last executing test programs:

997.373894ms ago: executing program 1 (id=7811):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

827.752884ms ago: executing program 1 (id=7815):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4)
sendmsg$SOCK_DESTROY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0xc3ec}}, 0x0)

827.198648ms ago: executing program 1 (id=7818):
unshare(0x2040400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r0, 0x0, 0x9}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x25, 0x0, 0x0)

768.86837ms ago: executing program 1 (id=7819):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x70}}, 0x0)

768.655082ms ago: executing program 2 (id=7820):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}})

768.512223ms ago: executing program 1 (id=7821):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffea7, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

768.240183ms ago: executing program 2 (id=7822):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0x36, 0x0, &(0x7f00000004c0)="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", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x20}, 0x3d)

700.13833ms ago: executing program 1 (id=7823):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x200, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/19, 0x13}, 0xd1}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

699.77ms ago: executing program 2 (id=7825):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)

569.949932ms ago: executing program 2 (id=7829):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000540)="93d9fa00000000", 0x7}], 0x1)

569.775983ms ago: executing program 2 (id=7831):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x40000)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x31)

450.263155ms ago: executing program 2 (id=7834):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80001002, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r8, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xec, 0x1, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xf}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_ZONE={0x6}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffff3cd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd58d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xb}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40810}, 0x40)
setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000040)=r10, 0x4)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x1})
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6a225, 0x10000}, [@IFLA_WEIGHT={0x8, 0xf, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000d00000000b703000000000000850000001b000000060000e47818a39e18549833204029a8a7d535b3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

217.621142ms ago: executing program 0 (id=7843):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

140.368308ms ago: executing program 0 (id=7844):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

140.1563ms ago: executing program 0 (id=7845):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r1, 0x711, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)

60.415609ms ago: executing program 0 (id=7846):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

59.987209ms ago: executing program 0 (id=7847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0000000000000700000000080017004e224e24050016000000000008000d00050000000c001400", @ANYRES64], 0x4c}, 0x1, 0x0, 0x0, 0x4040016}, 0x0)

0s ago: executing program 0 (id=7848):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0, 0x10}, 0x4, 0x0, 0x0, 0x24004045}, 0x2400c011)

kernel console output (not intermixed with test programs):

