last executing test programs:

547.505854ms ago: executing program 1 (id=3343):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000940), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
sendmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='l', 0x1}], 0x1}}], 0x1, 0x4000)
accept4$vsock_stream(r0, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000)

376.058451ms ago: executing program 1 (id=3348):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0)

304.375724ms ago: executing program 0 (id=3349):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)={0x30, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0x4}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)

303.604312ms ago: executing program 0 (id=3351):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)

303.349678ms ago: executing program 1 (id=3352):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec", 0x4a}], 0x1, 0x0, 0x0, 0x7}, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

227.140752ms ago: executing program 2 (id=3353):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7}, 0x90)

226.850929ms ago: executing program 0 (id=3354):
syz_emit_ethernet(0x16, &(0x7f0000000180)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "1f", "985a3a", 0x88a8}}}}}, 0x0)

226.726756ms ago: executing program 2 (id=3355):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb6, 0xa, 0x0, 0x0, 0x90, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc42}, 0x58)

165.844107ms ago: executing program 0 (id=3356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd29, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5}]}, 0x24}}, 0x0)

165.597533ms ago: executing program 2 (id=3357):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x2124}, {r0, 0xb0c4}], 0x2, 0x11ff)
shutdown(r0, 0x0)

165.312826ms ago: executing program 0 (id=3358):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x800448d2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000100)='vm_unmapped_area\x00', r2}, 0x18)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x1, 0xfff, 0x5, 0x1080, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x16, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x4a, &(0x7f00000003c0)=""/74, 0x41000, 0x30, '\x00', r8, 0x0, r0, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x6, 0x0, 0x7fffffff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000500)=[{0x5, 0x3, 0xf, 0x1}, {0x5, 0x3, 0x9, 0x5}, {0x1, 0x1, 0xf}, {0x1, 0x4, 0x1, 0x5}]}, 0x94)

116.258254ms ago: executing program 1 (id=3359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff3}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

67.926102ms ago: executing program 2 (id=3360):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

67.769489ms ago: executing program 1 (id=3361):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x48)

67.290989ms ago: executing program 0 (id=3362):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
close(0x3)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
shutdown(r2, 0x1)
connect$can_bcm(r0, 0x0, 0x0)

1.500513ms ago: executing program 2 (id=3363):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000200b703000000050000000000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r0}, &(0x7f0000000200), &(0x7f0000000380)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

1.349095ms ago: executing program 1 (id=3364):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)

