last executing test programs:

1.066547808s ago: executing program 2 (id=3580):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.001061844s ago: executing program 2 (id=3582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

1.000638859s ago: executing program 2 (id=3585):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040), 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x0)
read(r2, &(0x7f0000000080)=""/186, 0xba)
unshare(0x26020480)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r5, 0x7, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}]}, 0x34}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r6}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x1, @null, @rose={'rose', 0x0}, 0x5, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x6, [@bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})

420.851206ms ago: executing program 0 (id=3603):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x1170, 0x1398, 0xc8, 0x1170, 0x1b8, 0x1398, 0x1398, 0x1b8, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast1, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00], 'ip6tnl0\x00', 'caif0\x00', {}, {}, 0x6, 0x0, 0x0, 0x10}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x35}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x401, 0x2, 0x0, 0x0, 'snmp_trap\x00', {0xe9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8)

370.440382ms ago: executing program 0 (id=3605):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001800)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce)

247.91063ms ago: executing program 0 (id=3609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0)

189.208926ms ago: executing program 1 (id=3610):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000000)={0x0, 0xff65, &(0x7f0000000200)={0x0, 0xffffffe9}, 0x1, 0x0, 0x0, 0x10}, 0x20044095)
sendmmsg$alg(r1, &(0x7f0000004c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@iv={0x18}], 0x18, 0x4012}], 0x1, 0x4010)

188.97057ms ago: executing program 0 (id=3611):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x10dc}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

188.865113ms ago: executing program 0 (id=3612):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x80047441, &(0x7f0000000180))

187.085054ms ago: executing program 1 (id=3613):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d00010000000000000000000300"], 0x1c}], 0x1}, 0x300)

109.389253ms ago: executing program 1 (id=3614):
r0 = socket(0x1d, 0x2, 0x6)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x2, 0x0, 0x0)

109.120575ms ago: executing program 2 (id=3615):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"})

108.909111ms ago: executing program 1 (id=3616):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x10, 0x1403, 0x1}, 0x10}}, 0x20000000)

60.887818ms ago: executing program 0 (id=3617):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)

60.629605ms ago: executing program 1 (id=3618):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)

60.336947ms ago: executing program 2 (id=3619):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200)=0x112, 0x4)

247.748µs ago: executing program 1 (id=3620):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4)

