last executing test programs:

1.218325274s ago: executing program 2 (id=5954):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5)
write$tcp_congestion(r0, 0x0, 0x0)

1.150659964s ago: executing program 1 (id=5957):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

1.150422489s ago: executing program 2 (id=5958):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x2}, 0x8)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x6, 0xa0, &(0x7f00000002c0)=""/160, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x3, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000380)=[{0x3, 0x3, 0x4, 0x4}, {0x2, 0x2, 0x3979e2c8, 0x6}, {0x0, 0x2, 0x4, 0x6}, {0x1, 0x4, 0xe, 0x1}, {0x0, 0x4, 0x3}, {0x4, 0x5, 0xe, 0xc}, {0x0, 0x3, 0x4, 0x5}, {0x1, 0x2, 0xe, 0x8}, {0x4, 0x4, 0x2, 0xb}], 0x10, 0x1}, 0x94)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000500)=0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r1, 0x2d, 0x1b, @void}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

1.150309146s ago: executing program 0 (id=5959):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e31, 0x3c9c0150, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0)

1.150169364s ago: executing program 1 (id=5960):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

216.789146ms ago: executing program 1 (id=5961):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000000))

216.595932ms ago: executing program 0 (id=5962):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x16}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

214.642462ms ago: executing program 2 (id=5963):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='g', 0x1}], 0x1)

214.532282ms ago: executing program 0 (id=5964):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r1, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0)

130.350351ms ago: executing program 1 (id=5965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4d}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000004)

130.13632ms ago: executing program 2 (id=5966):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x18f40, 0x2200a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0)

128.877815ms ago: executing program 0 (id=5967):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000280)="3ac4f346136a09ae1c", 0x9, 0x240000c5, &(0x7f0000000040)={0xa, 0x2, 0x2, @empty, 0x20000}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9)
shutdown(r0, 0x1)

60.452486ms ago: executing program 2 (id=5968):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0)

60.221926ms ago: executing program 1 (id=5969):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8002a000})

60.079713ms ago: executing program 0 (id=5970):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffe58500000023000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

381.546µs ago: executing program 1 (id=5971):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$kcm(0x10, 0x2, 0x0)
unshare(0x22020400)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x5, 0x3, 0x3, 0x8, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffbc, 0x1, 0x2000000009, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

196.634µs ago: executing program 2 (id=5972):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x40008062, 0x0)

0s ago: executing program 0 (id=5973):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