0s ago: executing program 2 (id=3365):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:58400' (ED25519) to the list of known hosts.
syzkaller login: [   55.614349][ T5806] cgroup: Unknown subsys name 'net'
[   55.714064][ T5806] cgroup: Unknown subsys name 'cpuset'
[   55.718014][ T5806] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.100675][ T5806] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.093247][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.096447][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.111636][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.114305][ T5211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.117633][ T5211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.120884][ T5211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.124068][ T5211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.126677][ T5211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.155267][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.155447][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.162118][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.165799][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.170418][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.177955][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.182082][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.433296][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   61.517422][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   61.558916][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   61.593574][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.596895][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.600113][ T5822] bridge_slave_0: entered allmulticast mode
[   61.604824][ T5822] bridge_slave_0: entered promiscuous mode
[   61.624798][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.627843][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.630721][ T5822] bridge_slave_1: entered allmulticast mode
[   61.634966][ T5822] bridge_slave_1: entered promiscuous mode
[   61.716621][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.720385][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.723753][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.726846][ T5820] bridge_slave_0: entered allmulticast mode
[   61.731845][ T5820] bridge_slave_0: entered promiscuous mode
[   61.750154][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.766627][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.769741][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.774643][ T5820] bridge_slave_1: entered allmulticast mode
[   61.779135][ T5820] bridge_slave_1: entered promiscuous mode
[   61.848738][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.851890][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.854789][ T5828] bridge_slave_0: entered allmulticast mode
[   61.858133][ T5828] bridge_slave_0: entered promiscuous mode
[   61.862647][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.865737][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.868826][ T5828] bridge_slave_1: entered allmulticast mode
[   61.873191][ T5828] bridge_slave_1: entered promiscuous mode
[   61.877978][ T5822] team0: Port device team_slave_0 added
[   61.896225][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.915762][ T5822] team0: Port device team_slave_1 added
[   61.920530][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.926977][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.958642][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.978536][ T5820] team0: Port device team_slave_0 added
[   62.008671][ T5820] team0: Port device team_slave_1 added
[   62.042734][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.045681][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.057892][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.089927][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.093013][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.103307][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.108482][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.111483][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.122132][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.128381][ T5828] team0: Port device team_slave_0 added
[   62.133431][ T5828] team0: Port device team_slave_1 added
[   62.150514][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.153598][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.164905][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.196058][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.199038][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.210039][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.239930][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.242938][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.255143][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.279053][ T5822] hsr_slave_0: entered promiscuous mode
[   62.283009][ T5822] hsr_slave_1: entered promiscuous mode
[   62.307438][ T5820] hsr_slave_0: entered promiscuous mode
[   62.310799][ T5820] hsr_slave_1: entered promiscuous mode
[   62.314113][ T5820] debugfs: 'hsr0' already exists in 'hsr'
[   62.316607][ T5820] Cannot create hsr debugfs directory
[   62.408833][ T5828] hsr_slave_0: entered promiscuous mode
[   62.412637][ T5828] hsr_slave_1: entered promiscuous mode
[   62.415425][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   62.417825][ T5828] Cannot create hsr debugfs directory
[   62.655419][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.669855][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.685594][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.701751][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.748143][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   62.756765][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.767965][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.775947][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.854202][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.872925][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.885559][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.896193][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.937000][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.958012][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   62.989425][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.992649][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.000169][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.003359][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.014879][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.067336][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   63.090185][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.092603][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.104471][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.106785][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.174794][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.206792][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   63.212014][ T5211] Bluetooth: hci2: command tx timeout
[   63.212041][ T5829] Bluetooth: hci1: command tx timeout
[   63.214373][ T5211] Bluetooth: hci0: command tx timeout
[   63.235295][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.238403][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.245267][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.248043][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.360122][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.379639][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.439604][ T5822] veth0_vlan: entered promiscuous mode
[   63.450662][ T5820] veth0_vlan: entered promiscuous mode
[   63.457902][ T5822] veth1_vlan: entered promiscuous mode
[   63.477258][ T5820] veth1_vlan: entered promiscuous mode
[   63.487533][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.528408][ T5822] veth0_macvtap: entered promiscuous mode
[   63.536225][ T5820] veth0_macvtap: entered promiscuous mode
[   63.547576][ T5822] veth1_macvtap: entered promiscuous mode
[   63.552894][ T5820] veth1_macvtap: entered promiscuous mode
[   63.557370][ T5828] veth0_vlan: entered promiscuous mode
[   63.570157][ T5828] veth1_vlan: entered promiscuous mode
[   63.579178][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.585246][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.596628][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.605394][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.615464][ T5650] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.624501][ T5650] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.633779][ T5650] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.647062][ T5650] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.658230][ T5650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.662914][ T5650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.679702][ T5650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.683778][ T5650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.695124][ T5828] veth0_macvtap: entered promiscuous mode
[   63.705116][ T5828] veth1_macvtap: entered promiscuous mode
[   63.719086][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.728974][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.754639][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.770568][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.775932][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.778867][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.792292][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.796855][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.841420][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.846458][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.864099][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.867654][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.889601][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.894156][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.930756][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.940737][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.957334][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.965469][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.968762][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.728536][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   64.912939][ T5941] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET)
[   65.296630][ T5211] Bluetooth: hci0: command tx timeout
[   65.296703][   T55] Bluetooth: hci1: command tx timeout
[   65.299056][ T5211] Bluetooth: hci2: command tx timeout
[   65.560543][ T5971] ieee802154 phy0 wpan0: encryption failed: -22
[   66.385937][ T6013] Zero length message leads to an empty skb
[   66.467621][ T6013] syz.2.53 (6013) used greatest stack depth: 20376 bytes left
[   67.385256][ T5211] Bluetooth: hci1: command tx timeout
[   67.385420][   T55] Bluetooth: hci0: command tx timeout
[   67.387619][ T5211] Bluetooth: hci2: command tx timeout
[   67.435008][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[   67.438996][ T6047] netlink: 7 bytes leftover after parsing attributes in process `syz.1.64'.
[   67.645603][ T6055] netlink: 'syz.2.68': attribute type 1 has an invalid length.
[   67.912369][ T6063] netlink: 'syz.2.73': attribute type 21 has an invalid length.
[   67.915693][ T6063] netlink: 'syz.2.73': attribute type 1 has an invalid length.
[   68.199263][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'.
[   68.284016][ T6087] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.454959][ T6102] bridge0: entered allmulticast mode
[   68.462333][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'.
[   68.466675][ T6102] bridge_slave_1: left allmulticast mode
[   68.469252][ T6102] bridge_slave_1: left promiscuous mode
[   68.482566][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.490253][ T6102] bridge_slave_0: left allmulticast mode
[   68.500029][ T6102] bridge_slave_0: left promiscuous mode
[   68.504234][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.559319][ T6102] bridge0 (unregistering): left allmulticast mode
[   68.984350][ T6143] netlink: 'syz.2.110': attribute type 1 has an invalid length.
[   68.994057][ T6143] netlink: 'syz.2.110': attribute type 3 has an invalid length.
[   69.001750][ T6143] netlink: 224 bytes leftover after parsing attributes in process `syz.2.110'.
[   69.043837][ T6147] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   69.451255][ T5211] Bluetooth: hci2: command tx timeout
[   69.461973][ T5211] Bluetooth: hci0: command tx timeout
[   69.462933][ T5829] Bluetooth: hci1: command tx timeout
[   69.737647][ T6191] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.965676][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'.
[   70.951605][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'.
[   70.996296][ T6280] netlink: 'syz.0.141': attribute type 1 has an invalid length.
[   71.193261][ T6303] ieee802154 phy0 wpan0: encryption failed: -22
[   71.198146][ T6302] Bluetooth: MGMT ver 1.23
[   71.210879][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'.
[   71.219021][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.221400][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.475644][ T6323] netlink: 19 bytes leftover after parsing attributes in process `syz.2.155'.
[   72.194951][ T6374] netlink: 200 bytes leftover after parsing attributes in process `syz.0.180'.
[   72.198175][ T6375] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.204381][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[   72.502483][ T6391] tun0: tun_chr_ioctl cmd 1074025675
[   72.504471][ T6391] tun0: persist enabled
[   72.506601][ T6391] tun0: tun_chr_ioctl cmd 1074025675
[   72.508615][ T6391] tun0: persist enabled
[   72.875888][ T6395] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   73.240301][ T6408] netlink: 'syz.2.196': attribute type 11 has an invalid length.
[   73.623153][ T6414] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.680807][ T6416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.713813][   T24] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[   73.717558][   T24] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[   73.733594][ T6414] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.766610][ T6268] wlan1: authenticated
[   73.769506][ T6418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.779286][ T6268] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[   73.796365][ T6414] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.849790][ T6268] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[   73.854174][ T6418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.858767][ T6268] wlan1: associated
[   73.860130][ T6414] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.956718][ T5853] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.985090][ T5853] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.009922][ T5853] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.020484][ T5853] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.513936][ T6454] batadv_slave_1: entered promiscuous mode
[   74.622550][ T6460] netlink: 72 bytes leftover after parsing attributes in process `syz.2.215'.
[   74.639670][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'.
[   74.651511][ T6463] tipc: Started in network mode
[   74.653822][ T6463] tipc: Node identity 7, cluster identity 4711
[   74.665490][ T6463] tipc: Node number set to 7
[   74.689944][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.220'.
[   74.723270][ T6451] batadv_slave_1: left promiscuous mode
[   74.787953][ T6467] syzkaller0: entered promiscuous mode
[   74.790398][ T6467] syzkaller0: entered allmulticast mode
[   75.706165][ T5936] IPVS: starting estimator thread 0...
[   75.811738][ T6483] IPVS: using max 78 ests per chain, 187200 per kthread
[   75.812154][ T6491] macsec1: entered promiscuous mode
[   75.818063][ T6491] macvlan1: entered promiscuous mode
[   75.828586][ T6491] macsec1: entered allmulticast mode
[   75.830874][ T6491] macvlan1: entered allmulticast mode
[   75.835217][ T6491] veth1_vlan: entered allmulticast mode
[   75.843153][ T6491] macvlan1: left allmulticast mode
[   75.845468][ T6491] veth1_vlan: left allmulticast mode
[   75.847762][ T6491] macvlan1: left promiscuous mode
[   75.994486][ T6500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.066936][ T6510] netlink: 44 bytes leftover after parsing attributes in process `syz.1.235'.
[   76.765318][ T6538] syzkaller1: entered promiscuous mode
[   76.767307][ T6538] syzkaller1: entered allmulticast mode
[   77.111450][ T6564] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.258'.
