953565][T11945] 
[  142.954347][T11945] Freed by task 5312:
[  142.955654][T11945]  kasan_save_track+0x3e/0x80
[  142.957155][T11945]  kasan_save_free_info+0x46/0x50
[  142.958793][T11945]  __kasan_slab_free+0x5b/0x80
[  142.960341][T11945]  kmem_cache_free+0x18f/0x400
[  142.961922][T11945]  xfrm_state_gc_task+0x52d/0x6b0
[  142.963523][T11945]  process_scheduled_works+0xae1/0x17b0
[  142.965216][T11945]  worker_thread+0x8a0/0xda0
[  142.966710][T11945]  kthread+0x711/0x8a0
[  142.968038][T11945]  ret_from_fork+0x3fc/0x770
[  142.969591][T11945]  ret_from_fork_asm+0x1a/0x30
[  142.971135][T11945] 
[  142.971943][T11945] The buggy address belongs to the object at ffff888105e75b00
[  142.971943][T11945]  which belongs to the cache xfrm_state of size 928
[  142.976268][T11945] The buggy address is located 322 bytes inside of
[  142.976268][T11945]  freed 928-byte region [ffff888105e75b00, ffff888105e75ea0)
[  142.980619][T11945] 
[  142.981389][T11945] The buggy address belongs to the physical page:
[  142.983377][T11945] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888105e75b00 pfn:0x105e74
[  142.986502][T11945] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  142.989171][T11945] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  142.991536][T11945] page_type: f5(slab)
[  142.992820][T11945] raw: 057ff00000000040 ffff88801bfa8c80 dead000000000122 0000000000000000
[  142.995574][T11945] raw: ffff888105e75b00 00000000800e0007 00000000f5000000 0000000000000000
[  142.998274][T11945] head: 057ff00000000040 ffff88801bfa8c80 dead000000000122 0000000000000000
[  143.000984][T11945] head: ffff888105e75b00 00000000800e0007 00000000f5000000 0000000000000000
[  143.003730][T11945] head: 057ff00000000002 ffffea0004179d01 00000000ffffffff 00000000ffffffff
[  143.006490][T11945] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  143.009224][T11945] page dumped because: kasan: bad access detected
[  143.011234][T11945] page_owner tracks the page as allocated
[  143.013058][T11945] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6201, tgid 6199 (syz.2.114), ts 59795033412, free_ts 59664907935
[  143.018896][T11945]  post_alloc_hook+0x240/0x2a0
[  143.020426][T11945]  get_page_from_freelist+0x21e4/0x22c0
[  143.022213][T11945]  __alloc_frozen_pages_noprof+0x181/0x370
[  143.024050][T11945]  alloc_pages_mpol+0x232/0x4a0
[  143.025669][T11945]  allocate_slab+0x8a/0x370
[  143.027105][T11945]  ___slab_alloc+0xbeb/0x1410
[  143.028592][T11945]  kmem_cache_alloc_noprof+0x283/0x3c0
[  143.030283][T11945]  xfrm_state_alloc+0x24/0x2f0
[  143.031830][T11945]  xfrm_add_sa+0x17d1/0x4070
[  143.033348][T11945]  xfrm_user_rcv_msg+0x7a3/0xab0
[  143.034924][T11945]  netlink_rcv_skb+0x208/0x470
[  143.036495][T11945]  xfrm_netlink_rcv+0x79/0x90
[  143.037928][T11945]  netlink_unicast+0x82f/0x9e0
[  143.039403][T11945]  netlink_sendmsg+0x805/0xb30
[  143.040907][T11945]  __sock_sendmsg+0x21c/0x270
[  143.042391][T11945]  ____sys_sendmsg+0x505/0x830
[  143.043929][T11945] page last free pid 5925 tgid 5925 stack trace:
[  143.045912][T11945]  __free_frozen_pages+0xbc4/0xd30
[  143.047540][T11945]  __put_partials+0x156/0x1a0
[  143.049047][T11945]  put_cpu_partial+0x17c/0x250
[  143.050551][T11945]  __slab_free+0x2d5/0x3c0
[  143.051993][T11945]  qlist_free_all+0x97/0x140
[  143.053480][T11945]  kasan_quarantine_reduce+0x148/0x160
[  143.055239][T11945]  __kasan_slab_alloc+0x22/0x80
[  143.056789][T11945]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  143.058523][T11945]  getname_flags+0xb8/0x540
[  143.059990][T11945]  do_sys_openat2+0xbc/0x1c0
[  143.061453][T11945]  __x64_sys_openat+0x138/0x170
[  143.063013][T11945]  do_syscall_64+0xfa/0x3b0
[  143.064544][T11945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.066447][T11945] 
[  143.067232][T11945] Memory state around the buggy address:
[  143.069031][T11945]  ffff888105e75b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.071569][T11945]  ffff888105e75b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.074147][T11945] >ffff888105e75c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.076641][T11945]                                            ^
[  143.078564][T11945]  ffff888105e75c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.081080][T11945]  ffff888105e75d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.083591][T11945] ==================================================================
[  143.086252][T11945] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  143.088549][T11945] CPU: 0 UID: 0 PID: 11945 Comm: syz.0.2658 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  143.092355][T11945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.095556][T11945] Call Trace:
[  143.096651][T11945]  <TASK>
[  143.097615][T11945]  dump_stack_lvl+0x99/0x250
[  143.099103][T11945]  ? __asan_memcpy+0x40/0x70