tting the MTU to 1560 would solve the problem.
[   64.389289][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.399567][ T5857] team0: Port device team_slave_0 added
[   64.413044][ T5857] team0: Port device team_slave_1 added
[   64.482691][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.485101][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.495868][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.503967][ T5851] hsr_slave_0: entered promiscuous mode
[   64.506999][ T5851] hsr_slave_1: entered promiscuous mode
[   64.512005][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   64.514292][ T5851] Cannot create hsr debugfs directory
[   64.523712][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.526013][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.534613][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.646624][ T5857] hsr_slave_0: entered promiscuous mode
[   64.652053][ T5857] hsr_slave_1: entered promiscuous mode
[   64.654903][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   64.657241][ T5857] Cannot create hsr debugfs directory
[   64.870401][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.879558][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.891660][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.900454][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.002610][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.016124][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.023974][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.032474][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.085145][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.091036][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.096282][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.110495][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.132453][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.165905][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.185064][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.187434][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.207155][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.209577][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.248663][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.284733][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.292607][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.307656][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.310627][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.335204][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   65.352047][ T4205] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.354750][ T4205] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.382799][ T4205] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.385718][ T4205] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.404716][ T4205] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.407406][ T4205] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.413454][ T5854] Bluetooth: hci0: command tx timeout
[   65.418143][ T5849] Bluetooth: hci1: command tx timeout
[   65.481963][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.490009][ T5849] Bluetooth: hci2: command tx timeout
[   65.492125][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.576210][ T5847] veth0_vlan: entered promiscuous mode
[   65.587431][ T5847] veth1_vlan: entered promiscuous mode
[   65.644784][ T5847] veth0_macvtap: entered promiscuous mode
[   65.660766][ T5847] veth1_macvtap: entered promiscuous mode
[   65.684700][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.697736][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.717669][ T5715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.722955][ T5715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.725625][ T5715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.728339][ T5715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.736791][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.767208][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.842000][ T5851] veth0_vlan: entered promiscuous mode
[   65.860719][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.863968][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.870472][ T5851] veth1_vlan: entered promiscuous mode
[   65.895009][ T5857] veth0_vlan: entered promiscuous mode
[   65.916274][ T5857] veth1_vlan: entered promiscuous mode
[   65.919414][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.923789][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.948129][ T5857] veth0_macvtap: entered promiscuous mode
[   65.956684][ T5857] veth1_macvtap: entered promiscuous mode
[   65.963179][ T5851] veth0_macvtap: entered promiscuous mode
[   65.974534][ T5851] veth1_macvtap: entered promiscuous mode
[   65.986688][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.004749][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.013075][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.027240][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.034148][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.044314][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.061990][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.077956][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.084776][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.103288][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.120515][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.134341][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.141389][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.206966][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.223515][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.237205][  T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.240802][  T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.295190][  T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.306936][  T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.324753][  T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.328049][  T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.446008][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.554110][ T5931] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9'.
[   66.679219][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   66.689433][   T24] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   66.712933][   T24] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   66.725330][ T5938] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.892232][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   67.333784][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21'.
[   67.490505][ T5849] Bluetooth: hci0: command tx timeout
[   67.494165][ T5849] Bluetooth: hci1: command tx timeout
[   67.574110][ T5849] Bluetooth: hci2: command tx timeout
[   67.858170][ T5983] netlink: 'syz.1.23': attribute type 3 has an invalid length.
[   68.003319][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'.
[   68.475935][ T6025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'.
[   68.558108][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'.
[   68.562059][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'.
[   68.795440][ T6039] dvmrp8: entered allmulticast mode
[   68.815715][ T6033] dvmrp8: left allmulticast mode
[   69.086070][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[   69.289362][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'.
[   69.571494][ T5849] Bluetooth: hci1: command tx timeout
[   69.573493][ T5849] Bluetooth: hci0: command tx timeout
[   69.660445][ T5849] Bluetooth: hci2: command tx timeout
[   69.961995][ T6104] netlink: 80 bytes leftover after parsing attributes in process `syz.1.70'.
[   70.344583][ T6132] syz.0.84 uses obsolete (PF_INET,SOCK_PACKET)
[   71.172706][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.175417][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.226836][ T6136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.364159][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.380352][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.660472][ T5849] Bluetooth: hci0: command tx timeout
[   71.663388][ T5854] Bluetooth: hci1: command tx timeout
[   71.739829][ T5849] Bluetooth: hci2: command tx timeout
[   72.042589][ T6193] __nla_validate_parse: 1 callbacks suppressed
[   72.042600][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'.
[   72.400364][ T6226] netlink: 'syz.2.129': attribute type 1 has an invalid length.
[   72.423839][ T6226] netlink: 17 bytes leftover after parsing attributes in process `syz.2.129'.
[   72.565028][ T6242] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.642435][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'.
[   72.860252][ T6273] netlink: 'syz.1.151': attribute type 1 has an invalid length.
[   72.942652][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'.
[   73.510820][ T6335] Bluetooth: hci1: Opcode 0x080f failed: -4
[   73.790948][ T6349] Driver unsupported XDP return value 0 on prog  (id 42) dev N/A, expect packet loss!
[   74.659038][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   75.031430][ T6413] Zero length message leads to an empty skb
[   75.056953][ T6414] nbd: must specify at least one socket
[   75.066880][ T6416] netlink: 'syz.2.219': attribute type 4 has an invalid length.
[   75.390370][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027f79c00: rx timeout, send abort
[   75.394219][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f1c2800: rx timeout, send abort
[   75.398508][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027f79c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   75.404151][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f1c2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   75.650056][ T5849] Bluetooth: hci1: command 0x080f tx timeout
[   75.765555][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   76.814941][ T6491] Bluetooth: MGMT ver 1.23
[   76.850204][   T33] audit: type=1800 audit(1755222645.737:2): pid=6492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.252" name="memory.events" dev="tmpfs" ino=456 res=0 errno=0
[   76.863250][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'.
[   77.011011][ T6510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.081138][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'.
[   77.092811][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   77.092867][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.264'.
[   77.095733][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   77.101501][ T5912] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   77.109181][ T5912] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   77.184210][ T6522] netlink: 84 bytes leftover after parsing attributes in process `syz.0.267'.
[   77.187057][ T6522] netem: invalid attributes len -16
[   77.189253][ T6522] netem: change failed
[   77.542766][ T6544] netlink: 'syz.0.277': attribute type 15 has an invalid length.
[   77.726281][ T6552] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.281'.
[   77.729839][ T6552] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   77.865494][ T6559] netlink: 'syz.2.284': attribute type 1 has an invalid length.
[   77.868972][ T6559] netlink: 'syz.2.284': attribute type 3 has an invalid length.
[   77.872171][ T6559] netlink: 224 bytes leftover after parsing attributes in process `syz.2.284'.
[   78.028928][ T6571] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   78.218289][ T6584] netlink: 'syz.1.296': attribute type 3 has an invalid length.
[   78.326118][ T6592] netlink: 'syz.1.300': attribute type 1 has an invalid length.
[   79.417570][ T6659] syzkaller1: entered promiscuous mode
[   79.421184][ T6659] syzkaller1: entered allmulticast mode
[   79.808182][ T6675] tipc: Started in network mode
[   79.812417][ T6675] tipc: Node identity 862bc6675631, cluster identity 4711
[   79.815619][ T6675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.819745][ T6675] syzkaller0: entered promiscuous mode
[   79.822489][ T6675] syzkaller0: entered allmulticast mode
[   79.838941][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[   79.847233][ T6675] tipc: Resetting bearer <eth:syzkaller0>
[   79.854480][ T6674] tipc: Resetting bearer <eth:syzkaller0>
[   79.865542][ T6674] tipc: Disabling bearer <eth:syzkaller0>
[   80.396852][ T6686] netlink: 'syz.0.337': attribute type 1 has an invalid length.
[   80.402289][ T6686] netlink: 600 bytes leftover after parsing attributes in process `syz.0.337'.
[   80.567904][ T6697] netlink: 56 bytes leftover after parsing attributes in process `syz.1.341'.
[   80.837715][ T6712] Unsupported ieee802154 address type: 0
[   81.152759][ T6724] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[   81.155404][ T6724] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[   81.158247][ T6724] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   81.404203][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'.
[   81.415408][   T10] cfg80211: failed to load regulatory.db
[   81.609974][ T6740] tipc: Started in network mode
[   81.612041][ T6740] tipc: Node identity fa2fc6bbc472, cluster identity 4711
[   81.614997][ T6740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.618516][ T6740] syzkaller0: entered promiscuous mode
[   81.621009][ T6740] syzkaller0: entered allmulticast mode
[   81.639919][ T6740] tipc: Resetting bearer <eth:syzkaller0>
[   81.644698][ T6739] tipc: Resetting bearer <eth:syzkaller0>
[   81.654282][ T6739] tipc: Disabling bearer <eth:syzkaller0>
[   81.868214][ T6748] tap0: tun_chr_ioctl cmd 35108
[   82.337239][ T6779] netlink: 56 bytes leftover after parsing attributes in process `syz.0.376'.
[   82.343943][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'.
[   82.398255][ T6783] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.377'.
[   82.410580][ T6780] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.377'.
[   82.767998][ T6819] tipc: MTU too low for tipc bearer
[   83.168030][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.183702][ T6825] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.291313][ T5715] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.294698][ T5715] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.300467][ T5715] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.304245][ T5715] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.307893][ T6825] syz.1.398 (6825) used greatest stack depth: 20320 bytes left
[   83.354770][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.408'.
[   84.108778][ T6884] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[   84.112220][ T6884] netlink: 224 bytes leftover after parsing attributes in process `syz.2.419'.
[   84.455685][   T33] audit: type=1804 audit(1755222653.337:3): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.428" name="/newroot/143/cgroup.controllers" dev="tmpfs" ino=738 res=1 errno=0
[   84.486102][   T33] audit: type=1800 audit(1755222653.337:4): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.428" name="cgroup.controllers" dev="tmpfs" ino=738 res=0 errno=0
[   84.611497][ T6920] batadv1: entered promiscuous mode
[   84.891890][ T6940] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[   84.894858][ T6940] netlink: 144 bytes leftover after parsing attributes in process `syz.2.441'.
[   84.923399][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'.
[   85.188029][ T6963] netlink: 'syz.2.450': attribute type 6 has an invalid length.
[   85.235865][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'.
[   85.424075][ T6980] tipc: Started in network mode
[   85.426351][ T6980] tipc: Node identity , cluster identity 4711
[   85.439574][ T6980] tipc: Failed to obtain node identity
[   85.441902][ T6980] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   85.497519][ T6980] syzkaller0: entered promiscuous mode
[   85.500282][ T6980] syzkaller0: entered allmulticast mode
[   86.505320][ T7003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.507826][ T7003] syzkaller0: entered promiscuous mode
[   86.509992][ T7003] syzkaller0: entered allmulticast mode
[   86.553352][ T7003] tipc: Resetting bearer <eth:syzkaller0>
[   86.555995][ T7002] tipc: Resetting bearer <eth:syzkaller0>