[   77.212981][ T6565] netlink: 'syz.1.255': attribute type 1 has an invalid length.
[   77.216356][ T6565] netlink: 140 bytes leftover after parsing attributes in process `syz.1.255'.
[   77.220348][ T6565] netlink: 96 bytes leftover after parsing attributes in process `syz.1.255'.
[   78.339744][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.277'.
[   78.421681][ T6609] netlink: 'syz.1.280': attribute type 12 has an invalid length.
[   78.425190][ T6609] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.280'.
[   78.825623][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'.
[   78.831913][ T6614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.282'.
[   78.843441][ T6614] netlink: 'syz.0.282': attribute type 13 has an invalid length.
[   78.846138][ T6614] netlink: 'syz.0.282': attribute type 17 has an invalid length.
[   78.900218][ T6614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.007938][ T6641] netlink: 44 bytes leftover after parsing attributes in process `syz.2.291'.
[   79.278525][ T6652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.338709][ T6663] unsupported nlmsg_type 40
[   79.481972][ T6675] IPVS: Error connecting to the multicast addr
[   79.675610][ T6686] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[   79.678545][ T6686] netlink: 144 bytes leftover after parsing attributes in process `syz.0.311'.
[   79.685461][ T6686] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[   79.884675][ T6697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.887717][ T6692] syzkaller0: entered promiscuous mode
[   79.889556][ T6692] syzkaller0: entered allmulticast mode
[   79.944958][ T6692] tipc: Resetting bearer <eth:syzkaller0>
[   79.950900][ T6691] tipc: Resetting bearer <eth:syzkaller0>
[   79.972537][ T6691] tipc: Disabling bearer <eth:syzkaller0>
[   80.093119][ T6705] netlink: 'syz.1.318': attribute type 39 has an invalid length.
[   81.047400][ T6750] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   81.058140][ T6750] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   81.134113][ T6748] __nla_validate_parse: 2 callbacks suppressed
[   81.134122][ T6748] netlink: 277 bytes leftover after parsing attributes in process `syz.2.340'.
[   81.201027][ T6762] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[   81.229545][ T6762] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   81.256470][ T6764] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   81.308388][ T6762] bond0: (slave bond_slave_0): Releasing backup interface
[   81.323996][ T6762] bond0: (slave bond_slave_1): Releasing backup interface
[   81.349119][ T6762] team0: Port device team_slave_0 removed
[   81.359673][ T6762] team0: Port device team_slave_1 removed
[   81.368206][ T6762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.376678][ T6762] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.389252][ T6762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.394011][ T6775] netlink: 'syz.2.346': attribute type 10 has an invalid length.
[   81.397121][ T6762] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.416096][ T6775] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   81.443091][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.452152][    T9] cfg80211: failed to load regulatory.db
[   81.484265][ T6775] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   81.554721][ T6762] syz.2.346 (6762) used greatest stack depth: 20312 bytes left
[   81.643161][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[   81.663500][ T5650] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.666747][ T5650] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.669578][ T5650] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.696563][ T5650] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.789612][ T6801] netlink: 44 bytes leftover after parsing attributes in process `syz.1.364'.
[   81.795625][ T6799] sctp: [Deprecated]: syz.0.363 (pid 6799) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.795625][ T6799] Use struct sctp_sack_info instead
[   81.802042][ T6801] netlink: 43 bytes leftover after parsing attributes in process `syz.1.364'.
[   81.805553][ T6801] netlink: 'syz.1.364': attribute type 5 has an invalid length.
[   81.809784][ T6801] netlink: 43 bytes leftover after parsing attributes in process `syz.1.364'.
[   82.963879][ T6896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'.
[   82.967044][ T6896] netlink: 64 bytes leftover after parsing attributes in process `syz.2.408'.
[   83.019365][ T6900] syzkaller1: entered promiscuous mode
[   83.022221][ T6900] syzkaller1: entered allmulticast mode
[   83.719983][ T6943] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   83.735452][ T6942] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   84.694806][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'.
[   84.813513][ T6974] dummy0: entered allmulticast mode
[   84.847451][ T6977] netlink: 'syz.1.447': attribute type 1 has an invalid length.
[   84.988677][ T6988] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.451'.
[   85.164233][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'.
[   85.909789][ T7077] pimreg: entered allmulticast mode
[   85.920347][ T7079] bond0: entered promiscuous mode
[   85.924856][ T7079] bond_slave_0: entered promiscuous mode
[   85.927557][ T7079] bond_slave_1: entered promiscuous mode
[   86.034801][ T7087] tipc: Failed to remove unknown binding: 66,1,1/7:1297855116/1297855118
[   86.040121][ T7087] tipc: Failed to remove unknown binding: 66,1,1/7:1297855116/1297855118
[   86.044303][ T7087] tipc: Failed to remove unknown binding: 66,1,1/7:1297855116/1297855118
[   86.527303][ T7142] __nla_validate_parse: 4 callbacks suppressed
[   86.527318][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.528'.
[   86.650787][ T7152] bridge0: port 3(gretap0) entered blocking state
[   86.655693][ T7152] bridge0: port 3(gretap0) entered disabled state
[   86.658712][ T7152] gretap0: entered allmulticast mode
[   86.663297][ T7152] gretap0: entered promiscuous mode
[   86.671651][ T7152] bridge0: port 3(gretap0) entered blocking state
[   86.674469][ T7152] bridge0: port 3(gretap0) entered forwarding state
[   86.700914][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'.
[   86.872836][ T7173] netlink: 'syz.0.542': attribute type 7 has an invalid length.
[   87.032498][ T7187] netlink: 'syz.2.551': attribute type 1 has an invalid length.
[   87.035144][ T7187] netlink: 232 bytes leftover after parsing attributes in process `syz.2.551'.
[   87.038679][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'.
[   88.716639][ T7262] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   88.766668][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[   88.868236][ T7276] syzkaller1: entered promiscuous mode
[   88.870226][ T7276] syzkaller1: entered allmulticast mode
[   88.885951][ T7277] netlink: 'syz.1.586': attribute type 4 has an invalid length.
[   88.899789][ T7277] netlink: 'syz.1.586': attribute type 4 has an invalid length.
[   89.159917][ T7290] netlink: 220 bytes leftover after parsing attributes in process `syz.0.594'.
[   89.247087][ T7296] netlink: 'syz.0.597': attribute type 4 has an invalid length.
[   89.266850][ T7296] netlink: 'syz.0.597': attribute type 4 has an invalid length.
[   89.304454][ T7298] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   89.314020][ T7298] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   89.329981][ T7300] syz.0.599 (7300) used greatest stack depth: 19192 bytes left
[   89.431229][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[   89.434980][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'.
[   89.590091][ T7321] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0
[   90.279588][ T7363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.627'.
[   90.287739][ T7363] netlink: 43 bytes leftover after parsing attributes in process `syz.1.627'.
[   90.294076][ T7363] netlink: 'syz.1.627': attribute type 6 has an invalid length.
[   90.297258][ T7363] netlink: 'syz.1.627': attribute type 5 has an invalid length.
[   90.588684][ T7388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.594606][ T7388] syzkaller0: entered promiscuous mode
[   90.597003][ T7388] syzkaller0: entered allmulticast mode
[   90.616200][ T7391] GUP no longer grows the stack in syz.1.641 (7391): 200000003000-20000000a000 (200000001000)
[   90.620251][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.1.641 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[   90.620263][ T7391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.620267][ T7391] Call Trace:
[   90.620271][ T7391]  <TASK>
[   90.620274][ T7391]  dump_stack_lvl+0x189/0x250
[   90.620288][ T7391]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.620296][ T7391]  ? __pfx__printk+0x10/0x10
[   90.620304][ T7391]  ? find_vma+0xe7/0x160
[   90.620321][ T7391]  __get_user_pages+0x2a60/0x30b0
[   90.620346][ T7391]  ? __pfx___get_user_pages+0x10/0x10
[   90.620359][ T7391]  __gup_longterm_locked+0xd66/0x15b0
[   90.620371][ T7391]  ? try_grab_folio_fast+0x35b/0x4f0
[   90.620384][ T7391]  ? sanity_check_pinned_pages+0x11c8/0x12c0
[   90.620397][ T7391]  gup_fast_fallback+0x1cd4/0x2260
[   90.620423][ T7391]  ? __pfx_gup_fast_fallback+0x10/0x10
[   90.620435][ T7391]  ? stack_depot_save_flags+0x429/0x900
[   90.620448][ T7391]  ? pin_user_pages_fast+0x4d/0xb0
[   90.620464][ T7391]  iov_iter_extract_pages+0x35a/0x5e0
[   90.620483][ T7391]  extract_iter_to_sg+0xe46/0x24e0
[   90.620505][ T7391]  ? __pfx_extract_iter_to_sg+0x10/0x10
[   90.620529][ T7391]  ? __asan_memset+0x22/0x50
[   90.620545][ T7391]  af_alg_get_rsgl+0x436/0x810
[   90.620578][ T7391]  aead_recvmsg+0x4cc/0x13f0
[   90.620591][ T7391]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.620613][ T7391]  ? trace_sched_exit_tp+0x38/0x120
[   90.620637][ T7391]  ? __pfx_aead_recvmsg+0x10/0x10
[   90.620652][ T7391]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[   90.620668][ T7391]  ? __pfx_aead_recvmsg+0x10/0x10
[   90.620702][ T7391]  sock_recvmsg_nosec+0x186/0x1c0
[   90.620716][ T7391]  ____sys_recvmsg+0x3aa/0x460
[   90.620728][ T7391]  ? __pfx_____sys_recvmsg+0x10/0x10
[   90.620743][ T7391]  ? import_iovec+0x74/0xa0
[   90.620744][ T7388] tipc: Resetting bearer <eth:syzkaller0>
[   90.620755][ T7391]  ___sys_recvmsg+0x1b5/0x510
[   90.620767][ T7391]  ? __pfx____sys_recvmsg+0x10/0x10
[   90.620788][ T7391]  ? __might_fault+0xb0/0x130
[   90.620806][ T7391]  do_recvmmsg+0x307/0x770
[   90.620818][ T7391]  ? __pfx_do_recvmmsg+0x10/0x10
[   90.620824][ T7391]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[   90.620840][ T7391]  ? __pfx_do_futex+0x10/0x10
[   90.620856][ T7391]  __x64_sys_recvmmsg+0x190/0x240
[   90.620866][ T7391]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[   90.620874][ T7391]  ? rcu_is_watching+0x15/0xb0
[   90.620887][ T7391]  ? do_syscall_64+0xbe/0x3b0
[   90.620900][ T7391]  do_syscall_64+0xfa/0x3b0
[   90.620911][ T7391]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.620920][ T7391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.620928][ T7391]  ? exc_page_fault+0x9f/0xf0
[   90.620938][ T7391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.620945][ T7391] RIP: 0033:0x7f3977f8ebe9
[   90.620952][ T7391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.620959][ T7391] RSP: 002b:00007f3978da8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   90.620967][ T7391] RAX: ffffffffffffffda RBX: 00007f39781b5fa0 RCX: 00007f3977f8ebe9
[   90.620972][ T7391] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[   90.620977][ T7391] RBP: 00007f3978011e19 R08: 0000000000000000 R09: 0000000000000000
[   90.620981][ T7391] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   90.620985][ T7391] R13: 00007f39781b6038 R14: 00007f39781b5fa0 R15: 00007fff98509b48
[   90.620997][ T7391]  </TASK>
[   90.802500][ T7387] tipc: Resetting bearer <eth:syzkaller0>
[   90.809845][ T7387] tipc: Disabling bearer <eth:syzkaller0>
[   90.915425][ T7406] netlink: zone id is out of range
[   90.917263][ T7406] netlink: zone id is out of range
[   91.290710][ T7441] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   91.486250][ T7456] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[   91.743921][ T7472] IPVS: Scheduler module ip_vs_sip not found
[   91.903097][ T7485] __nla_validate_parse: 3 callbacks suppressed
[   91.903138][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'.
[   91.909484][ T7487] netlink: 36 bytes leftover after parsing attributes in process `syz.1.685'.
[   91.930887][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'.
[   92.031655][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'.
[   92.257560][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.1.699'.
[   92.261509][ T7515] netlink: 48 bytes leftover after parsing attributes in process `syz.1.699'.
[   92.571583][ T7528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'.
[   92.608218][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'.
[   92.672370][ T7534] netlink: 14 bytes leftover after parsing attributes in process `syz.1.706'.
[   92.834291][ T7542] netlink: 64 bytes leftover after parsing attributes in process `syz.1.711'.
[   93.187744][ T7561] netlink: 'syz.2.720': attribute type 2 has an invalid length.
[   93.226413][ T7562] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   93.519594][ T7574] netlink: 'syz.1.725': attribute type 4 has an invalid length.
[   94.582723][    T9] IPVS: starting estimator thread 0...
[   94.585220][ T7663] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[   94.671433][ T7669] IPVS: using max 76 ests per chain, 182400 per kthread
[   94.907833][ T7700] delete_channel: no stack
[   95.563279][ T7743] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.567744][ T7743] syzkaller0: entered promiscuous mode
[   95.570058][ T7743] syzkaller0: entered allmulticast mode
[   95.591803][ T7743] tipc: Resetting bearer <eth:syzkaller0>
[   95.612248][ T7742] tipc: Resetting bearer <eth:syzkaller0>
[   95.626549][ T7742] tipc: Disabling bearer <eth:syzkaller0>
[   95.797848][ T7755] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   95.837727][ T7760] vlan0: entered promiscuous mode
[   97.029272][ T7799] tap0: tun_chr_ioctl cmd 1074025677
[   97.035106][ T7799] tap0: linktype set to 270
[   97.236145][ T7800] netlink: 'syz.2.829': attribute type 4 has an invalid length.
[   97.444810][ T7816] __nla_validate_parse: 8 callbacks suppressed
[   97.444824][ T7816] netlink: 60 bytes leftover after parsing attributes in process `syz.2.836'.
[   97.939936][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.854'.
[   98.126385][ T5270] udevd[5270]: worker [5832] terminated by signal 33 (Unknown signal 33)
[   98.129902][ T5270] udevd[5270]: worker [5832] failed while handling '/devices/virtual/block/loop2'
[   98.260200][ T7869] netlink: 676 bytes leftover after parsing attributes in process `syz.0.860'.
[   98.265866][ T7869] netlink: 676 bytes leftover after parsing attributes in process `syz.0.860'.
[   98.438188][ T7883] bond0: (slave wlan1): Releasing backup interface
[   98.485741][ T7883] team0: Mode changed to "broadcast"
[   98.489278][ T7883] vlan0: entered promiscuous mode
[   98.506426][ T7883] team0: Port device vlan0 added
[   98.513536][ T7883] tipc: Started in network mode
[   98.515602][ T7883] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   98.519241][ T7883] tipc: Enabled bearer <eth:team0>, priority 0
[   98.770201][ T7902] syz_tun: entered promiscuous mode
[   98.778460][ T7902] syz_tun: entered allmulticast mode
[   98.797972][    T9] IPVS: starting estimator thread 0...
[   98.837851][ T7905] nbd: must specify a device to reconfigure
[   98.906795][ T7903] IPVS: using max 79 ests per chain, 189600 per kthread
[   99.174306][ T7930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.368235][   T12] IPVS: stop unused estimator thread 0...
[   99.477015][ T7954] vxcan0: tx address claim with different name
[   99.632119][   T24] tipc: Node number set to 11578026
[  100.065855][ T7990] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  100.584227][ T8022] syzkaller0: entered promiscuous mode
[  100.586751][ T8022] syzkaller0: entered allmulticast mode
[  100.593909][ T5853] syzkaller0: tun_net_xmit 70
[  100.598401][ T8022] syzkaller0: tun_chr_ioctl cmd 1074025677
[  100.605347][ T8022] syzkaller0: Linktype set failed because interface is up
[  100.638069][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'.
[  102.018172][ T8084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.022414][ T8084] syzkaller0: entered promiscuous mode
[  102.025646][ T8084] syzkaller0: entered allmulticast mode
[  102.036908][ T8084] tipc: Resetting bearer <eth:syzkaller0>
[  102.040269][ T8083] tipc: Resetting bearer <eth:syzkaller0>