[  143.100618][T11945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.102261][T11945]  ? __pfx__printk+0x10/0x10
[  143.103749][T11945]  vpanic+0x281/0x750
[  143.105039][T11945]  ? __pfx_vpanic+0x10/0x10
[  143.106542][T11945]  ? irqentry_exit+0x74/0x90
[  143.108029][T11945]  panic+0xb9/0xc0
[  143.109233][T11945]  ? __pfx_panic+0x10/0x10
[  143.110689][T11945]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  143.112634][T11945]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  143.114567][T11945]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  143.116254][T11945]  check_panic_on_warn+0x89/0xb0
[  143.117840][T11945]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  143.119586][T11945]  end_report+0x78/0x160
[  143.121050][T11945]  kasan_report+0x129/0x150
[  143.122549][T11945]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  143.124195][T11945]  __xfrm_state_lookup+0x6ad/0x8d0
[  143.125824][T11945]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  143.127624][T11945]  xfrm_state_add+0x27d/0xc40
[  143.129139][T11945]  pfkey_add+0x1edd/0x2e00
[  143.130571][T11945]  ? __pfx_pfkey_add+0x10/0x10
[  143.132116][T11945]  ? kmem_cache_free+0x18f/0x400
[  143.133714][T11945]  pfkey_sendmsg+0xbfe/0x1090
[  143.135208][T11945]  ? trace_sched_exit_tp+0x36/0x110
[  143.136921][T11945]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  143.138555][T11945]  ? aa_sock_msg_perm+0xf1/0x1d0
[  143.140103][T11945]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  143.141767][T11945]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  143.143372][T11945]  __sock_sendmsg+0x21c/0x270
[  143.144861][T11945]  ____sys_sendmsg+0x505/0x830
[  143.146384][T11945]  ? __pfx_____sys_sendmsg+0x10/0x10
[  143.148066][T11945]  ? import_iovec+0x74/0xa0
[  143.149542][T11945]  ___sys_sendmsg+0x21f/0x2a0
[  143.151052][T11945]  ? __pfx____sys_sendmsg+0x10/0x10
[  143.152746][T11945]  ? __fget_files+0x2a/0x420
[  143.154275][T11945]  ? __fget_files+0x3a0/0x420
[  143.155816][T11945]  __x64_sys_sendmsg+0x19b/0x260
[  143.157376][T11945]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  143.159199][T11945]  ? rcu_is_watching+0x15/0xb0
[  143.160773][T11945]  ? do_syscall_64+0xbe/0x3b0
[  143.162256][T11945]  do_syscall_64+0xfa/0x3b0
[  143.163756][T11945]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.165477][T11945]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.167422][T11945]  ? exc_page_fault+0x9f/0xf0
[  143.168937][T11945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.170758][T11945] RIP: 0033:0x7fe4adb8ebe9
[  143.172171][T11945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.178090][T11945] RSP: 002b:00007fe4aea30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  143.180686][T11945] RAX: ffffffffffffffda RBX: 00007fe4addb5fa0 RCX: 00007fe4adb8ebe9
[  143.183199][T11945] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  143.185655][T11945] RBP: 00007fe4adc11e19 R08: 0000000000000000 R09: 0000000000000000
[  143.188130][T11945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  143.190624][T11945] R13: 00007fe4addb6038 R14: 00007fe4addb5fa0 R15: 00007ffded4f9958
[  143.193135][T11945]  </TASK>
[  143.194796][T11945] Kernel Offset: disabled
[  143.196196][T11945] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:40:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001506 RDI=0000000000001507 RBP=00000000000003f8 RSP=ffffc9000302ed90
R8 =ffff888107ca0237 R9 =1ffff11020f94046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f5 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe4aea306c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000001c0 CR3=00000000228ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe4add87498 00007fe4add87470 XMM03=00007fe4add874a8 00007fe4add874a0
XMM04=00007fe4ae8ed100 00007fe4add87460 XMM05=00007fe4add87478 00007fe4add874c0
XMM06=00007fe4add874b8 00007fe4add874b0 XMM07=00007fe4add874a8 00007fe4add874a0
XMM08=0000000000000000 00007fe4adc12ee7 XMM09=0000000000000000 00007fe4adc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=bfad8a55f3d3b100 RBX=0000000000000000 RCX=ffff888109aad640 RDX=0000000000000000
RSI=000000000000000b RDI=00000000ffffffff RBP=1ffffffff1b7a88f RSP=ffffc9000307f118
R8 =ffff8881102a7a3f R9 =1ffff11022054f47 R10=dffffc0000000000 R11=ffffed1022054f48
R12=fffa80010933f000 R13=ffffea000424cf80 R14=1ffffffff1b7a88d R15=0000000000000000
RIP=ffffffff82154fb5 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f522ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff818c5347 ffffffff81748653
XMM02=a7933c3422f10d28 ffffffff81748653 XMM03=29232f92301cfbde fec763492f7b4b7f
XMM04=96ca0389221a3ff3 b8fc8a92b451b178 XMM05=29232f92301cfbde fec763492f7b4b7f
XMM06=a7933c3422f10d28 e68814835384db14 XMM07=35c5b3799be5e54d 9988e7fcd9215753
XMM08=0000000000000000 00007fc411c12ee7 XMM09=0000000000000000 00007fc411c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