[   86.565182][ T7002] tipc: Disabling bearer <eth:syzkaller0>
[   86.747581][   T10] IPVS: starting estimator thread 0...
[   86.838640][ T7021] IPVS: using max 62 ests per chain, 148800 per kthread
[   86.907655][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'.
[   86.915721][ T7031] bridge0: port 3(vlan2) entered blocking state
[   86.918244][ T7031] bridge0: port 3(vlan2) entered disabled state
[   86.922016][ T7031] vlan2: entered allmulticast mode
[   86.924010][ T7031] bridge0: entered allmulticast mode
[   86.928168][ T7031] vlan2: left allmulticast mode
[   86.932276][ T7031] bridge0: left allmulticast mode
[   87.286877][ T7042] vlan2: entered allmulticast mode
[   87.289996][ T7042] macvtap0: entered allmulticast mode
[   87.495732][ T7013] Bluetooth: hci1: Opcode 0x080f failed: -4
[   88.187222][ T7075] __nla_validate_parse: 1 callbacks suppressed
[   88.187234][ T7075] netlink: 48 bytes leftover after parsing attributes in process `syz.1.498'.
[   88.705487][ T5849] Bluetooth: hci1: command 0x080f tx timeout
[   88.893340][ T7128] svc: failed to register nfsdv3 RPC service (errno 111).
[   88.900842][ T7128] svc: failed to register nfsaclv3 RPC service (errno 111).
[   88.968183][ T7134] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.524'.
[   88.986504][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'.
[   89.002821][ T7134] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.011218][ T7134] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.489850][ T7170] netlink: 'syz.1.538': attribute type 1 has an invalid length.
[   89.572425][ T7178] netlink: 'syz.1.543': attribute type 1 has an invalid length.
[   89.574875][ T7178] netlink: 140 bytes leftover after parsing attributes in process `syz.1.543'.
[   89.636430][ T7183] gretap1: entered promiscuous mode
[   89.642538][ T7183] gretap1: entered allmulticast mode
[   89.754890][ T7190] "syz.0.548" (7190) uses obsolete ecb(arc4) skcipher
[   90.305992][ T7229] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   90.931716][ T7243] netlink: 'syz.1.571': attribute type 2 has an invalid length.
[   91.281970][ T7258] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96
[   91.368251][ T7267] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.512246][ T7274] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[   91.777782][ T7282] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   91.782998][ T7282] macsec2: entered allmulticast mode
[   91.785113][ T7282] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   91.791833][ T7282] batman_adv: batadv0: Adding interface: macsec2
[   91.794128][ T7282] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[   91.802885][ T7282] batman_adv: batadv0: Interface activated: macsec2
[   92.031730][ T7294] netlink: 256 bytes leftover after parsing attributes in process `syz.2.594'.
[   92.044059][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'.
[   92.172820][ T7306] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.599'.
[   92.282090][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[   92.326101][ T7322] sctp: [Deprecated]: syz.0.607 (pid 7322) Use of int in max_burst socket option.
[   92.326101][ T7322] Use struct sctp_assoc_value instead
[   92.355462][ T7324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.608'.
[   92.365259][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'.
[   93.043185][ T7386] netlink: 'syz.2.636': attribute type 2 has an invalid length.
[   93.046981][ T7386] netlink: 'syz.2.636': attribute type 2 has an invalid length.
[   93.124090][ T7394] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[   93.206088][ T7401] tap0: tun_chr_ioctl cmd 35111
[   93.302425][ T7411] __nla_validate_parse: 4 callbacks suppressed
[   93.302436][ T7411] netlink: 104 bytes leftover after parsing attributes in process `syz.2.646'.
[   93.341851][ T7414] netlink: 5 bytes leftover after parsing attributes in process `syz.0.647'.
[   94.159144][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'.
[   94.263543][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'.
[   94.913582][ T7503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.683'.
[   94.930142][ T7503] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[   94.958256][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.684'.
[   95.785017][ T7526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.788260][ T7526] syzkaller0: entered promiscuous mode
[   95.791401][ T7526] syzkaller0: entered allmulticast mode
[   95.808042][ T7526] tipc: Resetting bearer <eth:syzkaller0>
[   95.825612][ T7525] tipc: Resetting bearer <eth:syzkaller0>
[   95.848163][ T7525] tipc: Disabling bearer <eth:syzkaller0>
[   96.766205][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'.
[   96.781620][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'.
[   96.784460][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'.
[   97.203794][ T7630] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   97.523723][ T7669] netlink: 'syz.2.755': attribute type 13 has an invalid length.
[   97.526578][ T7669] netlink: 'syz.2.755': attribute type 17 has an invalid length.
[   97.632467][ T7669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.735624][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.915264][ T7693] Bluetooth: MGMT ver 1.23
[   98.458198][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv1
[   98.462309][ T7729] team0: Port device batadv1 added
[   98.976227][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'.
[   98.979951][ T7766] netlink: 'syz.1.798': attribute type 12 has an invalid length.
[   98.994747][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   98.994783][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'.
[   98.997614][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   99.012039][ T7766] netlink: 'syz.1.798': attribute type 12 has an invalid length.
[   99.014603][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   99.017766][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   99.425347][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'.
[   99.615450][ T7821] tipc: Started in network mode
[   99.617543][ T7821] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[   99.623827][ T7821] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   99.864659][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.869236][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.912242][ T7850] batadv_slave_1: entered promiscuous mode
[   99.914410][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[   99.947396][ T7853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.838'.
[   99.972235][ T5849] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   99.975467][ T5849] Bluetooth: hci2: command 0x0401 tx timeout
[  100.470891][ T7899] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  100.739435][ T5911] tipc: Node number set to 9480874
[  101.273244][ T7960] netlink: 'syz.2.877': attribute type 1 has an invalid length.
[  101.279911][ T7960] netlink: 224 bytes leftover after parsing attributes in process `syz.2.877'.
[  101.463247][ T7969] syzkaller0: entered promiscuous mode
[  101.465537][ T7969] syzkaller0: entered allmulticast mode
[  101.479448][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'.
[  102.745268][   T10] IPVS: starting estimator thread 0...
[  102.835251][ T8020] IPVS: using max 61 ests per chain, 146400 per kthread
[  102.857453][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  102.974912][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'.
[  102.977314][ T8040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.917'.
[  104.360814][ T8104] vlan0: entered promiscuous mode
[  104.452692][ T8112] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  105.473136][ T8156] sctp: [Deprecated]: syz.2.961 (pid 8156) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.473136][ T8156] Use struct sctp_sack_info instead
[  105.833789][ T8193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.841632][ T8193] syzkaller0: entered promiscuous mode
[  105.844554][ T8193] syzkaller0: entered allmulticast mode
[  105.870903][ T8193] tipc: Resetting bearer <eth:syzkaller0>
[  105.875067][ T8192] tipc: Resetting bearer <eth:syzkaller0>
[  105.887247][ T8192] tipc: Disabling bearer <eth:syzkaller0>
[  106.321151][ T8234] netlink: 'syz.2.996': attribute type 17 has an invalid length.
[  106.424525][ T8248] __nla_validate_parse: 2 callbacks suppressed
[  106.424540][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.432968][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.436723][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.442204][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.445893][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.452575][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.456200][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.462489][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.466353][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.470615][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  106.681900][ T8272] bond0: option primary_reselect: invalid value (17)
[  107.013880][ T8306] syzkaller0: entered promiscuous mode
[  107.016136][ T8306] syzkaller0: entered allmulticast mode
[  108.527206][ T8367] netlink: 'syz.2.1059': attribute type 5 has an invalid length.
[  109.319598][ T8395] netlink: 'syz.1.1068': attribute type 11 has an invalid length.
[  109.963318][ T8450] trusted_key: syz.2.1093 sent an empty control message without MSG_MORE.
[  110.315554][ T8476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.318218][ T8476] syzkaller0: entered promiscuous mode
[  110.321454][ T8476] syzkaller0: entered allmulticast mode
[  110.336466][ T8476] tipc: Resetting bearer <eth:syzkaller0>
[  110.341300][ T8475] tipc: Resetting bearer <eth:syzkaller0>
[  110.359841][ T8475] tipc: Disabling bearer <eth:syzkaller0>
[  110.695037][ T8501] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  110.963934][ T8528] nbd: couldn't find a device at index 0
[  111.116525][ T8548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.121720][ T8548] syzkaller0: entered promiscuous mode
[  111.123451][ T8548] syzkaller0: entered allmulticast mode
[  111.156314][ T8548] tipc: Resetting bearer <eth:syzkaller0>
[  111.160447][ T8543] tipc: Resetting bearer <eth:syzkaller0>
[  111.180458][ T8543] tipc: Disabling bearer <eth:syzkaller0>
[  111.212213][ T8558] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  111.332996][ T8571] bond0: entered promiscuous mode
[  111.334851][ T8571] bond_slave_0: entered promiscuous mode
[  111.336749][ T8571] bond_slave_1: entered promiscuous mode
[  111.346217][ T8571] batadv_slave_1: entered promiscuous mode
[  111.563047][ T8603] netlink: del zone limit has 4 unknown bytes
[  113.281423][ T8767] __nla_validate_parse: 28 callbacks suppressed
[  113.281435][ T8767] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1237'.
[  113.287670][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'.
[  113.297235][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1237'.
[  113.391995][ T8776] TCP: TCP_TX_DELAY enabled
[  113.612147][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'.
[  114.478597][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1277'.
[  115.026102][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'.
[  115.047511][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1296'.
[  115.056300][ T8904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1296'.
[  115.231410][ T8922] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1305'.
[  115.303528][ T8930] GUP no longer grows the stack in syz.0.1309 (8930): 200000006000-20000000a000 (200000005000)
[  115.307749][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.0.1309 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  115.307762][ T8930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.307768][ T8930] Call Trace:
[  115.307772][ T8930]  <TASK>
[  115.307776][ T8930]  dump_stack_lvl+0x189/0x250
[  115.307794][ T8930]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.307804][ T8930]  ? __pfx__printk+0x10/0x10
[  115.307815][ T8930]  ? find_vma+0xe7/0x160
[  115.307841][ T8930]  __get_user_pages+0x24d0/0x2ce0
[  115.307851][ T8930]  ? __lock_acquire+0xab9/0xd20
[  115.307876][ T8930]  ? __gup_longterm_locked+0xc68/0x1660
[  115.307891][ T8930]  __gup_longterm_locked+0xde9/0x1660
[  115.307904][ T8930]  ? try_grab_folio_fast+0x1be/0x4f0
[  115.307920][ T8930]  ? gup_fast_fallback+0x195f/0x2010
[  115.307932][ T8930]  gup_fast_fallback+0x1e6a/0x2010
[  115.307958][ T8930]  ? __pfx_gup_fast_fallback+0x10/0x10
[  115.307967][ T8930]  ? __mutex_lock+0x335/0x1360
[  115.307978][ T8930]  ? rcu_is_watching+0x15/0xb0
[  115.307990][ T8930]  ? is_valid_gup_args+0x11f/0x200
[  115.308001][ T8930]  ? get_user_pages_fast+0x4d/0xb0
[  115.308013][ T8930]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  115.308030][ T8930]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  115.308042][ T8930]  ? wait_for_space+0x24d/0x2d0
[  115.308056][ T8930]  iov_iter_get_pages2+0x5e/0xa0
[  115.308071][ T8930]  __se_sys_vmsplice+0x548/0x10d0
[  115.308088][ T8930]  ? futex_private_hash_put+0x4b/0x280
[  115.308101][ T8930]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  115.308114][ T8930]  ? __pfx_futex_wake+0x10/0x10
[  115.308130][ T8930]  ? __lock_acquire+0xab9/0xd20
[  115.308157][ T8930]  ? do_pipe2+0xf7/0x170
[  115.308171][ T8930]  ? rcu_is_watching+0x15/0xb0
[  115.308181][ T8930]  ? do_syscall_64+0xbe/0x3b0
[  115.308194][ T8930]  do_syscall_64+0xfa/0x3b0
[  115.308204][ T8930]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.308214][ T8930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.308222][ T8930]  ? exc_page_fault+0x9f/0xf0
[  115.308233][ T8930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.308242][ T8930] RIP: 0033:0x7f812078ebe9
[  115.308256][ T8930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.308264][ T8930] RSP: 002b:00007f8121679038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  115.308273][ T8930] RAX: ffffffffffffffda RBX: 00007f81209b5fa0 RCX: 00007f812078ebe9
[  115.308280][ T8930] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  115.308285][ T8930] RBP: 00007f8120811e19 R08: 0000000000000000 R09: 0000000000000000
[  115.308290][ T8930] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  115.308294][ T8930] R13: 00007f81209b6038 R14: 00007f81209b5fa0 R15: 00007ffdb8b8d0f8
[  115.308308][ T8930]  </TASK>
[  115.566856][ T8961] netlink: 'syz.0.1323': attribute type 39 has an invalid length.
[  115.709760][ T8977] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  115.714799][ T8977] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  116.806211][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'.
[  116.882822][ T9030] team0: entered promiscuous mode
[  116.888599][ T9030] team_slave_0: entered promiscuous mode
[  116.891040][ T9030] team_slave_1: entered promiscuous mode
[  116.895784][ T9030] team0: left promiscuous mode
[  116.897871][ T9030] team_slave_0: left promiscuous mode
[  116.901458][ T9030] team_slave_1: left promiscuous mode
[  116.919712][ T9029] bridge_slave_1: left allmulticast mode
[  116.922967][ T9029] bridge_slave_1: left promiscuous mode
[  116.925619][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.933529][ T9029] bridge_slave_0: left allmulticast mode
[  116.935927][ T9029] bridge_slave_0: left promiscuous mode
[  116.938484][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.663800][ T9067] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  117.850951][ T9073] block nbd2: server does not support multiple connections per device.
[  117.855040][ T9073] block nbd2: shutting down sockets
[  118.417090][ T9106] __nla_validate_parse: 2 callbacks suppressed
[  118.417102][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'.
[  118.830729][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'.
[  119.222702][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1406'.
[  119.329229][ T5849] Bluetooth: hci2: command 0x0401 tx timeout
[  119.360377][ T9185] netlink: 'syz.1.1414': attribute type 5 has an invalid length.
[  119.686453][ T9212] netlink: 'syz.1.1426': attribute type 3 has an invalid length.