[  102.054040][ T8083] tipc: Disabling bearer <eth:syzkaller0>
[  102.321678][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'.
[  102.573862][ T8142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.608847][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.057183][ T8201] TCP: TCP_TX_DELAY enabled
[  103.084141][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'.
[  103.103362][ T8208] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.128018][ T8208] bond1: (slave veth3): Enslaving as an active interface with an up link
[  103.269574][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'.
[  103.659286][ T8243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.663752][ T8243] syzkaller0: entered promiscuous mode
[  103.665783][ T8243] syzkaller0: entered allmulticast mode
[  103.679273][ T8243] tipc: Resetting bearer <eth:syzkaller0>
[  103.683735][ T8242] tipc: Resetting bearer <eth:syzkaller0>
[  103.694232][ T8242] tipc: Disabling bearer <eth:syzkaller0>
[  103.800185][ T8245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.807887][ T8245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.872778][ T8245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.876918][ T8245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.944045][ T8245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  103.947316][ T8245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.030341][ T8245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.034799][ T8245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.125159][ T5853] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.128729][ T5853] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.137162][ T5853] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.140701][ T5853] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.157800][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.161585][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.172217][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  104.175556][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.346627][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'.
[  104.525542][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'.
[  104.596464][ T8284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1013'.
[  104.597929][ T8285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1014'.
[  104.706088][ T8296] netlink: 'syz.1.1019': attribute type 6 has an invalid length.
[  104.875828][ T8304] veth0_to_team: entered promiscuous mode
[  105.186636][ T8333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1037'.
[  106.078145][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'.
[  106.085992][ T8348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1042'.
[  106.089085][ T8348] tipc: Invalid UDP bearer configuration
[  106.089112][ T8348] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  106.129110][ T8353] netlink: 'syz.0.1045': attribute type 1 has an invalid length.
[  106.132138][ T8353] netlink: 'syz.0.1045': attribute type 1 has an invalid length.
[  106.609657][ T8403] netlink: 'syz.1.1067': attribute type 11 has an invalid length.
[  107.675136][ T8444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.678212][ T8444] IPv6: NLM_F_CREATE should be set when creating new route
[  107.681042][ T8444] IPv6: NLM_F_CREATE should be set when creating new route
[  109.267401][ T8511] __nla_validate_parse: 7 callbacks suppressed
[  109.267419][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'.
[  109.448993][   T47] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  109.455446][   T47] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  109.472136][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1123'.
[  109.475727][ T8533] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  109.478445][ T8533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.605980][ T8548] netlink: 'syz.1.1130': attribute type 2 has an invalid length.
[  109.622076][ T8548] k*]: entered promiscuous mode
[  110.553167][ T8592] netlink: 'syz.0.1143': attribute type 1 has an invalid length.
[  110.585832][ T8594] hsr0 speed is unknown, defaulting to 1000
[  110.588556][ T8594] hsr0 speed is unknown, defaulting to 1000
[  110.592580][ T8594] hsr0 speed is unknown, defaulting to 1000
[  110.598086][ T8594] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  110.606596][ T8594] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  110.635833][ T8594] hsr0 speed is unknown, defaulting to 1000
[  110.640292][ T8594] hsr0 speed is unknown, defaulting to 1000
[  110.648644][ T8594] hsr0 speed is unknown, defaulting to 1000
[  110.810779][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1147'.
[  111.086729][ T8621] tipc: Started in network mode
[  111.089036][ T8621] tipc: Node identity 4aa1425f99b9, cluster identity 4711
[  111.096215][ T8621] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.099767][ T8621] syzkaller0: entered promiscuous mode
[  111.102708][ T8621] syzkaller0: entered allmulticast mode
[  111.119070][ T8621] tipc: Resetting bearer <eth:syzkaller0>
[  111.122991][ T8620] tipc: Resetting bearer <eth:syzkaller0>
[  111.140060][ T8620] tipc: Disabling bearer <eth:syzkaller0>
[  111.275270][ T8625] netlink: 'syz.1.1157': attribute type 7 has an invalid length.
[  111.889140][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  111.893428][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  111.962873][ T8670] netlink: 'syz.0.1177': attribute type 15 has an invalid length.
[  112.099673][ T8683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'.
[  112.108637][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'.
[  112.708033][ T8696] netlink: 'syz.1.1188': attribute type 3 has an invalid length.
[  112.711497][ T8696] netlink: 'syz.1.1188': attribute type 3 has an invalid length.
[  112.715016][ T8696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1188'.
[  112.816325][ T8700] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  112.889549][ T8702] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1191'.
[  113.188180][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'.
[  113.194155][ T8722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.238818][ T8724] netlink: 'syz.0.1202': attribute type 29 has an invalid length.
[  113.445498][ T8743] netlink: 'syz.1.1209': attribute type 13 has an invalid length.
[  113.448797][ T8743] netlink: 'syz.1.1209': attribute type 17 has an invalid length.
[  113.580846][ T8749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.647989][ T8753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.726819][ T8743] bond0: left promiscuous mode
[  113.728996][ T8743] bond_slave_0: left promiscuous mode
[  113.732382][ T8743] bond_slave_1: left promiscuous mode
[  113.738663][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.754809][ T8743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.798407][ T8745] hsr0 speed is unknown, defaulting to 1000
[  113.987528][ T8771] netlink: 'syz.0.1222': attribute type 13 has an invalid length.
[  113.991226][ T8771] netlink: 'syz.0.1222': attribute type 17 has an invalid length.
[  114.010882][ T8766] syz_tun: left promiscuous mode
[  114.016220][ T8766] syz_tun: left allmulticast mode
[  114.252593][ T8766] vlan0: left promiscuous mode
[  114.287839][ T8776] __nla_validate_parse: 3 callbacks suppressed
[  114.287879][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1222'.
[  114.343558][ T8766] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  114.402896][ T8771] dummy0: left allmulticast mode
[  114.409734][ T8771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.421573][ T8772] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  114.441417][ T8775] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  114.462560][ T8775] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  114.466186][ T5650] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.472171][ T5650] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.472956][ T8776] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.476541][ T5650] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.484012][ T5650] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.491255][ T8776] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.323242][ T8817] validate_nla: 1 callbacks suppressed
[  116.323258][ T8817] netlink: 'syz.2.1239': attribute type 11 has an invalid length.
[  116.780021][ T8837] netlink: 'syz.1.1249': attribute type 1 has an invalid length.
[  116.838822][ T8840] netlink: 'syz.1.1250': attribute type 3 has an invalid length.
[  116.982434][ T8848] netlink: 'syz.2.1254': attribute type 2 has an invalid length.
[  117.996253][ T8901] netlink: 'syz.1.1280': attribute type 3 has an invalid length.
[  118.011172][ T8901] netlink: 'syz.1.1280': attribute type 1 has an invalid length.
[  118.014971][ T8901] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1280'.
[  118.044595][ T8903] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1281'.
[  118.048218][ T8903] netlink: zone id is out of range
[  118.050411][ T8903] netlink: get zone limit has 8 unknown bytes
[  118.541885][ T8942] IPv6: sit1: Disabled Multicast RS
[  118.634943][ T8950] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.899679][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1309'.
[  118.904204][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1309'.
[  118.934414][ T8964] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1309'.
[  118.988974][ T8970] Illegal XDP return value 4294967289 on prog  (id 226) dev N/A, expect packet loss!
[  119.030255][ T8973] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1314'.
[  119.310058][ T8998] nbd: must specify at least one socket
[  119.923706][ T9053] netlink: 'syz.0.1349': attribute type 1 has an invalid length.
[  119.926952][ T9053] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1349'.
[  119.930835][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'.
[  119.974769][ T9058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'.
[  120.096977][ T9066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.100513][ T9066] syzkaller0: entered promiscuous mode
[  120.102941][ T9066] syzkaller0: entered allmulticast mode
[  120.123415][ T9066] tipc: Resetting bearer <eth:syzkaller0>
[  120.127406][ T9065] tipc: Resetting bearer <eth:syzkaller0>
[  120.139714][ T9065] tipc: Disabling bearer <eth:syzkaller0>
[  120.457055][ T9077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.460600][ T9077] syzkaller0: entered promiscuous mode
[  120.464594][ T9077] syzkaller0: entered allmulticast mode
[  120.478291][ T9077] tipc: Resetting bearer <eth:syzkaller0>
[  120.483278][ T9076] tipc: Resetting bearer <eth:syzkaller0>
[  120.490709][ T9076] tipc: Disabling bearer <eth:syzkaller0>
[  120.573426][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1363'.
[  120.579281][ T9083] xfrm1: entered promiscuous mode
[  120.582287][ T9083] xfrm1: entered allmulticast mode
[  120.720370][ T9094] syzkaller1: entered promiscuous mode
[  120.723345][ T9094] syzkaller1: entered allmulticast mode
[  120.835567][ T9100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1371'.
[  120.873005][ T9102] netlink: 'syz.0.1372': attribute type 1 has an invalid length.
[  120.877148][ T9102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1372'.
[  121.115184][ T9123] netlink: 'syz.0.1381': attribute type 10 has an invalid length.
[  121.130888][ T9123] team0: Port device dummy0 added
[  122.415935][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'.
[  122.424576][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1414'.
[  122.526844][ T9199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.836031][ T9210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.841694][ T9209] tipc: Disabling bearer <eth:syzkaller0>
[  123.189681][ T5853] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  124.027849][ T9270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1450'.
[  124.187541][ T9282] lo speed is unknown, defaulting to 1000
[  124.190688][ T9282] lo speed is unknown, defaulting to 1000
[  124.212960][ T9282] lo speed is unknown, defaulting to 1000
[  124.273146][ T9285] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.281465][ T9285] 8021q: adding VLAN 0 to HW filter on device team0
[  124.284948][ T9285] tipc: Resetting bearer <eth:team0>
[  124.287336][ T9285] tipc: Resetting bearer <eth:team0>
[  124.304087][ T9285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.437573][   T24] lo speed is unknown, defaulting to 1000
[  124.440072][   T24] syz0: Port: 1 Link ACTIVE
[  124.443230][ T9282] infiniband syz0: set active
[  124.445546][ T9282] infiniband syz0: added lo
[  124.484299][ T9294] netlink: 'syz.0.1460': attribute type 10 has an invalid length.
[  124.500323][ T9282] RDS/IB: syz0: added
[  124.503364][ T9294] syz_tun: entered promiscuous mode
[  124.504126][ T9282] smc: adding ib device syz0 with port count 1
[  124.508650][ T9282] smc:    ib device syz0 port 1 has pnetid 
[  124.518709][ T9294] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  124.523317][    T9] lo speed is unknown, defaulting to 1000
[  124.527093][ T9282] lo speed is unknown, defaulting to 1000
[  124.708067][ T9282] lo speed is unknown, defaulting to 1000
[  124.870424][ T9282] lo speed is unknown, defaulting to 1000
[  124.879708][ T9316] netlink: 'syz.1.1470': attribute type 2 has an invalid length.
[  125.050346][ T9325] vlan2: entered allmulticast mode
[  125.055302][ T9325] bond0: entered allmulticast mode
[  125.071924][ T9325] bond_slave_0: entered allmulticast mode
[  125.074304][ T9325] bond_slave_1: entered allmulticast mode
[  125.346683][ T9333] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1478'.
[  125.379186][ T5853] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  127.332973][ T9397] netlink: 'syz.2.1504': attribute type 1 has an invalid length.
[  127.336122][ T9397] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1504'.
[  127.348002][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'.
[  127.367651][ T9400] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.375888][ T9397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'.
[  127.402406][ T9400] syzkaller0: entered promiscuous mode
[  127.404771][ T9400] syzkaller0: entered allmulticast mode
[  127.407676][ T9400] tipc: Resetting bearer <eth:syzkaller0>
[  127.425398][ T9399] tipc: Resetting bearer <eth:syzkaller0>
[  128.325465][ T9399] tipc: Disabling bearer <eth:syzkaller0>
[  128.537881][ T9420] batadv_slave_1: entered promiscuous mode
[  128.540774][ T9419] batadv_slave_1: left promiscuous mode
[  129.410041][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1521'.
[  129.552939][ T9450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1528'.
[  129.665030][ T9459] netlink: 'syz.0.1532': attribute type 12 has an invalid length.
[  129.677271][ T9459] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1532'.
[  130.206198][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1547'.
[  130.219446][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1547'.
[  130.235023][ T9492] bridge0: entered promiscuous mode
[  130.243456][ T9492] ip6gretap0: entered promiscuous mode
[  130.547956][ T9523] gretap0: left allmulticast mode
[  130.550255][ T9523] gretap0: left promiscuous mode
[  130.552702][ T9523] bridge0: port 3(gretap0) entered disabled state
[  130.567842][ T9523] bridge_slave_0: left allmulticast mode
[  130.569722][ T9523] bridge_slave_0: left promiscuous mode
[  130.576581][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.588410][ T9523] bridge_slave_1: left allmulticast mode
[  130.590371][ T9523] bridge_slave_1: left promiscuous mode
[  130.593423][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.604445][ T9523] bond0: (slave bond_slave_0): Releasing backup interface
[  130.609048][ T9523] bond_slave_0: left allmulticast mode
[  130.615762][ T9523] bond0: (slave bond_slave_1): Releasing backup interface
[  130.620287][ T9523] bond_slave_1: left allmulticast mode
[  130.634797][ T9523] team0: Port device team_slave_0 removed
[  130.645075][ T9523] team0: Port device team_slave_1 removed
[  130.647534][ T9523] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.651829][ T9523] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.657455][ T9523] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.660427][ T9523] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.683010][ T9529] syzkaller1: entered promiscuous mode
[  130.685359][ T9529] syzkaller1: entered allmulticast mode
[  130.719579][ T9523] netlink: 'syz.1.1561': attribute type 10 has an invalid length.