0s ago: executing program 2 (id=3621):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:65338' (ED25519) to the list of known hosts.
syzkaller login: [   48.528744][ T5773] cgroup: Unknown subsys name 'net'
[   48.639297][ T5773] cgroup: Unknown subsys name 'cpuset'
[   48.646167][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.616461][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.966685][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.970448][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.973755][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.977530][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.980580][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.016451][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.024320][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.028267][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.033041][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.038409][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.041466][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.048242][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.064204][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.075865][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.087260][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.328416][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   55.385833][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.453727][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.470115][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.473496][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.476903][ T5847] bridge_slave_0: entered allmulticast mode
[   55.479804][ T5847] bridge_slave_0: entered promiscuous mode
[   55.506401][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.508827][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.511163][ T5841] bridge_slave_0: entered allmulticast mode
[   55.514122][ T5841] bridge_slave_0: entered promiscuous mode
[   55.517368][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.520434][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.523424][ T5847] bridge_slave_1: entered allmulticast mode
[   55.529276][ T5847] bridge_slave_1: entered promiscuous mode
[   55.547435][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.550538][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.553526][ T5841] bridge_slave_1: entered allmulticast mode
[   55.557349][ T5841] bridge_slave_1: entered promiscuous mode
[   55.609383][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.636154][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.642139][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.671318][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.700998][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.704556][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.707707][ T5845] bridge_slave_0: entered allmulticast mode
[   55.711584][ T5845] bridge_slave_0: entered promiscuous mode
[   55.743008][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.746285][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.749278][ T5845] bridge_slave_1: entered allmulticast mode
[   55.754406][ T5845] bridge_slave_1: entered promiscuous mode
[   55.770136][ T5847] team0: Port device team_slave_0 added
[   55.775255][ T5841] team0: Port device team_slave_0 added
[   55.786358][ T5847] team0: Port device team_slave_1 added
[   55.790609][ T5841] team0: Port device team_slave_1 added
[   55.808742][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.837959][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.840562][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.849587][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.856392][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.868407][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.870734][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.881069][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.895140][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.898430][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.910028][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.935038][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.937575][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.947571][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.953273][ T5845] team0: Port device team_slave_0 added
[   55.957861][ T5845] team0: Port device team_slave_1 added
[   56.001747][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.004317][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.012632][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.030104][ T5847] hsr_slave_0: entered promiscuous mode
[   56.032885][ T5847] hsr_slave_1: entered promiscuous mode
[   56.036205][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.038780][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.048734][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.077948][ T5841] hsr_slave_0: entered promiscuous mode
[   56.080221][ T5841] hsr_slave_1: entered promiscuous mode
[   56.082333][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.085073][ T5841] Cannot create hsr debugfs directory
[   56.162953][ T5845] hsr_slave_0: entered promiscuous mode
[   56.165614][ T5845] hsr_slave_1: entered promiscuous mode
[   56.167798][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.170267][ T5845] Cannot create hsr debugfs directory
[   56.377454][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.401106][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.408271][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.423868][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.471541][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.480578][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.511667][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.531157][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.566139][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.578476][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.591125][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.602137][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.683172][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.708171][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.733016][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   56.739404][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.752694][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.756136][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.762443][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.765256][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.778483][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.780914][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.791449][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.794718][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.804628][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.827202][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.848548][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.851420][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.883272][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.885806][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.004986][   T55] Bluetooth: hci0: command tx timeout
[   57.028117][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.059728][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.111691][ T5847] veth0_vlan: entered promiscuous mode
[   57.128239][ T5847] veth1_vlan: entered promiscuous mode
[   57.132097][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.138159][ T5841] veth0_vlan: entered promiscuous mode
[   57.147816][ T5841] veth1_vlan: entered promiscuous mode
[   57.164610][   T55] Bluetooth: hci2: command tx timeout
[   57.164854][ T5850] Bluetooth: hci1: command tx timeout
[   57.200406][ T5841] veth0_macvtap: entered promiscuous mode
[   57.207135][ T5847] veth0_macvtap: entered promiscuous mode
[   57.212410][ T5841] veth1_macvtap: entered promiscuous mode
[   57.219849][ T5847] veth1_macvtap: entered promiscuous mode
[   57.229419][ T5845] veth0_vlan: entered promiscuous mode
[   57.249784][ T5845] veth1_vlan: entered promiscuous mode
[   57.269320][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.278042][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.282556][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.299452][ T5871] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.306123][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.311428][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.322742][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.337738][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.341958][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.359397][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.363124][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.382806][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.397941][ T5845] veth0_macvtap: entered promiscuous mode
[   57.411356][ T5845] veth1_macvtap: entered promiscuous mode
[   57.455120][ T5111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.458570][ T5111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.467074][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.481633][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.499962][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.503361][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.515969][ T5111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.517906][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.520970][ T5111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.538019][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.557718][ T5111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.560216][ T5111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.589351][ T5096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.592884][ T5096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.643443][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.646647][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.664658][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.733352][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.741088][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.064826][ T5925] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9'.
[   58.286977][ T5938] Zero length message leads to an empty skb
[   58.330953][ T5933] team0 (unregistering): Port device team_slave_0 removed
[   58.341377][ T5933] team0 (unregistering): Port device team_slave_1 removed
[   58.609055][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'.
[   58.619716][ T5945] bridge0: entered promiscuous mode
[   58.627594][ T5945] bridge0: entered allmulticast mode
[   58.635361][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'.
[   58.640029][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.643687][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.909386][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'.
[   58.968286][ T5964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25'.
[   59.003788][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[   59.053616][ T5966] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.084814][ T5850] Bluetooth: hci0: command tx timeout
[   59.211515][ T5981] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   59.244409][ T5850] Bluetooth: hci2: command tx timeout
[   59.254322][ T5850] Bluetooth: hci1: command tx timeout
[   59.307513][ T5988] xt_cgroup: invalid path, errno=-2
[   59.495237][ T6003] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.41'.
[   60.429613][ T6053] xt_TCPMSS: Only works on TCP SYN packets
[   60.439380][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   60.775964][ T6077] netlink: 'syz.0.66': attribute type 13 has an invalid length.
[   60.916117][ T6077] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.918522][ T6077] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.940608][ T6077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   60.987498][ T6093] syz.2.76 uses obsolete (PF_INET,SOCK_PACKET)
[   60.990234][ T6093] syzkaller1: entered promiscuous mode
[   60.998536][ T6093] syzkaller1: entered allmulticast mode
[   61.158966][ T6105] netlink: 56 bytes leftover after parsing attributes in process `syz.1.82'.
[   61.164211][ T5850] Bluetooth: hci0: command tx timeout
[   61.325858][ T5850] Bluetooth: hci1: command tx timeout
[   61.327696][ T5850] Bluetooth: hci2: command tx timeout
[   61.405508][ T6133] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   61.511248][ T6144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'.
[   61.578434][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   62.478562][ T6191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   62.529827][    C1] Illegal XDP return value 16128 on prog  (id 14) dev lo, expect packet loss!
[   63.046920][ T6252] netlink: 'syz.1.140': attribute type 10 has an invalid length.
[   63.067186][ T6252] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   63.209059][ T6270] netlink: 'syz.0.149': attribute type 2 has an invalid length.
[   63.245282][   T55] Bluetooth: hci0: command tx timeout
[   63.404619][   T55] Bluetooth: hci2: command tx timeout
[   63.407114][   T55] Bluetooth: hci1: command tx timeout
[   63.579659][ T6287] netlink: 'syz.1.157': attribute type 1 has an invalid length.
[   63.618634][ T6289] netlink: 'syz.1.158': attribute type 1 has an invalid length.
[   63.621196][ T6289] netlink: 'syz.1.158': attribute type 2 has an invalid length.
[   63.649040][ T6293] __nla_validate_parse: 1 callbacks suppressed
[   63.649051][ T6293] netlink: 44 bytes leftover after parsing attributes in process `syz.1.160'.
[   63.657856][ T6293] netlink: 43 bytes leftover after parsing attributes in process `syz.1.160'.
[   63.661215][ T6293] netlink: 'syz.1.160': attribute type 6 has an invalid length.
[   63.664960][ T6293] netlink: 'syz.1.160': attribute type 5 has an invalid length.
[   63.668301][ T6293] netlink: 43 bytes leftover after parsing attributes in process `syz.1.160'.
[   63.737931][ T6297] delete_channel: no stack
[   64.089686][ T6314] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[   64.115535][ T6314] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   64.133856][ T6314] veth3: entered promiscuous mode
[   64.139574][ T6314] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   64.148270][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'.