964': attribute type 21 has an invalid length.
[  148.232117][T10437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1964'.
[  148.290217][T10375] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  148.294179][T10375] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  148.310045][T10375] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  148.316544][T10375] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  148.371125][T10446] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1968'.
[  148.629392][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'.
[  148.638654][T10474] netlink: 'syz.1.1980': attribute type 1 has an invalid length.
[  148.641324][T10474] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1980'.
[  148.769658][T10484] netlink: 'syz.1.1985': attribute type 1 has an invalid length.
[  149.020353][T10513] syzkaller1: entered promiscuous mode
[  149.022513][T10513] syzkaller1: entered allmulticast mode
[  149.464769][T10542] netlink: 'syz.2.2012': attribute type 20 has an invalid length.
[  150.425052][T10569] bridge0: left promiscuous mode
[  150.542711][T10569] ..0: left allmulticast mode
[  150.544267][T10569] hsr_slave_0: left allmulticast mode
[  150.545941][T10569] hsr_slave_1: left allmulticast mode
[  150.599899][T10569] bond2: left promiscuous mode
[  150.601683][T10569] bridge3: left promiscuous mode
[  150.609882][T10569] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  150.612426][T10569] macsec1: left promiscuous mode
[  150.613986][T10569] macsec1: left allmulticast mode
[  150.645414][ T5905] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.650083][ T5905] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.653721][ T5905] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.666532][ T5905] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.813300][T10585] netlink: 'syz.0.2027': attribute type 9 has an invalid length.
[  150.870388][T10588] ip6gre1: entered allmulticast mode
[  150.974950][T10595] __nla_validate_parse: 7 callbacks suppressed
[  150.974994][T10595] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2032'.
[  152.703870][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'.
[  152.905690][T10670] team0: Port device dummy0 removed
[  152.913461][T10670] bridge_slave_0: left allmulticast mode
[  152.915844][T10670] bridge_slave_0: left promiscuous mode
[  152.918687][T10670] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.924948][T10670] bridge_slave_1: left allmulticast mode
[  152.935141][T10670] bridge_slave_1: left promiscuous mode
[  152.945621][T10670] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.985397][T10670] bond0: (slave bond_slave_0): Releasing backup interface
[  153.083175][T10671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'.
[  153.109641][T10670] bond0: (slave bond_slave_1): Releasing backup interface
[  153.174997][T10670] team0: Port device team_slave_0 removed
[  153.205527][T10670] team0: Port device team_slave_1 removed
[  153.213916][T10670] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.218489][T10670] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.224970][T10670] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.230263][T10670] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.271869][T10670] bond1: (slave geneve2): Releasing backup interface
[  153.302472][T10670] bond3: (slave gretap2): Releasing active interface
[  153.527294][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2064'.
[  153.535690][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2064'.
[  153.542237][T10682] netlink: 'syz.2.2064': attribute type 4 has an invalid length.
[  153.562238][T10682] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2064'.
[  153.861781][T10607] Set syz1 is full, maxelem 65536 reached
[  154.012205][T10708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2077'.
[  154.016425][T10708] sch_fq: defrate 0 ignored.
[  154.295460][T10729] netlink: 'syz.0.2085': attribute type 1 has an invalid length.
[  154.300283][T10729] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2085'.
[  154.464055][T10748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.950930][T10800] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2117'.
[  155.217844][T10819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.913205][T10854] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.917609][T10854] team0: Port device bond1 added
[  156.252954][T10873] netlink: 'syz.2.2149': attribute type 1 has an invalid length.
[  156.446064][T10894] netlink: 'syz.1.2159': attribute type 10 has an invalid length.
[  156.495767][T10899] netlink: 'syz.2.2163': attribute type 1 has an invalid length.
[  156.499456][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'.
[  156.634334][T10906] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.637308][T10906] bridge0: port 3(bond2) entered blocking state
[  156.639330][T10906] bridge0: port 3(bond2) entered disabled state
[  156.641560][T10906] bond2: entered allmulticast mode
[  156.644733][T10906] bond2: entered promiscuous mode
[  156.648242][T10906] bridge0: port 3(bond2) entered blocking state
[  156.650506][T10906] bridge0: port 3(bond2) entered forwarding state
[  156.676656][T10915] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  156.799099][   T26] bridge0: port 3(bond2) entered disabled state
[  157.078511][T10952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.102336][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2185'.
[  157.540764][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2205'.
[  158.064158][T11030] netlink: 'syz.2.2222': attribute type 10 has an invalid length.
[  158.166137][T11040] netlink: 'syz.2.2227': attribute type 10 has an invalid length.
[  158.357491][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'.
[  158.478250][T11064] netlink: 'syz.0.2238': attribute type 1 has an invalid length.
[  158.481331][T11064] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2238'.
[  159.298315][T11081] ieee802154 phy1 wpan1: encryption failed: -22
[  159.508408][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'.
[  159.703532][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2260'.
[  160.855044][T11147] netlink: 'syz.2.2272': attribute type 1 has an invalid length.
[  160.858436][T11147] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2272'.
[  160.862232][T11147] netlink: 'syz.2.2272': attribute type 1 has an invalid length.
[  161.372889][T11184] netlink: 'syz.1.2290': attribute type 1 has an invalid length.
[  161.376061][T11184] netlink: 'syz.1.2290': attribute type 2 has an invalid length.
[  161.534305][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'.
[  161.584870][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'.
[  161.596112][T11209] erspan0: entered promiscuous mode
[  161.601162][T11209] macvtap1: entered promiscuous mode
[  161.603639][T11209] macvtap1: entered allmulticast mode
[  161.605952][T11209] erspan0: entered allmulticast mode
[  161.615482][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'.
[  161.620103][T11209] erspan0: left allmulticast mode
[  161.622322][T11209] erspan0: left promiscuous mode
[  161.644080][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'.
[  161.856689][T11225] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2308'.
[  161.934503][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2314'.
[  161.939618][T11238] netlink: 'syz.1.2314': attribute type 18 has an invalid length.
[  161.948585][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.951613][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2314'.
[  161.955330][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.958809][T11238] netlink: 'syz.1.2314': attribute type 18 has an invalid length.
[  161.962060][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.970416][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.034234][T11242] nbd: must specify an index to disconnect
[  162.184018][T11255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.839034][T11286] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.2335'.
[  163.083108][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'.
[  163.280472][T11325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  163.424512][T11340] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2363'.
[  163.695457][T11362] netlink: 'syz.2.2373': attribute type 12 has an invalid length.
[  164.511524][T11434] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  165.330019][T11473] netlink: 'syz.2.2420': attribute type 1 has an invalid length.
[  165.683678][T11487] netlink: 'syz.2.2427': attribute type 2 has an invalid length.
[  166.289231][   T56] block nbd1: Receive control failed (result -32)
[  166.829811][T11569] __nla_validate_parse: 8 callbacks suppressed
[  166.829830][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'.
[  166.883494][T11573] nbd: nbd1 already in use
[  166.889947][T11577] netlink: 'syz.2.2464': attribute type 1 has an invalid length.
[  166.892836][T11577] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.901872][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2465'.
[  166.905257][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2465'.
[  166.916277][T11576] ip6gretap0: entered promiscuous mode
[  166.926158][T11576] syz_tun: entered promiscuous mode
[  167.045673][T11591] netlink: 'syz.2.2471': attribute type 1 has an invalid length.
[  167.978920][T11623] bridge_slave_0: invalid flags given to default FDB implementation
[  168.068448][T11625] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2485'.
[  168.201159][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2491'.
[  168.438969][T11656] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2499'.
[  168.507807][T11664] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2503'.
[  169.178129][T11709] netlink: 'syz.2.2523': attribute type 83 has an invalid length.
[  169.257996][T11715] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2526'.
[  169.262196][T11717] netlink: 'syz.0.2527': attribute type 4 has an invalid length.
[  169.402477][T11730] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2533'.
[  169.538773][T11742] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  169.693462][T11759] netlink: 'syz.2.2548': attribute type 4 has an invalid length.
[  169.710974][T11759] netlink: 'syz.2.2548': attribute type 4 has an invalid length.
[  169.830979][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2554'.
[  169.838086][T11772] tc_dump_action: action bad kind
[  170.602436][T11799] netlink: 'syz.2.2565': attribute type 11 has an invalid length.
[  170.666513][T11803] batadv_slave_0: entered promiscuous mode
[  170.670454][T11803] batadv_slave_0: left promiscuous mode
[  170.728849][T11806] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  171.211597][T11839] pim6reg1: entered promiscuous mode
[  171.213818][T11839] pim6reg1: entered allmulticast mode
[  171.296224][   T33] audit: type=1800 audit(1758117869.210:4): pid=11826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2576" name="cgroup.controllers" dev="tmpfs" ino=4393 res=0 errno=0
[  171.459551][T11854] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.463318][T11854] syzkaller0: entered promiscuous mode
[  171.465142][T11854] syzkaller0: entered allmulticast mode
[  171.484520][T11854] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  171.507258][T11854] tipc: Resetting bearer <eth:syzkaller0>
[  171.516089][T11852] tipc: Resetting bearer <eth:syzkaller0>
[  171.535636][T11852] tipc: Disabling bearer <eth:syzkaller0>
[  171.921617][T11890] __nla_validate_parse: 4 callbacks suppressed
[  171.921629][T11890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2608'.
[  172.032694][T11896] netlink: 'syz.0.2611': attribute type 1 has an invalid length.
[  172.102903][T11905] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  172.181209][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2618'.
[  172.325923][T11917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.328983][T11917] IPv6: NLM_F_CREATE should be set when creating new route
[  172.331995][T11917] IPv6: NLM_F_CREATE should be set when creating new route
[  172.334832][T11917] IPv6: NLM_F_CREATE should be set when creating new route
[  172.358402][T11917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  172.544147][T11939] : renamed from batadv_slave_1 (while UP)
[  172.601904][T11943] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2633'.
[  172.877667][T11969] syzkaller1: entered promiscuous mode
[  172.879979][T11969] syzkaller1: entered allmulticast mode
[  172.940347][T11975] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2649'.
[  172.943944][T11975] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2649'.
[  173.641014][T12021] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2665'.
[  173.644640][T12021] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2665'.
[  173.719959][T12023] dvmrp1: entered allmulticast mode
[  173.739367][T12025] netlink: 'syz.1.2667': attribute type 83 has an invalid length.
[  173.848899][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'.
[  173.855104][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'.
[  173.880170][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2670'.
[  174.010327][T12041] netlink: 'syz.0.2675': attribute type 2 has an invalid length.
[  174.560386][T12090] netlink: 'syz.2.2697': attribute type 3 has an invalid length.
[  175.257428][T12156] xt_socket: unknown flags 0xd0
[  175.391189][T12165] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  175.398897][T12165] tipc: Enabled bearer <udp:syz0>, priority 10
[  176.022575][T12205] netlink: 'syz.0.2753': attribute type 10 has an invalid length.
[  176.189708][T12221] netlink: 'syz.0.2761': attribute type 3 has an invalid length.
[  177.099578][T12238] __nla_validate_parse: 9 callbacks suppressed
[  177.099589][T12238] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2767'.
[  177.105480][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2767'.
[  177.106112][T12237] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2769'.
[  177.222024][T12250] netlink: 'syz.2.2775': attribute type 1 has an invalid length.
[  177.225172][T12250] netlink: 'syz.2.2775': attribute type 11 has an invalid length.
[  177.231807][T12250] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2775'.
[  177.669057][T12279] netlink: 'syz.0.2788': attribute type 11 has an invalid length.
[  177.730468][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2789'.
[  177.989763][T12293] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2793'.
[  178.095767][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2796'.
[  178.245063][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'.
[  178.249481][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2801'.
[  178.252679][T12309] netlink: 'syz.2.2801': attribute type 6 has an invalid length.
[  178.469708][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2806'.
[  178.932721][T12362] netlink: 'syz.1.2827': attribute type 1 has an invalid length.
[  178.935445][T12362] netlink: 'syz.1.2827': attribute type 1 has an invalid length.
[  179.264816][T12374] smc: net device bond0 applied user defined pnetid SYZ2
[  179.275961][T12374] smc: net device bond0 erased user defined pnetid SYZ2
[  179.355513][T12380] syz.0.2833 (12380) used greatest stack depth: 19408 bytes left
[  179.959416][T12415] netlink: 'syz.1.2850': attribute type 9 has an invalid length.
[  180.922777][T12483] xt_limit: Overflow, try lower: 604147548/4200216962
[  180.930599][T12484] netlink: 'syz.1.2878': attribute type 13 has an invalid length.
[  180.933765][T12484] netlink: 'syz.1.2878': attribute type 17 has an invalid length.
[  181.021504][T12484] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.043774][T12484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  181.112559][T12484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.781559][T12569] syzkaller0: entered promiscuous mode
[  182.785694][T12569] syzkaller0: entered allmulticast mode
[  182.845112][T12578] netlink: 'syz.0.2924': attribute type 1 has an invalid length.
[  182.848572][T12578] __nla_validate_parse: 5 callbacks suppressed
[  182.848585][T12578] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2924'.
[  182.854513][T12578] netlink: 'syz.0.2924': attribute type 1 has an invalid length.
[  182.857939][T12578] netlink: 'syz.0.2924': attribute type 2 has an invalid length.
[  185.612845][T12654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2955'.
[  185.749439][T12665] netlink: 'syz.0.2958': attribute type 4 has an invalid length.
[  185.786615][T12665] netlink: 'syz.0.2958': attribute type 4 has an invalid length.
[  186.419352][T12712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'.
[  186.488298][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2984'.
[  187.811463][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'.
[  187.873155][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'.
[  187.976522][T12762] syzkaller1: entered promiscuous mode
[  187.981387][T12762] syzkaller1: entered allmulticast mode
[  188.214990][T12771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3008'.
[  188.423198][T12777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3012'.
[  188.434633][T12777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3012'.
[  188.442488][T12777] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3012'.
[  188.612839][T12781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3013'.
[  188.620096][T12781] vlan0: entered promiscuous mode
[  188.733983][T12785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3015'.
[  188.835564][T12793] netlink: 'syz.0.3019': attribute type 3 has an invalid length.
[  189.044829][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880284cfc00: rx timeout, send abort
[  189.049810][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880284cdc00: rx timeout, send abort
[  189.053578][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880284cfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  189.060595][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880284cdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  189.198278][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3032'.
[  189.202973][T12824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  189.228323][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3034'.
[  189.290855][T12834] netlink: 'syz.2.3036': attribute type 1 has an invalid length.
[  189.293807][T12834] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3036'.
[  189.298570][T12834] netlink: 'syz.2.3036': attribute type 1 has an invalid length.
[  189.655063][T12865] netlink: 'syz.2.3051': attribute type 1 has an invalid length.
[  189.660617][T12865] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.718502][T12871] netlink: 'syz.2.3053': attribute type 1 has an invalid length.
[  189.959596][T12890] syzkaller0: entered promiscuous mode
[  189.961948][T12890] syzkaller0: entered allmulticast mode
[  191.285657][T12904] netlink: 'syz.2.3069': attribute type 282 has an invalid length.
[  191.587788][T12933] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7
[  191.597764][T12931] Unsupported ieee802154 address type: 0
[  191.933957][T12965] netlink: 'syz.2.3097': attribute type 12 has an invalid length.
[  191.939566][T12965] netlink: 'syz.2.3097': attribute type 11 has an invalid length.
[  192.471315][T13012] netlink: 'syz.2.3120': attribute type 1 has an invalid length.
[  192.619281][T13018] netlink: 'syz.2.3122': attribute type 1 has an invalid length.
[  192.653660][T13018] 8021q: adding VLAN 0 to HW filter on device bond3
[  192.674045][T13018] bond3: (slave wlan0): Opening slave failed
[  192.687022][T13018] vlan3: entered allmulticast mode
[  192.688951][T13018] veth1: entered allmulticast mode
[  192.694722][T13018] bond3: (slave vlan3): making interface the new active one
[  192.699326][T13018] bond3: (slave vlan3): Enslaving as an active interface with an up link
[  193.299933][T13059] __nla_validate_parse: 6 callbacks suppressed
[  193.299946][T13059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3140'.
[  193.319989][T13063] bridge0: port 2(batadv1) entered blocking state
[  193.322890][T13063] bridge0: port 2(batadv1) entered disabled state
[  193.325462][T13063] batadv1: entered allmulticast mode
[  193.330641][T13063] batadv1: entered promiscuous mode
[  193.345353][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'.
[  193.482031][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3149'.
[  193.511643][T13081] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  193.661951][T13093] netlink: zone id is out of range
[  193.664949][T13093] netlink: zone id is out of range
[  193.668639][T13093] netlink: zone id is out of range
[  193.670882][T13093] netlink: zone id is out of range