[  130.745393][ T9523] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  130.750283][ T9523] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  130.765378][ T9523] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  130.768957][ T9523] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.800056][ T9537] hsr0 speed is unknown, defaulting to 1000
[  130.806602][ T9537] lo speed is unknown, defaulting to 1000
[  131.436309][ T9568] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.439943][ T9568] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  131.765560][ T9598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.768306][ T9598] syzkaller0: entered promiscuous mode
[  131.770377][ T9598] syzkaller0: entered allmulticast mode
[  131.786800][ T9598] tipc: Resetting bearer <eth:syzkaller0>
[  131.790258][ T9597] tipc: Resetting bearer <eth:syzkaller0>
[  131.801808][ T9597] tipc: Disabling bearer <eth:syzkaller0>
[  131.887138][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1598'.
[  131.940880][ T9610] hsr0 speed is unknown, defaulting to 1000
[  131.945752][ T9610] lo speed is unknown, defaulting to 1000
[  132.282625][ T9637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'.
[  132.286694][ T9637] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1612'.
[  132.299300][ T9637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1612'.
[  132.408983][ T9643] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  132.554275][ T9653] netlink: 'syz.2.1620': attribute type 1 has an invalid length.
[  132.654028][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.656089][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.680135][ T9666] hsr0 speed is unknown, defaulting to 1000
[  132.692141][ T9666] lo speed is unknown, defaulting to 1000
[  132.732905][ T9672] netem: incorrect gi model size
[  132.734982][ T9672] netem: change failed
[  132.857728][ T9679] sctp: [Deprecated]: syz.2.1632 (pid 9679) Use of int in max_burst socket option deprecated.
[  132.857728][ T9679] Use struct sctp_assoc_value instead
[  133.274025][ T9701] netlink: 'syz.1.1641': attribute type 1 has an invalid length.
[  133.280824][ T9701] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1641'.
[  133.289061][ T9701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'.
[  133.399462][ T9706] netlink: 'syz.0.1642': attribute type 1 has an invalid length.
[  134.107497][ T9755] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  134.330619][ T9767] ip6gretap0: entered promiscuous mode
[  134.339823][ T9767] macsec1: entered allmulticast mode
[  134.344763][ T9767] ip6gretap0: entered allmulticast mode
[  134.353322][ T9767] ip6gretap0: left allmulticast mode
[  134.356195][ T9767] ip6gretap0: left promiscuous mode
[  134.369935][ T9769] siw: device registration error -23
[  134.623147][ T9782] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  134.745774][ T9796] can: request_module (can-proto-0) failed.
[  135.030340][ T9821] netlink: 'syz.1.1697': attribute type 15 has an invalid length.
[  135.444002][ T9848] netlink: 'syz.1.1705': attribute type 21 has an invalid length.
[  135.447270][ T9848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1705'.
[  135.530331][ T9854] netlink: 'syz.2.1707': attribute type 1 has an invalid length.
[  135.533664][ T9854] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1707'.
[  135.823071][ T9869] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1714'.
[  135.884407][ T9876] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  135.922392][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'.
[  135.928813][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.933124][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.986040][ T9908] vxcan3: entered allmulticast mode
[  137.193362][ T9926] v: renamed from ip6_vti0 (while UP)
[  137.987219][ T9994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.994716][ T9994] syzkaller0: entered promiscuous mode
[  137.996989][ T9994] syzkaller0: entered allmulticast mode
[  138.018990][ T9994] tipc: Resetting bearer <eth:syzkaller0>
[  138.025115][ T9993] tipc: Resetting bearer <eth:syzkaller0>
[  138.036830][ T9993] tipc: Disabling bearer <eth:syzkaller0>
[  138.427944][T10022] macsec1: entered promiscuous mode
[  138.429768][T10022] macsec1: entered allmulticast mode
[  140.141803][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1807'.
[  140.153442][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'.
[  140.320379][T10083] netlink: 'syz.2.1810': attribute type 3 has an invalid length.
[  140.331054][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'.
[  140.478784][T10091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1814'.
[  140.563729][T10097] syzkaller1: entered promiscuous mode
[  140.566076][T10097] syzkaller1: entered allmulticast mode
[  140.606827][T10099] hsr0 speed is unknown, defaulting to 1000
[  140.610718][T10099] lo speed is unknown, defaulting to 1000
[  140.680324][T10105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1820'.
[  141.008407][T10123] raw_sendmsg: syz.2.1828 forgot to set AF_INET. Fix it!
[  141.230497][T10143] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1836'.
[  141.412255][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1846'.
[  141.415185][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1846'.
[  141.760011][T10200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1863'.
[  141.764701][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1864'.
[  141.856081][T10209] tipc: MTU too low for tipc bearer
[  142.124604][T10227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.127455][T10227] syzkaller0: entered promiscuous mode
[  142.129423][T10227] syzkaller0: entered allmulticast mode
[  142.143771][T10227] tipc: Resetting bearer <eth:syzkaller0>
[  142.147061][T10226] tipc: Resetting bearer <eth:syzkaller0>
[  142.155150][T10226] tipc: Disabling bearer <eth:syzkaller0>
[  142.526763][T10249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.537085][T10249] syzkaller0: entered promiscuous mode
[  142.539475][T10249] syzkaller0: entered allmulticast mode
[  142.556086][T10249] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  142.564846][T10249] tipc: Resetting bearer <eth:syzkaller0>
[  142.571325][T10248] tipc: Resetting bearer <eth:syzkaller0>
[  142.584480][T10248] tipc: Disabling bearer <eth:syzkaller0>
[  142.843024][T10276] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  144.246717][T10340] netlink: 'syz.2.1926': attribute type 10 has an invalid length.
[  144.252279][T10340] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  144.267944][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.896396][T10345] tipc: New replicast peer: 255.255.255.255
[  144.900138][T10345] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.901114][ T5829] Bluetooth: hci0: command tx timeout
[  145.762254][T10349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.765231][T10349] IPv6: NLM_F_CREATE should be set when creating new route
[  145.768345][T10349] IPv6: NLM_F_CREATE should be set when creating new route
[  145.830431][T10353] bond_slave_0: entered promiscuous mode
[  145.833202][T10353] bond_slave_1: entered promiscuous mode
[  145.835619][T10353] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  145.849496][T10353] vlan2: entered promiscuous mode
[  145.853680][T10353] bond0: entered promiscuous mode
[  145.950166][T10360] __nla_validate_parse: 6 callbacks suppressed
[  145.950181][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1935'.
[  145.957194][T10360] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1935'.
[  146.078786][T10364] netlink: 'syz.2.1937': attribute type 1 has an invalid length.
[  146.084300][T10364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1937'.
[  146.094201][T10364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1937'.
[  146.169767][T10368] gretap1: entered promiscuous mode
[  146.173545][T10368] gretap1: entered allmulticast mode
[  146.195918][T10371] hsr0 speed is unknown, defaulting to 1000
[  146.198930][T10371] lo speed is unknown, defaulting to 1000
[  146.679592][ T5650] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.691671][ T5650] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.695394][ T5650] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.713122][ T5650] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.917561][T10430] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1968'.
[  147.160667][T10451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.170579][    T9] lo speed is unknown, defaulting to 1000
[  147.307566][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'.
[  147.340209][T10477] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1986'.
[  147.380689][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1989'.
[  148.376075][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2024'.
[  148.401955][T10570] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  148.415904][T10570] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  148.457919][T10578] macvlan2: entered promiscuous mode
[  148.459628][T10578] macvlan2: entered allmulticast mode
[  148.465077][T10578] bond2: (slave macvlan2): Error -98 calling set_mac_address
[  148.689365][T10595] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882)
[  148.694782][T10595] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  149.069776][T10609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.077218][T10609] syzkaller0: entered promiscuous mode
[  149.079623][T10609] syzkaller0: entered allmulticast mode
[  149.105273][T10609] tipc: Resetting bearer <eth:syzkaller0>
[  149.109218][T10608] tipc: Resetting bearer <eth:syzkaller0>
[  149.136604][T10608] tipc: Disabling bearer <eth:syzkaller0>
[  149.388080][T10632] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2049'.
[  150.131950][T10710] netlink: 'syz.2.2082': attribute type 1 has an invalid length.
[  150.174643][T10710] 8021q: adding VLAN 0 to HW filter on device bond3
[  150.217106][T10710] bond3: (slave bridge1): making interface the new active one
[  150.222352][T10710] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  150.248749][T10718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.264926][T10710] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  150.593302][T10739] netlink: 'syz.0.2095': attribute type 10 has an invalid length.
[  150.596859][T10739] dummy0: entered promiscuous mode
[  150.606353][T10739] team0: Port device dummy0 removed
[  150.609294][T10739] bridge0: port 3(dummy0) entered blocking state
[  150.615630][T10739] bridge0: port 3(dummy0) entered disabled state
[  150.618369][T10739] dummy0: entered allmulticast mode
[  151.277198][T10781] __nla_validate_parse: 3 callbacks suppressed
[  151.277212][T10781] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2112'.
[  151.389173][T10791] netlink: 'syz.1.2117': attribute type 11 has an invalid length.
[  151.393071][T10791] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2117'.
[  151.830593][T10841] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2141'.
[  151.840785][T10843] trusted_key: syz.1.2142 sent an empty control message without MSG_MORE.
[  152.162719][T10879] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2160'.
[  152.314725][T10895] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2167'.
[  152.614208][T10925] tc_dump_action: action bad kind
[  152.722262][T10937] netlink: 'syz.2.2185': attribute type 11 has an invalid length.
[  152.775902][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'.
[  152.833013][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2192'.
[  152.908673][T10963] sctp: [Deprecated]: syz.0.2194 (pid 10963) Use of int in maxseg socket option.
[  152.908673][T10963] Use struct sctp_assoc_value instead
[  152.920612][T10964] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2197'.
[  153.213360][T10979] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.220353][T10979] bond1: entered allmulticast mode
[  153.225159][T10979] bond0: (slave bond1): Enslaving as an active interface with an up link
[  153.343690][T10982] ieee802154 phy0 wpan0: encryption failed: -22
[  153.438917][T10988] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2208'.
[  153.767646][T11004] netlink: 'syz.1.2216': attribute type 12 has an invalid length.
[  153.772748][T11004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2216'.
[  153.836894][T11014] netlink: 'syz.2.2219': attribute type 1 has an invalid length.
[  153.861962][T11014] 8021q: adding VLAN 0 to HW filter on device bond4
[  153.878956][T11014] 8021q: adding VLAN 0 to HW filter on device batadv1
[  153.883275][T11014] bond4: (slave batadv1): making interface the new active one
[  153.886600][T11014] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  154.591892][T11039] netlink: 'syz.2.2230': attribute type 3 has an invalid length.
[  154.595156][T11039] netlink: 'syz.2.2230': attribute type 1 has an invalid length.
[  154.598677][T11039] NCSI netlink: No device for ifindex 0
[  154.674257][T11047] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  154.748721][ T5650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.756262][ T5650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.766355][ T5650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.771137][ T5650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.874918][T11070] ipvlan2: entered promiscuous mode
[  154.878078][T11070] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  154.994703][T11084] net veth1_virt_wifi : renamed from virt_wifi0
[  155.032048][T11081] hsr0 speed is unknown, defaulting to 1000
[  155.035831][T11081] lo speed is unknown, defaulting to 1000
[  155.362897][T11097] siw: device registration error -23
[  155.840848][T11107] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  155.877348][T11109] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  155.883319][T11086] Bluetooth: hci1: Opcode 0x080f failed: -4
[  156.921497][T11166] rdma_op ffff888021b8b1f0 conn xmit_rdma 0000000000000000
[  157.051181][ T5829] Bluetooth: hci1: command 0x080f tx timeout
[  157.348574][T11171] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  157.597864][T11190] __nla_validate_parse: 1 callbacks suppressed
[  157.597877][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2294'.
[  157.747275][T11200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.750180][T11200] syzkaller0: entered promiscuous mode
[  157.752389][T11200] syzkaller0: entered allmulticast mode
[  157.768575][T11200] tipc: Resetting bearer <eth:syzkaller0>
[  157.771950][T11199] tipc: Resetting bearer <eth:syzkaller0>
[  157.784889][T11199] tipc: Disabling bearer <eth:syzkaller0>
[  157.866620][T11208] netlink: 'syz.0.2302': attribute type 12 has an invalid length.
[  158.031836][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'.
[  158.079177][T11222] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2309'.
[  158.108895][T11227] netlink: 'syz.2.2311': attribute type 1 has an invalid length.
[  158.438103][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2325'.
[  158.446860][    C0] vcan0: j1939_session_tx_dat: 0xffff888042b02400: queue data error: -100
[  159.162567][T11269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'.
[  159.165928][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'.
[  159.405196][T11287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2338'.
[  159.471336][T11292] syzkaller1: entered promiscuous mode
[  159.473230][T11292] syzkaller1: entered allmulticast mode
[  159.502062][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'.
[  159.586899][T11300] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2345'.
[  159.607132][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'.
[  159.610667][T11302] IPVS: Error joining to the multicast group
[  159.960564][T11338] hsr0 speed is unknown, defaulting to 1000
[  159.973275][T11338] lo speed is unknown, defaulting to 1000
[  160.298855][T11357] geneve0: entered allmulticast mode
[  160.785890][T11387] nbd: couldn't find a device at index 65546
[  161.629026][T11411] vlan0: entered promiscuous mode
[  161.975769][T11449] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  161.980533][T11449] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.986580][T11447] netlink: 'syz.0.2409': attribute type 13 has an invalid length.
[  162.073813][ T5936] hsr0 speed is unknown, defaulting to 1000
[  162.302201][T11472] netlink: 'syz.1.2421': attribute type 8 has an invalid length.
[  162.627686][T11502] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  162.942705][T11544] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  163.064003][T11556] bond0: (slave bond_slave_1): Releasing backup interface
[  163.070147][T11556] bond_slave_1: left promiscuous mode
[  163.268025][T11581] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  163.404784][T11597] syzkaller0: entered promiscuous mode
[  163.406660][T11597] syzkaller0: entered allmulticast mode