[  119.689379][ T9212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1426'.
[  119.790807][ T9222] netlink: 'syz.2.1431': attribute type 11 has an invalid length.
[  119.863788][   T33] audit: type=1800 audit(1755222688.747:5): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1428" name="memory.events" dev="tmpfs" ino=2533 res=0 errno=0
[  120.129594][ T9244] bridge_slave_0: left allmulticast mode
[  120.131481][ T9244] bridge_slave_0: left promiscuous mode
[  120.133484][ T9244] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.142786][ T9244] bridge_slave_1: left allmulticast mode
[  120.144676][ T9244] bridge_slave_1: left promiscuous mode
[  120.146610][ T9244] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.165133][ T9244] bond0: (slave bond_slave_0): Releasing backup interface
[  120.171974][ T9244] bond_slave_0: left promiscuous mode
[  120.180745][ T9244] bond0: (slave bond_slave_1): Releasing backup interface
[  120.191165][ T9244] bond_slave_1: left promiscuous mode
[  120.198242][ T9244] team0: Port device team_slave_0 removed
[  120.212718][ T9244] team0: Port device team_slave_1 removed
[  120.216291][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.223429][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.233835][ T9244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.236656][ T9244] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.308163][ T9244] syz.2.1439 (9244) used greatest stack depth: 19960 bytes left
[  120.358309][ T9252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.373404][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'.
[  120.407530][ T9252] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  120.419156][ T9252] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  120.554519][ T9273] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1450'.
[  120.972659][ T9300] netlink: 'syz.1.1460': attribute type 7 has an invalid length.
[  121.147706][ T9313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.515055][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'.
[  121.930515][ T9388] block nbd2: server does not support multiple connections per device.
[  121.934461][ T9388] block nbd2: shutting down sockets
[  122.189716][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'.
[  122.793509][ T9459] netlink: 'syz.1.1531': attribute type 1 has an invalid length.
[  122.894216][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'.
[  122.916530][ T9469] vlan3: entered promiscuous mode
[  122.919393][ T9469] gretap0: entered promiscuous mode
[  123.257993][ T9493] C: renamed from lo (while UP)
[  123.266406][ T9493] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  123.634682][ T9508] sctp: [Deprecated]: syz.0.1552 (pid 9508) Use of int in max_burst socket option.
[  123.634682][ T9508] Use struct sctp_assoc_value instead
[  123.684611][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1553'.
[  124.824857][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'.
[  124.866368][ T9579] netlink: 304 bytes leftover after parsing attributes in process `syz.0.1584'.
[  125.531362][ T9595] netlink: 'syz.1.1589': attribute type 13 has an invalid length.
[  125.534561][ T9595] netlink: 'syz.1.1589': attribute type 17 has an invalid length.
[  125.545089][ T9595] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  125.927203][ T9608] macsec1: entered promiscuous mode
[  125.929314][ T9608] macsec1: entered allmulticast mode
[  125.931220][ T9608] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  126.136164][ T9630] bridge0: port 3(gretap0) entered blocking state
[  126.141447][ T9630] bridge0: port 3(gretap0) entered disabled state
[  126.145135][ T9630] gretap0: entered allmulticast mode
[  126.367621][ T9651] netlink: 'syz.1.1613': attribute type 11 has an invalid length.
[  126.451288][ T9657] pim6reg: entered allmulticast mode
[  126.469325][ T9657] pim6reg: left allmulticast mode
[  126.648232][ T9671] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.652051][ T9671] syzkaller0: entered promiscuous mode
[  126.653785][ T9671] syzkaller0: entered allmulticast mode
[  126.664845][ T9671] tipc: Resetting bearer <eth:syzkaller0>
[  126.669396][ T9670] tipc: Resetting bearer <eth:syzkaller0>
[  126.677717][ T9670] tipc: Disabling bearer <eth:syzkaller0>
[  126.744115][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'.
[  127.228491][ T9704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.444084][ T9720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.446774][ T9720] syzkaller0: entered promiscuous mode
[  127.448723][ T9720] syzkaller0: entered allmulticast mode
[  127.462817][ T9720] tipc: Resetting bearer <eth:syzkaller0>
[  127.466575][ T9718] tipc: Resetting bearer <eth:syzkaller0>
[  127.474522][ T9718] tipc: Disabling bearer <eth:syzkaller0>
[  127.700411][ T9734] netlink: 'syz.1.1653': attribute type 1 has an invalid length.
[  127.752853][ T9734] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  127.792123][ T9734] veth3: entered promiscuous mode
[  127.802380][ T9734] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  127.821203][ T9734] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1653'.
[  127.826046][ T5715] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  127.833575][ T9734] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.939801][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  128.041826][ T9764] netlink: 'syz.0.1666': attribute type 8 has an invalid length.
[  128.746198][ T9789] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  128.749401][ T9789] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  128.804323][ T9793] ieee802154 phy1 wpan1: encryption failed: -90
[  129.042213][ T9808] netlink: 'syz.0.1682': attribute type 3 has an invalid length.
[  129.044813][ T9808] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1682'.
[  129.336663][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'.
[  130.252663][ T9903] ieee802154 phy1 wpan1: encryption failed: -22
[  130.423779][ T9911] netlink: 'syz.0.1726': attribute type 46 has an invalid length.
[  130.938720][ T5849] Bluetooth: hci2: command 0x0401 tx timeout
[  131.282545][ T9939] netlink: 'syz.1.1737': attribute type 2 has an invalid length.
[  131.285652][ T9939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1737'.
[  131.957042][ T9990] netlink: 'syz.2.1754': attribute type 10 has an invalid length.
[  131.976628][ T9990] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  132.613777][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.812728][T10037] netlink: 'syz.1.1770': attribute type 1 has an invalid length.
[  132.815400][T10037] netlink: 'syz.1.1770': attribute type 2 has an invalid length.
[  132.817965][T10037] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1770'.
[  132.821489][T10037] netlink: 'syz.1.1770': attribute type 1 has an invalid length.
[  132.824275][T10037] netlink: 'syz.1.1770': attribute type 2 has an invalid length.
[  132.826816][T10037] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1770'.
[  132.990392][T10041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1772'.
[  132.994283][T10041] IPVS: Unknown mcast interface: wg0
[  133.080959][T10047] netlink: 'syz.1.1775': attribute type 1 has an invalid length.
[  133.084010][T10047] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1775'.
[  133.792913][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'.
[  133.815803][T10093] macvlan2: entered promiscuous mode
[  133.817979][T10093] macvlan2: entered allmulticast mode
[  133.825570][T10093] bond1: (slave macvlan2): Opening slave failed
[  134.354155][T10129] xfrm1: entered promiscuous mode
[  134.356327][T10129] xfrm1: entered allmulticast mode
[  134.378658][ T5854] Bluetooth: hci2: command 0x0401 tx timeout
[  134.398802][T10133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.612312][T10147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.615734][T10147] syzkaller0: entered promiscuous mode
[  134.617638][T10147] syzkaller0: entered allmulticast mode
[  134.628217][T10147] tipc: Resetting bearer <eth:syzkaller0>
[  134.632569][T10146] tipc: Resetting bearer <eth:syzkaller0>
[  134.641902][T10146] tipc: Disabling bearer <eth:syzkaller0>
[  134.794036][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'.
[  134.796853][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.801119][T10153] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.805211][T10153] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.809853][T10153] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.816683][T10153] batman_adv: batadv0: Interface deactivated: macsec2
[  134.822474][T10153] batman_adv: batadv0: Removing interface: macsec2
[  135.120266][T10183] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  135.125583][T10183] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  135.248073][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'.
[  135.252902][T10206] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  136.266217][T10244] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1864'.
[  136.554667][T10285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1882'.
[  136.656054][T10299] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  136.660567][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'.
[  136.663768][T10299] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  136.666199][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'.
[  136.679480][T10299] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  136.681968][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'.
[  136.685115][T10299] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  136.687613][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'.
[  136.698868][T10299] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  136.701323][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'.
[  136.704543][T10299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1888'.
[  136.991446][T10334] bond0: entered promiscuous mode
[  136.993214][T10334] bond_slave_0: entered promiscuous mode
[  136.995211][T10334] bond_slave_1: entered promiscuous mode
[  136.998275][T10334] bond0: left promiscuous mode
[  137.000060][T10334] bond_slave_0: left promiscuous mode
[  137.001898][T10334] bond_slave_1: left promiscuous mode
[  137.679896][T10408] sctp: [Deprecated]: syz.2.1936 (pid 10408) Use of struct sctp_assoc_value in delayed_ack socket option.
[  137.679896][T10408] Use struct sctp_sack_info instead
[  138.087602][T10446] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  138.695890][ T5715] bond0: (slave bond_slave_0): interface is now down
[  138.709130][ T5715] bond0: (slave bond_slave_1): interface is now down
[  138.717872][ T5715] bond0: now running without any active interface!
[  139.579878][T10511] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  139.829388][T10560] __nla_validate_parse: 80 callbacks suppressed
[  139.829403][T10560] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1996'.
[  140.013563][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2004'.
[  140.092854][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2009'.
[  140.098593][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2009'.
[  140.243892][T10613] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  140.408258][T10635] geneve2: entered promiscuous mode
[  140.416295][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  140.426699][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  140.431490][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  140.434344][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  140.487297][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'.
[  140.685731][T10658] tipc: Invalid UDP bearer configuration
[  140.685759][T10658] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  141.488254][T10704] dummy0: entered allmulticast mode
[  141.786147][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'.
[  142.086439][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2074'.
[  142.150091][T10740] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  142.334264][T10754] openvswitch: netlink: Message has 4 unknown bytes.
[  142.337135][T10754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.934417][T10792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2099'.
[  143.372960][T10813] syzkaller0: entered promiscuous mode
[  143.375239][T10813] syzkaller0: entered allmulticast mode
[  143.379188][ T5854] Bluetooth: hci2: link tx timeout
[  143.381152][ T5854] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  143.384845][ T5854] Bluetooth: hci2: link tx timeout
[  143.387001][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.391285][ T5854] Bluetooth: hci2: link tx timeout
[  143.393336][ T5854] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  143.396195][ T5854] Bluetooth: hci2: link tx timeout
[  143.398278][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.401964][ T5854] Bluetooth: hci2: link tx timeout
[  143.404323][ T5854] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  143.407535][ T5854] Bluetooth: hci2: link tx timeout
[  143.413378][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.415910][ T5854] Bluetooth: hci2: link tx timeout
[  143.417592][ T5854] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  143.420196][ T5854] Bluetooth: hci2: link tx timeout
[  143.421937][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.627665][T10832] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.630391][T10832] syzkaller0: entered promiscuous mode
[  143.632732][T10832] syzkaller0: entered allmulticast mode
[  143.640610][T10834] team_slave_0: entered promiscuous mode
[  143.642816][T10834] team_slave_1: entered promiscuous mode
[  143.645200][T10834] vlan2: entered promiscuous mode
[  143.647178][T10834] team0: entered promiscuous mode
[  143.675721][T10832] tipc: Resetting bearer <eth:syzkaller0>
[  143.678879][T10831] tipc: Resetting bearer <eth:syzkaller0>
[  143.686891][T10831] tipc: Disabling bearer <eth:syzkaller0>
[  143.738057][T10836] validate_nla: 77 callbacks suppressed
[  143.738079][T10836] netlink: 'syz.0.2120': attribute type 11 has an invalid length.
[  143.742952][T10836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2120'.
[  144.324815][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2132'.
[  144.965487][T10907] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  144.970283][T10906] IPVS: stopping master sync thread 10907 ...
[  145.411108][T10923] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  145.420883][ T5854] Bluetooth: hci2: command 0x0401 tx timeout
[  145.655029][T10935] syzkaller0: entered promiscuous mode
[  145.656782][T10935] syzkaller0: entered allmulticast mode
[  146.635587][T10937] __nla_validate_parse: 1 callbacks suppressed
[  146.635598][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2166'.
[  146.749834][T10954] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2173'.
[  146.771243][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'.
[  146.935685][T10973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2181'.
[  147.111194][T10999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2194'.
[  147.125131][T10999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2194'.
[  147.128707][T10999] netlink: 34 bytes leftover after parsing attributes in process `syz.2.2194'.
[  147.321454][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'.
[  147.491323][ T5854] Bluetooth: hci2: command 0x0401 tx timeout
[  147.535662][T11046] netlink: 'syz.1.2216': attribute type 3 has an invalid length.
[  147.538235][T11046] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2216'.
[  148.042626][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2236'.
[  148.084570][T11089] bridge_slave_1 (unregistering): left allmulticast mode
[  148.087559][T11089] bridge_slave_1 (unregistering): left promiscuous mode
[  148.091515][T11089] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.244504][T11126] netlink: 'syz.1.2251': attribute type 10 has an invalid length.
[  150.546259][T11194] macvtap0: refused to change device tx_queue_len
[  151.895439][T11273] syzkaller1: entered promiscuous mode
[  151.897140][T11273] syzkaller1: entered allmulticast mode