[  193.707696][T13093] netlink: set zone limit has 4 unknown bytes
[  193.729930][T13093] netlink: del zone limit has 4 unknown bytes
[  193.770263][T13099] xt_l2tp: unknown flags: 51
[  193.816692][ T5888] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  193.820361][ T5888] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  194.231823][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.620135][T13112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3165'.
[  194.747505][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'.
[  194.834685][T13119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3166'.
[  194.923456][T13125] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3170'.
[  195.303977][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'.
[  195.312137][T13148] validate_nla: 1 callbacks suppressed
[  195.312147][T13148] netlink: 'syz.2.3182': attribute type 5 has an invalid length.
[  195.331485][T13148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3182'.
[  195.343076][T13148] geneve3: entered promiscuous mode
[  195.345267][T13148] geneve3: entered allmulticast mode
[  195.351748][ T5888] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  195.356828][ T5888] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  195.360290][ T5888] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  195.375188][ T5888] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  196.040676][T13195] netlink: 'syz.1.3201': attribute type 32 has an invalid length.
[  196.043597][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'.
[  196.125582][T13173] tipc: Resetting bearer <eth:macvtap0>
[  196.174102][T13173] ip6gre2: left promiscuous mode
[  196.265391][T13195] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  196.296986][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.300174][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.304362][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.309597][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.312734][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.316008][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.324615][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.327825][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.008875][T13241] netlink: 'syz.2.3220': attribute type 1 has an invalid length.
[  197.045640][T13241] 8021q: adding VLAN 0 to HW filter on device bond4
[  197.082648][T13241] vlan4: entered promiscuous mode
[  197.084805][T13241] bond4: entered promiscuous mode
[  197.088215][T13241] vlan4: entered allmulticast mode
[  197.091445][T13241] bond4: entered allmulticast mode
[  197.166157][T13241] bond4: (slave gretap1): making interface the new active one
[  197.173654][T13241] gretap1: entered promiscuous mode
[  197.176049][T13241] gretap1: entered allmulticast mode
[  197.181025][T13241] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  198.352941][T13333] __nla_validate_parse: 7 callbacks suppressed
[  198.352957][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'.
[  198.490249][T13347] netlink: 'syz.0.3272': attribute type 1 has an invalid length.
[  198.738995][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3281'.
[  198.747851][T13369] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  198.982717][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3288'.
[  200.257986][T13430] syzkaller1: entered promiscuous mode
[  200.260596][T13430] syzkaller1: entered allmulticast mode
[  200.266156][T13432] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  200.272758][T13432] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  200.324981][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3307'.
[  200.344581][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3307'.
[  200.803552][T13469] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3322'.
[  200.812441][T13469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  201.602940][T13519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.888642][T13539] netlink: 212856 bytes leftover after parsing attributes in process `syz.0.3352'.
[  202.063839][T13498] delete_channel: no stack
[  202.153600][T13555] netlink: 'syz.0.3360': attribute type 3 has an invalid length.
[  202.539696][T13591] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  202.542719][T13591] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  203.397464][T13642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.402238][T13642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  203.499073][T13642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.502397][T13642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  203.557905][T13642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.562208][T13642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  203.653130][T13642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.658487][T13642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  203.705186][T13667] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3405'.
[  203.722239][T13667] hsr_slave_0: left promiscuous mode
[  203.725864][T13667] hsr_slave_1: left promiscuous mode
[  203.802869][ T5888] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  203.810340][ T5888] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  203.840927][ T5888] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  203.844342][ T5888] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  203.849372][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'.
[  203.881111][T13675] lo speed is unknown, defaulting to 1000
[  203.881187][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  203.887607][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  203.894842][T13675] lo speed is unknown, defaulting to 1000
[  203.912134][T13675] lo speed is unknown, defaulting to 1000
[  203.912200][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  203.924345][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  203.924539][T13677] netlink: 'syz.0.3410': attribute type 1 has an invalid length.
[  204.121851][T13675] infiniband syz0: set active
[  204.123808][    T9] lo speed is unknown, defaulting to 1000
[  204.127022][T13675] infiniband syz0: added lo
[  204.161819][T13675] RDS/IB: syz0: added
[  204.163487][T13675] smc: adding ib device syz0 with port count 1
[  204.165877][T13675] smc:    ib device syz0 port 1 has pnetid 
[  204.182330][T13675] lo speed is unknown, defaulting to 1000
[  204.186895][    T9] lo speed is unknown, defaulting to 1000
[  204.376846][T13675] lo speed is unknown, defaulting to 1000
[  204.563540][T13675] lo speed is unknown, defaulting to 1000
[  204.788860][T13675] lo speed is unknown, defaulting to 1000
[  205.261828][T13729] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  205.274030][T13729] bond0: (slave dummy0): Releasing backup interface
[  205.301831][T13729] bridge_slave_0: left allmulticast mode
[  205.303807][T13729] bridge_slave_0: left promiscuous mode
[  205.305715][T13729] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.331824][T13729] bridge_slave_1: left allmulticast mode
[  205.334138][T13729] bridge_slave_1: left promiscuous mode
[  205.347987][T13729] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.399790][T13729] bond0: (slave bond_slave_0): Releasing backup interface
[  205.413387][T13729] bond0: (slave bond_slave_1): Releasing backup interface
[  205.440767][T13729] team0: Port device team_slave_0 removed
[  205.451917][T13729] team0: Port device team_slave_1 removed
[  205.459646][T13729] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.462937][T13743] netlink: 'syz.2.3431': attribute type 10 has an invalid length.
[  205.480931][T13729] team0: Port device bond1 removed
[  205.483518][T13729] bond2: left allmulticast mode
[  205.485501][T13729] bond2: left promiscuous mode
[  205.488844][T13729] bridge0: port 3(bond2) entered disabled state
[  205.495863][T13729] bond3: (slave vlan3): Releasing active interface
[  205.510039][T13729] bond4: (slave gretap1): Releasing active interface
[  205.512803][T13729] gretap1: left promiscuous mode
[  205.518453][T13729] gretap1: left allmulticast mode
[  205.538494][T13743] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  205.547339][T13743] bond0: (slave wlan1): Opening slave failed
[  205.552172][T13746] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  205.556094][T13746] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.715804][T13750] dvmrp8: entered allmulticast mode
[  205.732222][T13749] dvmrp8: left allmulticast mode
[  206.334368][T13785] ieee802154 phy1 wpan1: encryption failed: -22
[  206.554584][T13812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'.
[  206.564073][T13812] vlan5: entered promiscuous mode
[  206.566100][T13812] macvtap0: entered promiscuous mode
[  207.187479][T13851] nbd2: detected capacity change from 0 to 127
[  207.191634][   T56] block nbd2: Receive control failed (result -32)
[  207.192771][T13689] block nbd2: Send control failed (result -32)
[  207.198253][T13689] block nbd2: Request send failed, requeueing
[  207.203012][   T60] block nbd2: Dead connection, failed to find a fallback
[  207.205946][   T60] block nbd2: shutting down sockets
[  207.208989][   T60] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.212852][   T60] Buffer I/O error on dev nbd2, logical block 0, async page read
[  207.219078][T13689] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.222871][T13689] Buffer I/O error on dev nbd2, logical block 1, async page read
[  207.226225][T13689] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.230427][T13689] Buffer I/O error on dev nbd2, logical block 2, async page read
[  207.233547][T13689] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.239981][T13689] Buffer I/O error on dev nbd2, logical block 3, async page read
[  207.243362][T13689] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.248006][T13689] Buffer I/O error on dev nbd2, logical block 0, async page read
[  207.251313][T13689] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.254991][T13689] Buffer I/O error on dev nbd2, logical block 1, async page read
[  207.260811][T13689] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.264324][T13689] Buffer I/O error on dev nbd2, logical block 2, async page read
[  207.270687][T13689] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.274245][T13689] Buffer I/O error on dev nbd2, logical block 3, async page read
[  207.280364][T13689] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.283993][T13689] Buffer I/O error on dev nbd2, logical block 0, async page read
[  207.288069][T13689] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  207.291831][T13689] Buffer I/O error on dev nbd2, logical block 1, async page read
[  207.302675][T13689] ldm_validate_partition_table(): Disk read failed.
[  207.308469][T13689] Dev nbd2: unable to read RDB block 0
[  207.312259][T13689]  nbd2: unable to read partition table
[  207.324466][T13689] ldm_validate_partition_table(): Disk read failed.
[  207.329856][T13689] Dev nbd2: unable to read RDB block 0
[  207.333636][T13689]  nbd2: unable to read partition table
[  207.555579][T13870] syzkaller1: entered promiscuous mode
[  207.558077][T13870] syzkaller1: entered allmulticast mode
[  208.174892][T13888] lo speed is unknown, defaulting to 1000
[  208.830796][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'.
[  208.838479][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3505'.
[  208.845499][T13907] netlink: 'syz.2.3505': attribute type 15 has an invalid length.
[  208.897980][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'.
[  208.904198][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3505'.
[  208.924516][T13907] netlink: 'syz.2.3505': attribute type 15 has an invalid length.
[  209.692986][T13964] lo speed is unknown, defaulting to 1000
[  210.811741][T14015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.821658][T14015] syzkaller0: entered promiscuous mode
[  210.823941][T14015] syzkaller0: entered allmulticast mode
[  210.860939][T14015] tipc: Resetting bearer <eth:syzkaller0>
[  210.869328][T14012] tipc: Resetting bearer <eth:syzkaller0>
[  210.914091][T14012] tipc: Disabling bearer <eth:syzkaller0>
[  211.828412][ T7369] IPVS: ip_vs_send_async error -101
[  214.932381][T14120] nbd: nbd1 already in use
[  214.934603][T14120] nbd: nbd1 already in use
[  215.413946][T14128] vlan5: entered promiscuous mode
[  215.415924][T14128] team0: entered promiscuous mode
[  218.402319][T14181] netlink: 'syz.0.3599': attribute type 13 has an invalid length.
[  218.410822][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3599'.
[  218.421122][T14181] netlink: 'syz.0.3599': attribute type 13 has an invalid length.
[  218.424346][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3599'.
[  220.162635][T14192] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  220.761638][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880398bfc00: rx timeout, send abort
[  220.764552][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880398be800: rx timeout, send abort
[  220.767779][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880398bfc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  220.774503][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880398be800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  222.057490][T14222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3618'.
[  222.067507][T14229] sock: sock_set_timeout: `syz.1.3620' (pid 14229) tries to set negative timeout
[  223.105554][T14256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3628'.
[  223.271145][T14262] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3631'.
[  224.863801][T14279] lo speed is unknown, defaulting to 1000
[  226.776833][T14271] Set syz1 is full, maxelem 65536 reached
[  226.815379][T14289] netlink: 'syz.0.3642': attribute type 12 has an invalid length.
[  227.847600][T14299] netlink: 'syz.0.3646': attribute type 3 has an invalid length.
[  227.913769][T14303] netlink: 'syz.0.3648': attribute type 12 has an invalid length.
[  230.083192][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'.
[  230.087067][T14359] netlink: 'syz.2.3673': attribute type 12 has an invalid length.
[  230.091249][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'.
[  230.094798][T14359] netlink: 'syz.2.3673': attribute type 12 has an invalid length.
[  230.160723][T14361] syzkaller0: entered promiscuous mode
[  230.162934][T14361] syzkaller0: entered allmulticast mode
[  230.780834][T14365] vxcan1: entered allmulticast mode
[  232.563009][T14393] netlink: 'syz.2.3687': attribute type 1 has an invalid length.
[  232.568192][T14393] netlink: 600 bytes leftover after parsing attributes in process `syz.2.3687'.
[  232.772358][T14401] tap0: tun_chr_ioctl cmd 1074025677
[  232.774936][T14401] tap0: linktype set to 774
[  234.226937][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3702'.
[  234.299542][T14438] tipc: Enabled bearer <udp:syz2>, priority 10
[  234.967802][T14456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3710'.
[  235.144788][T14462] netlink: 'syz.2.3713': attribute type 1 has an invalid length.
[  235.149490][T14462] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3713'.
[  235.269703][T14468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.825060][T14470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3717'.
[  235.894590][T14472] netlink: 'syz.2.3718': attribute type 13 has an invalid length.
[  235.898742][T14472] netlink: 'syz.2.3718': attribute type 17 has an invalid length.
[  235.998981][T14472] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.065368][T14472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.136737][T14476] netlink: 'syz.2.3720': attribute type 3 has an invalid length.
[  236.293324][T14484] netlink: 'syz.2.3724': attribute type 3 has an invalid length.
[  236.515989][T14495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.688944][T14501] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3733'.
[  239.236202][T14558] lo speed is unknown, defaulting to 1000
[  240.931124][T14618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.934371][T14618] syzkaller0: entered promiscuous mode
[  240.938531][T14618] syzkaller0: entered allmulticast mode
[  240.968936][T14618] tipc: Resetting bearer <eth:syzkaller0>
[  240.974533][T14617] tipc: Resetting bearer <eth:syzkaller0>
[  241.033854][T14617] tipc: Disabling bearer <eth:syzkaller0>
[  243.033286][T14642] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  243.061906][T14642] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  245.695426][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  245.699107][   T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  245.708689][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  245.720048][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  245.743148][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  245.781383][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  245.784824][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  245.831237][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  246.880972][T14764] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  247.342935][T14780] pimreg: entered allmulticast mode
[  248.534277][T14798] lo speed is unknown, defaulting to 1000
[  248.954386][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3849'.
[  249.529705][T14821] lo speed is unknown, defaulting to 1000
[  249.650780][T14831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.670499][T14831] syzkaller0: entered promiscuous mode
[  249.679867][T14831] syzkaller0: entered allmulticast mode
[  249.779935][T14831] tipc: Resetting bearer <eth:syzkaller0>
[  250.245599][T14830] tipc: Resetting bearer <eth:syzkaller0>
[  250.304357][T14830] tipc: Disabling bearer <eth:syzkaller0>
[  250.332013][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3862'.
[  250.491814][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3865'.
[  250.696529][T14846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3866'.
[  251.133885][T14859] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3872'.
[  251.150474][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'.
[  251.799864][T14878] syzkaller1: entered promiscuous mode
[  251.802009][T14878] syzkaller1: entered allmulticast mode
[  252.325582][T14886] bridge10: entered promiscuous mode
[  252.330675][T14886] bridge10: entered allmulticast mode
[  252.689384][T14890] lo speed is unknown, defaulting to 1000
[  253.038452][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3887'.
[  254.574494][T14922] lo speed is unknown, defaulting to 1000
[  255.551710][T14948] syzkaller1: entered promiscuous mode
[  255.553620][T14948] syzkaller1: entered allmulticast mode
[  256.171011][T14943] lo speed is unknown, defaulting to 1000
[  258.002068][T14969] lo speed is unknown, defaulting to 1000
[  259.959767][T14985] netlink: 'syz.0.3921': attribute type 5 has an invalid length.
[  262.543172][T15047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3950'.
[  262.547607][T15047] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3950'.
[  262.669480][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'.
[  262.672516][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'.
[  262.675320][T15055] netlink: 'syz.0.3954': attribute type 7 has an invalid length.
[  262.922906][T15065] netlink: 'syz.0.3959': attribute type 10 has an invalid length.
[  262.925375][T15065] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3959'.
[  262.964891][T15065] team0: entered promiscuous mode
[  262.981027][T15065] 8021q: adding VLAN 0 to HW filter on device team0
[  262.983306][T15065] bridge0: port 1(team0) entered blocking state
[  262.985462][T15065] bridge0: port 1(team0) entered disabled state
[  262.989578][T15065] team0: entered allmulticast mode
[  265.133474][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3985'.
[  265.139031][T15126] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  265.201789][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3987'.
[  265.204930][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3987'.
[  265.214800][T15129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3987'.
[  268.180595][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3994'.
[  271.215778][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4010'.
[  271.320969][T15196] syz_tun (unregistering): left promiscuous mode
[  272.268267][T15230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4023'.
[  272.356682][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4024'.
[  272.684123][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4037'.
[  273.261109][T15269] netlink: 'syz.0.4041': attribute type 5 has an invalid length.
[  273.266802][ T7369] IPVS: ip_vs_send_async error -101
