last executing test programs:

1.847687839s ago: executing program 1 (id=2207):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000007a40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}], 0x1, 0x4004041)
recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/10, 0xa}], 0x1}, 0x4}], 0x1, 0x10100, 0x0)

1.749756115s ago: executing program 1 (id=2208):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xd335}], 0x2, 0x2120, 0x0)

907.157028ms ago: executing program 2 (id=2229):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x3c, r1, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)

906.092715ms ago: executing program 1 (id=2230):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0)

905.781934ms ago: executing program 2 (id=2232):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0)

839.510476ms ago: executing program 1 (id=2234):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
accept4$inet6(r0, 0x0, 0x0, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

720.380944ms ago: executing program 2 (id=2239):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000000850ffffff810000066080000000000001800000000100000000000000000000095000000000000009500000003000000850000004100000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)

720.183994ms ago: executing program 0 (id=2240):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})

720.063293ms ago: executing program 2 (id=2241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b00)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x20008840)

679.438705ms ago: executing program 2 (id=2242):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x2)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x90000011})
ppoll(&(0x7f0000000040)=[{r0, 0x1250}, {r1, 0x100}], 0x2, &(0x7f0000000080)={0x77359400}, 0x0, 0x0)

677.00973ms ago: executing program 0 (id=2243):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040)=0x1000000, &(0x7f0000000100)}, 0x20)

610.229326ms ago: executing program 0 (id=2244):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x2c}}, 0x0)

610.099255ms ago: executing program 0 (id=2245):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200fffffffffffffbfb000067"], 0x1eb)

609.998702ms ago: executing program 2 (id=2246):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
readv(r0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000500)=""/148, 0x94}, {0x0}], 0x3)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})

459.405779ms ago: executing program 0 (id=2247):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001000000ec400008"], 0x0, 0x4e}, 0x28)

459.262797ms ago: executing program 0 (id=2248):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0xfffc}, 0x90)

210.062µs ago: executing program 1 (id=2249):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={r2, 0x2}, 0x8)