[  152.117859][T11295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.141086][T11295] syzkaller0: entered promiscuous mode
[  152.144464][T11295] syzkaller0: entered allmulticast mode
[  152.154500][T11295] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  152.172931][T11295] tipc: Resetting bearer <eth:syzkaller0>
[  152.176113][T11301] __nla_validate_parse: 3 callbacks suppressed
[  152.176121][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'.
[  152.181405][T11294] tipc: Resetting bearer <eth:syzkaller0>
[  152.224698][T11294] tipc: Disabling bearer <eth:syzkaller0>
[  152.553163][T11329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2338'.
[  152.806830][T11348] netlink: 'syz.1.2348': attribute type 12 has an invalid length.
[  153.279217][T11375] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2359'.
[  153.322541][T11380] netlink: 'syz.2.2363': attribute type 83 has an invalid length.
[  153.551814][T11402] netlink: 'syz.2.2372': attribute type 2 has an invalid length.
[  153.561431][T11404] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2373'.
[  153.590732][T11407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.593662][T11407] syzkaller0: entered promiscuous mode
[  153.595501][T11407] syzkaller0: entered allmulticast mode
[  153.601720][T11407] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  153.612939][T11407] tipc: Resetting bearer <eth:syzkaller0>
[  153.616499][T11405] tipc: Resetting bearer <eth:syzkaller0>
[  153.626329][T11405] tipc: Disabling bearer <eth:syzkaller0>
[  153.750051][T11413] netlink: 'syz.2.2377': attribute type 1 has an invalid length.
[  153.774106][T11413] 8021q: adding VLAN 0 to HW filter on device bond1
[  153.780606][T11413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2377'.
[  153.790278][T11413] gretap1: entered promiscuous mode
[  153.795958][T11413] bond1: (slave gretap1): making interface the new active one
[  153.800901][T11413] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  153.966441][T11417] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2377'.
[  154.126744][T11425] openvswitch: netlink: IP tunnel dst address not specified
[  154.224198][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2384'.
[  154.245898][T11433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2385'.
[  154.309994][ T5715] bond1: (slave ip6gretap1): link status up again after 0 ms
[  154.312866][ T5715] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  154.418635][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  154.530270][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  154.639119][ T5715] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  154.676124][T11472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.681803][T11472] syzkaller0: entered promiscuous mode
[  154.683862][T11472] syzkaller0: entered allmulticast mode
[  154.692293][T11472] tipc: Resetting bearer <eth:syzkaller0>
[  154.697315][T11469] tipc: Resetting bearer <eth:syzkaller0>
[  154.709650][T11469] tipc: Disabling bearer <eth:syzkaller0>
[  154.759673][   T12] bond1: (slave ip6gretap1): failed to get link speed/duplex
[  154.888121][T11485] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  154.896758][ T5715] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.900646][ T5715] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.904354][ T5715] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.907804][ T5715] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.911587][ T5715] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.914686][ T5715] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  154.917532][ T5715] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.923638][ T5715] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  155.612851][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'.
[  156.236645][T11586] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  156.246707][T11585] IPVS: stopping master sync thread 11586 ...
[  157.555416][T11651] tipc: New replicast peer: 255.255.255.255
[  157.559827][T11651] tipc: Enabled bearer <udp:syz2>, priority 10
[  157.563374][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'.
[  157.567106][T11651] tipc: Disabling bearer <udp:syz2>
[  157.931791][T11676] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  158.846655][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'.
[  158.860085][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'.
[  158.865996][T11745] ip6tnl1: entered promiscuous mode
[  158.867674][T11745] ip6tnl1: entered allmulticast mode
[  159.978609][ T5849] Bluetooth: hci0: command tx timeout
[  160.181531][T11847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.184748][T11847] syzkaller0: entered promiscuous mode
[  160.187002][T11847] syzkaller0: entered allmulticast mode
[  160.203022][T11847] tipc: Resetting bearer <eth:syzkaller0>
[  160.207016][T11846] tipc: Resetting bearer <eth:syzkaller0>
[  160.217418][T11846] tipc: Disabling bearer <eth:syzkaller0>
[  160.576851][T11864] tipc: Enabled bearer <eth:team0>, priority 0
[  160.788855][T11886] netlink: 'syz.0.2576': attribute type 7 has an invalid length.
[  160.791361][T11886] netlink: 'syz.0.2576': attribute type 3 has an invalid length.
[  160.791557][T11887] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2577'.
[  160.793860][T11886] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2576'.
[  161.021454][T11899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.031814][T11899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.036033][T11899] bond0 (unregistering): Released all slaves
[  161.243923][T11922] sock: sock_timestamping_bind_phc: sock not bind to device
[  161.561264][T11938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.563888][T11938] syzkaller0: entered promiscuous mode
[  161.565676][T11938] syzkaller0: entered allmulticast mode
[  161.581402][T11938] tipc: Resetting bearer <eth:syzkaller0>
[  161.584889][T11937] tipc: Resetting bearer <eth:syzkaller0>
[  161.594141][T11937] tipc: Disabling bearer <eth:syzkaller0>
[  161.597902][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2598'.
[  161.938530][T11955] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  161.971916][T11957] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2606'.
[  161.975606][T11957] netlink: 'syz.1.2606': attribute type 1 has an invalid length.
[  162.053936][T11963] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  162.109670][T11963] team_slave_0: left promiscuous mode
[  162.115245][T11963] team0: Port device team_slave_0 removed
[  162.118252][T11963] team_slave_1: left promiscuous mode
[  162.126183][T11963] team0: Port device team_slave_1 removed
[  162.202809][T11963] netlink: 'syz.0.2608': attribute type 10 has an invalid length.
[  162.206169][T11963] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  162.226956][T11975] batadv_slave_1: left promiscuous mode
[  162.235086][T11975] gretap1: left promiscuous mode
[  162.241661][T11975] gretap1: left allmulticast mode
[  162.244808][T11975] macsec1: left promiscuous mode
[  162.246508][T11975] macsec1: left allmulticast mode
[  162.248588][T11975] veth3: left promiscuous mode
[  162.250463][T11975] geneve2: left promiscuous mode
[  162.252986][T11975] ip6tnl1: left promiscuous mode
[  162.254734][T11975] ip6tnl1: left allmulticast mode
[  162.474254][T11997] netlink: zone id is out of range
[  162.476176][T11997] netlink: zone id is out of range
[  162.977052][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'.
[  163.341322][T12062] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2651'.
[  163.687386][T12081] netlink: 'syz.1.2658': attribute type 10 has an invalid length.
[  163.694371][T12081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2658'.
[  163.697918][T12081] bond0: option arp_all_targets: invalid value (196616)
[  163.804082][T12089] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2662'.
[  164.026406][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2671'.
[  164.029588][T12107] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2671'.
[  164.035199][T12107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2671'.
[  164.089316][T12117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2677'.
[  164.204018][T12131] dvmrp0: entered allmulticast mode
[  164.220324][T12133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2684'.
[  164.272083][T12139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.275052][T12139] syzkaller0: entered promiscuous mode
[  164.280437][T12139] syzkaller0: entered allmulticast mode
[  164.298591][T12139] tipc: Resetting bearer <eth:syzkaller0>
[  164.301754][T12138] tipc: Resetting bearer <eth:syzkaller0>
[  164.312623][T12138] tipc: Disabling bearer <eth:syzkaller0>
[  164.323684][T12145] netlink: 'syz.0.2690': attribute type 1 has an invalid length.
[  164.505696][T12163] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2699'.
[  165.176810][T12223] syzkaller0: tun_chr_ioctl cmd 1074812117
[  165.235640][T12229] netlink: 'syz.1.2730': attribute type 10 has an invalid length.
[  165.514572][T12260] netlink: 'syz.2.2745': attribute type 3 has an invalid length.
[  166.440427][T12283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.616841][T12302] netlink: 'syz.1.2765': attribute type 39 has an invalid length.
[  167.012925][T12342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  167.015959][T12342] IPv6: NLM_F_CREATE should be set when creating new route
[  167.018788][T12342] IPv6: NLM_F_CREATE should be set when creating new route
[  167.530065][T12387] openvswitch: netlink: Missing valid actions attribute.
[  167.532211][T12387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.319248][T12450] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0
[  168.390704][T12452] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  168.940166][T12487] __nla_validate_parse: 6 callbacks suppressed
[  168.940181][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'.
[  169.029176][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  169.572931][T12511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.576397][T12511] syzkaller0: entered promiscuous mode
[  169.581744][T12511] syzkaller0: entered allmulticast mode
[  169.609122][T12513] netlink: zone id is out of range
[  169.611091][T12513] netlink: zone id is out of range
[  169.613662][T12511] tipc: Resetting bearer <eth:syzkaller0>
[  169.619095][T12510] tipc: Resetting bearer <eth:syzkaller0>
[  169.639766][T12510] tipc: Disabling bearer <eth:syzkaller0>
[  169.651252][T12513] netlink: set zone limit has 4 unknown bytes
[  170.107604][T12551] syzkaller1: entered promiscuous mode
[  170.110048][T12551] syzkaller1: entered allmulticast mode
[  170.114797][T12551] netlink: 'syz.2.2874': attribute type 15 has an invalid length.
[  170.226681][T12558] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2877'.
[  170.511734][T12586] nbd: must specify at least one socket
[  170.514051][T12586] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2891'.
[  170.517766][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2891'.
[  170.521800][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'.
[  170.531073][T12586] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.2891'.
[  170.537840][T12586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'.
[  170.542940][T12586] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2891'.
[  170.764141][T12608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2902'.
[  170.772691][T12608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2902'.
[  171.145091][T12646] netlink: 'syz.0.2920': attribute type 5 has an invalid length.
[  171.396999][T12677] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  171.400349][T12677] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  171.555550][T12689] netlink: 'syz.1.2935': attribute type 1 has an invalid length.
[  171.572130][T12689] bond2 (unregistering): Released all slaves
[  172.492827][T12720] netlink: 'syz.2.2948': attribute type 10 has an invalid length.
[  172.520942][T12720] team0: Port device geneve0 added
[  172.622962][T12734] syz.2.2956 (12734) used greatest stack depth: 18280 bytes left
[  172.797583][T12754] wireguard0: entered promiscuous mode
[  172.799436][T12754] wireguard0: entered allmulticast mode
[  173.872457][T12800] openvswitch: netlink: Flow key attr not present in new flow.
[  174.060454][T12817] __nla_validate_parse: 10 callbacks suppressed
[  174.060470][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'.
[  174.066660][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2995'.
[  174.084457][T12817] bridge0: port 1(vlan2) entered blocking state
[  174.088374][T12817] bridge0: port 1(vlan2) entered disabled state
[  174.093871][T12817] vlan2: entered allmulticast mode
[  174.096012][T12817] bridge0: entered allmulticast mode
[  174.102420][T12817] vlan2: left allmulticast mode
[  174.104377][T12817] bridge0: left allmulticast mode
[  174.857719][T12822] ipvlan2: entered promiscuous mode
[  174.864472][T12822] bridge0: port 1(ipvlan2) entered blocking state
[  174.867322][T12822] bridge0: port 1(ipvlan2) entered disabled state
[  174.877500][T12822] ipvlan2: entered allmulticast mode
[  174.880261][T12822] gretap0: entered allmulticast mode
[  174.883066][T12822] ipvlan2: left allmulticast mode
[  174.884984][T12822] gretap0: left allmulticast mode
[  175.275465][T12870] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3017'.
[  175.462607][T12883] "syz.2.3020" (12883) uses obsolete ecb(arc4) skcipher
[  175.810054][T12897] netlink: 'syz.2.3027': attribute type 1 has an invalid length.
[  175.853685][T12901] ip6erspan0: entered allmulticast mode
[  175.952326][T12911] netlink: zone id is out of range
[  175.954727][T12911] netlink: zone id is out of range
[  175.956958][T12911] netlink: set zone limit has 4 unknown bytes
[  175.994510][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3035'.
[  176.145222][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'.
[  176.913135][T12955] netlink: 'syz.2.3054': attribute type 1 has an invalid length.
[  176.916902][T12955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.034041][T12961] vlan2: entered promiscuous mode
[  177.036498][T12961] vlan2: entered allmulticast mode
[  177.041607][T12961] bond0: entered allmulticast mode
[  177.228100][T12977] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  177.471902][T12993] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3071'.
[  177.741041][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3080'.
[  178.001077][T13025] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3086'.
[  178.519338][T13054] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3100'.
[  178.558474][T13060] lo: entered allmulticast mode
[  178.560798][T13060] lo: left allmulticast mode
[  178.773785][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'.
[  178.986266][T13103] sctp: [Deprecated]: syz.2.3122 (pid 13103) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.986266][T13103] Use struct sctp_sack_info instead
[  179.639763][T13143] syz.0.3134 uses old SIOCAX25GETINFO
[  179.758321][T13149] bridge0: port 2(erspan0) entered blocking state
[  179.761759][T13149] bridge0: port 2(erspan0) entered disabled state
[  179.764044][T13149] erspan0: entered allmulticast mode
[  179.766758][T13149] erspan0: entered promiscuous mode
[  179.769997][T13149] erspan0: left allmulticast mode
[  179.771750][T13149] erspan0: left promiscuous mode
[  179.773576][T13149] bridge0: port 2(erspan0) entered disabled state
[  179.785972][T13151] vlan2: entered allmulticast mode
[  179.788192][T13151] veth1: entered allmulticast mode
[  179.859674][T13157] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  179.976537][T13172] netlink: 'syz.1.3147': attribute type 12 has an invalid length.
[  180.067469][T13178] syzkaller1: entered promiscuous mode
[  180.069980][T13178] syzkaller1: entered allmulticast mode
[  180.074074][T13178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3149'.
[  180.222623][T13190] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3153'.
[  180.226210][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3153'.
[  181.337519][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  181.829498][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'.