[  273.492307][T15281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.494864][T15281] syzkaller0: entered promiscuous mode
[  273.500627][T15281] syzkaller0: entered allmulticast mode
[  273.538051][T15281] tipc: Resetting bearer <eth:syzkaller0>
[  273.550262][T15279] tipc: Resetting bearer <eth:syzkaller0>
[  273.609110][T15279] tipc: Disabling bearer <eth:syzkaller0>
[  274.633980][T15296] bridge10: left promiscuous mode
[  274.647774][  T794] lo speed is unknown, defaulting to 1000
[  274.650022][  T794] syz0: Port: 1 Link DOWN
[  274.652191][  T794] lo speed is unknown, defaulting to 1000
[  274.659335][ T5888] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.662221][ T5888] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.665525][ T5888] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  274.670608][ T5888] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  275.194552][   T33] audit: type=1800 audit(1758117973.110:5): pid=15312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4062" name="cgroup.controllers" dev="tmpfs" ino=6838 res=0 errno=0
[  275.541506][T15339] lo speed is unknown, defaulting to 1000
[  276.141121][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'.
[  276.383602][T15400] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4096'.
[  276.690264][T15410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4101'.
[  276.991037][T15424] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  276.994035][T15424] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  277.221278][T15441] xfrm0: entered promiscuous mode
[  277.223426][T15441] xfrm0: entered allmulticast mode
[  277.771038][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'.
[  277.773985][T15493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4140'.
[  277.813639][T15497] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4142'.
[  278.225431][T15522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4154'.
[  278.348880][T15526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4154'.
[  278.352163][T15526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4154'.
[  278.355207][T15526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4154'.
[  278.711493][T15545] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.872990][T15553] xfrm0: left promiscuous mode
[  278.874561][T15553] xfrm0: left allmulticast mode
[  279.847302][T15586] sctp: [Deprecated]: syz.2.4183 (pid 15586) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.847302][T15586] Use struct sctp_sack_info instead
[  281.492872][T15635] __nla_validate_parse: 3 callbacks suppressed
[  281.492889][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4201'.
[  281.495277][T15636] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.4203'.
[  281.799344][T15659] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4213'.
[  281.896978][T15665] netlink: 'syz.2.4215': attribute type 39 has an invalid length.
[  282.799542][T15701] netlink: 'syz.0.4232': attribute type 99 has an invalid length.
[  282.900849][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4237'.
[  283.318388][T15728] lo speed is unknown, defaulting to 1000
[  283.377577][T15737] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4248'.
[  284.628797][T15767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.633700][T15767] syzkaller0: entered promiscuous mode
[  284.642145][T15767] syzkaller0: entered allmulticast mode
[  284.683566][T15767] tipc: Resetting bearer <eth:syzkaller0>
[  284.695494][T15766] tipc: Resetting bearer <eth:syzkaller0>
[  284.737881][T15766] tipc: Disabling bearer <eth:syzkaller0>
[  285.019653][T15791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4271'.
[  285.151549][T15791] team0 (unregistering): left allmulticast mode
[  285.154308][T15791] team0 (unregistering): left promiscuous mode
[  285.158107][T15791] bridge0: port 1(team0) entered disabled state
[  285.289728][   T33] audit: type=1800 audit(1758117983.210:6): pid=15798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4274" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7185 res=0 errno=0
[  285.542672][T15816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4280'.
[  285.585540][T15795] lo speed is unknown, defaulting to 1000
[  286.005906][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4292'.
[  286.158706][T15853] netlink: 'syz.1.4297': attribute type 1 has an invalid length.
[  286.414099][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4309'.
[  287.137018][T15919] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4329'.
[  287.148061][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4329'.
[  287.323024][T15933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4335'.
[  287.325877][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4335'.
[  287.732163][T15969] netem: change failed
[  287.933025][T15978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.936977][T15978] syzkaller0: entered promiscuous mode
[  287.939359][T15978] syzkaller0: entered allmulticast mode
[  287.969734][T15978] tipc: Resetting bearer <eth:syzkaller0>
[  287.974722][T15977] tipc: Resetting bearer <eth:syzkaller0>
[  287.994643][T15977] tipc: Disabling bearer <eth:syzkaller0>
[  288.071513][T15990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4362'.
[  288.122580][T15992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4363'.
[  288.468638][T16026] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4374'.
[  288.553551][T16032] netlink: 'syz.2.4377': attribute type 7 has an invalid length.
[  288.556949][T16032] netlink: 'syz.2.4377': attribute type 8 has an invalid length.
[  288.670024][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4379'.
[  288.947453][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4388'.
[  288.958460][T16050] lo speed is unknown, defaulting to 1000
[  289.698433][T16095] lo speed is unknown, defaulting to 1000
[  290.486564][T16113] netlink: 'syz.1.4411': attribute type 21 has an invalid length.
[  290.489432][T16113] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4411'.
[  290.514164][T16113] netlink: 'syz.1.4411': attribute type 1 has an invalid length.
[  290.806283][T16126] netlink: 'syz.0.4415': attribute type 10 has an invalid length.
[  290.979208][T16143] netlink: 'syz.1.4424': attribute type 5 has an invalid length.
[  292.121842][T16251] syzkaller1: tun_chr_ioctl cmd 1074025677
[  292.124467][T16251] syzkaller1: linktype set to 778
[  292.225329][T16259] ipvlan2: entered promiscuous mode
[  292.228133][T16259] bridge0: port 1(ipvlan2) entered blocking state
[  292.230589][T16259] bridge0: port 1(ipvlan2) entered disabled state
[  292.233045][T16259] ipvlan2: entered allmulticast mode
[  292.235120][T16259] veth0: entered allmulticast mode
[  292.243004][T16259] ipvlan2: left allmulticast mode
[  292.244996][T16259] veth0: left allmulticast mode
[  292.402743][T16277] netlink: 'syz.1.4485': attribute type 9 has an invalid length.
[  293.266134][T16349] __nla_validate_parse: 6 callbacks suppressed
[  293.266147][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4515'.
[  293.609447][T16374] netlink: 'syz.2.4526': attribute type 28 has an invalid length.
[  293.957326][T16391] batman_adv: batadv0: Adding interface: dummy0
[  293.960053][T16391] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.970314][T16391] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  294.697587][T16437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4556'.
[  295.005445][T16467] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  295.040877][T16468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.199509][T16480] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.213405][T16480] bond0: (slave rose0): Enslaving as an active interface with an up link
[  295.219291][T16468] lo speed is unknown, defaulting to 1000
[  295.458966][T16497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4577'.
[  296.077553][T16544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4592'.
[  296.080668][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4592'.
[  296.449960][T16561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.452675][T16561] syzkaller0: entered promiscuous mode
[  296.455375][T16561] syzkaller0: entered allmulticast mode
[  296.478143][T16561] tipc: Resetting bearer <eth:syzkaller0>
[  296.481996][T16563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4601'.
[  296.485868][T16560] tipc: Resetting bearer <eth:syzkaller0>
[  296.502210][T16560] tipc: Disabling bearer <eth:syzkaller0>
[  296.644429][T16571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4605'.
[  296.664899][T16574] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4606'.
[  296.670978][T16574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4606'.
[  296.803419][T16586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4612'.
[  296.882159][T16594] batadv_slave_0: entered promiscuous mode
[  297.875803][T16667] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  297.883341][T16667] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  297.991273][T16677] syzkaller1: entered promiscuous mode
[  297.993494][T16677] syzkaller1: entered allmulticast mode
[  298.073324][T16685] netlink: 'syz.2.4658': attribute type 2 has an invalid length.
[  298.677393][T16709] lo speed is unknown, defaulting to 1000
[  299.758038][T16776] netlink: 'syz.0.4696': attribute type 1 has an invalid length.
[  299.819105][T16776] gretap3: entered allmulticast mode
[  299.841649][T16776] bond4: (slave gretap3): making interface the new active one
[  299.846023][T16776] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  299.915767][T16772] lo speed is unknown, defaulting to 1000
[  300.013906][T16784] __nla_validate_parse: 3 callbacks suppressed
[  300.013920][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4701'.
[  300.167717][T16776] lo speed is unknown, defaulting to 1000
[  300.218290][T16793] netlink: 'syz.2.4705': attribute type 4 has an invalid length.
[  300.233330][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4705'.
[  300.838773][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4714'.
[  300.856729][T16815] netlink: 'syz.0.4714': attribute type 30 has an invalid length.
[  300.870502][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.870560][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4714'.
[  300.879341][T16815] netlink: 'syz.0.4714': attribute type 30 has an invalid length.
[  300.882598][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.912915][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.916283][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  301.230709][T16835] netlink: 'syz.2.4725': attribute type 31 has an invalid length.
[  302.370575][T16904] netlink: 'syz.2.4758': attribute type 3 has an invalid length.
[  302.373703][T16904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4758'.
[  302.834482][T16929] netlink: 'syz.1.4768': attribute type 303 has an invalid length.
[  302.842848][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'.
[  302.848560][T16922] lo speed is unknown, defaulting to 1000
[  302.850749][T16929] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  302.856222][T16929] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  303.612285][T16950] lo speed is unknown, defaulting to 1000
[  304.223433][T16968] lo speed is unknown, defaulting to 1000
[  304.392190][T17001] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4785'.
[  304.394956][T17001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4785'.
[  304.517091][T16954] lo speed is unknown, defaulting to 1000
[  304.754229][T17018] netlink: 'syz.1.4793': attribute type 1 has an invalid length.
[  304.763960][T17018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4793'.
[  305.269886][T17023] lo speed is unknown, defaulting to 1000
[  305.431196][T17026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4796'.
[  305.655798][T17029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4797'.
[  305.664082][T17029] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4797'.
[  305.802418][T17034] openvswitch: netlink: Message has 4 unknown bytes.
[  305.804588][T17034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.144617][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4808'.
[  306.156125][T17052] netlink: 'syz.2.4808': attribute type 7 has an invalid length.
[  306.162731][T17052] netlink: 'syz.2.4808': attribute type 8 has an invalid length.
[  306.166115][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4808'.
[  306.284133][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4813'.
[  306.357976][T17070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4816'.
[  306.379842][T17067] IPVS: persistence engine module ip_vs_pe_ not found
[  306.577294][T17067] lo speed is unknown, defaulting to 1000
[  307.148543][T17081] syzkaller1: entered promiscuous mode
[  307.150893][T17081] syzkaller1: entered allmulticast mode
[  307.226005][T17085] bridge_slave_1: mtu greater than device maximum
[  307.805126][T17118] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4837'.
[  307.961341][T17130] netlink: 'syz.2.4841': attribute type 3 has an invalid length.
[  307.970389][T17130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4841'.
[  308.405279][T17169] netlink: 'syz.1.4860': attribute type 4 has an invalid length.
[  308.425979][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4861'.
[  308.909128][T17172] lo speed is unknown, defaulting to 1000
[  309.267444][T17198] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  309.270377][T17198] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  309.273357][T17198] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  309.276386][T17198] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  309.279349][T17198] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  309.282294][T17198] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  309.284975][T17198] aoe: error packet from 2806.99@lo; ecode=101 'no such error'
[  309.428438][T17200] lo speed is unknown, defaulting to 1000
[  311.043048][T17280] netlink: 'syz.0.4902': attribute type 10 has an invalid length.
[  311.047900][T17280] bond0: (slave wlan1): Opening slave failed
[  311.186887][T17291] __nla_validate_parse: 3 callbacks suppressed
[  311.186901][T17291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4907'.
[  311.648380][T17331] net_ratelimit: 3313 callbacks suppressed
[  311.648395][T17331] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  311.659658][T17331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.664151][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4927'.
[  312.255864][T17361] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  312.508756][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4953'.
[  313.272378][T17457] openvswitch: netlink: Multiple metadata blocks provided
[  313.284954][T17459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4975'.
[  313.368092][T17468] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4978'.
[  313.583741][T17484] netlink: 'syz.1.4986': attribute type 4 has an invalid length.
[  313.589896][T17484] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4986'.
[  313.597960][T17484] : renamed from bond0
[  313.743553][T17493] batadv_slave_0: left promiscuous mode
[  313.751981][T17493] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  314.051935][T17524] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5001'.
[  314.114425][T17526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.375095][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5010'.
[  314.582489][T17560] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.5017'.
[  315.276987][T17588] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5028'.
[  315.343033][T17593] syzkaller0: entered promiscuous mode
[  315.345297][T17593] syzkaller0: entered allmulticast mode
[  315.600307][T17615] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  315.618281][T17615] bond5: entered promiscuous mode
[  315.620037][T17615] bond5: entered allmulticast mode
[  315.622126][T17615] 8021q: adding VLAN 0 to HW filter on device bond5
[  315.684040][T17622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  316.222247][T17651] __nla_validate_parse: 3 callbacks suppressed
[  316.222264][T17651] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.5058'.
[  316.228096][T17651] netlink: get zone limit has 8 unknown bytes
[  316.715756][T17694] dvmrp1: tun_chr_ioctl cmd 1074812117
[  316.827431][T17700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5080'.
[  316.861252][T17704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5082'.
[  316.893873][T17707] vlan5: entered allmulticast mode
[  316.896086][T17707] dummy0: entered allmulticast mode
[  317.241979][T17729] netlink: 'syz.0.5094': attribute type 39 has an invalid length.
[  317.934844][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5099'.
[  318.145505][T17756] sctp: [Deprecated]: syz.2.5106 (pid 17756) Use of int in max_burst socket option.
[  318.145505][T17756] Use struct sctp_assoc_value instead
[  318.385647][T17762] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  318.430572][T17764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5110'.
[  318.527871][T17770] netlink: 'syz.2.5113': attribute type 1 has an invalid length.
[  318.712259][T17772] lo speed is unknown, defaulting to 1000
[  318.950295][T17791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  318.958918][T17791] vxcan4: entered promiscuous mode
[  319.113406][T17795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5124'.
[  319.783320][T17816] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  320.051944][T17824] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5133'.
[  320.116023][T17827] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5134'.
[  320.119503][T17827] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  320.122621][T17827] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  320.125264][T17828] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5135'.
[  320.212708][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5134'.
[  321.450997][T17891] netlink: 'syz.1.5161': attribute type 10 has an invalid length.
[  321.454232][T17891] __nla_validate_parse: 3 callbacks suppressed
[  321.454245][T17891] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5161'.
[  321.537902][T17897] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  322.250430][T17968] netlink: 'syz.2.5198': attribute type 1 has an invalid length.
[  322.253126][T17968] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5198'.
[  322.664994][T17991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5207'.
[  322.672489][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5207'.
[  322.869035][T18003] syzkaller1: entered promiscuous mode
[  322.871900][T18003] syzkaller1: entered allmulticast mode
[  323.188830][T18026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5222'.
[  323.268046][T18026] smc: net device bond0 applied user defined pnetid SYZ2
[  323.280489][T18026] smc: net device bond0 erased user defined pnetid SYZ2
[  323.843942][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5250'.
[  323.904778][T18095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.953098][T18101] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5255'.
[  324.221349][T18122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5264'.
[  324.224514][T18122] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  324.234975][T18124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5265'.
[  324.529609][   T33] audit: type=1804 audit(1758118022.450:7): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5273" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=9006 res=1 errno=0
[  324.540493][   T33] audit: type=1800 audit(1758118022.450:8): pid=18144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5273" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=9006 res=0 errno=0
[  324.631697][T18149] netlink: 'syz.2.5275': attribute type 2 has an invalid length.
[  324.645252][T18149] : entered promiscuous mode
[  325.066524][T18164] lo speed is unknown, defaulting to 1000
[  325.690605][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5300'.
[  325.775323][T18219] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  325.783332][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  325.786027][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  325.806905][  T793] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  325.936921][  T793] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  326.028341][T18241] netlink: 'syz.2.5316': attribute type 5 has an invalid length.
[  326.073265][T18244] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  326.076022][T18244] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  326.227038][  T793] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  326.719293][T18285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.726954][T18285] syzkaller0: entered promiscuous mode