0s ago: executing program 1 (id=2250):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6316' (ED25519) to the list of known hosts.
syzkaller login: [   40.703582][ T5745] cgroup: Unknown subsys name 'net'
[   40.806375][ T5745] cgroup: Unknown subsys name 'cpuset'
[   40.811389][ T5745] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.086351][ T5745] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.433115][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.438438][ T5209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.440880][ T5209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.443472][ T5209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.446140][ T5209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.458291][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.461060][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.463908][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.466875][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.469562][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.474548][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.477445][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.480178][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.482963][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.485940][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.685365][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   45.729628][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   45.766927][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   45.831486][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.834240][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.836672][ T5817] bridge_slave_0: entered allmulticast mode
[   45.839363][ T5817] bridge_slave_0: entered promiscuous mode
[   45.845917][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.848611][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.850949][ T5825] bridge_slave_0: entered allmulticast mode
[   45.853602][ T5825] bridge_slave_0: entered promiscuous mode
[   45.858025][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.860443][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.862787][ T5817] bridge_slave_1: entered allmulticast mode
[   45.865883][ T5817] bridge_slave_1: entered promiscuous mode
[   45.871712][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.874343][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.876705][ T5825] bridge_slave_1: entered allmulticast mode
[   45.879389][ T5825] bridge_slave_1: entered promiscuous mode
[   45.917236][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.921575][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.933216][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.938928][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.941996][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.944958][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.947321][ T5821] bridge_slave_0: entered allmulticast mode
[   45.950025][ T5821] bridge_slave_0: entered promiscuous mode
[   45.953076][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.956492][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.958875][ T5821] bridge_slave_1: entered allmulticast mode
[   45.961547][ T5821] bridge_slave_1: entered promiscuous mode
[   45.998768][ T5817] team0: Port device team_slave_0 added
[   46.001705][ T5825] team0: Port device team_slave_0 added
[   46.011197][ T5817] team0: Port device team_slave_1 added
[   46.015001][ T5825] team0: Port device team_slave_1 added
[   46.018089][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.041994][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.053365][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.055951][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.064254][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.068408][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.070589][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.079373][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.097270][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.099760][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.108520][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.112484][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.114921][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.123194][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.128388][ T5821] team0: Port device team_slave_0 added
[   46.137782][ T5821] team0: Port device team_slave_1 added
[   46.170444][ T5825] hsr_slave_0: entered promiscuous mode
[   46.172752][ T5825] hsr_slave_1: entered promiscuous mode
[   46.175641][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.177768][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.186136][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.204200][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.206407][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.215081][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.224715][ T5817] hsr_slave_0: entered promiscuous mode
[   46.226977][ T5817] hsr_slave_1: entered promiscuous mode
[   46.229155][ T5817] debugfs: 'hsr0' already exists in 'hsr'
[   46.231061][ T5817] Cannot create hsr debugfs directory
[   46.277997][ T5821] hsr_slave_0: entered promiscuous mode
[   46.280418][ T5821] hsr_slave_1: entered promiscuous mode
[   46.282542][ T5821] debugfs: 'hsr0' already exists in 'hsr'
[   46.285818][ T5821] Cannot create hsr debugfs directory
[   46.443616][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.451551][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.467782][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.472025][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.492943][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.509889][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.525883][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.530891][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.537038][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.539442][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.542090][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.544459][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.565723][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.571815][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.577077][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.581742][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.602486][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.604918][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.607386][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.609691][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.629810][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.632216][ T5821] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.634762][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.637228][ T5821] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.668002][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.673347][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.677623][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.680241][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.683408][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.689406][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.692591][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.718338][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   46.728533][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.732646][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.735746][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.751086][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.753521][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.762482][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.769010][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   46.785378][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.787720][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.791901][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   46.807719][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.810070][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.816911][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.819234][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.823315][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.825726][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.865504][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.950501][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.985148][ T5825] veth0_vlan: entered promiscuous mode
[   46.999758][ T5825] veth1_vlan: entered promiscuous mode
[   47.012076][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.021903][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.037694][ T5825] veth0_macvtap: entered promiscuous mode
[   47.045881][ T5825] veth1_macvtap: entered promiscuous mode
[   47.068072][ T5821] veth0_vlan: entered promiscuous mode
[   47.072557][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.081955][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.090160][ T5821] veth1_vlan: entered promiscuous mode
[   47.095641][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.101909][ T5817] veth0_vlan: entered promiscuous mode
[   47.105352][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.109732][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.118858][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.125898][ T5817] veth1_vlan: entered promiscuous mode
[   47.150492][ T5821] veth0_macvtap: entered promiscuous mode
[   47.159544][ T5821] veth1_macvtap: entered promiscuous mode
[   47.176020][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.178808][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.180930][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.200758][ T5817] veth0_macvtap: entered promiscuous mode
[   47.206350][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.208897][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.211492][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.212270][ T5817] veth1_macvtap: entered promiscuous mode
[   47.223456][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.227745][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.234039][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.245546][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.263667][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.267169][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.298248][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.311043][  T721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.313530][  T721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.317984][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.320741][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.323639][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.331193][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.341557][ T5885] syzkaller1: entered promiscuous mode
[   47.343340][ T5885] syzkaller1: entered allmulticast mode
[   47.362435][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.366487][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.422711][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.425792][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.474377][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.477713][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.520875][ T5892] lo speed is unknown, defaulting to 1000
[   47.531438][ T5892] lo speed is unknown, defaulting to 1000
[   47.536622][   T54] Bluetooth: hci0: command tx timeout
[   47.538543][   T54] Bluetooth: hci1: command tx timeout
[   47.540338][   T54] Bluetooth: hci2: command tx timeout
[   47.552145][ T5892] lo speed is unknown, defaulting to 1000