[   64.152148][ T6314] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.188679][ T5871] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.294857][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   64.589574][ T6338] netlink: 72 bytes leftover after parsing attributes in process `syz.2.177'.
[   64.610226][ T6338] netlink: 72 bytes leftover after parsing attributes in process `syz.2.177'.
[   64.830909][ T6356] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.186'.
[   65.267763][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'.
[   65.272735][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.197'.
[   66.182802][ T6415] netlink: del zone limit has 4 unknown bytes
[   66.580550][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'.
[   66.592046][ T6449] warning: `syz.0.228' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.605725][ T6448] xt_CT: You must specify a L4 protocol and not use inversions on it
[   66.608515][ T6451] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.709375][ T6460] netlink: 'syz.0.233': attribute type 8 has an invalid length.
[   66.789447][ T6464] netlink: 'syz.2.235': attribute type 3 has an invalid length.
[   67.497400][  T973] IPVS: starting estimator thread 0...
[   67.585823][ T6512] IPVS: using max 46 ests per chain, 110400 per kthread
[   67.643915][ T6521] netlink: 'syz.0.259': attribute type 1 has an invalid length.
[   68.098213][ T6554] netlink: 'syz.0.273': attribute type 2 has an invalid length.
[   68.829565][ T6624] __nla_validate_parse: 3 callbacks suppressed
[   68.829581][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'.
[   69.148070][ T6660] bridge_slave_0: left allmulticast mode
[   69.149995][ T6660] bridge_slave_0: left promiscuous mode
[   69.151930][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.159936][ T6660] bridge_slave_1: left allmulticast mode
[   69.161906][ T6660] bridge_slave_1: left promiscuous mode
[   69.163970][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.177227][ T6660] bond0: (slave bond_slave_0): Releasing backup interface
[   69.187845][ T6660] bond0: (slave bond_slave_1): Releasing backup interface
[   69.210913][ T6660] team0: Port device team_slave_0 removed
[   69.224961][ T6660] team0: Port device team_slave_1 removed
[   69.231992][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.236827][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.240666][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.243415][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.253134][ T6660] bond1: (slave ip6gretap1): Removing an active aggregator
[   69.260341][ T6660] bond1: (slave ip6gretap1): Releasing backup interface
[   69.262862][ T6660] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 0a:5f:31:d9:a9:18 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   69.280540][ T6660] bond1: (slave veth3): Releasing backup interface
[   69.775265][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.780303][ T6694] bond0: (slave rose0): Enslaving as an active interface with an up link
[   70.866198][ T6741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.352'.
[   71.017772][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.020793][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.136746][ T6765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.171818][ T6769] netlink: 'syz.0.358': attribute type 13 has an invalid length.
[   71.178011][ T6769] netlink: 'syz.0.358': attribute type 17 has an invalid length.
[   71.186726][ T6769] bridge0: left promiscuous mode
[   71.188819][ T6769] bridge0: left allmulticast mode
[   71.197662][ T6769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.304596][ T6769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.364798][ T6754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.393459][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'.
[   71.420831][ T6754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.527537][ T6784] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.608737][ T6784] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.673112][ T6784] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.729802][ T6784] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.792994][ T6787] macsec1: entered promiscuous mode
[   71.842016][ T5701] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.867145][ T5701] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.877597][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.902790][ T5701] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.919708][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'.
[   72.005174][ T6792] GUP no longer grows the stack in syz.1.372 (6792): 200000006000-20000000a000 (200000005000)
[   72.009217][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.1.372 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[   72.009229][ T6792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.009233][ T6792] Call Trace:
[   72.009237][ T6792]  <TASK>
[   72.009241][ T6792]  dump_stack_lvl+0x189/0x250
[   72.009257][ T6792]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.009266][ T6792]  ? __pfx__printk+0x10/0x10
[   72.009275][ T6792]  ? find_vma+0xe7/0x160
[   72.009292][ T6792]  __get_user_pages+0x2a60/0x30b0
[   72.009315][ T6792]  ? __pfx___get_user_pages+0x10/0x10
[   72.009323][ T6792]  ? __gup_longterm_locked+0xbf7/0x15b0
[   72.009332][ T6792]  ? down_read_killable+0x1d1/0x350
[   72.009342][ T6792]  ? try_get_folio+0x633/0x660
[   72.009353][ T6792]  __gup_longterm_locked+0xd66/0x15b0
[   72.009365][ T6792]  ? try_grab_folio_fast+0x1be/0x4f0
[   72.009378][ T6792]  ? gup_fast_fallback+0x1afc/0x2260
[   72.009388][ T6792]  gup_fast_fallback+0x1cd4/0x2260
[   72.009411][ T6792]  ? __pfx_gup_fast_fallback+0x10/0x10
[   72.009419][ T6792]  ? trace_contention_end+0x39/0x120
[   72.009428][ T6792]  ? __mutex_lock+0x330/0xe80
[   72.009436][ T6792]  ? futex_unqueue+0x22/0x240
[   72.009445][ T6792]  ? futex_unqueue+0x22/0x240
[   72.009453][ T6792]  ? futex_unqueue+0x22/0x240
[   72.009460][ T6792]  ? is_valid_gup_args+0x11f/0x200
[   72.009470][ T6792]  ? get_user_pages_fast+0x4d/0xb0
[   72.009479][ T6792]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   72.009493][ T6792]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   72.009503][ T6792]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   72.009514][ T6792]  ? wait_for_space+0x24d/0x2d0
[   72.009525][ T6792]  iov_iter_get_pages2+0x5e/0xa0
[   72.009536][ T6792]  __se_sys_vmsplice+0x548/0x10d0
[   72.009554][ T6792]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   72.009564][ T6792]  ? __pfx_futex_wait+0x10/0x10
[   72.009576][ T6792]  ? __lock_acquire+0xab9/0xd20
[   72.009597][ T6792]  ? do_pipe2+0xf7/0x170
[   72.009610][ T6792]  ? rcu_is_watching+0x15/0xb0
[   72.009623][ T6792]  ? do_syscall_64+0xbe/0x3b0
[   72.009634][ T6792]  do_syscall_64+0xfa/0x3b0
[   72.009641][ T6792]  ? lockdep_hardirqs_on+0x9c/0x150
[   72.009648][ T6792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.009655][ T6792]  ? exc_page_fault+0x9f/0xf0
[   72.009663][ T6792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.009698][ T6792] RIP: 0033:0x7f22e338e9a9
[   72.009706][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   72.009714][ T6792] RSP: 002b:00007f22e412a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   72.009724][ T6792] RAX: ffffffffffffffda RBX: 00007f22e35b5fa0 RCX: 00007f22e338e9a9
[   72.009730][ T6792] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[   72.009735][ T6792] RBP: 00007f22e3410d69 R08: 0000000000000000 R09: 0000000000000000
[   72.009740][ T6792] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   72.009745][ T6792] R13: 0000000000000000 R14: 00007f22e35b5fa0 R15: 00007ffff1d1f158
[   72.009764][ T6792]  </TASK>
[   72.511717][ T6819] netlink: 'syz.0.385': attribute type 9 has an invalid length.
[   73.057998][ T6865] syzkaller1: entered promiscuous mode
[   73.059932][ T6865] syzkaller1: entered allmulticast mode
[   73.555478][ T6883] netlink: 'syz.2.412': attribute type 1 has an invalid length.
[   73.557932][ T6883] netlink: 224 bytes leftover after parsing attributes in process `syz.2.412'.
[   74.413793][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'.
[   74.587733][ T6979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.454'.
[   74.634013][ T6956] infiniband syz1: set down
[   74.636683][ T6956] infiniband syz1: added bond0
[   74.697100][ T6956] RDS/IB: syz1: added
[   74.699190][ T6956] smc: adding ib device syz1 with port count 1
[   74.708566][ T6956] smc:    ib device syz1 port 1 has pnetid 
[   74.890634][ T6995] netlink: 'syz.1.460': attribute type 23 has an invalid length.
[   75.302396][ T7021] netlink: 'syz.0.474': attribute type 1 has an invalid length.
[   75.323616][ T7021] bond2: entered promiscuous mode
[   75.326258][ T7021] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.361900][ T7021] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.365313][ T7021] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   75.371135][ T7021] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   75.380476][ T7021] bond2: (slave wireguard0): making interface the new active one
[   75.383399][ T7021] wireguard0: entered promiscuous mode
[   75.387586][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'.
[   75.388150][ T7021] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[   75.419160][ T7021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.421785][ T7021] IPv6: NLM_F_CREATE should be set when creating new route
[   75.424721][ T7021] IPv6: NLM_F_CREATE should be set when creating new route
[   75.428989][ T7021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.441991][ T7033] IPv6: sit1: Disabled Multicast RS
[   75.445316][ T7033] sit1: entered allmulticast mode
[   75.472626][ T7036] netlink: 'syz.2.480': attribute type 4 has an invalid length.
[   75.476921][ T7036] netlink: 17 bytes leftover after parsing attributes in process `syz.2.480'.
[   75.484920][ T7021] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   75.492688][ T7021] bond2: (slave wireguard1): Enslaving as a backup interface with an up link
[   75.699957][ T7056] syzkaller1: entered promiscuous mode
[   75.701788][ T7056] syzkaller1: entered allmulticast mode
[   76.121955][ T7084] netlink: 'syz.1.502': attribute type 6 has an invalid length.
[   76.264773][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'.
[   76.268108][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'.
[   76.317707][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.513'.
[   76.435325][ T7117] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   76.823560][ T7151] netlink: 84 bytes leftover after parsing attributes in process `syz.0.529'.
[   76.828984][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.529'.
[   77.160694][ T7165] netlink: 'syz.1.534': attribute type 1 has an invalid length.
[   77.167675][ T7165] netlink: 'syz.1.534': attribute type 2 has an invalid length.
[   77.174746][ T7167] netlink: 64 bytes leftover after parsing attributes in process `syz.2.535'.
[   77.207788][ T7169] netlink: 'syz.2.537': attribute type 2 has an invalid length.
[   77.218353][ T7171] SET target dimension over the limit!
[   77.367666][ T7185] tipc: Started in network mode
[   77.369491][ T7185] tipc: Node identity 5a29faa4bc58, cluster identity 4711
[   77.374988][ T7185] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.378308][ T7185] syzkaller0: entered promiscuous mode
[   77.380183][ T7185] syzkaller0: entered allmulticast mode
[   77.393439][ T7185] tipc: Resetting bearer <eth:syzkaller0>
[   77.406479][ T7182] tipc: Resetting bearer <eth:syzkaller0>
[   77.431997][ T7191] netlink: 'syz.1.547': attribute type 9 has an invalid length.
[   77.435894][ T7182] tipc: Disabling bearer <eth:syzkaller0>
[   78.159305][ T7233] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   78.164910][ T7233] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   78.696178][ T7260] netlink: 'syz.2.579': attribute type 1 has an invalid length.
[   79.127447][ T7303] nbd: must specify at least one socket
[   79.722324][ T7372] tipc: New replicast peer: 255.255.255.255
[   79.726860][ T7372] tipc: Enabled bearer <udp:syz2>, priority 10
[   79.872155][ T7384] ip6t_srh: unknown srh match flags  4000
[   80.021606][ T7402] tipc: Started in network mode
[   80.023387][ T7402] tipc: Node identity fa117954b2c8, cluster identity 4711
[   80.030408][ T7402] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.035309][ T7402] syzkaller0: entered promiscuous mode
[   80.037198][ T7402] syzkaller0: entered allmulticast mode
[   80.067159][ T7402] tipc: Resetting bearer <eth:syzkaller0>
[   80.071249][ T7401] tipc: Resetting bearer <eth:syzkaller0>
[   80.100694][ T7401] tipc: Disabling bearer <eth:syzkaller0>
[   80.252054][ T7421] __nla_validate_parse: 11 callbacks suppressed
[   80.252064][ T7421] netlink: 88 bytes leftover after parsing attributes in process `syz.1.654'.
[   80.260692][ T7422] netlink: 'syz.2.653': attribute type 1 has an invalid length.
[   80.269951][ T7422] netlink: 224 bytes leftover after parsing attributes in process `syz.2.653'.
[   80.733006][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'.
[   80.845226][ T5570] tipc: Node number set to 3866229412
[   80.869259][ T7467] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   80.874745][ T5570] IPVS: starting estimator thread 0...
[   80.959642][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[   80.960972][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'.
[   80.967174][ T7473] IPVS: using max 48 ests per chain, 115200 per kthread
[   81.189862][ T7494] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.683'.
[   81.201728][ T7494] openvswitch: netlink: Message has 5 unknown bytes.
[   81.270942][    T9] cfg80211: failed to load regulatory.db
[   81.571461][ T7516] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.603513][ T7518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.672546][ T7522] ip6t_REJECT: ECHOREPLY is not supported
[   81.713838][ T7524] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.717685][ T7524] bond0: (slave bond3): Enslaving as an active interface with an up link
[   82.017093][ T7545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   82.025891][ T7545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.035472][ T7545] bond0 (unregistering): (slave bond3): Releasing backup interface
[   82.043958][ T7545] bond0 (unregistering): Released all slaves