[  326.728792][T18285] syzkaller0: entered allmulticast mode
[  326.748368][T18289] __nla_validate_parse: 2 callbacks suppressed
[  326.748382][T18289] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5338'.
[  326.753451][T18289] 0X: renamed from caif0
[  326.761083][T18289] 0X: entered allmulticast mode
[  326.762721][T18289] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  326.769413][T18285] tipc: Resetting bearer <eth:syzkaller0>
[  326.773219][T18284] tipc: Resetting bearer <eth:syzkaller0>
[  326.789324][T18284] tipc: Disabling bearer <eth:syzkaller0>
[  327.664202][T18324] netlink: 'syz.1.5353': attribute type 1 has an invalid length.
[  327.670433][T18324] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5353'.
[  327.674303][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5353'.
[  328.000358][T18326] lo speed is unknown, defaulting to 1000
[  328.031881][T18334] netlink: 'syz.0.5356': attribute type 10 has an invalid length.
[  328.128475][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5357'.
[  328.207819][T18325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  328.313878][T18345] bridge0: port 1(erspan0) entered blocking state
[  328.316193][T18345] bridge0: port 1(erspan0) entered disabled state
[  328.318692][T18345] erspan0: entered allmulticast mode
[  328.326906][T18345] erspan0: entered promiscuous mode
[  328.332120][T18345] erspan0: left allmulticast mode
[  328.334162][T18345] erspan0: left promiscuous mode
[  328.336978][T18345] bridge0: port 1(erspan0) entered disabled state
[  328.976473][T18388] netlink: 'syz.1.5380': attribute type 1 has an invalid length.
[  328.979024][T18388] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5380'.
[  329.073625][T18393] syzkaller0: entered promiscuous mode
[  329.079345][T18393] syzkaller0: entered allmulticast mode
[  329.434060][T18420] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.437473][T18420] syzkaller0: entered promiscuous mode
[  329.439692][T18420] syzkaller0: entered allmulticast mode
[  329.453073][T18420] tipc: Resetting bearer <eth:syzkaller0>
[  329.456684][T18419] tipc: Resetting bearer <eth:syzkaller0>
[  329.466214][T18419] tipc: Disabling bearer <eth:syzkaller0>
[  329.506499][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  329.935334][T18465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5416'.
[  329.951250][T18465] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5416'.
[  330.053089][T18481] syzkaller1: entered promiscuous mode
[  330.054992][T18481] syzkaller1: entered allmulticast mode
[  330.149793][T18493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.181343][T18493] syzkaller0: entered promiscuous mode
[  330.183308][T18493] syzkaller0: entered allmulticast mode
[  330.185523][T18493] tipc: Resetting bearer <eth:syzkaller0>
[  330.193282][T18490] tipc: Resetting bearer <eth:syzkaller0>
[  330.196229][T18497] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  331.392303][T18490] tipc: Disabling bearer <eth:syzkaller0>
[  331.493994][   T33] audit: type=1800 audit(1758118029.410:9): pid=18518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5440" name="memory.events" dev="tmpfs" ino=9339 res=0 errno=0
[  331.526592][T18523] netlink: 'syz.0.5442': attribute type 1 has an invalid length.
[  331.529197][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5442'.
[  331.548042][T18525] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  331.664846][T18540] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5449'.
[  331.872954][T18567] geneve3: entered promiscuous mode
[  331.874629][T18567] geneve3: entered allmulticast mode
[  331.884337][ T5888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[  331.890971][ T5888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[  331.903536][ T5888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[  331.907325][ T5888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[  331.937175][T18579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5469'.
[  331.942226][T18577] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  331.945602][T18577] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  332.235739][ T5869] Bluetooth: hci0: command tx timeout
[  332.256182][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5475'.
[  332.300324][T18592] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.326690][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5475'.
[  332.379229][T18592] macsec2: entered promiscuous mode
[  332.392893][T18592] bond0: entered promiscuous mode
[  332.402382][T18592] macsec2: entered allmulticast mode
[  332.413486][T18592] bond0: entered allmulticast mode
[  332.434565][T18592] bond0: left allmulticast mode
[  332.444174][T18592] bond0: left promiscuous mode
[  332.982394][T18629] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  333.021900][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5486'.
[  333.025980][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5486'.
[  333.044224][T18631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5486'.
[  333.052609][T18631] netlink: 'syz.0.5486': attribute type 9 has an invalid length.
[  333.055862][T18631] netlink: 'syz.0.5486': attribute type 7 has an invalid length.
[  333.059587][T18631] netlink: 'syz.0.5486': attribute type 8 has an invalid length.
[  333.270434][T18638] netlink: 'syz.0.5489': attribute type 21 has an invalid length.
[  333.274016][T18638] netlink: 'syz.0.5489': attribute type 6 has an invalid length.
[  333.277928][T18638] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5489'.
[  333.600258][T18654] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5497'.
[  334.030652][T18693] pimreg: tun_chr_ioctl cmd 1074025677
[  334.032545][T18693] pimreg: linktype set to 780
[  334.034704][T18693] pimreg: tun_chr_ioctl cmd 35111
[  334.205217][T18706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.486073][T18725] macsec1: entered promiscuous mode
[  334.492989][T18725] ip6gretap0: entered promiscuous mode
[  334.495607][T18725] macsec1: entered allmulticast mode
[  334.499486][T18725] ip6gretap0: entered allmulticast mode
[  334.638046][ T7369] IPVS: ip_vs_send_async error -101
[  335.172574][T18782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5556'.
[  335.827734][T18824] syzkaller1: entered promiscuous mode
[  335.830123][T18824] syzkaller1: entered allmulticast mode
[  336.251283][T18854] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.280436][T18858] netlink: 'syz.2.5590': attribute type 49 has an invalid length.
[  336.885086][T18908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5612'.
[  336.946515][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  337.845896][T18946] netlink: 'syz.1.5630': attribute type 1 has an invalid length.
[  337.850977][T18946] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5630'.
[  337.853863][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5630'.
[  338.187438][T18963] netlink: 212856 bytes leftover after parsing attributes in process `syz.2.5636'.
[  338.490766][T18978] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  338.551292][T18982] netlink: 'syz.0.5645': attribute type 3 has an invalid length.
[  339.534771][T19026] lo speed is unknown, defaulting to 1000
[  339.855709][T19044] lo speed is unknown, defaulting to 1000
[  341.038412][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  341.050082][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  341.065436][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  341.069979][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  341.073885][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  341.084523][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  341.094902][T19078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'.
[  341.116946][T19078] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.123200][T19078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  341.762761][T19129] netlink: 'syz.1.5705': attribute type 10 has an invalid length.
[  341.765603][T19129] dummy0: entered promiscuous mode
[  341.768791][T19129] bridge0: port 3(dummy0) entered blocking state
[  341.771138][T19129] bridge0: port 3(dummy0) entered disabled state
[  341.773513][T19129] dummy0: entered allmulticast mode
[  342.292496][T19169] lo speed is unknown, defaulting to 1000
[  343.072379][T19204] __nla_validate_parse: 11 callbacks suppressed
[  343.072399][T19204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5738'.
[  343.079351][T19204] nbd: couldn't find a device at index 65546
[  343.316673][T19207] lo speed is unknown, defaulting to 1000
[  343.644894][T19229] syzkaller1: entered promiscuous mode
[  343.648395][T19229] syzkaller1: entered allmulticast mode
[  344.467134][  T793] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  344.738455][T19296] netlink: 'syz.2.5775': attribute type 1 has an invalid length.
[  344.758037][T19296] 8021q: adding VLAN 0 to HW filter on device bond5
[  344.781651][T19296] 8021q: adding VLAN 0 to HW filter on device bond5
[  344.784017][T19296] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  344.788955][T19296] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  344.835150][T19298] veth15: entered promiscuous mode
[  344.843351][T19298] bond5: (slave veth15): Enslaving as an active interface with a down link
[  345.247141][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5788'.
[  345.250059][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5788'.
[  345.253222][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5788'.
[  345.366129][T19345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  345.509746][  T793] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  347.309229][T19403] openvswitch: netlink: Missing valid actions attribute.
[  347.312042][T19403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.635845][T19431] bridge_slave_0: default FDB implementation only supports local addresses
[  347.643753][T19431] bridge_slave_0: default FDB implementation only supports local addresses
[  347.755923][T19444] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5833'.
[  347.921959][T19449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5835'.
[  348.008735][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5837'.
[  348.137877][T19459] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5840'.
[  348.358104][T19467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  348.419531][T19471] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5844'.
[  348.719586][T19496] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5855'.
[  349.252183][T19524] netlink: 'syz.0.5866': attribute type 1 has an invalid length.
[  349.425499][T19530] netlink: 'syz.1.5869': attribute type 1 has an invalid length.
[  349.433394][T19530] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.5869'.
[  349.456700][T19528] lo speed is unknown, defaulting to 1000
[  349.798174][T19544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.800853][T19544] syzkaller0: entered promiscuous mode
[  349.802673][T19544] syzkaller0: entered allmulticast mode
[  349.847726][T19544] tipc: Resetting bearer <eth:syzkaller0>
[  349.852017][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5876'.
[  349.867267][T19542] tipc: Resetting bearer <eth:syzkaller0>
[  349.943900][T19542] tipc: Disabling bearer <eth:syzkaller0>
[  349.956820][T19554] openvswitch: netlink: Missing valid actions attribute.
[  349.959630][T19554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.074168][T19557] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  350.077140][T19557] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  350.577094][T19608] netlink: 'syz.2.5899': attribute type 1 has an invalid length.
[  350.579862][T19608] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5899'.
[  351.200310][T19661] lo speed is unknown, defaulting to 1000
[  351.425072][T19678] IPVS: Error connecting to the multicast addr
[  352.099836][T19731] netlink: 'syz.2.5956': attribute type 13 has an invalid length.
[  352.102857][T19731] netlink: 'syz.2.5956': attribute type 17 has an invalid length.
[  352.306951][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  353.005322][T19771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5973'.
[  353.571752][T19788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.614960][T19788] syzkaller0: entered promiscuous mode
[  353.619540][T19788] syzkaller0: entered allmulticast mode
[  353.622795][T19788] tipc: Resetting bearer <eth:syzkaller0>
[  353.904676][T19787] tipc: Resetting bearer <eth:syzkaller0>
[  354.607310][  T793] tipc: Node number set to 2284765757
[  355.283168][T19787] tipc: Disabling bearer <eth:syzkaller0>
[  355.462301][T19820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5990'.
[  355.781072][T19837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6001'.
[  355.972176][T19865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.275406][T19893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.311859][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6021'.
[  356.405398][T19882] lo speed is unknown, defaulting to 1000
[  358.360040][T19937] lo speed is unknown, defaulting to 1000
[  358.581923][T19948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6041'.
[  358.810543][T19948] ip6tnl2: entered promiscuous mode
[  358.812702][T19948] ip6tnl2: entered allmulticast mode
[  359.297339][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6048'.
[  359.478234][T19980] netlink: 'syz.1.6051': attribute type 25 has an invalid length.
[  359.521075][T19981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.745797][T19977] lo speed is unknown, defaulting to 1000
[  359.777704][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6060'.
[  359.782826][T20001] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6060'.
[  360.182502][T20030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6069'.
[  361.177261][T20091] nbd3: detected capacity change from 0 to 127
[  361.191472][   T56] block nbd3: Receive control failed (result -32)
[  361.191766][T19803] block nbd3: Send control failed (result -32)
[  361.197921][T19803] block nbd3: Request send failed, requeueing
[  361.200860][   T98] block nbd3: Dead connection, failed to find a fallback
[  361.203491][   T98] block nbd3: shutting down sockets
[  361.205326][   T98] blk_print_req_error: 138 callbacks suppressed
[  361.205334][   T98] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.211161][   T98] buffer_io_error: 138 callbacks suppressed
[  361.211172][   T98] Buffer I/O error on dev nbd3, logical block 0, async page read
[  361.226842][T19803] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.230436][T19803] Buffer I/O error on dev nbd3, logical block 1, async page read
[  361.233561][T19803] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.240073][T19803] Buffer I/O error on dev nbd3, logical block 2, async page read
[  361.242590][T19803] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.246211][T19803] Buffer I/O error on dev nbd3, logical block 3, async page read
[  361.249876][T19803] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.252624][T19803] Buffer I/O error on dev nbd3, logical block 0, async page read
[  361.255035][T19803] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.261214][T19803] Buffer I/O error on dev nbd3, logical block 1, async page read
[  361.263745][T19803] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.266968][T19803] Buffer I/O error on dev nbd3, logical block 2, async page read
[  361.269944][T19803] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.272991][T19803] Buffer I/O error on dev nbd3, logical block 3, async page read
[  361.276101][T19803] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.282744][T19803] Buffer I/O error on dev nbd3, logical block 0, async page read
[  361.288636][T19803] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  361.295023][T19803] Buffer I/O error on dev nbd3, logical block 1, async page read
[  361.310840][T19803] ldm_validate_partition_table(): Disk read failed.
[  361.314990][T19803] Dev nbd3: unable to read RDB block 0
[  361.319129][T19803]  nbd3: unable to read partition table
[  361.334084][T19803] ldm_validate_partition_table(): Disk read failed.
[  361.341801][T19803] Dev nbd3: unable to read RDB block 0
[  361.349227][T19803]  nbd3: unable to read partition table
[  361.767803][T20123] lo speed is unknown, defaulting to 1000
[  362.429646][T20157] netlink: 'syz.0.6122': attribute type 10 has an invalid length.
[  362.432172][T20157] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6122'.
[  362.443664][T20157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.558955][T20167] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6125'.
[  362.605311][T20172] : entered promiscuous mode
[  362.884304][T20195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.890064][T20195] syzkaller0: entered promiscuous mode
[  362.892294][T20195] syzkaller0: entered allmulticast mode
[  362.898860][T20195] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  362.912101][T20195] tipc: Resetting bearer <eth:syzkaller0>
[  362.928563][T20195] tipc: Disabling bearer <eth:syzkaller0>
[  363.252754][T20205] lo speed is unknown, defaulting to 1000
[  363.282625][T20217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6150'.
[  363.289304][T20217] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6150'.
[  363.293093][T20217] tipc: Invalid UDP bearer configuration
[  363.293153][T20217] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  363.784848][T20228] lo speed is unknown, defaulting to 1000
[  364.396969][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  364.400515][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  364.402994][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  364.406114][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  364.409142][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  364.412245][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  364.415414][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  364.418029][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  364.420712][T20269] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  365.579877][T20322] netlink: 'syz.0.6190': attribute type 2 has an invalid length.
[  365.599749][T20322] k*]: entered promiscuous mode
[  365.678836][T20334] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6197'.
[  365.726269][T20338] syzkaller0: entered promiscuous mode
[  365.729948][T20338] syzkaller0: entered allmulticast mode
[  365.919453][T20354] netlink: 164548 bytes leftover after parsing attributes in process `syz.0.6207'.
[  367.844272][T20414] syzkaller0: entered promiscuous mode
[  367.846061][T20414] syzkaller0: entered allmulticast mode
[  367.861792][T20400] lo speed is unknown, defaulting to 1000
[  367.965565][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6233'.
[  369.399119][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6234'.
[  369.402858][T20426] net_ratelimit: 45 callbacks suppressed
[  369.402873][T20426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.584125][T20436] sock: sock_set_timeout: `syz.0.6238' (pid 20436) tries to set negative timeout
[  369.754424][T20440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6240'.
[  369.898235][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6246'.
[  369.903663][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6246'.
[  369.967486][T20459] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  370.080540][T20466] netlink: 'syz.2.6252': attribute type 12 has an invalid length.
[  370.083200][T20466] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6252'.
[  370.094624][T20470] netlink: 'syz.1.6253': attribute type 1 has an invalid length.
[  370.114320][T20470] 8021q: adding VLAN 0 to HW filter on device bond4
[  370.120440][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6253'.
[  370.147607][T20470] vlan0: entered allmulticast mode
[  370.149204][T20470] veth1: entered allmulticast mode
[  370.151702][T20470] bond4: (slave vlan0): Opening slave failed
[  371.529255][T20549] netlink: 'syz.0.6288': attribute type 1 has an invalid length.
[  372.439088][T20604] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.457304][T20605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  372.460902][T20605] syzkaller0: entered promiscuous mode
[  372.463219][T20605] syzkaller0: entered allmulticast mode
[  372.484788][T20605] tipc: Resetting bearer <eth:syzkaller0>
[  372.493768][T20602] tipc: Resetting bearer <eth:syzkaller0>
[  372.507951][T20602] tipc: Disabling bearer <eth:syzkaller0>