[  182.583101][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'.
[  183.063867][T13385] netlink: 'syz.0.3235': attribute type 142 has an invalid length.
[  183.119659][T13387] syzkaller0: entered promiscuous mode
[  183.121563][T13387] syzkaller0: entered allmulticast mode
[  184.171271][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'.
[  184.374544][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3256'.
[  184.507246][T13444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3263'.
[  184.735102][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3273'.
[  184.891164][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'.
[  184.941128][T13491] sit0: entered promiscuous mode
[  184.952227][T13491] netlink: 'syz.0.3282': attribute type 1 has an invalid length.
[  185.539701][T13513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.888673][ T5854] Bluetooth: hci1: command 0x080f tx timeout
[  185.989460][T13542] smc: net device bond0 applied user defined pnetid SYZ2
[  185.992734][T13542] __nla_validate_parse: 1 callbacks suppressed
[  185.992746][T13542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3305'.
[  186.067336][T13542] smc: removing net device bond0 with user defined pnetid SYZ2
[  186.071931][T13542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.075726][T13542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.081846][T13542] bond0 (unregistering): Released all slaves
[  186.312519][T13558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.316140][T13558] syzkaller0: entered promiscuous mode
[  186.318564][T13558] syzkaller0: entered allmulticast mode
[  186.340508][T13558] tipc: Resetting bearer <eth:syzkaller0>
[  186.344226][T13557] tipc: Resetting bearer <eth:syzkaller0>
[  186.371355][T13557] tipc: Disabling bearer <eth:syzkaller0>
[  186.492873][T13566] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  186.534555][T13568] sctp: [Deprecated]: syz.1.3316 (pid 13568) Use of int in max_burst socket option deprecated.
[  186.534555][T13568] Use struct sctp_assoc_value instead
[  187.289383][   T33] audit: type=1800 audit(1755222756.177:6): pid=13607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3332" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5359 res=0 errno=0
[  187.516918][T13631] sctp: [Deprecated]: syz.1.3344 (pid 13631) Use of int in maxseg socket option.
[  187.516918][T13631] Use struct sctp_assoc_value instead
[  187.763903][T13666] netlink: 'syz.1.3360': attribute type 1 has an invalid length.
[  188.547836][T13723] netlink: 724 bytes leftover after parsing attributes in process `syz.1.3383'.
[  188.552343][T13723] netlink: 724 bytes leftover after parsing attributes in process `syz.1.3383'.
[  188.710063][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'.
[  188.717299][T13733] macvtap1: entered promiscuous mode
[  188.721521][T13733] erspan0: entered promiscuous mode
[  188.723413][T13733] macvtap1: entered allmulticast mode
[  188.725107][T13733] erspan0: entered allmulticast mode
[  188.732258][T13733] erspan0: left allmulticast mode
[  188.733924][T13733] erspan0: left promiscuous mode
[  189.166374][T13768] raw_sendmsg: syz.0.3405 forgot to set AF_INET. Fix it!
[  189.234177][T13774] macsec1: entered promiscuous mode
[  189.556274][T13808] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[  189.777070][T13827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.782845][T13827] syzkaller0: entered promiscuous mode
[  189.785045][T13827] syzkaller0: entered allmulticast mode
[  189.802218][T13827] tipc: Resetting bearer <eth:syzkaller0>
[  189.805433][T13826] tipc: Resetting bearer <eth:syzkaller0>
[  189.819110][T13826] tipc: Disabling bearer <eth:syzkaller0>
[  189.914327][T13837] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3436'.
[  189.924123][T13837] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3436'.
[  189.948836][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'.
[  189.982744][T13842] netlink: 'syz.2.3438': attribute type 39 has an invalid length.
[  189.987582][T13842] veth0_macvtap: left promiscuous mode
[  190.123523][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'.
[  190.280369][T13860] netlink: 'syz.1.3445': attribute type 12 has an invalid length.
[  190.283712][T13860] netlink: 'syz.1.3445': attribute type 29 has an invalid length.
[  190.286922][T13860] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3445'.
[  190.291558][T13860] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3445'.
[  191.054924][T13894] batman_adv: batadv0: Adding interface: ip6gretap1
[  191.057134][T13894] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  191.066298][T13894] batman_adv: batadv0: Interface activated: ip6gretap1
[  191.135754][T13903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.139302][T13903] syzkaller0: entered promiscuous mode
[  191.141721][T13903] syzkaller0: entered allmulticast mode
[  191.220908][T13903] tipc: Resetting bearer <eth:syzkaller0>
[  191.226080][T13902] tipc: Resetting bearer <eth:syzkaller0>
[  191.236517][T13902] tipc: Disabling bearer <eth:syzkaller0>
[  191.516333][T13935] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.528376][T13935] bond0: (slave rose0): Enslaving as an active interface with an up link
[  192.375104][T13986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  192.378921][T13986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.392331][T13990] syz.1.3491: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  192.400326][T13990] CPU: 0 UID: 0 PID: 13990 Comm: syz.1.3491 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  192.400340][T13990] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.400346][T13990] Call Trace:
[  192.400350][T13990]  <TASK>
[  192.400354][T13990]  dump_stack_lvl+0x189/0x250
[  192.400372][T13990]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.400384][T13990]  ? __pfx__printk+0x10/0x10
[  192.400396][T13990]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  192.400407][T13990]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  192.400418][T13990]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  192.400430][T13990]  warn_alloc+0x214/0x310
[  192.400444][T13990]  ? stack_depot_save_flags+0x40/0x860
[  192.400455][T13990]  ? __pfx_warn_alloc+0x10/0x10
[  192.400469][T13990]  ? kasan_save_track+0x4f/0x80
[  192.400479][T13990]  ? xskq_create+0x56/0x170
[  192.400488][T13990]  ? xsk_init_queue+0xb0/0x110
[  192.400496][T13990]  ? xsk_setsockopt+0x4dc/0x8d0
[  192.400504][T13990]  ? do_sock_setsockopt+0x17c/0x1b0
[  192.400516][T13990]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  192.400527][T13990]  ? do_syscall_64+0xfa/0x3b0
[  192.400537][T13990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.400567][T13990]  __vmalloc_node_range_noprof+0x125/0x12f0
[  192.400594][T13990]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  192.400610][T13990]  ? __kasan_kmalloc+0x93/0xb0
[  192.400623][T13990]  vmalloc_user_noprof+0xad/0xf0
[  192.400635][T13990]  ? xskq_create+0xbf/0x170
[  192.400645][T13990]  xskq_create+0xbf/0x170
[  192.400655][T13990]  xsk_init_queue+0xb0/0x110
[  192.400672][T13990]  xsk_setsockopt+0x4dc/0x8d0
[  192.400683][T13990]  ? __pfx_xsk_setsockopt+0x10/0x10
[  192.400692][T13990]  ? __pfx_aa_sk_perm+0x10/0x10
[  192.400705][T13990]  ? aa_sock_opt_perm+0xff/0x1b0
[  192.400719][T13990]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  192.400729][T13990]  ? __pfx_xsk_setsockopt+0x10/0x10
[  192.400739][T13990]  do_sock_setsockopt+0x17c/0x1b0
[  192.400753][T13990]  __x64_sys_setsockopt+0x13f/0x1b0
[  192.400767][T13990]  do_syscall_64+0xfa/0x3b0
[  192.400777][T13990]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.400787][T13990]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.400795][T13990]  ? exc_page_fault+0x9f/0xf0
[  192.400806][T13990]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.400814][T13990] RIP: 0033:0x7fcd1278ebe9
[  192.400823][T13990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.400831][T13990] RSP: 002b:00007fcd135f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  192.400839][T13990] RAX: ffffffffffffffda RBX: 00007fcd129b5fa0 RCX: 00007fcd1278ebe9
[  192.400846][T13990] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  192.400851][T13990] RBP: 00007fcd12811e19 R08: 0000000000000004 R09: 0000000000000000
[  192.400856][T13990] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.400861][T13990] R13: 00007fcd129b6038 R14: 00007fcd129b5fa0 R15: 00007ffc5880a118
[  192.400874][T13990]  </TASK>
[  192.401766][T13990] Mem-Info:
[  192.511867][T13990] active_anon:6144 inactive_anon:0 isolated_anon:0
[  192.511867][T13990]  active_file:966 inactive_file:38257 isolated_file:0
[  192.511867][T13990]  unevictable:1768 dirty:112 writeback:0
[  192.511867][T13990]  slab_reclaimable:9775 slab_unreclaimable:69105
[  192.511867][T13990]  mapped:18135 shmem:2466 pagetables:993
[  192.511867][T13990]  sec_pagetables:0 bounce:0
[  192.511867][T13990]  kernel_misc_reclaimable:0
[  192.511867][T13990]  free:279991 free_pcp:20221 free_cma:0
[  192.552830][T13990] Node 0 active_anon:17512kB inactive_anon:0kB active_file:1360kB inactive_file:20368kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26592kB dirty:108kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4700kB pagetables:2104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  192.575142][T13986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  192.579908][T13986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.588546][T13990] Node 1 active_anon:9648kB inactive_anon:0kB active_file:2504kB inactive_file:132660kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45948kB dirty:340kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6444kB pagetables:1732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  192.603022][T13990] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  192.613529][T13990] lowmem_reserve[]: 0 811 811 811 811
[  192.617945][T13990] Node 0 DMA32 free:341180kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18712kB inactive_anon:0kB active_file:1360kB inactive_file:20368kB unevictable:3536kB writepending:116kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:35364kB local_pcp:14144kB free_cma:0kB
[  192.632939][T13990] lowmem_reserve[]: 0 0 0 0 0
[  192.635105][T13990] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  192.652876][T13990] lowmem_reserve[]: 0 0 854 854 854
[  192.655168][T13990] Node 1 Normal free:304808kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9624kB inactive_anon:0kB active_file:2504kB inactive_file:132660kB unevictable:3536kB writepending:356kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43284kB local_pcp:23980kB free_cma:0kB
[  192.689842][T13986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  192.696065][T13990] lowmem_reserve[]: 0 0 0 0 0
[  192.698062][T13990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 
[  192.698146][T13986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.701810][T13990] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  192.707314][T13990] Node 0 DMA32: 919*4kB (UME) 62*8kB (UM) 155*16kB (UME) 237*32kB (UME) 162*64kB (UME) 157*128kB (UM) 78*256kB (UME) 12*512kB (UME) 4*1024kB (UM) 6*2048kB (UE) 62*4096kB (UM) = 341148kB
[  192.716071][T13990] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  192.721363][T13990] Node 1 Normal: 546*4kB (UME) 820*8kB (UME) 394*16kB (UM) 324*32kB (UME) 324*64kB (UME) 173*128kB (UME) 56*256kB (UM) 26*512kB (UM) 16*1024kB (UME) 4*2048kB (UM) 45*4096kB (UM) = 304840kB
[  192.727236][T13990] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.731550][T13990] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.735043][T13990] 41668 total pagecache pages
[  192.736566][T13990] 0 pages in swap cache
[  192.737870][T13990] Free swap  = 124996kB
[  192.740761][T13990] Total swap = 124996kB
[  192.742559][T13990] 786301 pages RAM
[  192.747121][T13990] 0 pages HighMem/MovableOnly
[  192.752836][T13990] 241320 pages reserved
[  192.754501][T13990] 0 pages cma reserved
[  192.794240][T13986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  192.798281][T13986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.927221][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  192.941249][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.964921][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  192.967371][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.983067][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  192.985702][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.003865][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  193.006444][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.043714][T14010] macsec1: entered promiscuous mode
[  193.046435][T14010] macsec1: entered allmulticast mode
[  193.317388][T14025] syzkaller0: entered promiscuous mode
[  193.325706][T14025] syzkaller0: entered allmulticast mode
[  193.489363][T14039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.644766][T14044] __nla_validate_parse: 3 callbacks suppressed
[  193.644778][T14044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3511'.
[  194.056057][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.701091][T14063] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  194.747221][T14067] netlink: 'syz.1.3522': attribute type 5 has an invalid length.
[  194.786928][T14074] netlink: 'syz.2.3525': attribute type 5 has an invalid length.
[  194.789795][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3525'.
[  195.012534][T14091] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.3533'.
[  195.015347][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3533'.
[  195.240931][T14106] ieee802154 phy1 wpan1: encryption failed: -22
[  196.418030][T14163] netlink: 'syz.2.3563': attribute type 6 has an invalid length.
[  197.633485][T14196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3577'.
[  197.636917][T14196] netlink: 'syz.0.3577': attribute type 6 has an invalid length.
[  197.644001][T14196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3577'.
[  197.921546][T14226] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3592'.
[  198.037195][T14242] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3600'.
[  198.284956][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3614'.
[  198.287873][T14276] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3614'.
[  198.524914][T14296] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  198.527993][T14296] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.936268][T14316] syzkaller1: entered promiscuous mode
[  198.940549][T14316] syzkaller1: entered allmulticast mode
[  201.316171][T14437] netlink: 'syz.2.3685': attribute type 8 has an invalid length.
[  201.397304][T14449] netlink: 'syz.2.3691': attribute type 16 has an invalid length.
[  201.401474][T14449] __nla_validate_parse: 2 callbacks suppressed
[  201.401483][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3691'.
[  201.468584][T14455] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3695'.
[  201.704804][T14481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.712954][T14480] tipc: Disabling bearer <eth:syzkaller0>
[  201.878729][T14499] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  202.069952][T14513] netlink: 'syz.2.3712': attribute type 15 has an invalid length.
[  202.193631][T14526] netlink: 'syz.0.3716': attribute type 1 has an invalid length.
[  202.981511][T14614] netlink: 'syz.2.3732': attribute type 1 has an invalid length.
[  202.990126][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3732'.
[  202.992927][T14614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3732'.
[  203.011281][T14614] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  203.014784][T14614] gretap2: entered promiscuous mode
[  203.069773][T14620] netlink: 'syz.2.3734': attribute type 5 has an invalid length.
[  203.135312][T14616] Set syz1 is full, maxelem 6117 reached
[  203.192918][T14629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3739'.
[  203.285756][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3747'.
[  203.420431][T14661] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3755'.