[   82.248507][ T7560] veth0: entered promiscuous mode
[   82.250509][ T7560] veth0: left promiscuous mode
[   82.437332][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'.
[   82.694300][ T7598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.731'.
[   82.982383][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'.
[   82.992742][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.744'.
[   83.122230][ T7637] netlink: 'syz.0.750': attribute type 6 has an invalid length.
[   83.286855][ T7648] tipc: Started in network mode
[   83.288911][ T7648] tipc: Node identity 8a9957e9f5ee, cluster identity 4711
[   83.291890][ T7648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.297174][ T7648] syzkaller0: entered promiscuous mode
[   83.299549][ T7648] syzkaller0: entered allmulticast mode
[   83.433775][ T7660] tipc: Resetting bearer <eth:syzkaller0>
[   84.136717][ T7647] tipc: Resetting bearer <eth:syzkaller0>
[   84.155294][ T7647] tipc: Disabling bearer <eth:syzkaller0>
[   84.309787][ T7670] netlink: 'syz.1.763': attribute type 29 has an invalid length.
[   84.319488][ T7670] netlink: 'syz.1.763': attribute type 29 has an invalid length.
[   85.425219][ T7710] netlink: 'syz.0.781': attribute type 1 has an invalid length.
[   85.520008][ T7715] netlink: 'syz.0.783': attribute type 2 has an invalid length.
[   85.699346][ T7727] netlink: 'syz.0.789': attribute type 1 has an invalid length.
[   85.787926][ T7729] bond0: (slave geneve2): making interface the new active one
[   85.791031][ T7729] bond0: (slave geneve2): Enslaving as an active interface with an up link
[   85.808646][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   85.817043][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   85.820166][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   85.824559][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   85.825909][ T7727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.789'.
[   85.833724][ T7727] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.046110][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'.
[   86.186198][ T7754] netlink: 'syz.1.801': attribute type 1 has an invalid length.
[   86.192253][ T7754] netlink: 172 bytes leftover after parsing attributes in process `syz.1.801'.
[   86.261697][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'.
[   86.427467][ T7762] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.448754][ T7762] bond0: (slave bond4): Enslaving as an active interface with a down link
[   86.827101][ T7797] tipc: Failed to remove unknown binding: 66,1,1/0:1923945841/1923945843
[   86.836416][ T7797] tipc: Failed to remove unknown binding: 66,1,1/0:1923945841/1923945843
[   86.843614][ T7797] tipc: Failed to remove unknown binding: 66,1,1/0:1923945841/1923945843
[   86.909747][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'.
[   86.929500][ T7805] netlink: 'syz.1.819': attribute type 2 has an invalid length.
[   87.056229][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'.
[   87.198265][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'.
[   87.532088][ T7862] bond0: entered promiscuous mode
[   87.538269][ T7862] batadv0: entered promiscuous mode
[   87.543653][ T7862] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   87.549074][ T7862] hsr1: entered allmulticast mode
[   87.551414][ T7862] bond0: entered allmulticast mode
[   87.553825][ T7862] batadv0: entered allmulticast mode
[   87.559370][ T7862] 8021q: adding VLAN 0 to HW filter on device hsr1
[   87.570409][ T7862] bond0: left promiscuous mode
[   87.573742][ T7862] batadv0: left promiscuous mode
[   87.694315][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.848'.
[   87.739355][ T7872] netlink: 'syz.2.849': attribute type 10 has an invalid length.
[   87.741881][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.849'.
[   87.753610][ T7874] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.850'.
[   87.755933][ T7872] team0: Port device geneve0 added
[   87.824409][ T7878] netlink: 'syz.2.852': attribute type 1 has an invalid length.
[   87.829494][ T7878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.007004][ T7890] syzkaller0: MTU too low for tipc bearer
[   88.009666][ T7890] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   88.043982][ T7886] netlink: 'syz.2.856': attribute type 303 has an invalid length.
[   88.053113][ T7886] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   88.057774][ T7886] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.149038][ T7894] ipt_REJECT: TCP_RESET invalid for non-tcp
[   88.555988][ T7925] IPv6: sit1: Disabled Multicast RS
[   89.004505][ T5850] Bluetooth: hci2: command tx timeout
[   89.027638][ T7965] openvswitch: netlink: Missing valid actions attribute.
[   89.033602][ T7965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.390716][ T7999] batadv_slave_1: entered promiscuous mode
[   89.516984][ T8009] netlink: 'syz.2.913': attribute type 21 has an invalid length.
[   89.520350][ T8009] netlink: 'syz.2.913': attribute type 22 has an invalid length.
[   89.523765][ T8009] netlink: 'syz.2.913': attribute type 23 has an invalid length.
[   89.728831][ T8017] vlan3: entered promiscuous mode
[   89.730778][ T8017] bridge0: entered promiscuous mode
[   90.225974][ T8042] bridge0: entered promiscuous mode
[   90.282075][ T8047] vlan2: entered allmulticast mode
[   90.286210][ T8047] gretap0: entered allmulticast mode
[   90.479986][ T8061] openvswitch: netlink: Multiple metadata blocks provided
[   90.783679][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.788775][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.792373][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.798126][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.865013][ T8084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.868418][ T8084] syzkaller0: entered promiscuous mode
[   90.870862][ T8084] syzkaller0: entered allmulticast mode
[   90.888529][ T8084] tipc: Resetting bearer <eth:syzkaller0>
[   90.892915][ T8083] tipc: Resetting bearer <eth:syzkaller0>
[   90.903037][ T8083] tipc: Disabling bearer <eth:syzkaller0>
[   90.935869][ T8088] netlink: 'syz.2.951': attribute type 6 has an invalid length.
[   90.939245][ T8088] __nla_validate_parse: 11 callbacks suppressed
[   90.939256][ T8088] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.951'.
[   90.985516][ T8090] xt_l2tp: unknown flags: 10
[   91.054789][ T8095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.648502][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'.
[   91.660518][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'.
[   91.838425][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.966'.
[   91.845490][ T8118] vlan0: entered promiscuous mode
[   91.981412][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'.
[   92.058254][ T8137] netlink: 'syz.2.974': attribute type 1 has an invalid length.
[   92.060914][ T8137] netlink: 224 bytes leftover after parsing attributes in process `syz.2.974'.
[   92.177897][ T8154] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   92.724892][ T8177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.990'.
[   93.411740][ T8210] netlink: 'syz.0.1003': attribute type 12 has an invalid length.
[   93.414799][ T8210] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1003'.
[   93.748303][ T8249] Bluetooth: MGMT ver 1.23
[   93.990575][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'.
[   94.349897][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'.
[   95.072023][ T8362] tipc: MTU too low for tipc bearer
[   95.163848][ T8369] x_tables: duplicate underflow at hook 3
[   95.500900][ T8399] af_packet: tpacket_rcv: packet too big, clamped from 4518 to 3710. macoff=82
[   95.804688][ T5850] Bluetooth: hci0: command tx timeout
[   96.109116][ T8439] No such timeout policy "syz1"
[   96.176442][ T8441] netlink: 'syz.0.1108': attribute type 10 has an invalid length.
[   96.179068][ T8441] __nla_validate_parse: 3 callbacks suppressed
[   96.179075][ T8441] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1108'.
[   96.192991][ T8441] batadv0: entered promiscuous mode
[   96.196419][ T8441] batadv0: entered allmulticast mode
[   96.198652][ T8441] bridge0: port 3(batadv0) entered blocking state
[   96.201074][ T8441] bridge0: port 3(batadv0) entered disabled state
[   96.205827][ T8441] bridge0: port 3(batadv0) entered blocking state
[   96.208042][ T8441] bridge0: port 3(batadv0) entered listening state
[   96.276726][ T8449] netlink: 'syz.0.1112': attribute type 11 has an invalid length.
[   96.322559][ T8453] tipc: Enabled bearer <eth:team0>, priority 0
[   96.468128][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   96.472239][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   96.578026][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1123'.
[   96.608742][ T8477] netlink: 'syz.1.1122': attribute type 58 has an invalid length.
[   96.732733][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'.
[   96.747014][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[   96.808065][ T8495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1129'.
[   97.052717][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'.
[   97.091794][ T8527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1143'.
[   97.220739][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'.
[   97.328891][ T8558] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1157'.
[   97.377717][ T8564] netlink: 3696 bytes leftover after parsing attributes in process `syz.0.1160'.
[   97.736821][ T8603] macvlan0: entered allmulticast mode
[   97.738662][ T8603] veth1_vlan: entered allmulticast mode
[   97.768636][ T8605] trusted_key: syz.1.1181 sent an empty control message without MSG_MORE.
[   97.948335][ T8631] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.952619][ T8631] syzkaller0: entered promiscuous mode
[   97.956038][ T8631] syzkaller0: entered allmulticast mode
[   97.961043][ T8634] netlink: 'syz.0.1192': attribute type 9 has an invalid length.
[   97.963794][ T8634] netlink: 'syz.0.1192': attribute type 9 has an invalid length.
[   97.989256][ T8631] tipc: Resetting bearer <eth:syzkaller0>
[   97.994617][ T8630] tipc: Resetting bearer <eth:syzkaller0>
[   98.002015][ T8630] tipc: Disabling bearer <eth:syzkaller0>
[   98.073043][ T8641] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[   98.247507][ T8655] netlink: 'syz.1.1200': attribute type 303 has an invalid length.
[   98.262156][ T8646] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.265320][ T8646] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.489824][ T8666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.493403][ T8666] syzkaller0: entered promiscuous mode
[   98.496350][ T8666] syzkaller0: entered allmulticast mode
[   98.514349][ T8666] tipc: Resetting bearer <eth:syzkaller0>
[   98.517819][ T8665] tipc: Resetting bearer <eth:syzkaller0>
[   98.549121][ T8665] tipc: Disabling bearer <eth:syzkaller0>
[   98.877194][ T8688] netlink: 'syz.0.1214': attribute type 1 has an invalid length.
[   98.879782][ T8688] netlink: 'syz.0.1214': attribute type 2 has an invalid length.
[   98.882243][ T8688] netlink: 'syz.0.1214': attribute type 1 has an invalid length.
[   99.229851][ T8718] tc_dump_action: action bad kind
[   99.512993][ T8745] xt_connbytes: Forcing CT accounting to be enabled
[   99.515236][ T8745] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   99.519001][ T8745] xt_bpf: check failed: parse error
[   99.610937][ T8751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.776755][ T8764] IPv6: NLM_F_REPLACE set, but no existing node found!
[   99.789488][ T8763] syzkaller1: entered promiscuous mode
[   99.792523][ T8763] syzkaller1: entered allmulticast mode
[  100.613701][ T8809] netlink: 'syz.1.1272': attribute type 3 has an invalid length.
[  100.654449][ T8813] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  101.176527][ T8845] tipc: Enabled bearer <udp:syz0>, priority 10
[  101.647856][ T8737] Set syz1 is full, maxelem 65536 reached
[  101.720015][ T8876] xt_TCPMSS: Only works on TCP SYN packets
[  101.810087][ T8882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  101.841578][ T8884] syzkaller1: entered promiscuous mode
[  101.848801][ T8884] syzkaller1: entered allmulticast mode
[  101.890993][ T8887] syzkaller1: entered promiscuous mode
[  101.892825][ T8887] syzkaller1: entered allmulticast mode
[  101.992403][ T8891] dummy0: entered promiscuous mode
[  101.996774][ T8891] dummy0: entered allmulticast mode
[  102.452157][ T8922] __nla_validate_parse: 18 callbacks suppressed
[  102.452173][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'.
[  102.462542][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'.
[  102.739776][ T8937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1333'.
[  102.876759][    T9] IPVS: starting estimator thread 0...
[  102.976045][ T8944] IPVS: using max 77 ests per chain, 184800 per kthread
[  103.282898][ T8952] syzkaller1: entered promiscuous mode
[  103.286472][ T8952] syzkaller1: entered allmulticast mode
[  103.676954][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'.
[  103.737250][ T8972] hsr_slave_1 (unregistering): left promiscuous mode
[  103.888107][ T8980] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  103.893704][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1351'.
[  103.900931][ T8980] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1353'.
[  104.022980][   T33] audit: type=1800 audit(1753451318.186:2): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1351" name="memory.events" dev="tmpfs" ino=1903 res=0 errno=0
[  104.081780][ T8986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1355'.
[  104.336349][ T9008] netlink: 'syz.1.1366': attribute type 10 has an invalid length.
[  104.378647][ T9008] netlink: 'syz.1.1366': attribute type 10 has an invalid length.
[  104.396135][ T9008] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  104.649561][ T9029] syzkaller1: entered promiscuous mode
[  104.651879][ T9029] syzkaller1: entered allmulticast mode
[  104.786777][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'.
[  104.914747][ T8916] Set syz1 is full, maxelem 65536 reached
[  104.938435][ T9043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'.
[  105.031718][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'.
[  105.081208][ T9054] bridge0: port 3(batadv0) entered disabled state
[  105.087622][ T9054] bridge_slave_1: left allmulticast mode