[   47.623506][ T5902] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7'.
[   47.682209][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'.
[   47.687368][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9'.
[   47.798443][ T5892] infiniband syz0: set active
[   47.800542][ T5724] lo speed is unknown, defaulting to 1000
[   47.804420][ T5892] infiniband syz0: added lo
[   47.853423][ T5892] RDS/IB: syz0: added
[   47.856710][ T5892] smc: adding ib device syz0 with port count 1
[   47.859518][ T5892] smc:    ib device syz0 port 1 has pnetid 
[   47.862708][ T5724] lo speed is unknown, defaulting to 1000
[   47.866795][ T5892] lo speed is unknown, defaulting to 1000
[   47.958850][ T5928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'.
[   47.982657][ T5687] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[   48.061640][ T5935] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET)
[   48.091377][ T5937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   48.135897][ T5892] lo speed is unknown, defaulting to 1000
[   48.304504][ T5892] lo speed is unknown, defaulting to 1000
[   48.321590][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   48.436348][ T5962] netlink: 'syz.1.33': attribute type 4 has an invalid length.
[   48.541494][ T5969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   48.730174][ T5992] sctp: [Deprecated]: syz.1.44 (pid 5992) Use of struct sctp_assoc_value in delayed_ack socket option.
[   48.730174][ T5992] Use struct sctp_sack_info instead
[   48.744902][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'.
[   49.258233][ T6010] netlink: 'syz.2.55': attribute type 21 has an invalid length.
[   49.614661][   T54] Bluetooth: hci1: command tx timeout
[   49.616845][ T5209] Bluetooth: hci0: command tx timeout
[   49.618912][ T5820] Bluetooth: hci2: command tx timeout
[   49.778822][ T5883] lo speed is unknown, defaulting to 1000
[   49.790820][ T6047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.72'.
[   49.835977][ T6049] tipc: Started in network mode
[   49.837736][ T6049] tipc: Node identity 86dbd2e704a6, cluster identity 4711
[   49.840913][ T6049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.854540][ T6049] syzkaller0: entered promiscuous mode
[   49.856407][ T6049] syzkaller0: entered allmulticast mode
[   49.882202][ T6049] tipc: Resetting bearer <eth:syzkaller0>
[   49.887399][ T6048] tipc: Resetting bearer <eth:syzkaller0>
[   49.899934][ T6048] tipc: Disabling bearer <eth:syzkaller0>
[   49.966310][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'.
[   49.993351][ T6067] pim6reg1: entered promiscuous mode
[   49.997581][ T6067] pim6reg1: entered allmulticast mode
[   50.111403][ T6078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.82'.
[   50.139584][ T6078] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.143320][ T6078] team0: Port device bond1 added
[   50.234267][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'.
[   50.326144][ T6101] sctp: [Deprecated]: syz.0.96 (pid 6101) Use of int in maxseg socket option.
[   50.326144][ T6101] Use struct sctp_assoc_value instead
[   51.067180][ T6156] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.102303][ T6158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.448043][ T6186] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.676823][ T6192] netlink: 'syz.2.136': attribute type 1 has an invalid length.
[   51.696020][ T5209] Bluetooth: hci0: command tx timeout
[   51.697982][ T5209] Bluetooth: hci1: command tx timeout
[   51.700065][ T5820] Bluetooth: hci2: command tx timeout
[   51.961990][ T6211] lo speed is unknown, defaulting to 1000
[   52.285936][ T6224] Zero length message leads to an empty skb
[   52.368539][ T6228] wg1: entered promiscuous mode
[   52.370472][ T6228] wg1: entered allmulticast mode
[   52.676021][ T6251] __nla_validate_parse: 3 callbacks suppressed
[   52.676031][ T6251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.162'.
[   52.681459][ T6251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.731974][ T6253] lo speed is unknown, defaulting to 1000
[   52.763291][ T6257] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   52.838981][ T6262] warning: `syz.0.167' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.948107][ T6267] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   52.957818][ T6267] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   53.104759][ T6276] netlink: 'syz.0.173': attribute type 1 has an invalid length.
[   53.153886][ T6276] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.167620][ T6276] bond1: (slave bridge1): making interface the new active one
[   53.170894][ T6276] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   53.180163][ T6276] gretap1: entered promiscuous mode
[   53.185568][ T6276] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   53.219870][ T6276] macvlan2: entered promiscuous mode
[   53.226848][ T6276] macvlan2: entered allmulticast mode
[   53.233692][ T6276] bond1: entered promiscuous mode
[   53.236963][ T6276] bridge1: entered promiscuous mode
[   53.246182][ T6276] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   53.253437][ T6276] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   53.279688][ T6276] bond1: left promiscuous mode
[   53.292442][ T6276] bridge1: left promiscuous mode
[   53.732694][ T6323] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[   53.737408][ T6323] netlink: 'syz.0.193': attribute type 2 has an invalid length.
[   53.757189][ T6310] netlink: 64 bytes leftover after parsing attributes in process `syz.2.183'.
[   53.774002][   T54] Bluetooth: hci1: command tx timeout
[   53.775758][   T54] Bluetooth: hci0: command tx timeout
[   53.778938][ T5820] Bluetooth: hci2: command tx timeout
[   53.916641][ T6332] lo speed is unknown, defaulting to 1000
[   54.438928][ T6337] tipc: Started in network mode
[   54.440791][ T6337] tipc: Node identity ca510a915ef6, cluster identity 4711
[   54.443327][ T6337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.446622][ T6337] syzkaller0: entered promiscuous mode
[   54.448792][ T6337] syzkaller0: entered allmulticast mode
[   54.455972][ T6337] tipc: Resetting bearer <eth:syzkaller0>
[   54.459474][ T6336] tipc: Resetting bearer <eth:syzkaller0>
[   54.474300][ T6336] tipc: Disabling bearer <eth:syzkaller0>
[   54.798926][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'.
[   54.807663][ T6362] ip6gre1: entered allmulticast mode
[   54.829120][ T6374] netlink: 32 bytes leftover after parsing attributes in process `syz.0.214'.
[   54.964087][ T6391] tipc: Started in network mode
[   54.965799][ T6391] tipc: Node identity ac14140f, cluster identity 4711
[   54.969546][ T6391] tipc: New replicast peer: 255.255.255.255
[   54.972188][ T6391] tipc: Enabled bearer <udp:syz2>, priority 10
[   55.095667][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.226'.
[   55.459092][ T6428] veth1_to_bond: entered allmulticast mode
[   55.461489][ T6428] bond_slave_1: entered promiscuous mode
[   55.464892][ T6427] bond_slave_1: left promiscuous mode
[   55.466904][ T6427] veth1_to_bond: left allmulticast mode
[   55.838285][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'.
[   55.871256][ T6443] Driver unsupported XDP return value 0 on prog  (id 41) dev N/A, expect packet loss!
[   55.897263][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'.
[   55.903269][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.922489][ T6442] batman_adv: batadv0: Removing interface: batadv_slave_1
[   56.084563][ T5724] tipc: Node number set to 2886997007
[   56.272200][ T6482] netlink: 'syz.0.264': attribute type 1 has an invalid length.
[   56.275204][ T6482] netlink: 232 bytes leftover after parsing attributes in process `syz.0.264'.
[   56.278199][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[   56.329869][ T6488] netlink: 'syz.1.267': attribute type 1 has an invalid length.
[   56.362016][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'.
[   56.483451][ T6505] tipc: Enabled bearer <eth:gre0>, priority 10
[   57.136795][ T5883] IPVS: starting estimator thread 0...
[   57.233657][ T6569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.239846][ T6565] IPVS: using max 80 ests per chain, 192000 per kthread
[   57.354059][ T6573] block nbd0: server does not support multiple connections per device.
[   57.365914][ T6573] block nbd0: shutting down sockets
[   57.604646][   T24] tipc: Node number set to 2189284071
[   57.680690][ T6602] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   57.686059][ T6602] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   58.177576][ T6629] __nla_validate_parse: 4 callbacks suppressed
[   58.177585][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'.
[   58.417943][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'.
[   58.579894][ T6666] netlink: 76 bytes leftover after parsing attributes in process `syz.0.345'.
[   58.718369][ T6679] IPVS: persistence engine module ip_vs_pe_ not found
[   58.921874][ T6707] lo speed is unknown, defaulting to 1000
[   60.341259][ T6826] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.416'.
[   61.135398][ T6856] Bluetooth: MGMT ver 1.23
[   61.352257][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'.
[   61.383517][ T6883] macvlan2: entered promiscuous mode
[   61.385452][ T6883] macvlan2: entered allmulticast mode
[   61.387966][ T6883] bond1: (slave macvlan2): Opening slave failed
[   61.399175][ T6887] syzkaller1: entered promiscuous mode
[   61.401091][ T6887] syzkaller1: entered allmulticast mode
[   61.628138][   T24] IPVS: starting estimator thread 0...
[   61.677988][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[   61.724953][ T6907] IPVS: using max 80 ests per chain, 192000 per kthread
[   61.730040][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'.
[   62.041398][ T6960] bond0: entered promiscuous mode
[   62.043105][ T6960] bond_slave_0: entered promiscuous mode
[   62.045242][ T6960] bond_slave_1: entered promiscuous mode
[   62.047962][ T6960] batadv0: entered promiscuous mode
[   62.050660][ T6960] hsr1: entered allmulticast mode
[   62.052348][ T6960] bond0: entered allmulticast mode
[   62.055488][ T6960] bond_slave_0: entered allmulticast mode
[   62.057366][ T6960] bond_slave_1: entered allmulticast mode
[   62.059244][ T6960] batadv0: entered allmulticast mode
[   62.061305][ T6960] 8021q: adding VLAN 0 to HW filter on device hsr1
[   62.064730][ T6960] bond0: left promiscuous mode
[   62.066329][ T6960] bond_slave_0: left promiscuous mode
[   62.068200][ T6960] bond_slave_1: left promiscuous mode
[   62.070717][ T6960] batadv0: left promiscuous mode
[   62.615342][ T7027] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.508'.
[   62.622810][ T7027] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   62.626321][ T7027] openvswitch: netlink: Message has 1 unknown bytes.
[   62.775362][ T7042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.071944][ T7067] x_tables: ip_tables: udp match: only valid for protocol 17
[   63.957229][ T7083] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   63.991848][ T7089] bond0: Unable to set up delay as MII monitoring is disabled
[   64.082246][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'.
[   64.086641][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'.
[   64.138860][ T7112] nbd: must specify at least one socket
[   64.159530][ T7114] netlink: 'syz.1.548': attribute type 10 has an invalid length.
[   64.167852][ T7114] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.548'.
[   64.237185][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'.
[   64.247408][ T7124] netlink: 'syz.1.552': attribute type 1 has an invalid length.
[   64.259941][ T7126] netlink: 212280 bytes leftover after parsing attributes in process `syz.0.554'.
[   64.263627][ T7124] netlink: 'syz.1.552': attribute type 1 has an invalid length.