[  203.641280][T14688] netlink: 'syz.1.3767': attribute type 6 has an invalid length.
[  203.644551][T14688] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3767'.
[  203.693447][T14696] syzkaller1: entered promiscuous mode
[  203.696455][T14696] syzkaller1: entered allmulticast mode
[  204.066810][T14738] syzkaller1: entered promiscuous mode
[  204.071718][T14738] syzkaller1: entered allmulticast mode
[  204.246063][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3797'.
[  204.366913][T14769] netlink: 'syz.1.3802': attribute type 6 has an invalid length.
[  204.603767][T14790] netlink: 'syz.2.3810': attribute type 7 has an invalid length.
[  204.657415][T14793] netlink: 'syz.2.3811': attribute type 10 has an invalid length.
[  204.660714][T14793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3811'.
[  204.664192][T14793] dummy0: entered promiscuous mode
[  204.666057][T14793] dummy0: entered allmulticast mode
[  204.668826][T14793] bridge0: port 1(dummy0) entered blocking state
[  204.671510][T14793] bridge0: port 1(dummy0) entered disabled state
[  204.675644][T14793] bridge0: port 1(dummy0) entered blocking state
[  204.678433][T14793] bridge0: port 1(dummy0) entered forwarding state
[  206.388224][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  206.395727][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  206.399659][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  206.403194][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  206.923283][T14967] __nla_validate_parse: 6 callbacks suppressed
[  206.923294][T14967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3892'.
[  206.960834][T14968] IPVS: persistence engine module ip_vs_pe_ not found
[  207.219198][T14977] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3897'.
[  207.565560][T15003] validate_nla: 1 callbacks suppressed
[  207.565576][T15003] netlink: 'syz.0.3902': attribute type 41 has an invalid length.
[  207.721545][T15014] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3905'.
[  207.860594][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3910'.
[  207.884165][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3911'.
[  208.266828][T15073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3927'.
[  208.394123][T15089] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3934'.
[  208.403481][T15089] batadv_slave_1: entered promiscuous mode
[  208.445905][T15097] tipc: New replicast peer: 255.255.255.255
[  208.451910][T15097] tipc: Enabled bearer <udp:syz2>, priority 10
[  208.643221][T15111] bridge0: port 1(dummy0) entered disabled state
[  208.673848][T15111] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  208.679981][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3947'.
[  208.882584][T15132] gretap0: left allmulticast mode
[  208.884870][T15132] bridge0: port 3(gretap0) entered disabled state
[  208.895643][T15132] bridge_slave_0: left allmulticast mode
[  208.897454][T15132] bridge_slave_0: left promiscuous mode
[  208.899570][T15132] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.904987][T15132] team0: Port device team_slave_0 removed
[  208.911788][T15132] team0: Port device team_slave_1 removed
[  208.913780][T15132] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.916462][T15132] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.923468][T15132] team0: Port device batadv1 removed
[  208.926717][T15132] bond1: (slave ip6gretap1): Removing an active aggregator
[  208.930786][T15132] bond1: (slave ip6gretap1): Releasing backup interface
[  208.933605][T15132] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 76:0b:16:30:6f:7a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  208.942917][T15132] bond1: (slave veth3): Releasing backup interface
[  208.998956][T15144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3960'.
[  209.032942][T15148] netlink: 'syz.1.3962': attribute type 5 has an invalid length.
[  209.133008][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3967'.
[  209.414276][T15183] hsr_slave_0: left promiscuous mode
[  209.416601][T15183] hsr_slave_1: left promiscuous mode
[  209.438759][   T95] tipc: Node number set to 1046333115
[  210.093481][T15217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.096682][T15217] IPv6: NLM_F_CREATE should be set when creating new route
[  210.099742][T15217] IPv6: NLM_F_CREATE should be set when creating new route
[  210.238918][T15231] pimreg: entered allmulticast mode
[  210.276540][T15235] lo speed is unknown, defaulting to 1000
[  210.278830][T15235] lo speed is unknown, defaulting to 1000
[  210.281260][T15235] lo speed is unknown, defaulting to 1000
[  210.292899][T15235] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  210.314783][T15235] lo speed is unknown, defaulting to 1000
[  210.317772][T15235] lo speed is unknown, defaulting to 1000
[  210.331793][T15235] lo speed is unknown, defaulting to 1000
[  211.066334][T15277] netlink: 'syz.2.4013': attribute type 1 has an invalid length.
[  211.567175][T15304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.570646][T15304] syzkaller0: entered promiscuous mode
[  211.573017][T15304] syzkaller0: entered allmulticast mode
[  211.588976][T15304] tipc: Resetting bearer <eth:syzkaller0>
[  211.591475][T15304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.596024][T15303] tipc: Resetting bearer <eth:syzkaller0>
[  211.607758][T15303] tipc: Disabling bearer <eth:syzkaller0>
[  211.831329][T15316] IPVS: Unknown mcast interface: veth1_to_bridge
[  211.834537][T15316] IPVS: stopping backup sync thread 12450 ...
[  211.917629][T15320] netlink: 'syz.1.4033': attribute type 29 has an invalid length.
[  211.922454][T15320] netlink: 'syz.1.4033': attribute type 29 has an invalid length.
[  212.096111][T15336] __nla_validate_parse: 4 callbacks suppressed
[  212.096121][T15336] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4040'.
[  212.240724][T15349] netlink: 566 bytes leftover after parsing attributes in process `syz.1.4046'.
[  212.281773][T15355] openvswitch: netlink: IP tunnel dst address not specified
[  212.457793][T15375] netlink: 'syz.0.4059': attribute type 3 has an invalid length.
[  212.646286][T15393] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4068'.
[  213.795453][T15428] netlink: 'syz.1.4081': attribute type 4 has an invalid length.
[  213.892011][T15433] sock: sock_timestamping_bind_phc: sock not bind to device
[  214.659932][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'.
[  215.230379][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4122'.
[  215.233371][T15522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4122'.
[  215.242752][T15522] bridge0: entered promiscuous mode
[  215.245509][T15522] ip6gretap0: entered promiscuous mode
[  215.252423][T15522] hsr2: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  215.255777][T15522] hsr2: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  215.565832][T15544] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.4132'.
[  215.898952][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4135'.
[  215.901816][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4135'.
[  215.905563][T15562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.144253][T15579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4142'.
[  216.451176][T15609] netlink: 'syz.1.4147': attribute type 1 has an invalid length.
[  216.570815][T15616] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  216.573947][T15616] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  216.676411][T15622] tipc: Failed to remove unknown binding: 66,1,1/0:259549734/259549736
[  216.681216][T15622] tipc: Failed to remove unknown binding: 66,1,1/0:259549734/259549736
[  216.684904][T15622] tipc: Failed to remove unknown binding: 66,1,1/0:259549734/259549736
[  217.297358][T15652] netlink: 'syz.0.4170': attribute type 4 has an invalid length.
[  217.360270][T15656] __nla_validate_parse: 1 callbacks suppressed
[  217.360281][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'.
[  217.607741][T15678] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  217.734608][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4189'.
[  217.738061][T15691] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4189'.
[  217.743372][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4189'.
[  217.803965][T15691] bridge0: port 1(dummy0) entered disabled state
[  217.820409][T15691] team0: Port device geneve0 removed
[  217.828246][T15691] bond1: (slave gretap1): Releasing active interface
[  217.835411][T15691] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  217.848507][T15691] batman_adv: batadv0: Removing interface: ip6gretap1
[  217.887181][T15691] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  217.897707][T15705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4194'.
[  218.095543][T15727] netlink: 'syz.0.4203': attribute type 1 has an invalid length.
[  219.480111][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4230'.
[  219.656973][   T33] audit: type=1800 audit(1755222788.537:7): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4231" name="memory.events" dev="tmpfs" ino=6786 res=0 errno=0
[  219.747924][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4238'.
[  219.752082][T15822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4238'.
[  220.164437][T15879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4261'.
[  220.248727][   T33] audit: type=1804 audit(1755222789.127:8): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4266" name="/newroot/1576/memory.events" dev="tmpfs" ino=7973 res=1 errno=0
[  220.256086][   T33] audit: type=1800 audit(1755222789.127:9): pid=15889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4266" name="memory.events" dev="tmpfs" ino=7973 res=0 errno=0
[  220.284200][T15893] netlink: 'syz.0.4268': attribute type 15 has an invalid length.
[  220.296942][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4270'.
[  220.642818][T15934] : renamed from bond_slave_0
[  221.285885][T15946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.487605][T15957] netlink: 'syz.0.4298': attribute type 3 has an invalid length.
[  221.561347][T15963] rdma_op ffff8880262389f0 conn xmit_rdma 0000000000000000
[  222.423223][T16039] __nla_validate_parse: 4 callbacks suppressed
[  222.423238][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4336'.
[  222.436023][T16039] vlan4: entered promiscuous mode
[  222.525322][T16045] netlink: 'syz.2.4339': attribute type 3 has an invalid length.
[  222.539438][T16047] !: renamed from dummy0
[  222.584266][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4342'.
[  222.612032][T16055] netlink: 'syz.2.4343': attribute type 1 has an invalid length.
[  222.752451][T16063] lo speed is unknown, defaulting to 1000
[  222.767802][T16070] bridge0: entered allmulticast mode
[  222.805540][T16070] pim6reg: entered allmulticast mode
[  222.913992][T16080] _Z`Ԁ@: entered promiscuous mode
[  222.944007][T16080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4347'.
[  222.972557][T16080] netlink: 'syz.2.4347': attribute type 4 has an invalid length.
[  222.990293][T16080] netlink: 'syz.2.4347': attribute type 4 has an invalid length.
[  223.010740][T16080] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4347'.
[  223.322228][T16100] bridge_slave_0: default FDB implementation only supports local addresses
[  225.844373][T16228] netlink: 'syz.1.4411': attribute type 32 has an invalid length.
[  225.931448][T16239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4417'.
[  226.111144][T16259] lo speed is unknown, defaulting to 1000
[  226.339675][T16279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  226.455196][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4439'.
[  226.497168][T16291] smc: adding net device bond0 with user defined pnetid SYZ2
[  226.736441][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'.
[  226.744500][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'.
[  226.747522][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4449'.
[  226.880919][T16329] lo speed is unknown, defaulting to 1000
[  226.964656][T16337] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4455'.
[  227.439534][T16329] netlink: 'syz.0.4454': attribute type 6 has an invalid length.
[  227.570844][T16383] __nla_validate_parse: 2 callbacks suppressed
[  227.570855][T16383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4474'.
[  228.072717][T16431] sctp: [Deprecated]: syz.1.4494 (pid 16431) Use of int in max_burst socket option.
[  228.072717][T16431] Use struct sctp_assoc_value instead
[  228.385766][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4508'.
[  228.585725][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4517'.
[  228.589311][T16484] netlink: 'syz.0.4516': attribute type 2 has an invalid length.
[  228.591914][T16484] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4516'.
[  228.682903][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4521'.
[  228.855361][T16513] atomic_op ffff88810abd4198 conn xmit_atomic 0000000000000000
[  228.997686][T16529] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4538'.
[  229.013332][   T33] audit: type=1804 audit(1755222797.897:10): pid=16531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4539" name="/newroot/1412/cgroup.controllers" dev="tmpfs" ino=7125 res=1 errno=0
[  229.023934][T16533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4540'.
[  229.033844][   T33] audit: type=1800 audit(1755222797.897:11): pid=16531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4539" name="cgroup.controllers" dev="tmpfs" ino=7125 res=0 errno=0
[  229.223049][T16557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4551'.
[  229.241842][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4552'.
[  229.715982][T16592] netlink: 'syz.1.4568': attribute type 1 has an invalid length.
[  229.720176][T16592] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4568'.
[  229.976788][T16603] openvswitch: netlink: Flow key attr not present in new flow.
[  231.962230][T16682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.965487][T16682] syzkaller0: entered promiscuous mode
[  231.967608][T16682] syzkaller0: entered allmulticast mode
[  231.989355][T16682] tipc: Resetting bearer <eth:syzkaller0>
[  231.993618][T16681] tipc: Resetting bearer <eth:syzkaller0>
[  232.011693][T16681] tipc: Disabling bearer <eth:syzkaller0>
[  232.269946][T16695] netlink: 'syz.0.4613': attribute type 303 has an invalid length.
[  232.275679][T16695] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  232.284212][T16695] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  232.297374][T16708] netlink: 'syz.1.4620': attribute type 3 has an invalid length.
[  233.034460][T16739] __nla_validate_parse: 8 callbacks suppressed
[  233.034472][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4632'.
[  233.040720][T16739] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  233.043159][T16739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.224062][T16760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  233.227185][T16760] syzkaller0: entered promiscuous mode
[  233.232851][T16760] syzkaller0: entered allmulticast mode
[  233.255712][T16760] tipc: Resetting bearer <eth:syzkaller0>
[  233.260614][T16759] tipc: Resetting bearer <eth:syzkaller0>
[  233.273299][T16759] tipc: Disabling bearer <eth:syzkaller0>
[  234.101925][T16828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.104637][T16828] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  234.106957][T16828] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  234.112087][T16828] tipc: Resetting bearer <eth:syzkaller0>
[  234.202366][T16774] Bluetooth: hci1: Opcode 0x080f failed: -4
[  234.721036][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4707'.
[  234.726157][T16895] netlink: 'syz.2.4704': attribute type 10 has an invalid length.
[  234.738207][T16895] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  234.763245][T16905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4708'.
[  234.843949][T16913] netlink: 'syz.2.4712': attribute type 11 has an invalid length.
[  235.045124][T16936] ip6gre1: entered allmulticast mode
[  235.408648][ T5849] Bluetooth: hci1: command 0x080f tx timeout
[  235.463411][T16963] nbd: device at index 1 is going down