[  105.089760][ T9054] bridge_slave_1: left promiscuous mode
[  105.091752][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.101499][ T9054] bridge_slave_0: left allmulticast mode
[  105.103313][ T9054] bridge_slave_0: left promiscuous mode
[  105.112452][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.310780][ T9067] xt_hashlimit: max too large, truncated to 1048576
[  105.554510][ T9085] netlink: 'syz.0.1400': attribute type 1 has an invalid length.
[  105.963416][ T9108] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  105.969319][ T9108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  105.970284][ T9110] delete_channel: no stack
[  106.097339][ T9121] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  106.143823][ T9126] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  106.582776][ T9151] netlink: 'syz.0.1430': attribute type 4 has an invalid length.
[  106.994866][ T9179] netlink: 'syz.1.1441': attribute type 1 has an invalid length.
[  107.035712][ T9179] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.096805][ T9179] bond2: (slave veth3): Enslaving as an active interface with a down link
[  107.125906][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv1
[  107.129339][ T9179] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  107.188663][ T9188] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  107.192083][ T9188] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  107.373437][ T9195] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  107.399714][ T9195] Bluetooth: MGMT ver 1.23
[  107.723084][ T9217] syzkaller0: entered promiscuous mode
[  107.725137][ T9217] syzkaller0: entered allmulticast mode
[  107.730713][ T9217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.733943][ T9216] tipc: Resetting bearer <eth:syzkaller0>
[  107.746558][ T9216] tipc: Disabling bearer <eth:syzkaller0>
[  108.184311][ T9237] __nla_validate_parse: 7 callbacks suppressed
[  108.184328][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'.
[  108.243091][ T9239] netlink: 'syz.2.1469': attribute type 1 has an invalid length.
[  108.361729][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'.
[  108.533403][ T9255] IPv6: sit1: Disabled Multicast RS
[  108.752807][ T9269] xfrm0: entered promiscuous mode
[  108.755123][ T9269] xfrm0: entered allmulticast mode
[  108.844644][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  109.483357][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  109.486686][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1500'.
[  109.490483][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1500'.
[  109.572609][ T9321] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1505'.
[  109.857098][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'.
[  109.886101][ T9358] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1522'.
[  109.933035][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'.
[  109.964779][ T9364] 8021q: adding VLAN 0 to HW filter on device bond3
[  109.983239][ T9364] macvlan2: entered promiscuous mode
[  109.986277][ T9364] macvlan2: entered allmulticast mode
[  109.990705][ T9364] bond3: entered promiscuous mode
[  109.993577][ T9364] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  109.998535][ T9364] bond3: left promiscuous mode
[  110.278772][ T9381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1530'.
[  110.551043][ T9403] IPVS: persistence engine module ip_vs_pe_ not found
[  110.866577][ T9439] IPVS: Error joining to the multicast group
[  110.931891][ T9445] bond7: entered promiscuous mode
[  110.933686][ T9445] bond7: entered allmulticast mode
[  110.937080][ T5850] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  110.939845][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  110.942138][ T9445] 8021q: adding VLAN 0 to HW filter on device bond7
[  111.119020][ T9457] set match dimension is over the limit!
[  111.292186][ T9481] netlink: 'syz.0.1578': attribute type 4 has an invalid length.
[  111.330247][ T9487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.379628][ T9493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.747819][ T9528] netlink: zone id is out of range
[  111.750035][ T9528] netlink: zone id is out of range
[  111.752761][ T9528] netlink: del zone limit has 4 unknown bytes
[  111.829587][ T9541] bridge_slave_0: invalid flags given to default FDB implementation
[  111.862865][ T9546] openvswitch: netlink: EtherType 0 is less than min 600
[  111.922531][ T9553] netlink: 'syz.0.1611': attribute type 1 has an invalid length.
[  111.976239][ T9562] netlink: 'syz.1.1616': attribute type 1 has an invalid length.
[  112.361949][ T9593] openvswitch: netlink: IP tunnel dst address not specified
[  112.982100][ T9617] ieee802154 phy0 wpan0: encryption failed: -22
[  113.352047][ T9656] syzkaller1: entered promiscuous mode
[  113.353907][ T9656] syzkaller1: entered allmulticast mode
[  113.568416][ T9680] __nla_validate_parse: 12 callbacks suppressed
[  113.568457][ T9680] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1669'.
[  113.605898][ T9684] netlink: 'syz.2.1671': attribute type 1 has an invalid length.
[  113.608465][ T9684] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1671'.
[  113.611592][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'.
[  113.630619][ T9685] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.729074][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'.
[  113.780795][ T9693] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  114.419708][ T9713] ieee802154 phy0 wpan0: encryption failed: -22
[  114.529111][ T9718] syzkaller1: entered promiscuous mode
[  114.531451][ T9718] syzkaller1: entered allmulticast mode
[  115.024806][ T9756] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1701'.
[  115.028637][ T9756] nbd: illegal input index 65508
[  115.143301][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1708'.
[  115.348359][ T9791] netlink: 'syz.1.1718': attribute type 4 has an invalid length.
[  115.363210][ T9791] netlink: 'syz.1.1718': attribute type 4 has an invalid length.
[  115.663269][ T9823] syzkaller1: entered promiscuous mode
[  115.666898][ T9823] syzkaller1: entered allmulticast mode
[  115.721834][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'.
[  115.727229][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'.
[  115.829561][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'.
[  116.132522][ T9876] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1759'.
[  116.689656][ T5871] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  118.002752][ T9989] bridge: RTM_NEWNEIGH with invalid ether address
[  118.081491][ T9991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  118.927128][T10039] xt_cluster: node mask cannot exceed total number of nodes
[  119.149859][T10065] netlink: 'syz.1.1838': attribute type 39 has an invalid length.
[  119.297746][T10068] __nla_validate_parse: 1 callbacks suppressed
[  119.297759][T10068] netlink: 566 bytes leftover after parsing attributes in process `syz.1.1839'.
[  119.354961][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'.
[  119.358436][T10072] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  119.361584][T10072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.416267][T10076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1843'.
[  119.996618][T10090] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  120.022727][T10094] dvmrp8: entered allmulticast mode
[  120.029664][T10093] dvmrp8: left allmulticast mode
[  120.410323][T10116] netlink: 'syz.0.1857': attribute type 16 has an invalid length.
[  120.413755][T10116] netlink: 'syz.0.1857': attribute type 17 has an invalid length.
[  120.429365][T10116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.648536][T10144] netlink: 'syz.2.1866': attribute type 1 has an invalid length.
[  121.078848][T10158] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.082295][T10158] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.095204][T10158] bridge0: left promiscuous mode
[  121.242928][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.255714][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.316085][T10158] vlan0: left promiscuous mode
[  121.435612][ T5871] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.438334][ T5871] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.450896][ T5871] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.456485][ T5871] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.465133][ T5871] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.467910][ T5871] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.471862][ T5871] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  121.482634][ T5871] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.736208][T10225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.739146][T10225] syzkaller0: entered promiscuous mode
[  121.741046][T10225] syzkaller0: entered allmulticast mode
[  121.758872][T10225] tipc: Resetting bearer <eth:syzkaller0>
[  121.763616][T10224] tipc: Resetting bearer <eth:syzkaller0>
[  121.774707][T10224] tipc: Disabling bearer <eth:syzkaller0>
[  122.053711][T10259] vlan4: entered promiscuous mode
[  122.057903][T10259] bond0: entered promiscuous mode
[  122.060426][T10259] geneve2: entered promiscuous mode
[  122.229227][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.232414][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.235823][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.238912][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.432148][T10287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.439621][T10287] syzkaller0: entered promiscuous mode
[  122.442040][T10287] syzkaller0: entered allmulticast mode
[  122.460165][T10287] tipc: Resetting bearer <eth:syzkaller0>
[  122.465541][T10286] tipc: Resetting bearer <eth:syzkaller0>
[  122.474437][T10286] tipc: Disabling bearer <eth:syzkaller0>
[  122.889681][T10305] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  123.643803][T10345] xt_l2tp: invalid flags combination: 8
[  123.837190][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1967'.
[  123.889105][T10353] dummy0: left promiscuous mode
[  123.890705][T10353] dummy0: left allmulticast mode
[  123.892673][T10353] batadv0: left promiscuous mode
[  123.894498][T10353] batadv0: left allmulticast mode
[  123.907951][T10353] team0: Port device team_slave_0 removed
[  123.917569][T10353] team0: Port device team_slave_1 removed
[  123.919834][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.923639][T10353] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.930858][T10353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.933201][T10353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.937516][T10353] xfrm0: left promiscuous mode
[  123.939435][T10353] xfrm0: left allmulticast mode
[  123.943139][T10353] macvlan0: left allmulticast mode
[  123.945662][T10353] veth1_vlan: left allmulticast mode
[  123.950864][T10353] bond2: left promiscuous mode
[  123.952765][T10353] wireguard0: left promiscuous mode
[  123.956723][T10353] bond2: (slave wireguard0): Releasing backup interface
[  123.959358][T10353] bond2: (slave wireguard1): making interface the new active one
[  123.967913][T10353] bond2: (slave wireguard1): Releasing backup interface
[  123.978821][T10353] bond0: (slave geneve2): Releasing active interface
[  123.981563][T10353] bond0: (slave geneve2): the permanent HWaddr of slave - fa:fc:e4:73:f4:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  123.991222][T10353] geneve2: left promiscuous mode
[  124.005468][T10353] bond0: (slave bond4): Releasing active interface
[  124.012648][T10353] vlan2: left allmulticast mode
[  124.015859][T10353] gretap0: left allmulticast mode
[  124.018528][T10353] bond7: left promiscuous mode
[  124.020483][T10353] bond7: left allmulticast mode
[  124.025435][T10353] vlan4: left promiscuous mode
[  124.027445][T10353] bond0: left promiscuous mode
[  124.037083][   T53] tipc: Resetting bearer <eth:team0>
[  124.051458][ T5871] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  124.056232][ T5871] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  124.059913][ T5871] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  124.063600][ T5871] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  124.083330][T10353] syz.0.1965 (10353) used greatest stack depth: 19752 bytes left
[  124.107669][T10373] xt_hashlimit: max too large, truncated to 1048576
[  124.109965][T10373] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  124.154039][T10375] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.163438][T10375] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.442146][T10404] netlink: 'syz.2.1986': attribute type 4 has an invalid length.
[  124.446022][T10404] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1986'.
[  125.321476][T10437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2000'.
[  125.377699][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'.
[  125.927872][T10502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.007817][T10512] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  126.131206][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2044'.
[  126.140204][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'.
[  126.842418][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2077'.
[  126.850810][T10597] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  126.870988][T10595] netlink: 23932 bytes leftover after parsing attributes in process `syz.1.2077'.
[  127.130045][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'.
[  127.133766][T10623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2089'.
[  127.141187][T10623] netlink: 'syz.0.2089': attribute type 6 has an invalid length.
[  127.257300][T10625] ip6gre1: entered allmulticast mode
[  127.429814][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'.
[  127.587514][T10660] netlink: 'syz.2.2108': attribute type 4 has an invalid length.
[  128.111411][T10729] syzkaller0: entered promiscuous mode
[  128.113767][T10729] syzkaller0: entered allmulticast mode
[  128.133061][T10729] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  128.331890][T10743] tap0: tun_chr_ioctl cmd 1074025676
[  128.336699][T10743] tap0: owner set to 0
[  128.606784][T10759] syzkaller0: entered promiscuous mode
[  128.609008][T10759] syzkaller0: entered allmulticast mode
[  129.920401][T10809] delete_channel: no stack
[  129.942832][T10812] __nla_validate_parse: 4 callbacks suppressed
[  129.942843][T10812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2181'.