[  372.515667][T20604] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.563705][T20604] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.612733][T20604] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  372.720702][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  372.739731][T20614] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  372.743206][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  372.758076][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  372.779467][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  373.043690][T20632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6324'.
[  373.305637][T20656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6338'.
[  373.401980][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6341'.
[  373.524711][T20656] lo speed is unknown, defaulting to 1000
[  373.824118][T20694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.829025][T20694] syzkaller0: entered promiscuous mode
[  373.831215][T20694] syzkaller0: entered allmulticast mode
[  373.861381][T20694] tipc: Resetting bearer <eth:syzkaller0>
[  373.865397][T20692] tipc: Resetting bearer <eth:syzkaller0>
[  373.894357][T20692] tipc: Disabling bearer <eth:syzkaller0>
[  373.965199][T20699] netlink: 'syz.1.6354': attribute type 13 has an invalid length.
[  373.971607][T20699] netlink: 'syz.1.6354': attribute type 17 has an invalid length.
[  374.063760][T20699] bridge0: port 3(dummy0) entered blocking state
[  374.066502][T20699] bridge0: port 3(dummy0) entered forwarding state
[  374.073382][T20699] : left promiscuous mode
[  374.075876][T20699] 8021q: adding VLAN 0 to HW filter on device 
[  374.085289][T20699] 0X: left allmulticast mode
[  374.093828][T20699] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  374.110175][  T794] lo speed is unknown, defaulting to 1000
[  374.112455][  T794] syz0: Port: 1 Link ACTIVE
[  374.114169][  T794] lo speed is unknown, defaulting to 1000
[  374.244344][T20699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.306951][T20699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.331792][T20700] lo speed is unknown, defaulting to 1000
[  374.367892][T20699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.547225][T20704] lo speed is unknown, defaulting to 1000
[  374.807818][T20749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6376'.
[  374.811479][T20749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6376'.
[  375.579406][T20799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6398'.
[  376.284011][T20824] !: renamed from dummy0
[  376.572046][T20851] _Z`Ԁ@S!: entered promiscuous mode
[  376.922368][T20882] netlink: 'syz.0.6435': attribute type 2 has an invalid length.
[  376.924989][T20882] netlink: 'syz.0.6435': attribute type 8 has an invalid length.
[  376.928618][T20882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6435'.
[  377.022662][T20893] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6440'.
[  377.135202][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6448'.
[  377.284250][T20923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.735745][T20938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6460'.
[  378.199594][T20971] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  378.830070][T20993] netlink: 'syz.0.6483': attribute type 1 has an invalid length.
[  378.833356][T20993] __nla_validate_parse: 2 callbacks suppressed
[  378.833398][T20993] netlink: 600 bytes leftover after parsing attributes in process `syz.0.6483'.
[  379.211719][T21015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.214719][T21015] syzkaller0: entered promiscuous mode
[  379.217457][T21015] syzkaller0: entered allmulticast mode
[  379.238516][T21015] tipc: Resetting bearer <eth:syzkaller0>
[  379.249596][T21014] tipc: Resetting bearer <eth:syzkaller0>
[  379.265129][T21014] tipc: Disabling bearer <eth:syzkaller0>
[  379.431636][T21034] netlink: 292 bytes leftover after parsing attributes in process `syz.2.6501'.
[  379.538110][T21042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6505'.
[  379.651239][T21050] wg1: entered promiscuous mode
[  379.655429][T21050] wg1: entered allmulticast mode
[  380.562375][T21111] sctp: [Deprecated]: syz.2.6533 (pid 21111) Use of struct sctp_assoc_value in delayed_ack socket option.
[  380.562375][T21111] Use struct sctp_sack_info instead
[  380.831230][T21129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6542'.
[  380.883137][T21133] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  380.886833][T21133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  381.101175][T21149] netlink: 'syz.0.6552': attribute type 1 has an invalid length.
[  381.115009][T21149] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6552'.
[  381.118457][T21149] NCSI netlink: No device for ifindex 813332851
[  381.646193][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6573'.
[  381.681589][T21203] netlink: 'syz.2.6575': attribute type 1 has an invalid length.
[  381.705847][T21203] 8021q: adding VLAN 0 to HW filter on device bond6
[  381.727275][T21203] 8021q: adding VLAN 0 to HW filter on device bond6
[  381.730418][T21203] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  381.736457][T21203] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  381.781038][T21208] bond6: (slave bridge0): Enslaving as an active interface with an up link
[  382.149901][T21230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6587'.
[  382.176985][T21234] geneve4: entered promiscuous mode
[  382.386479][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  383.162021][T21275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.111966][T21333] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6632'.
[  384.573485][T21344] lo speed is unknown, defaulting to 1000
[  384.827639][T21353] lo speed is unknown, defaulting to 1000
[  385.074776][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6653'.
[  385.782425][T21435] pim6reg: entered allmulticast mode
[  385.791712][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6678'.
[  385.813466][T21439] bond0: option mode: unable to set because the bond device is up
[  385.905490][T21448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  385.910900][T21447] lo: entered allmulticast mode
[  385.912912][T21447] lo: left allmulticast mode
[  386.117241][T21466] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  386.251237][T21477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6698'.
[  387.704767][T21517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6716'.
[  387.719241][T21519] netlink: 'syz.0.6717': attribute type 1 has an invalid length.
[  387.763144][T21519] 8021q: adding VLAN 0 to HW filter on device bond6
[  387.782419][T21519] erspan0: entered allmulticast mode
[  387.795360][T21519] bond6: (slave erspan0): making interface the new active one
[  387.805381][T21519] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  387.831663][T21519] syz.0.6717 (21519) used greatest stack depth: 18680 bytes left
[  388.000294][T21544] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6727'.
[  388.003542][T21544] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6727'.
[  388.012588][T21544] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6727'.
[  388.170001][T21540] lo speed is unknown, defaulting to 1000
[  388.271513][T21563] netlink: 'syz.1.6735': attribute type 9 has an invalid length.
[  388.274362][T21563] netlink: 147436 bytes leftover after parsing attributes in process `syz.1.6735'.
[  388.408482][T21569] netlink: 'syz.0.6737': attribute type 10 has an invalid length.
[  389.070750][T21619] geneve3: entered promiscuous mode
[  389.096001][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  389.100908][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  389.103908][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  389.110816][T21623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.113774][T21623] syzkaller0: entered promiscuous mode
[  389.115529][T21623] syzkaller0: entered allmulticast mode
[  389.121998][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  389.169744][T21623] tipc: Resetting bearer <eth:syzkaller0>
[  389.178057][T21620] tipc: Resetting bearer <eth:syzkaller0>
[  389.191983][T21631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6764'.
[  389.201287][T21620] tipc: Disabling bearer <eth:syzkaller0>
[  389.252015][T21631] netlink: 'syz.1.6764': attribute type 1 has an invalid length.
[  389.254808][T21631] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6764'.
[  389.495973][T21625] lo speed is unknown, defaulting to 1000
[  389.571909][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6767'.
[  389.957092][T21672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.965482][T21672] syzkaller0: entered promiscuous mode
[  389.970845][T21672] syzkaller0: entered allmulticast mode
[  390.015084][T21672] tipc: Resetting bearer <eth:syzkaller0>
[  390.036835][T21671] tipc: Resetting bearer <eth:syzkaller0>
[  390.071142][T21671] tipc: Disabling bearer <eth:syzkaller0>
[  390.242012][T21684] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  390.409157][T21676] lo speed is unknown, defaulting to 1000
[  391.013991][T21720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6804'.
[  391.535212][T21750] sctp: [Deprecated]: syz.1.6817 (pid 21750) Use of struct sctp_assoc_value in delayed_ack socket option.
[  391.535212][T21750] Use struct sctp_sack_info instead
[  391.971158][T21769] lo speed is unknown, defaulting to 1000
[  392.155913][T21791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6836'.
[  392.220614][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6836'.
[  392.321824][T21801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.375449][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6842'.
[  392.406772][T21806] team0: entered promiscuous mode
[  392.408477][T21806] team0: entered allmulticast mode
[  392.410461][T21806] 8021q: adding VLAN 0 to HW filter on device team0
[  392.483738][T21815] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6846'.
[  393.295602][T21886] macsec2: entered allmulticast mode
[  393.314533][T21886] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  393.355872][T21895] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  393.607471][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6898'.
[  393.657459][T21927] netlink: 'syz.2.6901': attribute type 29 has an invalid length.
[  393.660835][T21927] netlink: 'syz.2.6901': attribute type 29 has an invalid length.
[  393.775859][T21944] netlink: 824 bytes leftover after parsing attributes in process `syz.2.6907'.
[  393.933062][T21957] IPv6: Can't replace route, no match found
[  393.964232][T21959] lo: entered allmulticast mode
[  393.972468][T21959] lo: left allmulticast mode
[  394.264817][T21976] __nla_validate_parse: 1 callbacks suppressed
[  394.264862][T21976] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6921'.
[  394.375799][T21967] lo speed is unknown, defaulting to 1000
[  394.599352][T21993] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  395.611319][T22010] lo speed is unknown, defaulting to 1000
[  395.881243][T22052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6954'.
[  396.067127][ T7369] IPVS: ip_vs_send_async error -101
[  396.378327][T22068] netlink: 'syz.2.6962': attribute type 13 has an invalid length.
[  396.381685][T22068] netlink: 'syz.2.6962': attribute type 17 has an invalid length.
[  396.394416][T22068] gretap0: left promiscuous mode
[  396.412923][T22068] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.417211][T22068] 8021q: adding VLAN 0 to HW filter on device team0
[  396.421335][T22068] batman_adv: batadv0: Interface activated: 0!
[  396.424034][T22068] batadv0: mtu less than device minimum
[  396.427554][T22068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  396.433151][T22068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  396.438431][T22068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  396.443501][T22068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  396.448595][T22068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  396.453660][T22068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  396.458862][T22068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  396.463887][T22068] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  396.577887][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6963'.
[  396.655825][T22070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  396.821624][T22068] lo speed is unknown, defaulting to 1000
[  398.119060][T22131] IPv6: sit4: Disabled Multicast RS
[  398.170971][T22137] netlink: 'syz.0.6994': attribute type 1 has an invalid length.
[  398.174089][T22137] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6994'.
[  398.437685][T22160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7006'.
[  398.779437][T22194] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7018'.
[  399.564366][T22231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.571601][T22231] syzkaller0: entered promiscuous mode
[  399.573662][T22231] syzkaller0: entered allmulticast mode
[  399.592132][T22231] tipc: Resetting bearer <eth:syzkaller0>
[  399.595230][T22230] tipc: Resetting bearer <eth:syzkaller0>
[  399.607734][T22230] tipc: Disabling bearer <eth:syzkaller0>
[  400.190355][T22260] netlink: 'syz.2.7048': attribute type 5 has an invalid length.
[  400.323868][T22258] lo speed is unknown, defaulting to 1000
[  400.635694][T22273] net_ratelimit: 13 callbacks suppressed
[  400.635710][T22273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.905116][T22278] bridge0: port 3(dummy0) entered disabled state
[  400.995734][  T793] lo speed is unknown, defaulting to 1000
[  400.999752][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0
[  401.002872][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0
[  401.005766][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0
[  401.009814][  T793] syz0: Port: 1 Link DOWN
[  401.020713][  T793] lo speed is unknown, defaulting to 1000
[  401.026688][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0
[  401.652807][T22344] tipc: Enabled bearer <udp:syz2>, priority 10
[  401.836003][T22367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7089'.
[  401.983808][T22382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7098'.
[  402.023147][T22369] lo speed is unknown, defaulting to 1000
[  402.420073][T22417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7111'.
[  402.433577][T22416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.437181][T22416] syzkaller0: entered promiscuous mode
[  402.439550][T22416] syzkaller0: entered allmulticast mode
[  402.507285][T22416] tipc: Resetting bearer <eth:syzkaller0>
[  402.520391][T22415] tipc: Resetting bearer <eth:syzkaller0>
[  402.558115][T22415] tipc: Disabling bearer <eth:syzkaller0>
[  402.818094][T22445] netlink: 'syz.0.7122': attribute type 13 has an invalid length.
[  402.820702][T22445] netlink: 'syz.0.7122': attribute type 17 has an invalid length.
[  402.825370][T22445] gretap0: refused to change device tx_queue_len
[  402.830812][T22445] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  402.952909][T22458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7128'.
[  402.962006][T22459] pim6reg: entered allmulticast mode
[  402.964498][T22459] pim6reg: left allmulticast mode
[  403.060660][T22469] netlink: 'syz.1.7134': attribute type 11 has an invalid length.
[  403.083230][T22474] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7135'.
[  403.406653][T22503] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  403.672566][T22529] gretap1: entered allmulticast mode
[  403.801576][T22543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7169'.
[  403.804548][T22543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7169'.
[  403.850771][T22543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7169'.
[  403.929463][T22549] sctp: [Deprecated]: syz.2.7172 (pid 22549) Use of struct sctp_assoc_value in delayed_ack socket option.
[  403.929463][T22549] Use struct sctp_sack_info instead
[  403.979531][T22554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.443884][T22593] netlink: 'syz.0.7194': attribute type 3 has an invalid length.
[  404.447665][T22593] netlink: 'syz.0.7194': attribute type 1 has an invalid length.
[  404.450876][T22593] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.7194'.
[  404.597165][T22603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7198'.
[  405.372299][T22632] sctp: [Deprecated]: syz.0.7212 (pid 22632) Use of struct sctp_assoc_value in delayed_ack socket option.
[  405.372299][T22632] Use struct sctp_sack_info instead
[  405.542289][T22633] lo speed is unknown, defaulting to 1000
[  405.712626][T22649] 8021q: adding VLAN 0 to HW filter on device bond7
[  406.050226][T22657] netlink: 'syz.0.7220': attribute type 12 has an invalid length.
[  406.607352][T22676] lo speed is unknown, defaulting to 1000
[  406.749984][T22703] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  406.855178][T22703]  (unregistering): Released all slaves
[  407.369839][T22728] __nla_validate_parse: 4 callbacks suppressed
[  407.369863][T22728] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7250'.
[  407.375913][T22728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.784016][T22760] Bluetooth: MGMT ver 1.23
[  407.850129][T22764] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  407.882952][T22764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.944127][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7267'.
[  407.979641][T22757] lo speed is unknown, defaulting to 1000
[  408.168327][T22785] openvswitch: netlink: Duplicate or invalid key (type 0).
[  408.170827][T22785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.286828][T22825] netlink: 'syz.2.7290': attribute type 15 has an invalid length.
[  409.466163][T22841] syzkaller1: entered promiscuous mode
[  409.469285][T22841] syzkaller1: entered allmulticast mode
[  409.599359][   T33] audit: type=1804 audit(1758118107.520:10): pid=22852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7303" name="/newroot/2348/cgroup.controllers" dev="tmpfs" ino=11846 res=1 errno=0
[  409.616660][   T33] audit: type=1800 audit(1758118107.520:11): pid=22852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7303" name="cgroup.controllers" dev="tmpfs" ino=11846 res=0 errno=0
[  409.668813][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7306'.
[  411.100426][T22919] netlink: 766 bytes leftover after parsing attributes in process `syz.2.7334'.
[  411.488801][T22951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7348'.
[  411.584919][T22956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7350'.
[  411.589253][T22956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7350'.
[  411.592471][T22956] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7350'.
[  411.600996][T22946] netlink: 'syz.2.7346': attribute type 4 has an invalid length.
[  411.901124][T22979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7361'.
[  411.904799][T22979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7361'.
[  411.910809][T22979] netlink: 'syz.0.7361': attribute type 7 has an invalid length.
[  412.013306][T22987] netlink: 'syz.1.7365': attribute type 3 has an invalid length.
[  412.260251][   T33] audit: type=1804 audit(1758118110.180:12): pid=23010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7373" name="/newroot/2446/cgroup.controllers" dev="tmpfs" ino=12337 res=1 errno=0
[  412.273820][   T33] audit: type=1800 audit(1758118110.190:13): pid=23010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7373" name="cgroup.controllers" dev="tmpfs" ino=12337 res=0 errno=0
[  413.745592][T23082] netlink: zone id is out of range
[  413.748825][T23082] netlink: zone id is out of range
[  413.753169][T23082] netlink: zone id is out of range
[  413.757870][T23082] netlink: zone id is out of range
[  413.762277][T23082] netlink: zone id is out of range
[  413.766257][T23082] netlink: zone id is out of range
[  413.769238][T23082] netlink: zone id is out of range
[  413.773444][T23082] netlink: zone id is out of range
[  413.776501][T23082] netlink: zone id is out of range
[  413.779377][T23082] netlink: zone id is out of range
[  413.832520][T23085] veth0: entered promiscuous mode
[  413.840752][T23084] veth0: left promiscuous mode
[  414.007067][T23098] __nla_validate_parse: 1 callbacks suppressed
[  414.007080][T23098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7411'.
[  414.013742][T23098] netlink: 'syz.0.7411': attribute type 3 has an invalid length.
[  414.016750][T23098] netlink: 'syz.0.7411': attribute type 2 has an invalid length.
[  414.019495][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7411'.
[  414.077984][T23104] netlink: 'syz.0.7415': attribute type 1 has an invalid length.
[  414.080636][T23104] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7415'.