[   64.274997][ T7128] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   64.310629][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'.
[   64.576590][ T7180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.572'.
[   64.605058][ T7184] nft_compat: unsupported protocol 0
[   64.673226][ T7194] netlink: 'syz.1.578': attribute type 12 has an invalid length.
[   64.676166][ T7194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.578'.
[   64.702299][ T7198] netlink: 'syz.1.580': attribute type 11 has an invalid length.
[   64.812775][ T7210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   64.936747][ T7223] netlink: 'syz.0.592': attribute type 7 has an invalid length.
[   64.939406][ T7223] netlink: 'syz.0.592': attribute type 8 has an invalid length.
[   64.941903][ T7223] netlink: 'syz.0.592': attribute type 4 has an invalid length.
[   64.945494][ T7223] netlink: 204 bytes leftover after parsing attributes in process `syz.0.592'.
[   64.971990][ T7229] netlink: 'syz.0.595': attribute type 1 has an invalid length.
[   64.987989][ T7229] bond2: entered promiscuous mode
[   64.989978][ T7229] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.003958][ T7229] netlink: 3 bytes leftover after parsing attributes in process `syz.0.595'.
[   65.010363][ T7229] batadv1: entered promiscuous mode
[   65.012083][ T7229] batadv1: entered allmulticast mode
[   65.017201][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv1
[   65.020822][ T7229] bond2: (slave batadv1): making interface the new active one
[   65.024052][ T7229] bond2: (slave batadv1): Enslaving as an active interface with an up link
[   65.177666][ T7243] netlink: 'syz.0.600': attribute type 12 has an invalid length.
[   65.214708][ T7247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.217479][ T7247] syzkaller0: entered promiscuous mode
[   65.219835][ T7247] syzkaller0: entered allmulticast mode
[   65.244016][ T7247] tipc: Resetting bearer <eth:syzkaller0>
[   65.247672][ T7246] tipc: Resetting bearer <eth:syzkaller0>
[   65.254580][ T7246] tipc: Disabling bearer <eth:syzkaller0>
[   65.541467][ T7281] syzkaller1: entered promiscuous mode
[   65.543572][ T7281] syzkaller1: entered allmulticast mode
[   65.706905][ T7305] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   66.060494][ T7363] syzkaller1: entered promiscuous mode
[   66.062610][ T7363] syzkaller1: entered allmulticast mode
[   66.351319][ T7410] netlink: 'syz.1.675': attribute type 4 has an invalid length.
[   66.494707][ T7439] sctp: [Deprecated]: syz.2.686 (pid 7439) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.494707][ T7439] Use struct sctp_sack_info instead
[   66.754273][ T7469] syz_tun: entered promiscuous mode
[   66.757311][ T7469] batadv_slave_0: entered promiscuous mode
[   66.759948][ T7469] hsr1: entered allmulticast mode
[   66.761627][ T7469] syz_tun: entered allmulticast mode
[   66.763358][ T7469] batadv_slave_0: entered allmulticast mode
[   66.850391][ T7477] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[   67.596591][ T7519] lo speed is unknown, defaulting to 1000
[   67.837763][ T7519] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   68.080267][ T7570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.207641][ T7581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.692736][ T7624] netlink: 'syz.1.770': attribute type 11 has an invalid length.
[   69.158255][ T7672] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[   69.162662][ T7672] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   69.271586][ T7691] __nla_validate_parse: 35 callbacks suppressed
[   69.271596][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'.
[   69.301879][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'.
[   69.340396][ T7699] netlink: 19 bytes leftover after parsing attributes in process `syz.0.805'.
[   69.363297][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.742679][ T7748] validate_nla: 8 callbacks suppressed
[   69.742689][ T7748] netlink: 'syz.2.826': attribute type 4 has an invalid length.
[   69.767407][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'.
[   69.839548][ T7758] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[   69.843448][ T7758] netlink: 172 bytes leftover after parsing attributes in process `syz.0.831'.
[   69.848412][ T7758] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[   70.234273][ T7808] netlink: 'syz.0.850': attribute type 10 has an invalid length.
[   70.242074][ T7808] team0: Port device dummy0 added
[   70.249509][ T7808] netlink: 'syz.0.850': attribute type 10 has an invalid length.
[   70.262673][ T7808] team0: Port device dummy0 removed
[   70.267859][ T7808] dummy0: entered allmulticast mode
[   70.270538][ T7808] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   70.413140][ T7821] netlink: 'syz.1.856': attribute type 15 has an invalid length.
[   70.416203][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.856'.
[   70.638166][ T7847] netlink: 'syz.1.865': attribute type 1 has an invalid length.
[   70.640847][ T7847] netlink: 224 bytes leftover after parsing attributes in process `syz.1.865'.
[   70.827788][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.836252][ T7866] netlink: 'syz.2.877': attribute type 3 has an invalid length.
[   70.839364][ T7866] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.877'.
[   70.966866][ T7882] netlink: 14 bytes leftover after parsing attributes in process `syz.0.884'.
[   71.026589][ T7882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.029636][ T7882] bond_slave_0: left allmulticast mode
[   71.032822][ T7882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.037226][ T7882] bond_slave_1: left allmulticast mode
[   71.040150][ T7882] bond0 (unregistering): (slave dummy0): Releasing backup interface
[   71.043459][ T7882] dummy0: left allmulticast mode
[   71.046632][ T7882] bond0 (unregistering): Released all slaves
[   71.146114][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'.
[   71.202314][ T7896] openvswitch: netlink: Flow key attribute not present in set flow.
[   71.414725][ T7918] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   71.441576][ T7920] netlink: 'syz.0.903': attribute type 46 has an invalid length.
[   71.683657][ T7964] trusted_key: syz.2.924 sent an empty control message without MSG_MORE.
[   71.857794][ T7998] netlink: 'syz.1.941': attribute type 1 has an invalid length.
[   72.007500][ T8020] geneve2: entered promiscuous mode
[   72.268212][ T8060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   72.330755][ T8061] erspan0: entered promiscuous mode
[   73.002004][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.062525][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.071653][ T8078] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.172321][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.176549][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.179405][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.182319][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.236981][ T8088] only policy match revision 0 supported
[   73.236992][ T8088] unable to load match
[   73.340049][ T8093] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   73.351284][ T8093] syzkaller0: entered promiscuous mode
[   73.353113][ T8093] syzkaller0: entered allmulticast mode
[   74.806092][ T8165] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   74.809023][ T8165] __nla_validate_parse: 11 callbacks suppressed
[   74.809031][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'.
[   74.926615][ T8182] validate_nla: 4 callbacks suppressed
[   74.926625][ T8182] netlink: 'syz.2.1026': attribute type 1 has an invalid length.
[   75.946894][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'.
[   75.949929][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'.
[   75.952912][ T8218] netlink: 'syz.1.1041': attribute type 18 has an invalid length.
[   77.082610][ T8278] sit0: entered allmulticast mode
[   77.086322][ T8278] macvlan0: entered allmulticast mode
[   77.088269][ T8278] veth1_vlan: entered allmulticast mode
[   77.094645][ T8278] veth1_vlan: left allmulticast mode
[   77.107217][ T8278] macvlan0 (unregistering): left allmulticast mode
[   77.487600][ T8312] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1083'.
[   78.302394][ T8330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.332757][ T8330] syzkaller0: entered promiscuous mode
[   78.337620][ T8330] syzkaller0: entered allmulticast mode
[   78.339768][ T8330] tipc: Resetting bearer <eth:syzkaller0>
[   78.352118][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'.
[   78.358657][ T8329] tipc: Resetting bearer <eth:syzkaller0>
[   79.038841][ T8329] tipc: Disabling bearer <eth:syzkaller0>
[   79.042903][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1097'.
[   79.047304][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1097'.
[   79.106760][ T8352] lo speed is unknown, defaulting to 1000
[   79.108781][ T8352] lo speed is unknown, defaulting to 1000
[   79.124896][ T8352] lo speed is unknown, defaulting to 1000
[   79.138953][ T8352] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   79.156455][ T8352] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   79.177797][ T8352] lo speed is unknown, defaulting to 1000
[   79.181176][ T8352] lo speed is unknown, defaulting to 1000
[   79.184632][ T8352] lo speed is unknown, defaulting to 1000
[   79.193047][ T8354] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   79.252179][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'.
[   79.256135][ T8354] tipc: Disabling bearer <udp:syz2>
[   79.317792][ T8375] netlink: 'syz.2.1109': attribute type 1 has an invalid length.
[   79.337906][ T8375] bond2: (slave bridge1): making interface the new active one
[   79.340623][ T8375] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   79.692871][ T8422] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1130'.
[   79.715159][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1131'.
[   79.846971][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1137'.
[   80.010418][ T8450] tun0: tun_chr_ioctl cmd 1074812117
[   80.099017][ T8454] lo speed is unknown, defaulting to 1000
[   80.196094][ T8454] lo speed is unknown, defaulting to 1000
[   80.281542][ T8461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   80.487380][ T8468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'.
[   80.785738][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'.
[   80.853217][ T8499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'.
[   81.055662][   T10] cfg80211: failed to load regulatory.db
[   81.073315][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1173'.
[   81.150846][   T33] audit: type=1800 audit(1754569424.551:2): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1179" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1841 res=0 errno=0
[   81.161539][   T33] audit: type=1800 audit(1754569424.551:3): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1179" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1841 res=0 errno=0
[   81.257593][ T8533] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1180'.
[   81.292868][ T8549] netlink: 'syz.1.1188': attribute type 11 has an invalid length.
[   81.295345][ T8551] veth0: entered promiscuous mode
[   81.298154][ T8551] veth0: left promiscuous mode
[   81.298653][ T8549] netlink: 'syz.1.1188': attribute type 4 has an invalid length.
[   81.302994][ T8549] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1188'.
[   81.459542][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1199'.
[   81.511632][ T8576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1201'.
[   81.708805][ T8604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1215'.