[  129.960994][T10817] netlink: 'syz.2.2183': attribute type 1 has an invalid length.
[  129.963644][T10817] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2183'.
[  129.967965][T10817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'.
[  129.971279][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'.
[  130.063355][T10830] netlink: 'syz.0.2189': attribute type 1 has an invalid length.
[  130.293768][T10855] xt_CT: No such helper "syz1"
[  130.817745][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2227'.
[  130.982554][ T5870] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  131.102748][T10939] only policy match revision 0 supported
[  131.102762][T10939] unable to load match
[  131.842857][T10952] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.861198][T10952] syzkaller0: entered promiscuous mode
[  131.866211][T10952] syzkaller0: entered allmulticast mode
[  131.898650][T10952] tipc: Resetting bearer <eth:syzkaller0>
[  131.903762][T10951] tipc: Resetting bearer <eth:syzkaller0>
[  131.928053][T10951] tipc: Disabling bearer <eth:syzkaller0>
[  132.257504][T10993] ieee802154 phy0 wpan0: encryption failed: -22
[  132.260244][T10993] ieee802154 phy0 wpan0: encryption failed: -22
[  132.396572][T11006] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2270'.
[  132.444440][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  132.447495][ T1361] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.450463][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  132.452720][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.554486][ T5701] syzkaller0: tun_net_xmit 76
[  132.556761][ T5701] syzkaller0: tun_net_xmit 48
[  132.563608][T11020] syzkaller0: create flow: hash 1536409312 index 1
[  132.577269][ T2292] syzkaller0: tun_net_xmit 76
[  132.616275][T11020] syzkaller0: delete flow: hash 1536409312 index 1
[  133.789767][T11046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2290'.
[  133.820889][T11048] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2291'.
[  134.078168][T11072] netlink: 'syz.0.2302': attribute type 2 has an invalid length.
[  134.089277][T11072] netlink: 'syz.0.2302': attribute type 2 has an invalid length.
[  134.104422][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'.
[  134.717889][T11117] bond0: (slave dummy0): Releasing backup interface
[  134.916530][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'.
[  135.028161][T11143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  135.093345][T11150] bond8: entered promiscuous mode
[  135.096815][T11150] 8021q: adding VLAN 0 to HW filter on device bond8
[  135.179370][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2341'.
[  135.180791][T11161] netlink: 'syz.1.2343': attribute type 1 has an invalid length.
[  135.185774][T11161] netlink: 'syz.1.2343': attribute type 1 has an invalid length.
[  135.478953][T11186] syzkaller1: entered promiscuous mode
[  135.480785][T11186] syzkaller1: entered allmulticast mode
[  135.588598][T11193] xt_hashlimit: max too large, truncated to 1048576
[  135.598320][T11193] No such timeout policy "syz1"
[  135.819034][T11207] netlink: 'syz.1.2365': attribute type 5 has an invalid length.
[  135.843991][T11211] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  135.847877][T11211] macsec1: entered promiscuous mode
[  135.849818][T11211] macsec1: entered allmulticast mode
[  135.851701][T11211] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  136.216627][T11242] syzkaller1: entered promiscuous mode
[  136.218486][T11242] syzkaller1: entered allmulticast mode
[  136.396808][T11253] gretap0: entered promiscuous mode
[  136.398722][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'.
[  136.427227][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'.
[  136.445819][T11260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.448314][T11260] IPv6: NLM_F_CREATE should be set when creating new route
[  136.947093][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2402'.
[  137.081689][ T5701] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  137.381232][T11328] ieee802154 phy0 wpan0: encryption failed: -22
[  137.417970][T11331] gretap0: left promiscuous mode
[  137.430685][T11331] ip6gre1: left allmulticast mode
[  137.910269][T11347] netlink: 'syz.2.2422': attribute type 3 has an invalid length.
[  137.932209][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2424'.
[  137.935824][T11349] netlink: 'syz.2.2424': attribute type 1 has an invalid length.
[  137.972580][T11353] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2425'.
[  137.997013][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2424'.
[  138.242779][T11379] netlink: 'syz.1.2439': attribute type 1 has an invalid length.
[  138.250904][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'.
[  138.383979][T11389] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2443'.
[  138.496765][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'.
[  138.897992][T11432] openvswitch: netlink: Duplicate or invalid key (type 0).
[  138.900430][T11432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.449837][T11485] pim6reg1: entered promiscuous mode
[  139.452255][T11485] pim6reg1: entered allmulticast mode
[  139.671394][T11503] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  140.347334][T11553] : entered promiscuous mode
[  140.483786][T11561] openvswitch: netlink: IPv6 tunnel dst address is zero
[  140.511711][T11563] __nla_validate_parse: 4 callbacks suppressed
[  140.511722][T11563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2509'.
[  141.307885][T11611] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.2532'.
[  141.550896][T11625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2539'.
[  142.102526][T11642] set match dimension is over the limit!
[  142.694140][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  142.846541][T11714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2581'.
[  142.882099][T11720] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  142.886162][T11720] netlink: 'syz.0.2584': attribute type 3 has an invalid length.
[  142.889051][T11720] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2584'.
[  143.133982][   T55] Bluetooth: hci2: link tx timeout
[  143.138716][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.142420][ T5850] Bluetooth: hci2: link tx timeout
[  143.146219][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.149860][ T5850] Bluetooth: hci2: link tx timeout
[  143.151708][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.160530][ T5850] Bluetooth: hci2: link tx timeout
[  143.162462][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.166449][ T5850] Bluetooth: hci2: link tx timeout
[  143.168336][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.201698][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2597'.
[  143.206594][T11750] team0 (uninitialized): Failed to send options change via netlink (err -105)
[  143.227180][T11750] team0: entered promiscuous mode
[  143.229398][T11750] team0: entered allmulticast mode
[  143.376934][T11759] D: renamed from syzkaller0
[  143.523756][T11776] netlink: 'syz.1.2608': attribute type 3 has an invalid length.
[  144.463439][T11788] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  144.467715][T11788] bridge_slave_0: left allmulticast mode
[  144.475858][T11788] bridge_slave_0: left promiscuous mode
[  144.478039][T11788] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.482692][T11788] bridge_slave_1: left allmulticast mode
[  144.491338][T11788] bridge_slave_1: left promiscuous mode
[  144.493517][T11788] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.509440][T11788] bond0: (slave bond_slave_0): Releasing backup interface
[  144.517028][T11788] bond0: (slave bond_slave_1): Releasing backup interface
[  144.520886][T11788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.532403][T11788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.547984][T11788] bond0: (slave wlan1): Releasing backup interface
[  144.552287][T11788] bond2: (slave veth3): Releasing active interface
[  144.572013][T11788] netlink: 'syz.1.2612': attribute type 10 has an invalid length.
[  144.583831][T11788] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  144.588334][T11788] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  144.593099][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2619'.
[  144.598900][T11788] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.602348][T11788] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.918179][T11844] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2640'.
[  145.165695][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  145.218657][T11858] xt_policy: neither incoming nor outgoing policy selected
[  145.316050][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2647'.
[  145.558981][T11883] netlink: 'syz.0.2658': attribute type 4 has an invalid length.
[  146.407283][T11906] netlink: 'syz.1.2668': attribute type 1 has an invalid length.
[  146.409783][T11906] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2668'.
[  146.490167][T11912] veth0_to_bridge: entered promiscuous mode
[  146.510273][T11909] veth0_to_bridge: left promiscuous mode
[  146.523775][T11914] ieee802154 phy0 wpan0: encryption failed: -90
[  146.579460][T11919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.582747][T11921] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  146.591305][T11919] syzkaller0: entered promiscuous mode
[  146.593512][T11919] syzkaller0: entered allmulticast mode
[  146.621511][T11922] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  146.634322][T11919] tipc: Resetting bearer <eth:syzkaller0>
[  146.640556][T11922] tipc: Resetting bearer <eth:team0>
[  146.689601][T11918] tipc: Resetting bearer <eth:syzkaller0>
[  146.704571][T11918] tipc: Disabling bearer <eth:syzkaller0>
[  146.715447][T11922] netlink: 'syz.0.2675': attribute type 10 has an invalid length.
[  146.719963][T11922] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  146.727023][T11922] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  146.730268][T11922] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  146.856066][T11929] team0: Port device geneve0 removed
[  146.871043][T11929] team0: Mode changed to "activebackup"
[  146.879767][T11929] vlan0: entered promiscuous mode
[  146.893262][T11929] team0: Port device vlan0 added
[  146.898958][T11929] tipc: Enabled bearer <eth:team0>, priority 0
[  146.913363][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2680'.
[  146.993637][T11939] netlink: 'syz.1.2684': attribute type 1 has an invalid length.
[  146.997553][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'.
[  146.999298][T11939] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2684'.
[  147.563464][T11954] netlink: 'syz.0.2687': attribute type 15 has an invalid length.
[  147.991271][T11967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  148.015528][ T5905] tipc: Node number set to 2138527721
[  148.403004][T11998] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  148.430821][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'.
[  148.440682][T11998] syz_tun: entered allmulticast mode
[  148.449871][T11998] dvmrp8: entered allmulticast mode
[  148.457327][T11997] syz_tun: left allmulticast mode
[  148.714720][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'.
[  148.773334][T12027] netlink: 'syz.0.2719': attribute type 10 has an invalid length.
[  148.778467][T12027] tipc: Resetting bearer <eth:team0>
[  148.792934][T12027] team0: Cannot enslave team device to itself
[  148.798600][T12024] veth0: entered promiscuous mode
[  148.802056][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'.
[  148.860568][T12024] veth0 (unregistering): left promiscuous mode
[  149.192318][T12057] netlink: 'syz.2.2728': attribute type 8 has an invalid length.
[  150.102873][T12105] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2746'.
[  150.115079][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.118360][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.133336][T12105] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.137569][T12105] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.891248][T12121] tipc: New replicast peer: 255.255.255.255
[  151.894481][T12121] tipc: Enabled bearer <udp:syz2>, priority 10
[  151.897412][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2753'.
[  152.036032][T12141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2760'.
[  152.039294][T12141] netlink: 'syz.1.2760': attribute type 1 has an invalid length.
[  152.124903][T12147] xt_CT: No such helper "pptp"
[  152.162850][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'.
[  152.168254][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2765'.
[  152.428264][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'.
[  152.583071][T12195] netlink: 'syz.2.2784': attribute type 3 has an invalid length.
[  152.742364][T12211] bond0: (slave wlan1): Releasing backup interface
[  152.751418][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2794'.
[  152.776620][T12211] team0: Mode changed to "activebackup"
[  152.976865][T12231] netlink: 'syz.1.2803': attribute type 7 has an invalid length.
[  152.984311][T12231] netlink: 'syz.1.2803': attribute type 8 has an invalid length.
[  152.995823][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'.
[  153.004717][   T24] tipc: Node number set to 1222211924
[  153.047508][T12239] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2806'.
[  153.053669][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'.
[  153.330173][T12271] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.337359][T12271] syzkaller0: entered promiscuous mode
[  153.339109][T12271] syzkaller0: entered allmulticast mode
[  153.361286][T12274] sctp: [Deprecated]: syz.0.2823 (pid 12274) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.361286][T12274] Use struct sctp_sack_info instead
[  153.369165][T12271] tipc: Resetting bearer <eth:syzkaller0>
[  153.375368][T12270] tipc: Resetting bearer <eth:syzkaller0>
[  153.387836][T12270] tipc: Disabling bearer <eth:syzkaller0>
[  153.429358][T12281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2826'.
[  153.655970][T12291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.768012][T12305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  153.989082][T12321] veth1_macvtap: default FDB implementation only supports local addresses