[  414.152464][T23114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7419'.
[  415.807111][T23180] syzkaller1: tun_chr_ioctl cmd 1074025677
[  415.809792][T23180] syzkaller1: linktype set to 823
[  416.049863][T23209] netlink: 'syz.1.7465': attribute type 1 has an invalid length.
[  416.066160][T23209] 8021q: adding VLAN 0 to HW filter on device bond5
[  416.089116][T23209] bond5: (slave veth11): Enslaving as an active interface with a down link
[  416.423795][T23234] netlink: 'syz.1.7477': attribute type 3 has an invalid length.
[  416.427113][T23234] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7477'.
[  417.414757][T23257] erspan0: left allmulticast mode
[  417.661366][T23257] gretap3: left allmulticast mode
[  417.683214][T23257] bond5: left promiscuous mode
[  417.685282][T23257] bond5: left allmulticast mode
[  417.700080][T23257] geneve3: left promiscuous mode
[  417.707416][T23278] netlink: 'syz.2.7492': attribute type 13 has an invalid length.
[  417.714491][ T5888] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.718768][ T5888] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  417.722106][ T5888] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.724743][ T5888] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  417.728119][ T5888] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.736281][ T5888] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  417.736977][T23282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7494'.
[  417.740798][ T5888] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.758301][ T5888] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  417.785785][T23284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7495'.
[  417.794458][T23288] netlink: 'syz.0.7496': attribute type 3 has an invalid length.
[  417.798285][T23288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7496'.
[  418.134362][T23315] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7508'.
[  418.269955][T23320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7510'.
[  418.484750][T23333] netlink: 'syz.0.7515': attribute type 11 has an invalid length.
[  419.444691][T23385] __nla_validate_parse: 4 callbacks suppressed
[  419.444704][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7539'.
[  419.544919][T23391] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  419.821755][T23395] lo speed is unknown, defaulting to 1000
[  420.087699][T23421] netlink: 'syz.0.7554': attribute type 9 has an invalid length.
[  420.090173][T23421] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.7554'.
[  420.233994][T23432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7558'.
[  420.292131][T23435] netlink: 'syz.2.7556': attribute type 10 has an invalid length.
[  420.327226][T23437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7561'.
[  420.589582][T23456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7567'.
[  420.593576][T23456] netlink: 'syz.0.7567': attribute type 5 has an invalid length.
[  420.596860][T23456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7567'.
[  420.606454][T23456] geneve4: entered promiscuous mode
[  420.608626][T23456] geneve4: entered allmulticast mode
[  420.612343][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  420.615819][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  420.703995][T23451] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  420.751190][T23451] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  420.805992][ T5905] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  420.814746][ T5905] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  420.829717][ T5905] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  420.843335][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  420.899519][T23462] lo speed is unknown, defaulting to 1000
[  421.390430][T23496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7577'.
[  421.785849][T23530] netlink: 'syz.2.7593': attribute type 15 has an invalid length.
[  421.993107][T23533] lo speed is unknown, defaulting to 1000
[  422.193813][T23545] lo speed is unknown, defaulting to 1000
[  422.554900][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7602'.
[  422.665545][T23568] IPVS: stopping master sync thread 7369 ...
[  422.793716][T23579] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7612'.
[  422.852197][T23580] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) !
[  422.982019][T23591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7617'.
[  424.530210][T23655] geneve4: left promiscuous mode
[  424.535595][ T5888] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  424.538919][ T5888] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  424.541917][ T5888] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  424.544713][ T5888] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  425.155763][T23697] __nla_validate_parse: 4 callbacks suppressed
[  425.155807][T23697] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7658'.
[  425.211545][T23699] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7659'.
[  425.812169][T23731] lo speed is unknown, defaulting to 1000
[  426.838785][T23769] lo speed is unknown, defaulting to 1000
[  427.365946][T23809] batman_adv: batadv0: Interface deactivated: 0!
[  427.421495][T23809] ip6gretap0: left allmulticast mode
[  427.460184][T23809] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  427.484660][T23814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  427.496110][T23826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7710'.
[  427.771812][T23839] netlink: 'syz.0.7716': attribute type 10 has an invalid length.
[  427.778586][T23839] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  427.784751][T23839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7716'.
[  427.792492][T23839] netlink: 'syz.0.7716': attribute type 1 has an invalid length.
[  428.011087][T23859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.025926][T23865] netlink: 'syz.2.7727': attribute type 4 has an invalid length.
[  428.289433][T23882] netlink: 'syz.1.7735': attribute type 4 has an invalid length.
[  428.358099][T23886] netlink: 'syz.1.7737': attribute type 39 has an invalid length.
[  428.561310][T23892] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7739'.
[  429.007186][T23916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7749'.
[  429.010242][T23916] netlink: 'syz.2.7749': attribute type 7 has an invalid length.
[  429.012860][T23916] netlink: 'syz.2.7749': attribute type 8 has an invalid length.
[  429.015519][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7749'.
[  429.059275][T23918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7750'.
[  429.122173][T23918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7750'.
[  429.125961][T23918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7750'.
[  429.431414][T23933] netlink: 'syz.2.7756': attribute type 1 has an invalid length.
[  429.474986][T23935] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  429.639592][T23946] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  429.857791][T23968] net_ratelimit: 6 callbacks suppressed
[  429.857807][T23968] openvswitch: netlink: IP tunnel dst address not specified
[  429.972980][T23962] lo speed is unknown, defaulting to 1000
[  430.344595][T23975] lo speed is unknown, defaulting to 1000
[  430.868259][T24008] netlink: 'syz.0.7790': attribute type 5 has an invalid length.
[  430.871355][T24008] netlink: 'syz.0.7790': attribute type 7 has an invalid length.
[  430.920480][T24008] : entered promiscuous mode
[  430.969348][T24013] macsec0: entered allmulticast mode
[  431.092852][T24021] __nla_validate_parse: 2 callbacks suppressed
[  431.092874][T24021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7796'.
[  431.097457][T24023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7797'.
[  431.334304][T24039] macsec0: entered allmulticast mode
[  431.495401][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7814'.
[  432.357748][T24129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7847'.
[  432.483684][T24137] ==================================================================
[  432.486915][T24137] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  432.490079][T24137] Read of size 1 at addr ffff88810b2e7030 by task syz.0.7850/24137
[  432.494019][T24137] 
[  432.495538][T24137] CPU: 1 UID: 0 PID: 24137 Comm: syz.0.7850 Not tainted syzkaller #0 PREEMPT(full) 
[  432.495574][T24137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  432.495586][T24137] Call Trace:
[  432.495596][T24137]  <TASK>
[  432.495608][T24137]  dump_stack_lvl+0x189/0x250
[  432.495632][T24137]  ? __kasan_check_byte+0x12/0x40
[  432.495655][T24137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.495672][T24137]  ? lock_release+0x4b/0x3e0
[  432.495695][T24137]  ? __virt_addr_valid+0x4a5/0x5c0
[  432.495714][T24137]  print_report+0xca/0x240
[  432.495729][T24137]  ? xfrm_state_find+0x2cf2/0x5400
[  432.495743][T24137]  kasan_report+0x118/0x150
[  432.495762][T24137]  ? xfrm_state_find+0x2cf2/0x5400
[  432.495780][T24137]  xfrm_state_find+0x2cf2/0x5400
[  432.495803][T24137]  ? xfrm_state_find+0x1da/0x5400
[  432.495820][T24137]  ? __pfx_xfrm_state_find+0x10/0x10
[  432.495841][T24137]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  432.495866][T24137]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  432.495882][T24137]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  432.495897][T24137]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  432.495913][T24137]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  432.495925][T24137]  ? __lock_acquire+0xab9/0xd20
[  432.495947][T24137]  ? xfrm_expand_policies+0x41f/0x6a0
[  432.495963][T24137]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  432.495982][T24137]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  432.495994][T24137]  ? __pfx_rcuref_put+0x10/0x10
[  432.496013][T24137]  xfrm_lookup_route+0x3c/0x1c0
[  432.496031][T24137]  tcp_v4_connect+0x846/0x1a00
[  432.496096][T24137]  ? __pfx_tcp_v4_connect+0x10/0x10
[  432.496118][T24137]  __inet_stream_connect+0x2ae/0xe80
[  432.496137][T24137]  ? __local_bh_enable_ip+0x12d/0x1c0
[  432.496150][T24137]  ? __pfx___inet_stream_connect+0x10/0x10
[  432.496168][T24137]  ? __local_bh_enable_ip+0x12d/0x1c0
[  432.496182][T24137]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  432.496198][T24137]  inet_stream_connect+0x66/0xa0
[  432.496214][T24137]  __sys_connect+0x316/0x440
[  432.496228][T24137]  ? __pfx___sys_connect+0x10/0x10
[  432.496244][T24137]  ? rcu_is_watching+0x15/0xb0
[  432.496264][T24137]  __x64_sys_connect+0x7a/0x90
[  432.496279][T24137]  do_syscall_64+0xfa/0x3b0
[  432.496295][T24137]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.496315][T24137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.496332][T24137]  ? exc_page_fault+0x9f/0xf0
[  432.496349][T24137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.496365][T24137] RIP: 0033:0x7f281fb8eba9
[  432.496381][T24137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.496395][T24137] RSP: 002b:00007f2820988038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  432.496412][T24137] RAX: ffffffffffffffda RBX: 00007f281fdd5fa0 RCX: 00007f281fb8eba9
[  432.496424][T24137] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000003
[  432.496432][T24137] RBP: 00007f281fc11e19 R08: 0000000000000000 R09: 0000000000000000
[  432.496442][T24137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.496451][T24137] R13: 00007f281fdd6038 R14: 00007f281fdd5fa0 R15: 00007fffb6d41368
[  432.496467][T24137]  </TASK>
[  432.496473][T24137] 
[  432.621092][T24137] Allocated by task 22977:
[  432.622864][T24137]  kasan_save_track+0x3e/0x80
[  432.624737][T24137]  __kasan_slab_alloc+0x6c/0x80
[  432.626692][T24137]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  432.628863][T24137]  xfrm_state_alloc+0x24/0x2f0
[  432.630761][T24137]  xfrm_add_sa+0x17d1/0x4070
[  432.632576][T24137]  xfrm_user_rcv_msg+0x7a3/0xab0
[  432.634118][T24137]  netlink_rcv_skb+0x208/0x470
[  432.635597][T24137]  xfrm_netlink_rcv+0x79/0x90
[  432.637057][T24137]  netlink_unicast+0x82f/0x9e0
[  432.638775][T24137]  netlink_sendmsg+0x805/0xb30
[  432.640648][T24137]  __sock_sendmsg+0x21c/0x270
[  432.642512][T24137]  ____sys_sendmsg+0x505/0x830
[  432.644434][T24137]  ___sys_sendmsg+0x21f/0x2a0
[  432.646381][T24137]  __x64_sys_sendmsg+0x19b/0x260
[  432.648359][T24137]  do_syscall_64+0xfa/0x3b0
[  432.650169][T24137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.652483][T24137] 
[  432.653459][T24137] Freed by task 793:
[  432.655054][T24137]  kasan_save_track+0x3e/0x80
[  432.656911][T24137]  kasan_save_free_info+0x46/0x50
[  432.658869][T24137]  __kasan_slab_free+0x5b/0x80
[  432.660869][T24137]  kmem_cache_free+0x18f/0x400
[  432.662876][T24137]  xfrm_state_gc_task+0x52d/0x6b0
[  432.664958][T24137]  process_scheduled_works+0xae1/0x17b0
[  432.666903][T24137]  worker_thread+0x8a0/0xda0
[  432.668427][T24137]  kthread+0x711/0x8a0
[  432.669880][T24137]  ret_from_fork+0x3fc/0x770
[  432.671680][T24137]  ret_from_fork_asm+0x1a/0x30
[  432.673590][T24137] 
[  432.674545][T24137] The buggy address belongs to the object at ffff88810b2e6d00
[  432.674545][T24137]  which belongs to the cache xfrm_state of size 928
[  432.679841][T24137] The buggy address is located 816 bytes inside of
[  432.679841][T24137]  freed 928-byte region [ffff88810b2e6d00, ffff88810b2e70a0)
[  432.685148][T24137] 
[  432.686138][T24137] The buggy address belongs to the physical page:
[  432.688661][T24137] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810b2e6d00 pfn:0x10b2e4
[  432.692510][T24137] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  432.695866][T24137] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  432.698837][T24137] page_type: f5(slab)
[  432.700427][T24137] raw: 057ff00000000040 ffff888105253dc0 dead000000000122 0000000000000000
[  432.703723][T24137] raw: ffff88810b2e6d00 00000000800e0002 00000000f5000000 0000000000000000
[  432.707073][T24137] head: 057ff00000000040 ffff888105253dc0 dead000000000122 0000000000000000
[  432.710447][T24137] head: ffff88810b2e6d00 00000000800e0002 00000000f5000000 0000000000000000
[  432.713842][T24137] head: 057ff00000000002 ffffea00042cb901 00000000ffffffff 00000000ffffffff
[  432.717265][T24137] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  432.720621][T24137] page dumped because: kasan: bad access detected
[  432.723210][T24137] page_owner tracks the page as allocated
[  432.725506][T24137] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6478, tgid 6477 (syz.1.225), ts 79669211591, free_ts 79641558473
[  432.732637][T24137]  post_alloc_hook+0x240/0x2a0
[  432.734533][T24137]  get_page_from_freelist+0x21e4/0x22c0
[  432.736794][T24137]  __alloc_frozen_pages_noprof+0x181/0x370
[  432.739069][T24137]  alloc_pages_mpol+0x232/0x4a0
[  432.740993][T24137]  allocate_slab+0x8a/0x370
[  432.742623][T24137]  ___slab_alloc+0xbeb/0x1420
[  432.744136][T24137]  kmem_cache_alloc_noprof+0x283/0x3c0
[  432.746262][T24137]  xfrm_state_alloc+0x24/0x2f0
[  432.748221][T24137]  __find_acq_core+0x8a7/0x1c00
[  432.750156][T24137]  xfrm_find_acq+0x78/0xa0
[  432.751999][T24137]  pfkey_getspi+0x65d/0xee0
[  432.753870][T24137]  pfkey_sendmsg+0xbfe/0x1090
[  432.755832][T24137]  __sock_sendmsg+0x21c/0x270
[  432.757721][T24137]  ____sys_sendmsg+0x505/0x830
[  432.759675][T24137]  ___sys_sendmsg+0x21f/0x2a0
[  432.761583][T24137]  __x64_sys_sendmsg+0x19b/0x260
[  432.763569][T24137] page last free pid 5863 tgid 5863 stack trace:
[  432.766049][T24137]  __free_frozen_pages+0xbc4/0xd30
[  432.768042][T24137]  __slab_free+0x303/0x3c0
[  432.769816][T24137]  qlist_free_all+0x97/0x140
[  432.771694][T24137]  kasan_quarantine_reduce+0x148/0x160
[  432.773934][T24137]  __kasan_slab_alloc+0x22/0x80
[  432.775964][T24137]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  432.778228][T24137]  getname_flags+0xb8/0x540
[  432.780095][T24137]  user_path_at+0x24/0x60
[  432.781856][T24137]  __x64_sys_umount+0xee/0x160
[  432.783835][T24137]  do_syscall_64+0xfa/0x3b0
[  432.785721][T24137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.788205][T24137] 
[  432.789195][T24137] Memory state around the buggy address:
[  432.791420][T24137]  ffff88810b2e6f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  432.794665][T24137]  ffff88810b2e6f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  432.797936][T24137] >ffff88810b2e7000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  432.801162][T24137]                                      ^
[  432.803428][T24137]  ffff88810b2e7080: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  432.806591][T24137]  ffff88810b2e7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  432.809714][T24137] ==================================================================
[  432.830705][T24137] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  432.833742][T24137] CPU: 1 UID: 0 PID: 24137 Comm: syz.0.7850 Not tainted syzkaller #0 PREEMPT(full) 
[  432.837489][T24137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  432.841459][T24137] Call Trace:
[  432.842830][T24137]  <TASK>
[  432.844076][T24137]  dump_stack_lvl+0x99/0x250
[  432.845975][T24137]  ? __asan_memcpy+0x40/0x70
[  432.847913][T24137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.850052][T24137]  ? __pfx__printk+0x10/0x10
[  432.851945][T24137]  vpanic+0x281/0x750
[  432.853604][T24137]  ? preempt_schedule+0xae/0xc0
[  432.855555][T24137]  ? __pfx_vpanic+0x10/0x10
[  432.857348][T24137]  ? preempt_schedule_common+0x83/0xd0
[  432.859581][T24137]  ? preempt_schedule+0xae/0xc0
[  432.861563][T24137]  ? __pfx_preempt_schedule+0x10/0x10
[  432.863877][T24137]  panic+0xb9/0xc0
[  432.865432][T24137]  ? __pfx_panic+0x10/0x10
[  432.867244][T24137]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  432.869567][T24137]  ? xfrm_state_find+0x2cf2/0x5400
[  432.871581][T24137]  check_panic_on_warn+0x89/0xb0
[  432.873601][T24137]  ? xfrm_state_find+0x2cf2/0x5400
[  432.875577][T24137]  end_report+0x78/0x160
[  432.877346][T24137]  kasan_report+0x129/0x150
[  432.879197][T24137]  ? xfrm_state_find+0x2cf2/0x5400
[  432.881289][T24137]  xfrm_state_find+0x2cf2/0x5400
[  432.883284][T24137]  ? xfrm_state_find+0x1da/0x5400
[  432.885255][T24137]  ? __pfx_xfrm_state_find+0x10/0x10
[  432.887312][T24137]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  432.889817][T24137]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  432.892273][T24137]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  432.894892][T24137]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  432.897317][T24137]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  432.899828][T24137]  ? __lock_acquire+0xab9/0xd20
[  432.901833][T24137]  ? xfrm_expand_policies+0x41f/0x6a0
[  432.904036][T24137]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  432.906185][T24137]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  432.908504][T24137]  ? __pfx_rcuref_put+0x10/0x10
[  432.910455][T24137]  xfrm_lookup_route+0x3c/0x1c0
[  432.912441][T24137]  tcp_v4_connect+0x846/0x1a00
[  432.914451][T24137]  ? __pfx_tcp_v4_connect+0x10/0x10
[  432.916567][T24137]  __inet_stream_connect+0x2ae/0xe80
[  432.918694][T24137]  ? __local_bh_enable_ip+0x12d/0x1c0
[  432.920918][T24137]  ? __pfx___inet_stream_connect+0x10/0x10
[  432.923303][T24137]  ? __local_bh_enable_ip+0x12d/0x1c0
[  432.925507][T24137]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  432.927806][T24137]  inet_stream_connect+0x66/0xa0
[  432.929842][T24137]  __sys_connect+0x316/0x440
[  432.931707][T24137]  ? __pfx___sys_connect+0x10/0x10
[  432.933697][T24137]  ? rcu_is_watching+0x15/0xb0
[  432.935647][T24137]  __x64_sys_connect+0x7a/0x90
[  432.937604][T24137]  do_syscall_64+0xfa/0x3b0
[  432.939480][T24137]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.941605][T24137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.944092][T24137]  ? exc_page_fault+0x9f/0xf0
[  432.946045][T24137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.948482][T24137] RIP: 0033:0x7f281fb8eba9
[  432.950313][T24137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.958041][T24137] RSP: 002b:00007f2820988038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  432.961409][T24137] RAX: ffffffffffffffda RBX: 00007f281fdd5fa0 RCX: 00007f281fb8eba9
[  432.964593][T24137] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000003
[  432.967739][T24137] RBP: 00007f281fc11e19 R08: 0000000000000000 R09: 0000000000000000
[  432.970788][T24137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.973894][T24137] R13: 00007f281fdd6038 R14: 00007f281fdd5fa0 R15: 00007fffb6d41368
[  432.977032][T24137]  </TASK>
[  432.978640][T24137] Kernel Offset: disabled
[  432.980036][T24137] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:08:50  Registers:
info registers vcpu 0