[  163.411468][T11604] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  163.463117][T11608] openvswitch: netlink: Flow actions attr not present in new flow.
[  164.449571][T11626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.454622][T11627] syzkaller0: entered promiscuous mode
[  164.457122][T11627] syzkaller0: entered allmulticast mode
[  164.464560][T11635] tipc: Resetting bearer <eth:syzkaller0>
[  164.471271][T11621] tipc: Resetting bearer <eth:syzkaller0>
[  164.484366][T11621] tipc: Disabling bearer <eth:syzkaller0>
[  164.587976][T11648] IPVS: Error connecting to the multicast addr
[  164.684508][T11656] hsr0 speed is unknown, defaulting to 1000
[  164.688115][T11656] lo speed is unknown, defaulting to 1000
[  165.047867][T11676] netlink: 'syz.0.2507': attribute type 10 has an invalid length.
[  165.050445][T11676] __nla_validate_parse: 9 callbacks suppressed
[  165.050452][T11676] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2507'.
[  165.057119][T11676] dummy0: left allmulticast mode
[  165.058980][T11676] dummy0: left promiscuous mode
[  165.065409][T11676] bridge0: port 3(dummy0) entered disabled state
[  165.071835][T11676] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  165.402501][T11690] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2514'.
[  165.484886][T11694] nbd: illegal input index -1
[  165.518232][T11698] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2518'.
[  165.692712][T11696] veth0_to_team: left promiscuous mode
[  165.817888][T11696] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  165.820811][T11696] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  165.881881][T11710] tipc: Resetting bearer <eth:team0>
[  166.008720][ T5853] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.017313][ T5853] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.034656][    T9] lo speed is unknown, defaulting to 1000
[  166.034734][ T5853] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.041266][    T9] syz0: Port: 1 Link DOWN
[  166.047391][ T5853] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.050808][    T9] lo speed is unknown, defaulting to 1000
[  166.050826][ T5853] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.072065][ T5853] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.075678][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  166.084204][ T5853] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.087799][ T5853] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.091862][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  166.095985][ T5853] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.109023][ T5853] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.122945][T11727] sctp: [Deprecated]: syz.2.2531 (pid 11727) Use of struct sctp_assoc_value in delayed_ack socket option.
[  166.122945][T11727] Use struct sctp_sack_info instead
[  166.131751][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  166.135542][ T5853] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.151143][ T5853] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  166.154872][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  166.280251][T11746] ieee802154 phy0 wpan0: encryption failed: -22
[  166.301560][T11746] ieee802154 phy0 wpan0: encryption failed: -22
[  166.393095][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'.
[  167.049471][T11795] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2563'.
[  167.054904][T11795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2563'.
[  167.058221][T11795] pimreg: left allmulticast mode
[  167.116931][T11795] rdma_rxe: rxe_newlink: failed to add lo
[  167.125654][T11795] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.128434][T11795] bridge0: port 2(bridge_slave_1) entered listening state
[  167.131458][T11795] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.133774][T11795] bridge0: port 1(bridge_slave_0) entered listening state
[  167.139381][T11795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.248172][T11832] netlink: 'syz.2.2581': attribute type 1 has an invalid length.
[  168.255892][T11832] netlink: 'syz.2.2581': attribute type 3 has an invalid length.
[  168.259242][T11832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2581'.
[  168.394439][T11840] bond0: (slave wlan1): Releasing backup interface
[  168.397077][T11840] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  168.415043][T11840] bond0: (slave bond1): Releasing backup interface
[  168.422138][T11840] bond1: left allmulticast mode
[  168.443715][T11840] netlink: 'syz.1.2585': attribute type 10 has an invalid length.
[  168.447013][T11840] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  168.449819][T11840] bond0: (slave wlan1): refused to change device type
[  168.465598][T11844] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2587'.
[  168.470601][T11840] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.478755][T11840] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.779844][T11868] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2597'.
[  168.785284][T11868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2597'.
[  169.323855][T11887] netlink: 'syz.1.2604': attribute type 10 has an invalid length.
[  169.722631][T11899] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  169.726504][T11899] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  169.849140][T11913] netlink: 'syz.2.2616': attribute type 1 has an invalid length.
[  170.948353][T11949] __nla_validate_parse: 5 callbacks suppressed
[  170.948362][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'.
[  171.092132][T11966] hsr0 speed is unknown, defaulting to 1000
[  171.100107][T11966] lo speed is unknown, defaulting to 1000
[  171.175415][T11970] hsr0 speed is unknown, defaulting to 1000
[  171.285322][T11970] lo speed is unknown, defaulting to 1000
[  171.546245][T11966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2640'.
[  171.658318][T11993] !: renamed from dummy0 (while UP)
[  172.107885][T11996] hsr0 speed is unknown, defaulting to 1000
[  172.108084][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2652'.
[  172.116448][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2652'.
[  172.129928][T11996] lo speed is unknown, defaulting to 1000
[  172.272590][T12010] netlink: 'syz.2.2656': attribute type 10 has an invalid length.
[  172.284985][T12010] team0: Port device dummy0 added
[  172.363319][T12013] bond0: (slave wlan1): Releasing backup interface
[  172.367447][T12013] bond0: Destroying bond
[  172.384158][T12013] bond0 (unregistering): Released all slaves
[  172.578627][T12015] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2658'.
[  172.653688][T12018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2659'.
[  172.657228][T12018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2659'.
[  173.845895][T12069] netlink: 'syz.0.2683': attribute type 9 has an invalid length.
[  173.848887][T12069] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2683'.
[  174.056073][T12080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  174.086100][T12082] sctp: [Deprecated]: syz.0.2689 (pid 12082) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.086100][T12082] Use struct sctp_sack_info instead
[  174.410276][T12102] veth5: entered allmulticast mode
[  174.559105][T12108] hsr0 speed is unknown, defaulting to 1000
[  174.566575][T12108] lo speed is unknown, defaulting to 1000
[  174.625847][T12115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.628730][T12115] syzkaller0: entered promiscuous mode
[  174.630536][T12115] syzkaller0: entered allmulticast mode
[  174.648741][T12115] tipc: Resetting bearer <eth:syzkaller0>
[  174.656310][T12114] tipc: Resetting bearer <eth:syzkaller0>
[  174.675707][T12114] tipc: Disabling bearer <eth:syzkaller0>
[  174.946906][T12126] vxcan1: entered allmulticast mode
[  174.955832][T12126] vxcan1: left allmulticast mode
[  175.033517][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0
[  175.042673][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0
[  175.045737][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0
[  175.050160][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0
[  175.167681][T12131] hsr0 speed is unknown, defaulting to 1000
[  175.178531][T12131] lo speed is unknown, defaulting to 1000
[  175.199038][T12137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2713'.
[  175.690724][T12168] netlink: 'syz.0.2728': attribute type 2 has an invalid length.
[  175.750709][T12176] netlink: 'syz.0.2732': attribute type 2 has an invalid length.
[  175.758337][T12176] `: entered promiscuous mode
[  175.975654][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'.
[  175.979484][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'.
[  175.980884][T12198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2740'.
[  175.984975][T12200] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2741'.
[  176.064961][T12202] hsr0 speed is unknown, defaulting to 1000
[  176.069414][T12202] lo speed is unknown, defaulting to 1000
[  176.286564][T12210] netlink: 'syz.0.2743': attribute type 12 has an invalid length.
[  176.607917][T12217] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2746'.
[  176.611699][T12217] netlink: zone id is out of range
[  176.613465][T12217] netlink: zone id is out of range
[  176.615457][T12217] netlink: zone id is out of range
[  176.617417][T12217] netlink: zone id is out of range
[  176.619364][T12217] netlink: zone id is out of range
[  176.621783][T12217] netlink: zone id is out of range
[  176.623939][T12217] netlink: zone id is out of range
[  176.626059][T12217] netlink: zone id is out of range
[  176.628179][T12217] netlink: zone id is out of range
[  176.760787][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'.
[  176.926334][T12243] sctp: [Deprecated]: syz.0.2758 (pid 12243) Use of struct sctp_assoc_value in delayed_ack socket option.
[  176.926334][T12243] Use struct sctp_sack_info instead
[  177.212875][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'.
[  177.216650][T12265] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2769'.
[  177.604200][T12280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2775'.
[  177.615380][T12282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'.
[  177.864330][T12302] netlink: 'syz.1.2784': attribute type 3 has an invalid length.
[  179.515986][T12437] netlink: 'syz.0.2844': attribute type 21 has an invalid length.
[  179.630660][T12443] netlink: 'syz.0.2847': attribute type 3 has an invalid length.
[  179.747675][T12445] "syz.0.2848" (12445) uses obsolete ecb(arc4) skcipher
[  179.837458][T12448] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.840665][T12448] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.987742][T12448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.999986][T12448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.102704][T12448] vlan0: left promiscuous mode
[  180.252209][T12448] xfrm1: left promiscuous mode
[  180.254234][T12448] xfrm1: left allmulticast mode
[  180.262611][T12448] ipvlan2: left promiscuous mode
[  180.270606][T12448] veth5: left allmulticast mode
[  180.320417][   T10] hsr0 speed is unknown, defaulting to 1000
[  180.328647][   T10] syz2: Port: 1 Link DOWN
[  180.330535][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.330556][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.330612][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.351343][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.358745][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.370265][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.374353][ T5853] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  180.380381][ T5853] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  180.983436][T12512] hsr0 speed is unknown, defaulting to 1000
[  180.987277][T12512] lo speed is unknown, defaulting to 1000
[  181.035433][T12522] tipc: Resetting bearer <eth:team0>
[  181.050451][T12522] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  181.375822][T12534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.382262][T12534] syzkaller0: entered promiscuous mode
[  181.384669][T12534] syzkaller0: entered allmulticast mode
[  181.402235][T12534] tipc: Resetting bearer <eth:syzkaller0>
[  181.422704][T12533] tipc: Resetting bearer <eth:syzkaller0>
[  181.441877][T12533] tipc: Disabling bearer <eth:syzkaller0>
[  181.933988][T12584] __nla_validate_parse: 6 callbacks suppressed
[  181.934002][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2909'.
[  182.093413][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'.
[  182.200546][T12602] hsr0 speed is unknown, defaulting to 1000
[  182.204732][T12602] lo speed is unknown, defaulting to 1000
[  182.737309][T12623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2927'.
[  183.585250][T12663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2946'.
[  183.717861][T12673] batadv_slave_0: entered promiscuous mode
[  183.813649][T12681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2955'.
[  183.875975][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'.
[  183.881520][T12685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2956'.
[  183.959711][T12679] netlink: 'syz.1.2954': attribute type 12 has an invalid length.
[  183.968440][T12679] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2954'.
[  184.249155][T12718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.258283][T12718] syzkaller0: entered promiscuous mode
[  184.260655][T12718] syzkaller0: entered allmulticast mode
[  184.278426][T12718] tipc: Resetting bearer <eth:syzkaller0>
[  184.294444][T12717] tipc: Resetting bearer <eth:syzkaller0>
[  184.313323][T12717] tipc: Disabling bearer <eth:syzkaller0>
[  184.514875][T12744] netlink: 'syz.2.2983': attribute type 8 has an invalid length.
[  184.762428][T12763] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  184.769786][T12763] netlink: 'syz.2.2993': attribute type 10 has an invalid length.
[  184.776581][T12764] : entered promiscuous mode
[  184.825492][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2995'.
[  184.900462][T12773] netlink: 'syz.2.2997': attribute type 1 has an invalid length.
[  184.903864][T12773] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2997'.
[  185.329843][T12799] bond0: invalid ARP target 0.0.0.0 specified for addition
[  185.332924][T12799] bond0: option arp_ip_target: invalid value (0)
[  185.357890][T12800] macvlan4: entered allmulticast mode
[  185.360203][T12800] veth1_vlan: entered allmulticast mode
[  185.365202][T12800] veth1_vlan: left allmulticast mode
[  185.649329][T12827] netlink: 'syz.1.3021': attribute type 5 has an invalid length.
[  185.762808][T12836] pim6reg1: entered promiscuous mode
[  185.764954][T12836] pim6reg1: entered allmulticast mode
[  185.932285][ T5211] Bluetooth: hci1: command 0x080f tx timeout
[  185.983568][T12858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.988656][T12858] netlink: 'syz.1.3037': attribute type 1 has an invalid length.
[  186.023398][T12858] 8021q: adding VLAN 0 to HW filter on device bond2
[  186.032223][T12858] netlink: 'syz.1.3037': attribute type 3 has an invalid length.
[  186.042374][T12858] vlan3: entered allmulticast mode
[  186.044383][T12858] macvtap0: entered allmulticast mode
[  186.047279][T12858] bond2: (slave vlan3): Opening slave failed
[  186.408549][T12881] syz.2.3046 uses old SIOCAX25GETINFO
[  187.175480][T12959] netlink: 'syz.0.3080': attribute type 13 has an invalid length.
[  187.322864][T12968] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  187.382868][T12974] tap0: tun_chr_ioctl cmd 1074025677
[  187.384752][T12974] tap0: linktype set to 825
[  188.145795][T12991] __nla_validate_parse: 5 callbacks suppressed
[  188.145808][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3093'.
[  188.421145][   T10] tipc: Node number set to 3541582431
[  188.458957][T13008] xt_socket: unknown flags 0xfc
[  188.502827][T13010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.506062][T13010] syzkaller0: entered promiscuous mode
[  188.508360][T13010] syzkaller0: entered allmulticast mode
[  188.524980][T13010] tipc: Resetting bearer <eth:syzkaller0>
[  188.528902][T13009] tipc: Resetting bearer <eth:syzkaller0>
[  188.540376][T13009] tipc: Disabling bearer <eth:syzkaller0>
[  188.644609][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'.
[  188.659280][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'.
[  189.528093][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'.
[  189.680448][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'.
[  190.026310][T13083] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3132'.
[  190.174555][T13098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.177944][T13098] syzkaller0: entered promiscuous mode