[   82.016816][ T8636] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   83.221882][ T8710] netlink: 'syz.2.1264': attribute type 303 has an invalid length.
[   83.235617][ T8710] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   83.238783][ T8710] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   83.249466][ T8716] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[   83.700868][ T8741] netlink: 'syz.0.1278': attribute type 1 has an invalid length.
[   83.703435][ T8741] netlink: 'syz.0.1278': attribute type 3 has an invalid length.
[   83.708279][ T8741] NCSI netlink: No device for ifindex 246
[   83.736202][ T8743] sch_fq: defrate 0 ignored.
[   83.853916][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   83.864333][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout
[   84.057428][ T8767] lo speed is unknown, defaulting to 1000
[   84.167556][ T8767] lo speed is unknown, defaulting to 1000
[   84.187852][ T8783] netlink: 'syz.0.1298': attribute type 2 has an invalid length.
[   84.278378][ T8788] bridge_slave_0: left allmulticast mode
[   84.280305][ T8788] bridge_slave_0: left promiscuous mode
[   84.282235][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.299682][ T8788] bridge_slave_1: left allmulticast mode
[   84.301549][ T8788] bridge_slave_1: left promiscuous mode
[   84.334105][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.342125][ T8788] bond0: (slave bond_slave_0): Releasing backup interface
[   84.355852][ T8788] bond0: (slave bond_slave_1): Releasing backup interface
[   84.362157][ T8788] team0: Port device team_slave_0 removed
[   84.379615][ T8788] team0: Port device team_slave_1 removed
[   84.381957][ T8788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.395093][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.399670][ T8788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.402127][ T8788] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.419473][ T8788] team0: Port device bond1 removed
[   84.422670][ T5890] lo speed is unknown, defaulting to 1000
[   84.550394][ T8793] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[   84.646668][ T8810] openvswitch: netlink: IP tunnel dst address not specified
[   84.677603][ T8815] netlink: 'syz.2.1310': attribute type 21 has an invalid length.
[   84.680870][ T8815] netlink: 'syz.2.1310': attribute type 1 has an invalid length.
[   84.687310][ T8789] tipc: Resetting bearer <eth:gre0>
[   85.231241][ T8839] bridge0: port 3(ipvlan2) entered blocking state
[   85.234113][ T8839] bridge0: port 3(ipvlan2) entered disabled state
[   85.236443][ T8839] ipvlan2: entered allmulticast mode
[   85.238331][ T8839] bridge0: entered allmulticast mode
[   85.241630][ T8839] ipvlan2: left allmulticast mode
[   85.244247][ T8839] bridge0: left allmulticast mode
[   85.359369][ T8849] lo speed is unknown, defaulting to 1000
[   85.460667][ T8849] lo speed is unknown, defaulting to 1000
[   85.599804][ T8869] bridge0: port 3(erspan0) entered blocking state
[   85.602365][ T8869] bridge0: port 3(erspan0) entered disabled state
[   85.604968][ T8869] erspan0: entered allmulticast mode
[   85.607640][ T8869] erspan0: entered promiscuous mode
[   85.609968][ T8869] bridge0: port 3(erspan0) entered blocking state
[   85.612196][ T8869] bridge0: port 3(erspan0) entered forwarding state
[   85.618030][ T8869] erspan0: left allmulticast mode
[   85.619851][ T8869] erspan0: left promiscuous mode
[   85.622230][ T8869] bridge0: port 3(erspan0) entered disabled state
[   86.031635][ T8915] __nla_validate_parse: 13 callbacks suppressed
[   86.031645][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'.
[   86.032440][ T8917] netlink: 'syz.1.1357': attribute type 4 has an invalid length.
[   86.047138][ T5724] lo speed is unknown, defaulting to 1000
[   86.049017][ T5724] syz2: Port: 1 Link DOWN
[   86.052947][ T8917] netlink: 'syz.1.1357': attribute type 4 has an invalid length.
[   86.058703][ T5724] lo speed is unknown, defaulting to 1000
[   86.060884][ T5724] syz2: Port: 1 Link ACTIVE
[   86.066107][ T8918] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1358'.
[   86.121669][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'.
[   86.217496][ T8930] lo speed is unknown, defaulting to 1000
[   86.477273][ T8930] lo speed is unknown, defaulting to 1000
[   86.530428][ T8945] validate_nla: 1 callbacks suppressed
[   86.530439][ T8945] netlink: 'syz.1.1367': attribute type 1 has an invalid length.
[   86.535892][ T8945] netlink: 'syz.1.1367': attribute type 10 has an invalid length.
[   86.538538][ T8945] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1367'.
[   86.686591][ T8953] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1371'.
[   86.771846][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'.
[   86.789653][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.805719][ T8959] macvlan0: entered promiscuous mode
[   86.807551][ T8959] macvlan0: entered allmulticast mode
[   86.809970][ T8959] bond0: (slave macvlan0): Opening slave failed
[   87.922418][ T8987] netlink: 'syz.0.1385': attribute type 8 has an invalid length.
[   88.162670][ T9019] netlink: 'syz.2.1394': attribute type 22 has an invalid length.
[   88.507721][ T9036] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1400'.
[   88.513444][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'.
[   89.623166][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1443'.
[   89.677759][ T9139] lo speed is unknown, defaulting to 1000
[   89.841221][ T9164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1453'.
[   89.924455][ T9139] lo speed is unknown, defaulting to 1000
[   89.972789][ T9155] lo speed is unknown, defaulting to 1000
[   90.015315][ T9187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.017906][ T9187] syzkaller0: entered promiscuous mode
[   90.019743][ T9187] syzkaller0: entered allmulticast mode
[   90.069575][ T9187] tipc: Resetting bearer <eth:syzkaller0>
[   90.073598][ T9192] netlink: 'syz.1.1459': attribute type 10 has an invalid length.
[   90.083956][ T9184] tipc: Resetting bearer <eth:syzkaller0>
[   90.095544][ T9184] tipc: Disabling bearer <eth:syzkaller0>
[   90.116692][ T9192] team0: Port device geneve0 added
[   90.145777][ T9192] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   90.174473][ T9155] lo speed is unknown, defaulting to 1000
[   90.260446][ T9212] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   90.991546][ T9312] netlink: 'syz.1.1491': attribute type 2 has an invalid length.
[   92.018384][ T9380] __nla_validate_parse: 7 callbacks suppressed
[   92.018394][ T9380] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1519'.
[   92.088539][ T9389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1524'.
[   92.122289][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'.
[   92.128501][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'.
[   92.135594][ T9394] netlink: 'syz.0.1526': attribute type 13 has an invalid length.
[   92.139848][ T9394] netlink: 'syz.0.1526': attribute type 12 has an invalid length.
[   92.177104][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1528'.
[   92.211456][ T9402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.220419][ T9404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1531'.
[   92.233265][ T9406] netlink: 'syz.2.1532': attribute type 8 has an invalid length.
[   92.263121][ T9410] netlink: 'syz.2.1534': attribute type 2 has an invalid length.
[   92.437199][ T9422] lo speed is unknown, defaulting to 1000
[   92.466138][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1543'.
[   92.487422][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1542'.
[   92.585873][ T9422] lo speed is unknown, defaulting to 1000
[   92.699468][ T9454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1552'.
[   92.750320][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'.
[   93.086933][ T9492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.089735][ T9492] syzkaller0: entered promiscuous mode
[   93.091665][ T9492] syzkaller0: entered allmulticast mode
[   93.102251][ T9492] tipc: Resetting bearer <eth:syzkaller0>
[   93.105080][ T9491] tipc: Resetting bearer <eth:syzkaller0>
[   93.114505][ T9491] tipc: Disabling bearer <eth:syzkaller0>
[   93.134008][ T5209] Bluetooth: hci2: command 0x0405 tx timeout
[   93.342934][ T9507] netlink: 'syz.2.1577': attribute type 3 has an invalid length.
[   93.354069][ T9502] nbd0: detected capacity change from 0 to 875674160
[   93.451674][ T9518] openvswitch: netlink: Actions may not be safe on all matching packets
[   93.595726][    C0] vcan0: j1939_tp_rxtimer: 0xffff888022e6fc00: rx timeout, send abort
[   93.628774][ T9539] netlink: 'syz.0.1592': attribute type 15 has an invalid length.
[   93.744275][ T9550] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   93.770644][ T9552] raw_sendmsg: syz.0.1598 forgot to set AF_INET. Fix it!
[   93.922442][ T5724] IPVS: starting estimator thread 0...
[   94.008403][ T9571] vlan2: entered promiscuous mode
[   94.010249][ T9571] dummy0: entered promiscuous mode
[   94.025686][ T9565] IPVS: using max 80 ests per chain, 192000 per kthread
[   94.095816][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023101400: rx timeout, send abort
[   94.099458][    C0] vcan0: j1939_tp_rxtimer: 0xffff888022e6fc00: abort rx timeout. Force session deactivation
[   94.103033][   T55] block nbd0: Receive control failed (result -104)
[   94.443090][ T9609] lo speed is unknown, defaulting to 1000
[   94.561045][ T9609] lo speed is unknown, defaulting to 1000
[   94.598587][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023101400: abort rx timeout. Force session deactivation
[   94.899997][ T9632] lo speed is unknown, defaulting to 1000
[   94.992587][ T9632] lo speed is unknown, defaulting to 1000
[   95.293189][ T9652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   96.963195][ T9785] netlink: 'syz.2.1704': attribute type 9 has an invalid length.
[   97.152309][ T9795] __nla_validate_parse: 9 callbacks suppressed
[   97.152321][ T9795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1709'.
[   97.157585][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'.
[   97.160493][ T9795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1709'.
[   97.163288][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'.
[   97.166942][ T9795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1709'.
[   97.281898][ T9807] netlink: 'syz.0.1715': attribute type 10 has an invalid length.
[   98.183490][ T9861] netlink: 'syz.1.1735': attribute type 1 has an invalid length.
[   98.264785][ T9861] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.668101][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1742'.
[   98.671463][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'.
[   98.679525][ T9887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.790704][ T9901] lo speed is unknown, defaulting to 1000
[   98.898313][ T9901] lo speed is unknown, defaulting to 1000
[   99.235465][ T9918] netlink: 'syz.1.1752': attribute type 3 has an invalid length.
[   99.238164][ T9918] netlink: 'syz.1.1752': attribute type 1 has an invalid length.
[   99.240919][ T9918] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1752'.
[   99.388436][ T9930] veth1_to_team: entered allmulticast mode
[   99.395469][ T9930] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   99.456111][ T9934] syzkaller1: tun_chr_ioctl cmd 1074025672
[   99.458554][ T9934] syzkaller1: ignored: set checksum disabled
[   99.659866][ T9943] tap0: tun_chr_ioctl cmd 1074025680
[   99.663009][ T9943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.667714][ T9943] D: renamed from syzkaller0
[   99.671231][ T9946] netlink: 'syz.1.1765': attribute type 11 has an invalid length.
[   99.671293][ T9943] tipc: Disabling bearer <eth:syzkaller0>
[   99.675855][ T9946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1765'.