[  154.490700][T12339] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  154.826935][T12365] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  154.830255][T12365] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  155.692248][T12374] smc: net device bond0 applied user defined pnetid SYZ2
[  155.700050][T12374] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2
[  155.833361][T12387] openvswitch: netlink: IP tunnel TTL not specified.
[  156.035944][T12410] syzkaller1: entered promiscuous mode
[  156.037855][T12410] syzkaller1: entered allmulticast mode
[  156.592016][T12468] veth1_macvtap: left promiscuous mode
[  156.945936][T12500] netlink: 'syz.0.2920': attribute type 2 has an invalid length.
[  157.221574][T12530] __nla_validate_parse: 9 callbacks suppressed
[  157.221592][T12530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2935'.
[  157.398924][T12541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.458965][T12541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.587655][T12541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.479445][T12563] xt_addrtype: ipv6 does not support BROADCAST matching
[  158.513020][T12565] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2949'.
[  158.549574][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'.
[  158.751504][T12579] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  158.763565][T12579] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  158.768696][T12579] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  158.856843][T12582] tipc: New replicast peer: 255.255.255.255
[  158.859967][T12582] tipc: Enabled bearer <udp:syz2>, priority 10
[  159.690016][T12588] pim6reg1: entered allmulticast mode
[  159.721655][T12596] netlink: 'syz.1.2964': attribute type 1 has an invalid length.
[  159.734653][T12596] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2964'.
[  160.131501][T12638] syzkaller1: entered promiscuous mode
[  160.133846][T12638] syzkaller1: entered allmulticast mode
[  161.097652][T12697] bridge0: port 1(ipvlan2) entered blocking state
[  161.100579][T12697] bridge0: port 1(ipvlan2) entered disabled state
[  161.107410][T12697] ipvlan2: entered allmulticast mode
[  161.109557][T12697] bridge0: entered allmulticast mode
[  161.113583][T12697] ipvlan2: left allmulticast mode
[  161.117496][T12697] bridge0: left allmulticast mode
[  161.503795][ T5871] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  161.533201][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'.
[  161.544970][T12733] gtp0: entered promiscuous mode
[  161.547101][T12733] gtp0: entered allmulticast mode
[  161.694900][T12745] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  161.700929][T12735] netlink: del zone limit has 4 unknown bytes
[  161.711222][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'.
[  161.716474][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'.
[  161.803992][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3033'.
[  161.812765][T12756] nbd: couldn't find a device at index 65546
[  161.933871][T12769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3039'.
[  161.940453][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3039'.
[  162.468712][T12804] veth0_to_team: entered promiscuous mode
[  162.470974][T12804] veth0_to_team: entered allmulticast mode
[  162.579365][T12810] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  163.433987][T12884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3093'.
[  164.013704][T12903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.024604][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3107'.
[  164.089215][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.243407][T12903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.292746][T12932] netlink: 'syz.1.3114': attribute type 15 has an invalid length.
[  164.537690][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3116'.
[  164.651641][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'.
[  164.656812][T12944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3118'.
[  165.716885][T12956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.938109][T12989] Unknown options in mask 700
[  166.031397][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3139'.
[  166.036416][T12995] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0
[  166.039982][T12995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.603730][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'.
[  166.780139][T13047] lo: entered allmulticast mode
[  167.550399][T13098] netlink: 'syz.1.3169': attribute type 7 has an invalid length.
[  167.553584][T13098] netlink: 'syz.1.3169': attribute type 3 has an invalid length.
[  167.558503][T13098] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3169'.
[  167.591279][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3162'.
[  167.603015][T13101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3162'.
[  167.603463][T13043] lo: left allmulticast mode
[  168.221773][T13138] ieee802154 phy0 wpan0: encryption failed: -22
[  168.297580][T13138] tipc: Resetting bearer <eth:team0>
[  168.354372][T13138] veth0_to_team: left promiscuous mode
[  168.366531][T13138] batadv_slave_1: left promiscuous mode
[  168.390907][T13138] vlan0: left promiscuous mode
[  168.466058][T13138] veth3: left promiscuous mode
[  168.469130][T13138] vlan3: left promiscuous mode
[  168.470779][T13138] bridge0: left promiscuous mode
[  168.515619][ T5870] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.519542][ T5870] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.544262][ T5870] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.548178][ T5870] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.552003][ T5870] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.582050][ T5870] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.586024][ T5870] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  168.589690][ T5870] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.021491][T13195] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  169.098234][T13203] __nla_validate_parse: 2 callbacks suppressed
[  169.098250][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'.
[  169.139593][T13206] ip6t_srh: unknown srh invflags 4000
[  169.217535][T13215] lo speed is unknown, defaulting to 1000
[  169.220854][T13215] lo speed is unknown, defaulting to 1000
[  169.225857][T13215] lo speed is unknown, defaulting to 1000
[  169.355689][T13215] infiniband syz0: set down
[  169.357251][ T2292] lo speed is unknown, defaulting to 1000
[  169.359388][T13215] infiniband syz0: added lo
[  169.392149][T13215] RDS/IB: syz0: added
[  169.393872][T13215] smc: adding ib device syz0 with port count 1
[  169.396890][T13215] smc:    ib device syz0 port 1 has pnetid 
[  169.400555][ T2292] lo speed is unknown, defaulting to 1000
[  169.403311][T13215] lo speed is unknown, defaulting to 1000
[  169.511516][T13215] lo speed is unknown, defaulting to 1000
[  169.629644][T13215] lo speed is unknown, defaulting to 1000
[  169.640237][T13245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3227'.
[  169.675608][T13247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3228'.
[  170.022052][T13269] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  170.034871][T13269] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  170.188992][T13290] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3246'.
[  170.190209][T13289] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3247'.
[  170.198443][T13289] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3247'.
[  170.201369][T13289] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3247'.
[  170.457196][T13320] netlink: 'syz.1.3259': attribute type 1 has an invalid length.
[  170.515731][T13320] 8021q: adding VLAN 0 to HW filter on device bond4
[  170.537749][T13329] 8021q: adding VLAN 0 to HW filter on device bond4
[  170.540168][T13329] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  170.544820][T13329] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  170.570590][T13320] bond4: (slave bridge4): Enslaving as an active interface with a down link
[  170.941411][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3267'.
[  171.386122][T13357] syzkaller1: entered promiscuous mode
[  171.388547][T13357] syzkaller1: entered allmulticast mode
[  171.787874][T13394] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3282'.
[  172.025835][T13420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'.
[  172.029565][T13420] netlink: 'syz.1.3293': attribute type 15 has an invalid length.
[  172.032922][T13420] netlink: 'syz.1.3293': attribute type 15 has an invalid length.
[  172.133802][T13428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.163722][T13428] syzkaller0: entered promiscuous mode
[  172.166261][T13428] syzkaller0: entered allmulticast mode
[  172.187328][T13428] tipc: Resetting bearer <eth:syzkaller0>
[  172.191670][T13426] tipc: Resetting bearer <eth:syzkaller0>
[  173.047731][T13426] tipc: Disabling bearer <eth:syzkaller0>
[  173.438942][T13483] xt_hashlimit: max too large, truncated to 1048576
[  173.463327][T13487] netlink: 'syz.1.3321': attribute type 2 has an invalid length.
[  173.769977][T13521] blkio.reset_stats is deprecated
[  174.226541][T13555] __nla_validate_parse: 2 callbacks suppressed
[  174.226551][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3354'.
[  174.641676][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'.
[  174.892431][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3376'.
[  174.908996][T13605] batadv0: entered promiscuous mode
[  174.913661][T13605] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  174.918412][T13605] batadv0: left promiscuous mode
[  174.930271][   T33] audit: type=1800 audit(1753451389.096:3): pid=13607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3379" name="memory.events" dev="tmpfs" ino=5881 res=0 errno=0
[  174.941021][   T33] audit: type=1804 audit(1753451389.106:4): pid=13607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3379" name="/newroot/1164/memory.events" dev="tmpfs" ino=5881 res=1 errno=0
[  174.986011][T13600] lo speed is unknown, defaulting to 1000
[  175.233086][T13625] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  175.235836][T13625] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  175.373557][T13640] xt_TCPMSS: Only works on TCP SYN packets
[  175.687748][T13660] sctp: [Deprecated]: syz.2.3403 (pid 13660) Use of struct sctp_assoc_value in delayed_ack socket option.
[  175.687748][T13660] Use struct sctp_sack_info instead
[  175.755620][T13662] syzkaller0: entered promiscuous mode
[  175.758101][T13662] syzkaller0: entered allmulticast mode
[  175.860929][T13669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3407'.
[  175.864028][T13669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3407'.
[  175.994441][T13675] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[  176.277608][T13704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'.
[  176.416515][T13716] netlink: 'syz.1.3431': attribute type 1 has an invalid length.
[  176.419758][T13716] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3431'.
[  177.622711][T13760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.064239][T13788] nbd0: detected capacity change from 0 to 127
[  178.089258][   T56] block nbd0: Receive control failed (result -32)
[  178.325472][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.849091][T13836] atomic_op ffff888125ca2198 conn xmit_atomic 0000000000000000
[  178.930980][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'.
[  179.112338][T13857] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3487'.
[  179.691375][T13869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.695180][T13869] syzkaller0: entered promiscuous mode
[  179.697579][T13869] syzkaller0: entered allmulticast mode
[  179.713526][T13869] tipc: Resetting bearer <eth:syzkaller0>
[  179.718078][T13868] tipc: Resetting bearer <eth:syzkaller0>
[  179.730483][T13868] tipc: Disabling bearer <eth:syzkaller0>
[  180.096868][T13895] netlink: 'syz.1.3503': attribute type 4 has an invalid length.
[  180.104148][T13895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3503'.
[  180.109552][T13895] : renamed from bond0
[  180.146660][T13899] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  180.481218][T13937] netlink: 'syz.0.3524': attribute type 1 has an invalid length.
[  180.483711][T13937] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3524'.
[  180.607314][ T5849] Bluetooth: hci0: command 0x0406 tx timeout
[  180.607893][ T5221] Bluetooth: hci1: command 0x0406 tx timeout
[  180.657987][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3533'.
[  180.709443][T13961] netlink: 'syz.2.3536': attribute type 9 has an invalid length.
[  180.757440][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3538'.
[  180.781359][T13966] netlink: 'syz.0.3538': attribute type 1 has an invalid length.
[  180.817843][T13969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3540'.
[  182.143757][T14007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'.
[  182.321906][T14019] netlink: 'syz.0.3564': attribute type 1 has an invalid length.
[  182.399755][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3568'.
[  182.404502][T14026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3568'.
[  182.519821][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'.
[  182.523226][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3578'.
[  182.599622][T14061] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  182.702769][T14073] netlink: 'syz.2.3585': attribute type 4 has an invalid length.
[  182.789647][T14082] netlink: 'syz.0.3593': attribute type 1 has an invalid length.
[  182.838606][T14084] netlink: 'syz.0.3594': attribute type 1 has an invalid length.
[  182.890530][T14084] 8021q: adding VLAN 0 to HW filter on device bond9
[  182.939648][T14086] 8021q: adding VLAN 0 to HW filter on device bond9
[  182.942665][T14086] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  182.950553][T14086] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  182.973074][T14084] batadv_slave_1: entered promiscuous mode
[  182.988955][T14084] bond9: (slave batadv_slave_1): making interface the new active one
[  182.993774][T14084] bond9: (slave batadv_slave_1): Enslaving as an active interface with an up link
[  183.017311][T14084] 8021q: adding VLAN 0 to HW filter on device bond9
[  183.078752][T14097] syzkaller1: entered promiscuous mode
[  183.080566][T14097] syzkaller1: entered allmulticast mode
[  183.260238][T14111] syzkaller1: entered promiscuous mode
[  183.262728][T14111] syzkaller1: entered allmulticast mode