[  190.179859][T13098] syzkaller0: entered allmulticast mode
[  190.194319][T13098] tipc: Resetting bearer <eth:syzkaller0>
[  190.198312][T13097] tipc: Resetting bearer <eth:syzkaller0>
[  190.216357][T13097] tipc: Disabling bearer <eth:syzkaller0>
[  190.242932][T13102] syzkaller1: entered promiscuous mode
[  190.245477][T13102] syzkaller1: entered allmulticast mode
[  190.430138][T13114] net_ratelimit: 29 callbacks suppressed
[  190.430154][T13114] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  190.497428][T13117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.618218][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3151'.
[  191.285942][T13150] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3163'.
[  191.297242][T13150] netlink: 'syz.0.3163': attribute type 1 has an invalid length.
[  191.576903][T13176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3175'.
[  191.617336][T13180] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  191.652388][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'.
[  191.724484][T13188] netlink: 'syz.1.3180': attribute type 1 has an invalid length.
[  191.727906][T13188] netlink: 'syz.1.3180': attribute type 2 has an invalid length.
[  191.766919][T13192] netlink: 'syz.2.3183': attribute type 11 has an invalid length.
[  191.832814][T13202] netlink: 'syz.0.3187': attribute type 6 has an invalid length.
[  191.835623][T13202] IPv6: NLM_F_CREATE should be specified when creating new route
[  191.916932][T13209] hsr0 speed is unknown, defaulting to 1000
[  191.923161][T13209] lo speed is unknown, defaulting to 1000
[  192.227892][T13209] netlink: 'syz.0.3190': attribute type 13 has an invalid length.
[  192.244548][T13209] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  193.887910][T13290] __nla_validate_parse: 6 callbacks suppressed
[  193.887920][T13290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3223'.
[  193.895256][T13290] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3223'.
[  194.104719][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.106988][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.304762][T13317] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  194.394971][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'.
[  194.578439][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3250'.
[  194.628059][   T10] IPVS: starting estimator thread 0...
[  194.712140][T13354] IPVS: using max 48 ests per chain, 115200 per kthread
[  195.135375][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'.
[  195.382797][T13412] netlink: 'syz.1.3276': attribute type 1 has an invalid length.
[  195.427745][   T33] audit: type=1107 audit(1755217928.166:2): pid=13413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  196.502945][T13432] sctp: [Deprecated]: syz.0.3285 (pid 13432) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.502945][T13432] Use struct sctp_sack_info instead
[  196.619367][T13438] nbd: must specify a size in bytes for the device
[  196.642797][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3289'.
[  196.653306][T13440] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  196.660158][T13440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.932208][T13456] kthread_run failed with err -4
[  198.025546][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3299'.
[  198.127437][T13467] bpq0: entered promiscuous mode
[  198.129649][T13467] bpq0: entered allmulticast mode
[  198.151640][T13467] bpq0: left promiscuous mode
[  198.156678][T13467] bpq0: left allmulticast mode
[  198.783638][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3323'.
[  198.787774][T13512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3323'.
[  198.791737][T13512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  198.826642][T13514] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  198.949342][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3332'.
[  199.017453][T13535] sctp: [Deprecated]: syz.1.3333 (pid 13535) Use of int in max_burst socket option deprecated.
[  199.017453][T13535] Use struct sctp_assoc_value instead
[  199.484476][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3348'.
[  199.492224][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3349'.
[  199.837746][T13603] ==================================================================
[  199.840654][T13603] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  199.843925][T13603] Read of size 4 at addr ffff888026cbc544 by task syz.1.3364/13603
[  199.847837][T13603] 
[  199.848789][T13603] CPU: 1 UID: 0 PID: 13603 Comm: syz.1.3364 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  199.848801][T13603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.848806][T13603] Call Trace:
[  199.848810][T13603]  <TASK>
[  199.848815][T13603]  dump_stack_lvl+0x189/0x250
[  199.848831][T13603]  ? __kasan_check_byte+0x12/0x40
[  199.848850][T13603]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.848862][T13603]  ? lock_release+0x4b/0x3e0
[  199.848903][T13603]  ? __virt_addr_valid+0x4a5/0x5c0
[  199.848921][T13603]  print_report+0xca/0x240
[  199.848938][T13603]  ? xfrm_alloc_spi+0x570/0xf30
[  199.848951][T13603]  kasan_report+0x118/0x150
[  199.848971][T13603]  ? xfrm_alloc_spi+0x570/0xf30
[  199.848983][T13603]  xfrm_alloc_spi+0x570/0xf30
[  199.848991][T13603]  ? xfrm_alloc_spi+0x2a0/0xf30
[  199.848999][T13603]  ? __local_bh_enable_ip+0xec/0x1c0
[  199.849011][T13603]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  199.849019][T13603]  ? xfrm_find_acq+0x87/0xa0
[  199.849027][T13603]  pfkey_getspi+0x7a8/0xee0
[  199.849036][T13603]  pfkey_sendmsg+0xbfe/0x1090
[  199.849045][T13603]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  199.849060][T13603]  ? aa_sock_msg_perm+0x94/0x160
[  199.849070][T13603]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.849078][T13603]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  199.849089][T13603]  __sock_sendmsg+0x21c/0x270
[  199.849099][T13603]  ____sys_sendmsg+0x505/0x830
[  199.849108][T13603]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.849117][T13603]  ? import_iovec+0x74/0xa0
[  199.849127][T13603]  ___sys_sendmsg+0x21f/0x2a0
[  199.849134][T13603]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.849147][T13603]  ? __fget_files+0x2a/0x420
[  199.849153][T13603]  ? __fget_files+0x3a0/0x420
[  199.849161][T13603]  __x64_sys_sendmsg+0x19b/0x260
[  199.849169][T13603]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.849178][T13603]  ? rcu_is_watching+0x15/0xb0
[  199.849190][T13603]  ? do_syscall_64+0xbe/0x3b0
[  199.849201][T13603]  do_syscall_64+0xfa/0x3b0
[  199.849211][T13603]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.849220][T13603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.849227][T13603]  ? exc_page_fault+0x9f/0xf0
[  199.849236][T13603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.849243][T13603] RIP: 0033:0x7f3977f8ebe9
[  199.849251][T13603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.849258][T13603] RSP: 002b:00007f3978da8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.849267][T13603] RAX: ffffffffffffffda RBX: 00007f39781b5fa0 RCX: 00007f3977f8ebe9
[  199.849279][T13603] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  199.849283][T13603] RBP: 00007f3978011e19 R08: 0000000000000000 R09: 0000000000000000
[  199.849288][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.849292][T13603] R13: 00007f39781b6038 R14: 00007f39781b5fa0 R15: 00007fff98509b48
[  199.849300][T13603]  </TASK>
[  199.849303][T13603] 
[  199.954778][T13603] Allocated by task 6768:
[  199.956245][T13603]  kasan_save_track+0x3e/0x80
[  199.958117][T13603]  __kasan_slab_alloc+0x6c/0x80
[  199.959846][T13603]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  199.961912][T13603]  xfrm_state_alloc+0x24/0x2f0
[  199.963964][T13603]  __find_acq_core+0x8a7/0x1c00
[  199.966014][T13603]  xfrm_find_acq+0x78/0xa0
[  199.968140][T13603]  xfrm_alloc_userspi+0x6b3/0xc90
[  199.970304][T13603]  xfrm_user_rcv_msg+0x7a3/0xab0
[  199.972454][T13603]  netlink_rcv_skb+0x208/0x470
[  199.974535][T13603]  xfrm_netlink_rcv+0x79/0x90
[  199.976569][T13603]  netlink_unicast+0x82f/0x9e0
[  199.978569][T13603]  netlink_sendmsg+0x805/0xb30
[  199.980571][T13603]  __sock_sendmsg+0x21c/0x270
[  199.982508][T13603]  ____sys_sendmsg+0x505/0x830
[  199.984457][T13603]  ___sys_sendmsg+0x21f/0x2a0
[  199.986369][T13603]  __x64_sys_sendmsg+0x19b/0x260
[  199.988243][T13603]  do_syscall_64+0xfa/0x3b0
[  199.990022][T13603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.992426][T13603] 
[  199.993394][T13603] Freed by task 5936:
[  199.995074][T13603]  kasan_save_track+0x3e/0x80
[  199.997102][T13603]  kasan_save_free_info+0x46/0x50
[  199.999113][T13603]  __kasan_slab_free+0x62/0x70
[  200.001159][T13603]  kmem_cache_free+0x18f/0x400
[  200.003238][T13603]  xfrm_state_gc_task+0x518/0x6a0
[  200.005374][T13603]  process_scheduled_works+0xae1/0x17b0
[  200.007745][T13603]  worker_thread+0x8a0/0xda0
[  200.009748][T13603]  kthread+0x711/0x8a0
[  200.011522][T13603]  ret_from_fork+0x3fc/0x770
[  200.013507][T13603]  ret_from_fork_asm+0x1a/0x30
[  200.015564][T13603] 
[  200.016613][T13603] The buggy address belongs to the object at ffff888026cbc480
[  200.016613][T13603]  which belongs to the cache xfrm_state of size 928
[  200.022434][T13603] The buggy address is located 196 bytes inside of
[  200.022434][T13603]  freed 928-byte region [ffff888026cbc480, ffff888026cbc820)
[  200.027922][T13603] 
[  200.028968][T13603] The buggy address belongs to the physical page:
[  200.031613][T13603] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888026cbc900 pfn:0x26cbc
[  200.035761][T13603] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  200.039250][T13603] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  200.042384][T13603] page_type: f5(slab)
[  200.044065][T13603] raw: 00fff00000000040 ffff88801af0fa00 dead000000000122 0000000000000000
[  200.047307][T13603] raw: ffff888026cbc900 00000000800e0009 00000000f5000000 0000000000000000
[  200.050964][T13603] head: 00fff00000000040 ffff88801af0fa00 dead000000000122 0000000000000000
[  200.054091][T13603] head: ffff888026cbc900 00000000800e0009 00000000f5000000 0000000000000000
[  200.057527][T13603] head: 00fff00000000002 ffffea00009b2f01 00000000ffffffff 00000000ffffffff
[  200.061152][T13603] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  200.064768][T13603] page dumped because: kasan: bad access detected
[  200.067468][T13603] page_owner tracks the page as allocated
[  200.069797][T13603] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6291, tgid 6290 (syz.0.143), ts 71029367568, free_ts 70981747709
[  200.077673][T13603]  post_alloc_hook+0x240/0x2a0
[  200.079754][T13603]  get_page_from_freelist+0x21e4/0x22c0
[  200.082079][T13603]  __alloc_frozen_pages_noprof+0x181/0x370
[  200.084474][T13603]  alloc_pages_mpol+0x232/0x4a0
[  200.086562][T13603]  allocate_slab+0x8a/0x3b0
[  200.088532][T13603]  ___slab_alloc+0xbfc/0x1480
[  200.090561][T13603]  kmem_cache_alloc_noprof+0x283/0x3c0
[  200.092937][T13603]  xfrm_state_alloc+0x24/0x2f0
[  200.095026][T13603]  xfrm_state_find+0x37d4/0x5400
[  200.097156][T13603]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  200.099533][T13603]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  200.101352][T13603]  xfrm_lookup_route+0x3c/0x1c0
[  200.103032][T13603]  __ip4_datagram_connect+0x9a5/0x1270
[  200.104985][T13603]  __ip6_datagram_connect+0x9f0/0x1150
[  200.107139][T13603]  ip6_datagram_connect_v6_only+0x63/0xa0
[  200.109430][T13603]  __sys_connect+0x316/0x440
[  200.111330][T13603] page last free pid 12 tgid 12 stack trace:
[  200.113850][T13603]  __free_frozen_pages+0xc71/0xe70
[  200.116056][T13603]  stack_depot_save_flags+0x445/0x900
[  200.118334][T13603]  kasan_save_track+0x4f/0x80
[  200.120356][T13603]  __kasan_slab_alloc+0x6c/0x80
[  200.122432][T13603]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  200.124944][T13603]  __alloc_skb+0x112/0x2d0
[  200.126774][T13603]  wg_packet_send_keepalive+0x65/0x2c0
[  200.129066][T13603]  call_timer_fn+0x17e/0x5f0
[  200.131052][T13603]  __run_timer_base+0x61a/0x860
[  200.133071][T13603]  run_timer_softirq+0xb7/0x180
[  200.135116][T13603]  handle_softirqs+0x286/0x870
[  200.137159][T13603]  do_softirq+0xec/0x180
[  200.138993][T13603]  __local_bh_enable_ip+0x17d/0x1c0
[  200.141085][T13603]  batadv_nc_purge_paths+0x318/0x3b0
[  200.143272][T13603]  batadv_nc_worker+0x328/0x610
[  200.145258][T13603]  process_scheduled_works+0xae1/0x17b0
[  200.147600][T13603] 
[  200.148638][T13603] Memory state around the buggy address:
[  200.150783][T13603]  ffff888026cbc400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  200.153414][T13603]  ffff888026cbc480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.156106][T13603] >ffff888026cbc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.158757][T13603]                                            ^
[  200.161004][T13603]  ffff888026cbc580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.163982][T13603]  ffff888026cbc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  200.166743][T13603] ==================================================================
[  200.169909][T13603] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  200.172459][T13603] CPU: 1 UID: 0 PID: 13603 Comm: syz.1.3364 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  200.176620][T13603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.180232][T13603] Call Trace:
[  200.181653][T13603]  <TASK>
[  200.182857][T13603]  dump_stack_lvl+0x99/0x250
[  200.184870][T13603]  ? __asan_memcpy+0x40/0x70
[  200.186619][T13603]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.188380][T13603]  ? __pfx__printk+0x10/0x10
[  200.189949][T13603]  panic+0x2db/0x790
[  200.191292][T13603]  ? __pfx_panic+0x10/0x10
[  200.192829][T13603]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  200.194909][T13603]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  200.196869][T13603]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  200.198949][T13603]  ? print_memory_metadata+0x314/0x400
[  200.200691][T13603]  ? xfrm_alloc_spi+0x570/0xf30
[  200.202203][T13603]  check_panic_on_warn+0x89/0xb0
[  200.203714][T13603]  ? xfrm_alloc_spi+0x570/0xf30
[  200.205617][T13603]  end_report+0x78/0x160
[  200.207175][T13603]  kasan_report+0x129/0x150
[  200.209039][T13603]  ? xfrm_alloc_spi+0x570/0xf30
[  200.211048][T13603]  xfrm_alloc_spi+0x570/0xf30
[  200.212998][T13603]  ? xfrm_alloc_spi+0x2a0/0xf30
[  200.214998][T13603]  ? __local_bh_enable_ip+0xec/0x1c0
[  200.217036][T13603]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  200.218760][T13603]  ? xfrm_find_acq+0x87/0xa0
[  200.220337][T13603]  pfkey_getspi+0x7a8/0xee0
[  200.221980][T13603]  pfkey_sendmsg+0xbfe/0x1090
[  200.223991][T13603]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  200.225776][T13603]  ? aa_sock_msg_perm+0x94/0x160
[  200.227449][T13603]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  200.229296][T13603]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  200.231095][T13603]  __sock_sendmsg+0x21c/0x270
[  200.232817][T13603]  ____sys_sendmsg+0x505/0x830
[  200.234521][T13603]  ? __pfx_____sys_sendmsg+0x10/0x10
[  200.236264][T13603]  ? import_iovec+0x74/0xa0
[  200.237757][T13603]  ___sys_sendmsg+0x21f/0x2a0
[  200.239324][T13603]  ? __pfx____sys_sendmsg+0x10/0x10
[  200.241041][T13603]  ? __fget_files+0x2a/0x420
[  200.242587][T13603]  ? __fget_files+0x3a0/0x420
[  200.244360][T13603]  __x64_sys_sendmsg+0x19b/0x260
[  200.246133][T13603]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  200.247982][T13603]  ? rcu_is_watching+0x15/0xb0
[  200.249621][T13603]  ? do_syscall_64+0xbe/0x3b0
[  200.251210][T13603]  do_syscall_64+0xfa/0x3b0
[  200.252718][T13603]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.254607][T13603]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.256810][T13603]  ? exc_page_fault+0x9f/0xf0
[  200.258415][T13603]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.260627][T13603] RIP: 0033:0x7f3977f8ebe9
[  200.262193][T13603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.269614][T13603] RSP: 002b:00007f3978da8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  200.272765][T13603] RAX: ffffffffffffffda RBX: 00007f39781b5fa0 RCX: 00007f3977f8ebe9
[  200.275494][T13603] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  200.278054][T13603] RBP: 00007f3978011e19 R08: 0000000000000000 R09: 0000000000000000
[  200.280701][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.283324][T13603] R13: 00007f39781b6038 R14: 00007f39781b5fa0 R15: 00007fff98509b48
[  200.286488][T13603]  </TASK>
[  200.288411][T13603] Kernel Offset: disabled
[  200.290178][T13603] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:32:12  Registers:
info registers vcpu 0