[  100.142038][ T9993] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1788'.
[  100.351984][T10007] syzkaller0: entered promiscuous mode
[  100.355202][T10007] syzkaller0: entered allmulticast mode
[  101.132540][T10019] netlink: 'syz.0.1798': attribute type 3 has an invalid length.
[  101.141410][T10019] netlink: 'syz.0.1798': attribute type 1 has an invalid length.
[  101.147719][T10019] NCSI netlink: No device for ifindex 0
[  101.907691][T10025] lo speed is unknown, defaulting to 1000
[  102.030284][T10025] lo speed is unknown, defaulting to 1000
[  102.111798][T10044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.126533][T10044] syzkaller0: entered promiscuous mode
[  102.133932][T10044] syzkaller0: entered allmulticast mode
[  102.177885][T10044] tipc: Resetting bearer <eth:syzkaller0>
[  102.186332][T10043] tipc: Resetting bearer <eth:syzkaller0>
[  102.193197][T10043] tipc: Disabling bearer <eth:syzkaller0>
[  102.333888][T10061] __nla_validate_parse: 1 callbacks suppressed
[  102.333899][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[  102.436658][T10073] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1819'.
[  102.439858][T10065] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1819'.
[  102.590834][T10086] netlink: 'syz.2.1828': attribute type 3 has an invalid length.
[  102.593469][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'.
[  102.702107][T10096] netlink: 'syz.2.1833': attribute type 10 has an invalid length.
[  102.705405][T10096] batman_adv: batadv0: Adding interface: team0
[  102.707561][T10096] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  102.711843][T10096] netlink: 'syz.2.1833': attribute type 10 has an invalid length.
[  102.714770][T10096] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1833'.
[  102.717913][T10096] team0: entered promiscuous mode
[  102.719587][T10096] team_slave_0: entered promiscuous mode
[  102.721830][T10096] team_slave_1: entered promiscuous mode
[  102.725401][T10096] 8021q: adding VLAN 0 to HW filter on device team0
[  102.727798][T10096] batman_adv: batadv0: Interface activated: team0
[  102.730114][T10096] batman_adv: batadv0: Interface deactivated: team0
[  102.732451][T10096] batman_adv: batadv0: Removing interface: team0
[  102.737247][T10096] bridge0: port 3(team0) entered blocking state
[  102.739655][T10096] bridge0: port 3(team0) entered disabled state
[  102.741873][T10096] team0: entered allmulticast mode
[  102.743618][T10096] team_slave_0: entered allmulticast mode
[  102.745725][T10096] team_slave_1: entered allmulticast mode
[  103.127437][T10115] netlink: 'syz.0.1840': attribute type 12 has an invalid length.
[  103.761549][T10148] netlink: 'syz.2.1855': attribute type 83 has an invalid length.
[  103.790028][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1857'.
[  103.808819][T10151] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  103.845909][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1860'.
[  103.947983][T10169] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1866'.
[  103.957209][T10169] gretap0: entered promiscuous mode
[  103.964121][T10169] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1866'.
[  103.967101][T10169] 0{X: renamed from gretap0
[  103.971495][T10169] 0{X: left promiscuous mode
[  103.973170][T10169] 0{X: entered allmulticast mode
[  103.978687][T10169] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  104.047235][T10176] : entered promiscuous mode
[  104.158536][T10199] netlink: 'syz.2.1880': attribute type 2 has an invalid length.
[  104.161159][T10199] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.1880'.
[  104.322348][T10213] netlink: 'syz.0.1888': attribute type 6 has an invalid length.
[  104.479091][T10226] tipc: Enabled bearer <eth:vlan0>, priority 18
[  105.153232][T10283] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  105.626491][T10192] Set syz1 is full, maxelem 65536 reached
[  105.687343][T10307] ieee802154 phy1 wpan1: encryption failed: -22
[  105.949817][T10322] syz_tun (unregistering): left promiscuous mode
[  106.564718][T10330] syzkaller1: entered promiscuous mode
[  106.568490][T10330] syzkaller1: entered allmulticast mode
[  106.663276][T10346] netlink: 'syz.1.1944': attribute type 20 has an invalid length.
[  106.876731][T10377] syz_tun: entered promiscuous mode
[  106.878631][T10377] macvtap1: entered promiscuous mode
[  106.887702][T10377] syz_tun: left promiscuous mode
[  107.000680][T10394] policy can only be matched on NF_INET_PRE_ROUTING
[  107.000691][T10394] unable to load match
[  107.356905][T10435] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  107.455558][T10449] __nla_validate_parse: 8 callbacks suppressed
[  107.455569][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'.
[  107.522434][ T5724] hid-generic 0005:15C2:0003.0001: item fetching failed at offset 0/1
[  107.523275][T10457] netlink: 4660 bytes leftover after parsing attributes in process `syz.1.1993'.
[  107.533100][ T5724] hid-generic 0005:15C2:0003.0001: probe with driver hid-generic failed with error -22
[  107.669558][T10471] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2003'.
[  107.787826][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2012'.
[  107.811420][T10492] veth0_to_bridge: entered promiscuous mode
[  107.816572][T10491] veth0_to_bridge: left promiscuous mode
[  107.882834][T10504] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2019'.
[  107.887858][T10504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2019'.
[  107.918393][T10510] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2022'.
[  107.962099][T10516] dummy0: entered allmulticast mode
[  107.968085][T10515] dummy0: left allmulticast mode
[  108.129775][T10545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2039'.
[  108.184370][T10549] syzkaller1: entered promiscuous mode
[  108.186414][T10549] syzkaller1: entered allmulticast mode
[  108.239438][T10559] ip6gre1: entered allmulticast mode
[  108.290302][T10567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.335092][T10617] netlink: 'syz.0.2070': attribute type 23 has an invalid length.
[  109.348348][T10619] netlink: 'syz.1.2071': attribute type 1 has an invalid length.
[  109.350886][T10619] netlink: 'syz.1.2071': attribute type 1 has an invalid length.
[  109.543625][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'.
[  109.551139][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2079'.
[  109.908723][T10692] bridge0: port 4(vlan2) entered blocking state
[  109.911633][T10692] bridge0: port 4(vlan2) entered disabled state
[  109.925487][T10692] vlan2: entered allmulticast mode
[  109.927277][T10692] bridge0: entered allmulticast mode
[  109.931758][T10692] vlan2: left allmulticast mode
[  109.946742][T10692] bridge0: left allmulticast mode
[  110.677254][T10759] lo speed is unknown, defaulting to 1000
[  110.770117][T10759] lo speed is unknown, defaulting to 1000
[  111.124569][T10780] nbd1: detected capacity change from 0 to 63
[  111.127901][T10785] block nbd1: NBD_DISCONNECT
[  111.134835][T10785] block nbd1: Disconnected due to user request.
[  111.138876][T10785] block nbd1: shutting down sockets
[  111.146743][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.149747][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  111.152165][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.155086][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  111.157535][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.160297][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  111.162687][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.165621][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  111.179475][ T9854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.182607][ T9854] Buffer I/O error on dev nbd1, logical block 0, async page read
[  111.199566][ T9854] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.202519][ T9854] Buffer I/O error on dev nbd1, logical block 1, async page read
[  111.206365][ T9854] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.209192][ T9854] Buffer I/O error on dev nbd1, logical block 2, async page read
[  111.211782][ T9854] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.216014][ T9854] Buffer I/O error on dev nbd1, logical block 3, async page read
[  111.218517][ T9854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.228300][ T9854] Buffer I/O error on dev nbd1, logical block 0, async page read
[  111.234928][ T9854] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  111.237724][ T9854] Buffer I/O error on dev nbd1, logical block 1, async page read
[  111.251195][ T9854] ldm_validate_partition_table(): Disk read failed.
[  111.263643][ T9854] Dev nbd1: unable to read RDB block 0
[  111.267346][ T9854]  nbd1: unable to read partition table
[  111.276046][ T9854] ldm_validate_partition_table(): Disk read failed.
[  111.278918][ T9854] Dev nbd1: unable to read RDB block 0
[  111.282066][ T9854]  nbd1: unable to read partition table
[  111.436631][T10825] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  111.808150][T10875] netlink: 'syz.0.2184': attribute type 1 has an invalid length.
[  111.820676][T10875] netlink: 'syz.0.2184': attribute type 4 has an invalid length.
[  112.030785][T10893] bridge_slave_1: left allmulticast mode
[  112.032662][T10893] bridge_slave_1: left promiscuous mode
[  112.035216][T10893] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.039035][T10893] bridge_slave_0: left allmulticast mode
[  112.040796][T10893] bridge_slave_0: left promiscuous mode
[  112.042638][T10893] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.722403][T10934] netlink: 'syz.2.2209': attribute type 10 has an invalid length.
[  112.727207][T10934] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  112.733065][T10934] __nla_validate_parse: 13 callbacks suppressed
[  112.733074][T10934] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2209'.
[  112.747009][T10934] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2209'.
[  112.750474][T10934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.756204][T10934] netlink: 'syz.2.2209': attribute type 12 has an invalid length.
[  112.758792][T10934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2209'.
[  113.471711][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2226'.
[  113.650602][T11001] netlink: 212892 bytes leftover after parsing attributes in process `syz.0.2237'.
[  113.721474][T11009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.727310][T11009] syzkaller0: MTU too low for tipc bearer
[  113.729167][T11009] tipc: Disabling bearer <eth:syzkaller0>
[  113.908562][T11022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  113.931266][ T5209] Bluetooth: hci2: link tx timeout
[  113.933621][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.544218][T11035] sock: sock_set_timeout: `syz.1.2251' (pid 11035) tries to set negative timeout
[  114.567658][T11037] ==================================================================
[  114.570268][T11037] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x44cd/0x5400
[  114.572803][T11037] Read of size 1 at addr ffff8880253cc330 by task syz.1.2252/11037
[  114.576195][T11037] 
[  114.576992][T11037] CPU: 1 UID: 0 PID: 11037 Comm: syz.1.2252 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  114.577004][T11037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.577009][T11037] Call Trace:
[  114.577013][T11037]  <TASK>
[  114.577018][T11037]  dump_stack_lvl+0x189/0x250
[  114.577030][T11037]  ? __kasan_check_byte+0x12/0x40
[  114.577045][T11037]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.577053][T11037]  ? lock_release+0x4b/0x3e0
[  114.577066][T11037]  ? __virt_addr_valid+0x4a5/0x5c0
[  114.577077][T11037]  print_report+0xca/0x240
[  114.577091][T11037]  ? xfrm_state_find+0x44cd/0x5400
[  114.577098][T11037]  kasan_report+0x118/0x150
[  114.577109][T11037]  ? xfrm_state_find+0x44cd/0x5400