CPU#0
RAX=42b33acd0f8a0a00 RBX=ffffffff819683f8 RCX=42b33acd0f8a0a00 RDX=0000000000000001
RSI=ffffffff8d9b8d8d RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2cd6ed CR3=0000000028546000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f281fda7498 00007f281fda7470 XMM03=00007f281fda74a8 00007f281fda74a0
XMM04=00007f282090d100 00007f281fda7460 XMM05=00007f281fda7478 00007f281fda74c0
XMM06=00007f281fda74b8 00007f281fda74b0 XMM07=00007f281fda74a8 00007f281fda74a0
XMM08=0000000000000000 00007f281fc12ee7 XMM09=0000000000000000 00007f281fc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001660 RDI=0000000000001661 RBP=00000000000003f8 RSP=ffffc90002e4ec30
R8 =ffff888107f48237 R9 =1ffff11020fe9046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd8c9 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f28209886c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2820987fc8 CR3=0000000028546000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f281fda7498 00007f281fda7470 XMM03=00007f281fda74a8 00007f281fda74a0
XMM04=00007f282090d100 00007f281fda7460 XMM05=00007f281fda7478 00007f281fda74c0
XMM06=00007f281fda74b8 00007f281fda74b0 XMM07=00007f281fda74a8 00007f281fda74a0
XMM08=0000000000000000 00007f281fc12ee7 XMM09=0000000000000000 00007f281fc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