CPU#0
RAX=3b78c8a58ed17600 RBX=ffffffff822e0aba RCX=0000000000000000 RDX=ffff88803a39d640
RSI=ffffffff8be309e0 RDI=ffffffff8be309a0 RBP=0000000000000001 RSP=ffffc900060cf500
R8 =0000000000000000 R9 =ffffffff822e0aba R10=dffffc0000000000 R11=fffff940001b6f91
R12=dffffc0000000000 R13=1ffffd40001b6f93 R14=0000000000036df2 R15=ffff88805fffa4c0
RIP=ffffffff8b6fe262 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30d20ff8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8207982f ffffffff82071666
XMM02=0000000000000000 ffffffff82071666 XMM03=0000000000000000 0000000000000000
XMM04=00007f8be0ced100 00007f8be0187460 XMM05=00007f8be0187478 00007f8be01874c0
XMM06=00007f8be01874b8 00007f8be01874b0 XMM07=00007f8be01874a8 00007f8be01874a0
XMM08=0000000000000000 00007f8be0012ee7 XMM09=0000000000000000 00007f8be0012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000102f RDI=0000000000001030 RBP=00000000000003f8 RSP=ffffc900061feeb0
R8 =ffff888020a68237 R9 =1ffff1100414d046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95927 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3978da86c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555573c9d808 CR3=0000000035b8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3978187498 00007f3978187470 XMM03=00007f39781874a8 00007f39781874a0
XMM04=00007f3978ced100 00007f3978187460 XMM05=00007f3978187478 00007f39781874c0
XMM06=00007f39781874b8 00007f39781874b0 XMM07=00007f39781874a8 00007f39781874a0
XMM08=0000000000000000 00007f3978012ee7 XMM09=0000000000000000 00007f3978012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