[  114.577117][T11037]  xfrm_state_find+0x44cd/0x5400
[  114.577125][T11037]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.577136][T11037]  ? xfrm_state_find+0x1da/0x5400
[  114.577143][T11037]  ? __pfx_xfrm_state_find+0x10/0x10
[  114.577160][T11037]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  114.577174][T11037]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  114.577183][T11037]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  114.577193][T11037]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  114.577210][T11037]  ? xfrm_expand_policies+0x41f/0x6a0
[  114.577219][T11037]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  114.577230][T11037]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  114.577241][T11037]  xfrm_lookup_route+0x3c/0x1c0
[  114.577249][T11037]  ? ip6_datagram_dst_update+0x511/0xcb0
[  114.577262][T11037]  ip6_datagram_dst_update+0x75c/0xcb0
[  114.577275][T11037]  ? __pfx_ip6_datagram_dst_update+0x10/0x10
[  114.577291][T11037]  ? __lock_acquire+0xab9/0xd20
[  114.577301][T11037]  ? __ip6_datagram_connect+0xb92/0x1150
[  114.577311][T11037]  __ip6_datagram_connect+0xbd1/0x1150
[  114.577321][T11037]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  114.577330][T11037]  ? __local_bh_enable_ip+0x12d/0x1c0
[  114.577341][T11037]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  114.577353][T11037]  ip6_datagram_connect_v6_only+0x63/0xa0
[  114.577367][T11037]  __sys_connect+0x316/0x440
[  114.577380][T11037]  ? __pfx___sys_connect+0x10/0x10
[  114.577392][T11037]  ? rcu_is_watching+0x15/0xb0
[  114.577405][T11037]  __x64_sys_connect+0x7a/0x90
[  114.577416][T11037]  do_syscall_64+0xfa/0x3b0
[  114.577428][T11037]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.577439][T11037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.577447][T11037]  ? exc_page_fault+0x9f/0xf0
[  114.577456][T11037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.577463][T11037] RIP: 0033:0x7ff968d8ebe9
[  114.577472][T11037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.577479][T11037] RSP: 002b:00007ff969be3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  114.577488][T11037] RAX: ffffffffffffffda RBX: 00007ff968fb5fa0 RCX: 00007ff968d8ebe9
[  114.577494][T11037] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000006
[  114.577498][T11037] RBP: 00007ff968e11e19 R08: 0000000000000000 R09: 0000000000000000
[  114.577503][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.577507][T11037] R13: 00007ff968fb6038 R14: 00007ff968fb5fa0 R15: 00007ffe472d5a28
[  114.577515][T11037]  </TASK>
[  114.577518][T11037] 
[  114.678923][T11037] Allocated by task 10026:
[  114.680361][T11037]  kasan_save_track+0x3e/0x80
[  114.681910][T11037]  __kasan_slab_alloc+0x6c/0x80
[  114.683463][T11037]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  114.685223][T11037]  xfrm_state_alloc+0x24/0x2f0
[  114.686804][T11037]  pfkey_add+0x6e4/0x2e00
[  114.688260][T11037]  pfkey_sendmsg+0xbfe/0x1090
[  114.689822][T11037]  __sock_sendmsg+0x21c/0x270
[  114.691414][T11037]  ____sys_sendmsg+0x505/0x830
[  114.692996][T11037]  ___sys_sendmsg+0x21f/0x2a0
[  114.694533][T11037]  __x64_sys_sendmsg+0x19b/0x260
[  114.696137][T11037]  do_syscall_64+0xfa/0x3b0
[  114.697648][T11037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.699533][T11037] 
[  114.700343][T11037] Freed by task 5724:
[  114.701658][T11037]  kasan_save_track+0x3e/0x80
[  114.703196][T11037]  kasan_save_free_info+0x46/0x50
[  114.704893][T11037]  __kasan_slab_free+0x62/0x70
[  114.706435][T11037]  kmem_cache_free+0x18f/0x400
[  114.708034][T11037]  xfrm_state_gc_task+0x518/0x6a0
[  114.709682][T11037]  process_scheduled_works+0xae1/0x17b0
[  114.711494][T11037]  worker_thread+0x8a0/0xda0
[  114.712998][T11037]  kthread+0x711/0x8a0
[  114.714340][T11037]  ret_from_fork+0x3fc/0x770
[  114.715857][T11037]  ret_from_fork_asm+0x1a/0x30
[  114.717409][T11037] 
[  114.718206][T11037] The buggy address belongs to the object at ffff8880253cc000
[  114.718206][T11037]  which belongs to the cache xfrm_state of size 928
[  114.722614][T11037] The buggy address is located 816 bytes inside of
[  114.722614][T11037]  freed 928-byte region [ffff8880253cc000, ffff8880253cc3a0)
[  114.726949][T11037] 
[  114.727744][T11037] The buggy address belongs to the physical page:
[  114.729744][T11037] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880253cc000 pfn:0x253cc
[  114.732902][T11037] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  114.735568][T11037] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  114.737928][T11037] page_type: f5(slab)
[  114.739243][T11037] raw: 00fff00000000040 ffff88801af1a780 dead000000000122 0000000000000000
[  114.741960][T11037] raw: ffff8880253cc000 00000000800e000b 00000000f5000000 0000000000000000
[  114.744661][T11037] head: 00fff00000000040 ffff88801af1a780 dead000000000122 0000000000000000
[  114.747384][T11037] head: ffff8880253cc000 00000000800e000b 00000000f5000000 0000000000000000
[  114.750169][T11037] head: 00fff00000000002 ffffea000094f301 00000000ffffffff 00000000ffffffff
[  114.752894][T11037] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  114.755629][T11037] page dumped because: kasan: bad access detected
[  114.757683][T11037] page_owner tracks the page as allocated
[  114.759466][T11037] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6495, tgid 6493 (syz.1.271), ts 56393584938, free_ts 52765882940
[  114.765265][T11037]  post_alloc_hook+0x240/0x2a0
[  114.766894][T11037]  get_page_from_freelist+0x21e4/0x22c0
[  114.768629][T11037]  __alloc_frozen_pages_noprof+0x181/0x370
[  114.770470][T11037]  alloc_pages_mpol+0x232/0x4a0
[  114.772016][T11037]  allocate_slab+0x8a/0x3b0
[  114.773472][T11037]  ___slab_alloc+0xbfc/0x1480
[  114.774990][T11037]  kmem_cache_alloc_noprof+0x283/0x3c0
[  114.776723][T11037]  xfrm_state_alloc+0x24/0x2f0
[  114.778254][T11037]  __find_acq_core+0x8a7/0x1c00
[  114.779787][T11037]  xfrm_find_acq+0x78/0xa0
[  114.781224][T11037]  xfrm_alloc_userspi+0x6b3/0xc90
[  114.782806][T11037]  xfrm_user_rcv_msg+0x7a3/0xab0
[  114.784370][T11037]  netlink_rcv_skb+0x208/0x470
[  114.785898][T11037]  xfrm_netlink_rcv+0x79/0x90
[  114.787395][T11037]  netlink_unicast+0x82f/0x9e0
[  114.789018][T11037]  netlink_sendmsg+0x805/0xb30
[  114.790568][T11037] page last free pid 6253 tgid 6252 stack trace:
[  114.792613][T11037]  __free_frozen_pages+0xc71/0xe70
[  114.794333][T11037]  __put_partials+0x161/0x1c0
[  114.795862][T11037]  put_cpu_partial+0x17c/0x250
[  114.797384][T11037]  __slab_free+0x2f7/0x400
[  114.798861][T11037]  qlist_free_all+0x97/0x140
[  114.800370][T11037]  kasan_quarantine_reduce+0x148/0x160
[  114.802146][T11037]  __kasan_slab_alloc+0x22/0x80
[  114.803730][T11037]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  114.805481][T11037]  __kernfs_new_node+0xd7/0x7e0
[  114.807050][T11037]  kernfs_new_node+0x102/0x210
[  114.808571][T11037]  __kernfs_create_file+0x4b/0x2e0
[  114.810257][T11037]  sysfs_add_file_mode_ns+0x238/0x300
[  114.811997][T11037]  internal_create_group+0x66d/0x1110
[  114.813756][T11037]  sysfs_create_groups+0x59/0x120
[  114.815396][T11037]  ib_setup_port_attrs+0xd96/0x2070
[  114.817102][T11037]  add_one_compat_dev+0x3d6/0x5c0
[  114.818750][T11037] 
[  114.819544][T11037] Memory state around the buggy address:
[  114.821385][T11037]  ffff8880253cc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.823944][T11037]  ffff8880253cc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.826517][T11037] >ffff8880253cc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.829063][T11037]                                      ^
[  114.830853][T11037]  ffff8880253cc380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  114.833418][T11037]  ffff8880253cc400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  114.835976][T11037] ==================================================================
[  114.838849][T11037] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  114.841195][T11037] CPU: 1 UID: 0 PID: 11037 Comm: syz.1.2252 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  114.845079][T11037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.848302][T11037] Call Trace:
[  114.849430][T11037]  <TASK>
[  114.850401][T11037]  dump_stack_lvl+0x99/0x250
[  114.851917][T11037]  ? __asan_memcpy+0x40/0x70
[  114.853465][T11037]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.855169][T11037]  ? __pfx__printk+0x10/0x10
[  114.856697][T11037]  panic+0x2db/0x790
[  114.857984][T11037]  ? __pfx_panic+0x10/0x10
[  114.859429][T11037]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  114.861410][T11037]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.863345][T11037]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.865424][T11037]  ? print_memory_metadata+0x314/0x400
[  114.867187][T11037]  ? xfrm_state_find+0x44cd/0x5400
[  114.868808][T11037]  check_panic_on_warn+0x89/0xb0
[  114.870476][T11037]  ? xfrm_state_find+0x44cd/0x5400
[  114.872137][T11037]  end_report+0x78/0x160
[  114.873678][T11037]  kasan_report+0x129/0x150
[  114.875162][T11037]  ? xfrm_state_find+0x44cd/0x5400
[  114.876790][T11037]  xfrm_state_find+0x44cd/0x5400
[  114.878394][T11037]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.880396][T11037]  ? xfrm_state_find+0x1da/0x5400
[  114.882005][T11037]  ? __pfx_xfrm_state_find+0x10/0x10
[  114.883710][T11037]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  114.885653][T11037]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  114.887781][T11037]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  114.889714][T11037]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  114.891628][T11037]  ? xfrm_expand_policies+0x41f/0x6a0
[  114.893324][T11037]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  114.895068][T11037]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  114.896912][T11037]  xfrm_lookup_route+0x3c/0x1c0
[  114.898503][T11037]  ? ip6_datagram_dst_update+0x511/0xcb0
[  114.900288][T11037]  ip6_datagram_dst_update+0x75c/0xcb0
[  114.902048][T11037]  ? __pfx_ip6_datagram_dst_update+0x10/0x10
[  114.904048][T11037]  ? __lock_acquire+0xab9/0xd20
[  114.905631][T11037]  ? __ip6_datagram_connect+0xb92/0x1150
[  114.907514][T11037]  __ip6_datagram_connect+0xbd1/0x1150
[  114.909369][T11037]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  114.911314][T11037]  ? __local_bh_enable_ip+0x12d/0x1c0
[  114.913109][T11037]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  114.915037][T11037]  ip6_datagram_connect_v6_only+0x63/0xa0
[  114.916898][T11037]  __sys_connect+0x316/0x440
[  114.918424][T11037]  ? __pfx___sys_connect+0x10/0x10
[  114.920087][T11037]  ? rcu_is_watching+0x15/0xb0
[  114.921673][T11037]  __x64_sys_connect+0x7a/0x90
[  114.923234][T11037]  do_syscall_64+0xfa/0x3b0
[  114.924769][T11037]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.926492][T11037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.928456][T11037]  ? exc_page_fault+0x9f/0xf0
[  114.929979][T11037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.931943][T11037] RIP: 0033:0x7ff968d8ebe9
[  114.933406][T11037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.939430][T11037] RSP: 002b:00007ff969be3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  114.942208][T11037] RAX: ffffffffffffffda RBX: 00007ff968fb5fa0 RCX: 00007ff968d8ebe9
[  114.944781][T11037] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000006
[  114.947410][T11037] RBP: 00007ff968e11e19 R08: 0000000000000000 R09: 0000000000000000
[  114.949977][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.952569][T11037] R13: 00007ff968fb6038 R14: 00007ff968fb5fa0 R15: 00007ffe472d5a28
[  114.955156][T11037]  </TASK>
[  114.956859][T11037] Kernel Offset: disabled
[  114.958314][T11037] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:24:18  Registers:
info registers vcpu 0