[  183.358051][T14117] netlink: 'syz.1.3608': attribute type 10 has an invalid length.
[  183.578514][T14137] 8021q: adding VLAN 0 to HW filter on device bond10
[  183.610093][T14142] ==================================================================
[  183.613556][T14142] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  183.617247][T14142] Read of size 1 at addr ffff888026fc2730 by task syz.2.3621/14142
[  183.621459][T14142] 
[  183.622523][T14142] CPU: 0 UID: 0 PID: 14142 Comm: syz.2.3621 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  183.622541][T14142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.622549][T14142] Call Trace:
[  183.622555][T14142]  <TASK>
[  183.622560][T14142]  dump_stack_lvl+0x189/0x250
[  183.622579][T14142]  ? __kasan_check_byte+0x12/0x40
[  183.622600][T14142]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.622614][T14142]  ? lock_release+0x4b/0x3e0
[  183.622631][T14142]  ? __virt_addr_valid+0x4a5/0x5c0
[  183.622651][T14142]  print_report+0xca/0x230
[  183.622664][T14142]  ? __xfrm_state_insert+0x8af/0x1450
[  183.622675][T14142]  kasan_report+0x118/0x150
[  183.622694][T14142]  ? __xfrm_state_insert+0x8af/0x1450
[  183.622707][T14142]  __xfrm_state_insert+0x8af/0x1450
[  183.622722][T14142]  ? xfrm_state_insert+0x44/0x60
[  183.622734][T14142]  xfrm_state_insert+0x54/0x60
[  183.622746][T14142]  ipcomp6_init_state+0x655/0x900
[  183.622767][T14142]  __xfrm_init_state+0xa76/0x13f0
[  183.622780][T14142]  ? __xfrm_init_state+0x7ef/0x13f0
[  183.622796][T14142]  xfrm_init_state+0x18/0xa0
[  183.622807][T14142]  pfkey_add+0x1d38/0x2e00
[  183.622824][T14142]  ? __pfx_pfkey_add+0x10/0x10
[  183.622836][T14142]  ? kmem_cache_free+0x18f/0x400
[  183.622856][T14142]  pfkey_sendmsg+0xbfe/0x1090
[  183.622873][T14142]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  183.622893][T14142]  ? aa_sock_msg_perm+0x94/0x160
[  183.622909][T14142]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  183.622924][T14142]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  183.622937][T14142]  __sock_sendmsg+0x21c/0x270
[  183.622958][T14142]  ____sys_sendmsg+0x52d/0x830
[  183.622975][T14142]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.622994][T14142]  ? import_iovec+0x74/0xa0
[  183.623037][T14142]  ___sys_sendmsg+0x21f/0x2a0
[  183.623053][T14142]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.623080][T14142]  ? __fget_files+0x2a/0x420
[  183.623090][T14142]  ? __fget_files+0x3a0/0x420
[  183.623105][T14142]  __sys_sendmmsg+0x227/0x430
[  183.623123][T14142]  ? __pfx___sys_sendmmsg+0x10/0x10
[  183.623138][T14142]  ? do_futex+0x395/0x420
[  183.623158][T14142]  ? fdget+0x184/0x1e0
[  183.623175][T14142]  ? rcu_is_watching+0x15/0xb0
[  183.623192][T14142]  __x64_sys_sendmmsg+0xa0/0xc0
[  183.623208][T14142]  do_syscall_64+0xfa/0x3b0
[  183.623222][T14142]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.623233][T14142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.623245][T14142]  ? exc_page_fault+0x9f/0xf0
[  183.623258][T14142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.623270][T14142] RIP: 0033:0x7face7d8e9a9
[  183.623283][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.623293][T14142] RSP: 002b:00007face8c6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  183.623308][T14142] RAX: ffffffffffffffda RBX: 00007face7fb5fa0 RCX: 00007face7d8e9a9
[  183.623317][T14142] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000007
[  183.623325][T14142] RBP: 00007face7e10d69 R08: 0000000000000000 R09: 0000000000000000
[  183.623332][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.623340][T14142] R13: 0000000000000000 R14: 00007face7fb5fa0 R15: 00007ffe66764d68
[  183.623354][T14142]  </TASK>
[  183.623358][T14142] 
[  183.756201][T14142] Allocated by task 11392:
[  183.758105][T14142]  kasan_save_track+0x3e/0x80
[  183.760118][T14142]  __kasan_slab_alloc+0x6c/0x80
[  183.762204][T14142]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  183.764521][T14142]  xfrm_state_alloc+0x24/0x2f0
[  183.766603][T14142]  __find_acq_core+0x8a7/0x1c00
[  183.768669][T14142]  xfrm_find_acq+0x78/0xa0
[  183.770524][T14142]  xfrm_alloc_userspi+0x6b3/0xc90
[  183.772666][T14142]  xfrm_user_rcv_msg+0x7a3/0xab0
[  183.774802][T14142]  netlink_rcv_skb+0x208/0x470
[  183.776876][T14142]  xfrm_netlink_rcv+0x79/0x90
[  183.778919][T14142]  netlink_unicast+0x82f/0x9e0
[  183.780999][T14142]  netlink_sendmsg+0x805/0xb30
[  183.783060][T14142]  __sock_sendmsg+0x21c/0x270
[  183.785117][T14142]  ____sys_sendmsg+0x505/0x830
[  183.787205][T14142]  ___sys_sendmsg+0x21f/0x2a0
[  183.789240][T14142]  __x64_sys_sendmsg+0x19b/0x260
[  183.791377][T14142]  do_syscall_64+0xfa/0x3b0
[  183.793285][T14142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.795778][T14142] 
[  183.796825][T14142] Freed by task 2292:
[  183.798537][T14142]  kasan_save_track+0x3e/0x80
[  183.800506][T14142]  kasan_save_free_info+0x46/0x50
[  183.802630][T14142]  __kasan_slab_free+0x62/0x70
[  183.804596][T14142]  kmem_cache_free+0x18f/0x400
[  183.806629][T14142]  xfrm_state_gc_task+0x518/0x6a0
[  183.808774][T14142]  process_scheduled_works+0xae1/0x17b0
[  183.811094][T14142]  worker_thread+0x8a0/0xda0
[  183.813050][T14142]  kthread+0x711/0x8a0
[  183.814772][T14142]  ret_from_fork+0x3fc/0x770
[  183.816743][T14142]  ret_from_fork_asm+0x1a/0x30
[  183.818777][T14142] 
[  183.819802][T14142] The buggy address belongs to the object at ffff888026fc2400
[  183.819802][T14142]  which belongs to the cache xfrm_state of size 928
[  183.825480][T14142] The buggy address is located 816 bytes inside of
[  183.825480][T14142]  freed 928-byte region [ffff888026fc2400, ffff888026fc27a0)
[  183.831069][T14142] 
[  183.832093][T14142] The buggy address belongs to the physical page:
[  183.834783][T14142] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026fc2d00 pfn:0x26fc0
[  183.838971][T14142] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  183.842522][T14142] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  183.845628][T14142] page_type: f5(slab)
[  183.847323][T14142] raw: 00fff00000000040 ffff88801af78780 dead000000000122 0000000000000000
[  183.850757][T14142] raw: ffff888026fc2d00 00000000800e0006 00000000f5000000 0000000000000000
[  183.854194][T14142] head: 00fff00000000040 ffff88801af78780 dead000000000122 0000000000000000
[  183.857751][T14142] head: ffff888026fc2d00 00000000800e0006 00000000f5000000 0000000000000000
[  183.861236][T14142] head: 00fff00000000002 ffffea00009bf001 00000000ffffffff 00000000ffffffff
[  183.864770][T14142] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  183.868358][T14142] page dumped because: kasan: bad access detected
[  183.871132][T14142] page_owner tracks the page as allocated
[  183.873541][T14142] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7141, tgid 7140 (syz.1.527), ts 76907319180, free_ts 72305831770
[  183.881480][T14142]  post_alloc_hook+0x240/0x2a0
[  183.883516][T14142]  get_page_from_freelist+0x21e4/0x22c0
[  183.885848][T14142]  __alloc_frozen_pages_noprof+0x181/0x370
[  183.888326][T14142]  alloc_pages_mpol+0x232/0x4a0
[  183.890357][T14142]  allocate_slab+0x8a/0x3b0
[  183.892280][T14142]  ___slab_alloc+0xbfc/0x1480
[  183.894303][T14142]  kmem_cache_alloc_noprof+0x283/0x3c0
[  183.896588][T14142]  xfrm_state_alloc+0x24/0x2f0
[  183.898606][T14142]  xfrm_state_find+0x37d4/0x5400
[  183.900718][T14142]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  183.903316][T14142]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  183.905499][T14142]  xfrm_lookup_route+0x3c/0x1c0
[  183.907576][T14142]  rawv6_sendmsg+0xdab/0x1820
[  183.909582][T14142]  __sock_sendmsg+0x19c/0x270
[  183.911618][T14142]  ____sys_sendmsg+0x52d/0x830
[  183.913506][T14142]  ___sys_sendmsg+0x21f/0x2a0
[  183.915369][T14142] page last free pid 5841 tgid 5841 stack trace:
[  183.917821][T14142]  __free_frozen_pages+0xc71/0xe70
[  183.919848][T14142]  __put_partials+0x161/0x1c0
[  183.921704][T14142]  put_cpu_partial+0x17c/0x250
[  183.923725][T14142]  __slab_free+0x2f7/0x400
[  183.925596][T14142]  qlist_free_all+0x97/0x140
[  183.927600][T14142]  kasan_quarantine_reduce+0x148/0x160
[  183.929851][T14142]  __kasan_slab_alloc+0x22/0x80
[  183.931906][T14142]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  183.934378][T14142]  dup_task_struct+0x52/0x860
[  183.936315][T14142]  copy_process+0x544/0x3b80
[  183.938278][T14142]  kernel_clone+0x21e/0x870
[  183.940162][T14142]  __x64_sys_clone+0x18b/0x1e0
[  183.942168][T14142]  do_syscall_64+0xfa/0x3b0
[  183.944108][T14142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.946613][T14142] 
[  183.947649][T14142] Memory state around the buggy address:
[  183.950044][T14142]  ffff888026fc2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.953367][T14142]  ffff888026fc2680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.956777][T14142] >ffff888026fc2700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.960224][T14142]                                      ^
[  183.962641][T14142]  ffff888026fc2780: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  183.966101][T14142]  ffff888026fc2800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  183.969540][T14142] ==================================================================
[  183.973086][T14142] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  183.976161][T14142] CPU: 0 UID: 0 PID: 14142 Comm: syz.2.3621 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  183.981323][T14142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.985579][T14142] Call Trace:
[  183.987045][T14142]  <TASK>
[  183.988304][T14142]  dump_stack_lvl+0x99/0x250
[  183.990244][T14142]  ? __asan_memcpy+0x40/0x70
[  183.992217][T14142]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.994414][T14142]  ? __pfx__printk+0x10/0x10
[  183.996379][T14142]  panic+0x2db/0x790
[  183.998045][T14142]  ? __pfx_panic+0x10/0x10
[  183.999940][T14142]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  184.002412][T14142]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.004876][T14142]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.007596][T14142]  ? print_memory_metadata+0x314/0x400
[  184.009910][T14142]  ? __xfrm_state_insert+0x8af/0x1450
[  184.012184][T14142]  check_panic_on_warn+0x89/0xb0
[  184.014360][T14142]  ? __xfrm_state_insert+0x8af/0x1450
[  184.016603][T14142]  end_report+0x78/0x160
[  184.018399][T14142]  kasan_report+0x129/0x150
[  184.020367][T14142]  ? __xfrm_state_insert+0x8af/0x1450
[  184.022648][T14142]  __xfrm_state_insert+0x8af/0x1450
[  184.024844][T14142]  ? xfrm_state_insert+0x44/0x60
[  184.027046][T14142]  xfrm_state_insert+0x54/0x60
[  184.029096][T14142]  ipcomp6_init_state+0x655/0x900
[  184.031314][T14142]  __xfrm_init_state+0xa76/0x13f0
[  184.033460][T14142]  ? __xfrm_init_state+0x7ef/0x13f0
[  184.035648][T14142]  xfrm_init_state+0x18/0xa0
[  184.037615][T14142]  pfkey_add+0x1d38/0x2e00
[  184.039516][T14142]  ? __pfx_pfkey_add+0x10/0x10
[  184.041605][T14142]  ? kmem_cache_free+0x18f/0x400
[  184.043700][T14142]  pfkey_sendmsg+0xbfe/0x1090
[  184.045693][T14142]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  184.047932][T14142]  ? aa_sock_msg_perm+0x94/0x160
[  184.050036][T14142]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.052235][T14142]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  184.054382][T14142]  __sock_sendmsg+0x21c/0x270
[  184.056366][T14142]  ____sys_sendmsg+0x52d/0x830
[  184.058457][T14142]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.060765][T14142]  ? import_iovec+0x74/0xa0
[  184.062762][T14142]  ___sys_sendmsg+0x21f/0x2a0
[  184.064819][T14142]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.067137][T14142]  ? __fget_files+0x2a/0x420
[  184.069159][T14142]  ? __fget_files+0x3a0/0x420
[  184.071207][T14142]  __sys_sendmmsg+0x227/0x430
[  184.073272][T14142]  ? __pfx___sys_sendmmsg+0x10/0x10
[  184.075515][T14142]  ? do_futex+0x395/0x420
[  184.077393][T14142]  ? fdget+0x184/0x1e0
[  184.079184][T14142]  ? rcu_is_watching+0x15/0xb0
[  184.081262][T14142]  __x64_sys_sendmmsg+0xa0/0xc0
[  184.083309][T14142]  do_syscall_64+0xfa/0x3b0
[  184.085193][T14142]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.087346][T14142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.089912][T14142]  ? exc_page_fault+0x9f/0xf0
[  184.091975][T14142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.094454][T14142] RIP: 0033:0x7face7d8e9a9
[  184.096392][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.104383][T14142] RSP: 002b:00007face8c6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  184.107853][T14142] RAX: ffffffffffffffda RBX: 00007face7fb5fa0 RCX: 00007face7d8e9a9
[  184.111174][T14142] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000007
[  184.114517][T14142] RBP: 00007face7e10d69 R08: 0000000000000000 R09: 0000000000000000
[  184.117813][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.121190][T14142] R13: 0000000000000000 R14: 00007face7fb5fa0 R15: 00007ffe66764d68
[  184.124533][T14142]  </TASK>
[  184.126582][T14142] Kernel Offset: disabled
[  184.128453][T14142] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:49:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000119f RDI=00000000000011a0 RBP=00000000000003f8 RSP=ffffc900066d6cb0
R8 =ffff888108170237 R9 =1ffff1102102e046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99aff8a9 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007face8c6b6c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2b4cf7 CR3=0000000022164000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007face7f86478 00007face7f86450 XMM03=00007face7f86488 00007face7f86480
XMM04=00007face8aed100 00007face7f86440 XMM05=00007face7f86458 00007face7f864a0
XMM06=00007face7f86498 00007face7f86490 XMM07=00007face7f86488 00007face7f86480
XMM08=33e43af8d722679a d1a362069cbbc553 XMM09=0000000000000000 00007face7e11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffffffffffff RCX=ffffffff81c7b508 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa235f0 RBP=ffffc900042a7808 RSP=ffffc900042a7710
R8 =ffffffff8fa235f7 R9 =1ffffffff1f446be R10=dffffc0000000000 R11=fffffbfff1f446be
R12=0000000000000001 R13=0000000000000200 R14=fffffbfff1f446bf R15=1ffffffff1f446be
RIP=ffffffff82221fdf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555576de6500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555576e015c8 CR3=000000002a416000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1d03011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