CPU#0
RAX=46b1ba40186eba00 RBX=ffffffff81969b18 RCX=46b1ba40186eba00 RDX=0000000000000001
RSI=ffffffff8d9792cd RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07bf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555565fcf808 CR3=00000001099d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81acf553 ffffffff81688e7f
XMM02=00007f24a9b87498 ffffffff81688e7f XMM03=00007f24a9b874a8 00007f24a9b874a0
XMM04=00007f24aa6ed100 00007f24a9b87460 XMM05=00007f24a9b87478 00007f24a9b874c0
XMM06=00007f24a9b874b8 00007f24a9b874b0 XMM07=00007f24a9b874a8 00007f24a9b874a0
XMM08=0000000000000000 00007f24a9a12ee7 XMM09=0000000000000000 00007f24a9a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000062 RBX=0000000000000062 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001b26 RDI=0000000000001b27 RBP=00000000000003f8 RSP=ffffc90002d9ecb0
R8 =ffff88801fa08237 R9 =1ffff11003f41046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95920 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff969be36c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c268905 CR3=000000003502e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff968f87498 00007ff968f87470 XMM03=00007ff968f874a8 00007ff968f874a0
XMM04=00007ff969aed100 00007ff968f87460 XMM05=00007ff968f87478 00007ff968f874c0
XMM06=00007ff968f874b8 00007ff968f874b0 XMM07=00007ff968f874a8 00007ff968f874a0
XMM08=0000000000000000 00007ff968e12ee7 XMM09=0000000000000000 00007ff968e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