[  235.523319][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4738'.
[  235.847981][T16992] netlink: 'syz.0.4747': attribute type 20 has an invalid length.
[  236.054227][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4759'.
[  236.286120][T17045] netlink: 'syz.2.4771': attribute type 2 has an invalid length.
[  236.302580][T17045] : entered promiscuous mode
[  236.335958][T17051] xfrm1: entered allmulticast mode
[  236.513089][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4783'.
[  236.515894][T17072] IPVS: Unknown mcast interface: vcan0
[  236.534753][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4785'.
[  236.547129][T17073] vlan2: entered promiscuous mode
[  236.550511][T17073] team0: entered promiscuous mode
[  236.580803][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4787'.
[  236.650980][T17088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.902218][T17120] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  237.161489][T17147] bridge5: entered allmulticast mode
[  237.411699][T17166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4828'.
[  237.771816][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4844'.
[  238.431846][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4855'.
[  238.437781][T17225] tipc: Enabling <ib:lo> not permitted
[  238.440776][T17225] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  238.910669][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4861'.
[  238.913691][T17241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4861'.
[  238.916584][T17241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4861'.
[  239.002269][T17249] netlink: 'syz.1.4865': attribute type 1 has an invalid length.
[  239.455915][T17269] netlink: 'syz.2.4873': attribute type 8 has an invalid length.
[  239.777253][T17281] lo speed is unknown, defaulting to 1000
[  240.036868][T17295] netlink: 'syz.2.4882': attribute type 13 has an invalid length.
[  240.039572][T17295] netlink: 'syz.2.4882': attribute type 17 has an invalid length.
[  240.042188][T17295] netlink: 'syz.2.4882': attribute type 27 has an invalid length.
[  240.120029][T17299] netlink: 'syz.1.4884': attribute type 5 has an invalid length.
[  240.812478][T17354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.815554][T17354] syzkaller0: entered promiscuous mode
[  240.818781][T17354] syzkaller0: entered allmulticast mode
[  240.846323][T17354] tipc: Resetting bearer <eth:syzkaller0>
[  240.850317][T17352] tipc: Resetting bearer <eth:syzkaller0>
[  240.865988][T17352] tipc: Disabling bearer <eth:syzkaller0>
[  240.872467][T17357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4905'.
[  242.632129][T17476] netlink: 'syz.2.4962': attribute type 1 has an invalid length.
[  242.634606][T17476] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4962'.
[  243.297133][T17508] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4974'.
[  243.644015][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4988'.
[  243.725255][T17541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4991'.
[  244.965078][T17601] netlink: 'syz.0.5019': attribute type 1 has an invalid length.
[  245.288240][T17633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5034'.
[  246.088013][T17662] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  246.369008][   T55] Bluetooth: hci2: command 0x0401 tx timeout
[  246.612289][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5069'.
[  247.261145][T17741] lo speed is unknown, defaulting to 1000
[  247.755413][T17788] lo speed is unknown, defaulting to 1000
[  248.078129][T17824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5115'.
[  248.097365][T17824] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  248.139230][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5119'.
[  248.193843][T17840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.236047][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5126'.
[  248.240419][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5126'.
[  250.154755][T17984] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5191'.
[  250.245942][T17992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.251717][T17992] syzkaller0: entered promiscuous mode
[  250.254063][T17992] syzkaller0: entered allmulticast mode
[  250.275727][T17992] tipc: Resetting bearer <eth:syzkaller0>
[  250.284339][T17991] tipc: Resetting bearer <eth:syzkaller0>
[  250.300294][T17991] tipc: Disabling bearer <eth:syzkaller0>
[  251.589339][T18077] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0
[  251.874128][T18113] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5249'.
[  251.889338][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5249'.
[  251.930227][T18113] tipc: Disabling bearer <eth:macvtap0>
[  252.003628][T18126] netlink: 'syz.2.5254': attribute type 10 has an invalid length.
[  252.999509][T18145] lo speed is unknown, defaulting to 1000
[  253.001655][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5261'.
[  253.042816][T18151] netlink: 'syz.1.5267': attribute type 13 has an invalid length.
[  253.055482][T18151] netlink: 'syz.1.5267': attribute type 17 has an invalid length.
[  253.103915][T18151] 8021q: adding VLAN 0 to HW filter on device team0
[  253.108781][T18151] tipc: Resetting bearer <eth:team0>
[  253.111471][T18151] tipc: Resetting bearer <eth:team0>
[  253.114310][T18151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.169087][T18151] veth1_vlan: left promiscuous mode
[  253.171834][T18151] veth0_vlan: left promiscuous mode
[  253.174034][T18151] veth0_vlan: entered promiscuous mode
[  253.177928][T18151] veth1_vlan: entered promiscuous mode
[  253.187892][T18151] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  253.220678][T18151] 8021q: adding VLAN 0 to HW filter on device batadv1
[  253.229604][T18151] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  253.232826][T18151] 8021q: adding VLAN 0 to HW filter on device bond1
[  253.309684][T18151] 8021q: adding VLAN 0 to HW filter on device batadv2
[  253.312779][T18151] erspan0: entered promiscuous mode
[  253.314592][T18151] erspan0: entered allmulticast mode
[  253.316319][T18151] macvtap1: left promiscuous mode
[  253.317959][T18151] macvtap1: left allmulticast mode
[  253.319639][T18151] erspan0: left allmulticast mode
[  253.333677][T18151] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.358954][   T10] lo speed is unknown, defaulting to 1000
[  253.361070][   T10] syz2: Port: 1 Link ACTIVE
[  253.389040][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  253.391715][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.394495][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  253.397435][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  253.403375][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.407197][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  253.413838][ T5912] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  253.417030][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  253.420394][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.423647][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  253.467956][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.470831][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.473451][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  254.045947][T18209] lo speed is unknown, defaulting to 1000
[  254.237222][T18220] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5292'.
[  254.384422][T18238] lo speed is unknown, defaulting to 1000
[  254.546787][T18259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5308'.
[  254.551108][T18259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5308'.
[  254.554209][T18259] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5308'.
[  255.491909][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.240474][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5361'.
[  256.740749][T18433] netdevsim0: mtu less than device minimum
[  256.811726][T18443] bridge0: port 1(erspan0) entered blocking state
[  256.813793][T18443] bridge0: port 1(erspan0) entered disabled state
[  256.815973][T18443] erspan0: entered allmulticast mode
[  256.819420][T18443] erspan0: left allmulticast mode
[  256.863058][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5395'.
[  257.174557][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  257.176905][   T55] Bluetooth: hci2: command 0x0401 tx timeout
[  257.578984][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  258.176758][T18517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.181442][T18517] batadv0: entered promiscuous mode
[  258.184029][T18517] team0: Port device batadv0 added
[  258.440683][T18543] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5436'.
[  258.443814][T18543] netlink: 'syz.0.5436': attribute type 1 has an invalid length.
[  258.887704][T18573] netlink: 'syz.0.5450': attribute type 7 has an invalid length.
[  258.891885][T18573] netlink: 'syz.0.5450': attribute type 8 has an invalid length.
[  259.983113][T18609] ..@: renamed from bond_slave_0 (while UP)
[  260.142516][T18629] netlink: 'syz.2.5478': attribute type 1 has an invalid length.
[  260.677227][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5508'.
[  260.710529][T18698] hsr_slave_1 (unregistering): left promiscuous mode
[  260.996664][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5519'.
[  261.103830][T18727] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5523'.
[  262.068001][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5550'.
[  262.400915][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5562'.
[  262.625561][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5571'.
[  262.630059][T18836] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  262.635235][T18836] tipc: Enabled bearer <udp:syz1>, priority 10
[  263.363123][T18873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5589'.
[  264.640709][T18916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5608'.
[  264.668299][T18918] IPv6: NLM_F_CREATE should be specified when creating new route
[  264.882907][T18937] IPv6: NLM_F_CREATE should be specified when creating new route
[  264.995493][T18951] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.999086][T18951] syzkaller0: entered promiscuous mode
[  265.001145][T18951] syzkaller0: entered allmulticast mode
[  265.020322][T18951] tipc: Resetting bearer <eth:syzkaller0>
[  265.024850][T18950] tipc: Resetting bearer <eth:syzkaller0>
[  265.042711][T18950] tipc: Disabling bearer <eth:syzkaller0>
[  265.127685][T18963] IPv6: NLM_F_CREATE should be specified when creating new route
[  265.131745][T18963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.134516][T18963] IPv6: NLM_F_CREATE should be set when creating new route
[  265.155536][T18965] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  265.344953][T18978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5637'.
[  265.627520][T19004] netlink: 'syz.1.5647': attribute type 3 has an invalid length.
[  265.728770][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  265.996088][T19038] lo speed is unknown, defaulting to 1000
[  266.115873][T19046] lo speed is unknown, defaulting to 1000
[  266.276908][T19068] lo speed is unknown, defaulting to 1000
[  268.229524][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5725'.
[  268.361986][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5731'.
[  268.403749][T19203] tipc: New replicast peer: 255.127.0.0
[  268.405722][T19203] tipc: Enabled bearer <udp:s>, priority 10
[  269.084126][T19227] netlink: 'syz.1.5744': attribute type 1 has an invalid length.
[  269.086577][T19227] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5744'.
[  269.381919][T19241] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.386542][T19243] netlink: 'syz.0.5752': attribute type 1 has an invalid length.
[  269.398793][   T10] tipc: Node number set to 3491415655
[  269.587624][T19259] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5763'.
[  269.595067][T19259] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5763'.
[  270.341225][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5766'.
[  270.344218][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5766'.
[  270.346982][T19275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5766'.
[  270.360834][T19276] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5764'.
[  270.493332][T19291] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  270.496708][T19291] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  271.583286][T19327] netlink: 'syz.2.5787': attribute type 1 has an invalid length.
[  271.975874][T19355] netlink: 'syz.0.5801': attribute type 282 has an invalid length.
[  272.055349][T19367] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5806'.
[  272.068146][T19369] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  272.073458][T19369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.161507][T19379] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  273.021772][T19403] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  273.341274][T19429] __nla_validate_parse: 2 callbacks suppressed
[  273.341286][T19429] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5837'.
[  273.985534][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5860'.
[  274.132125][T19493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5866'.
[  274.135653][T19493] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5866'.
[  274.141908][T19493] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5866'.
[  274.641617][T19536] lo speed is unknown, defaulting to 1000
[  275.031848][T19580] lo speed is unknown, defaulting to 1000
[  275.570576][T19616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.573566][T19616] syzkaller0: entered promiscuous mode
[  275.575300][T19616] syzkaller0: entered allmulticast mode
[  275.593123][T19616] tipc: Resetting bearer <eth:syzkaller0>
[  275.599051][T19612] tipc: Resetting bearer <eth:syzkaller0>
[  275.613096][T19612] tipc: Disabling bearer <eth:syzkaller0>
[  275.712694][T19624] lo speed is unknown, defaulting to 1000
[  276.200725][T19643] ieee802154 phy1 wpan1: encryption failed: -22
[  276.485748][T19655] lo speed is unknown, defaulting to 1000
[  276.876132][T19686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5943'.
[  276.998673][T19698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5949'.
[  277.003076][T19698] veth1_macvtap: left promiscuous mode
[  278.126098][T19719] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  278.465922][T19750] ==================================================================
[  278.469101][T19750] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  278.471920][T19750] Read of size 4 at addr ffff888021cb8544 by task syz.1.5974/19750
[  278.472762][T19752] netlink: 384 bytes leftover after parsing attributes in process `syz.0.5976'.
[  278.475519][T19750] 
[  278.475532][T19750] CPU: 1 UID: 0 PID: 19750 Comm: syz.1.5974 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  278.475554][T19750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.475564][T19750] Call Trace:
[  278.475571][T19750]  <TASK>
[  278.475578][T19750]  dump_stack_lvl+0x189/0x250
[  278.475601][T19750]  ? __kasan_check_byte+0x12/0x40
[  278.475624][T19750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.475936][T19750]  ? lock_release+0x4b/0x3e0
[  278.475964][T19750]  ? __virt_addr_valid+0x4a5/0x5c0
[  278.475984][T19750]  print_report+0xca/0x240
[  278.475998][T19750]  ? xfrm_alloc_spi+0x570/0xf30
[  278.476011][T19750]  kasan_report+0x118/0x150
[  278.476033][T19750]  ? xfrm_alloc_spi+0x570/0xf30
[  278.476049][T19750]  xfrm_alloc_spi+0x570/0xf30
[  278.476062][T19750]  ? xfrm_alloc_spi+0x2a0/0xf30
[  278.476081][T19750]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  278.476103][T19750]  ? xfrm_find_acq+0x87/0xa0
[  278.476126][T19750]  xfrm_alloc_userspi+0x70b/0xc90
[  278.476144][T19750]  ? apparmor_capable+0x137/0x1b0
[  278.476158][T19750]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  278.476175][T19750]  ? __nla_parse+0x40/0x60
[  278.476223][T19750]  xfrm_user_rcv_msg+0x7a3/0xab0
[  278.476241][T19750]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  278.476267][T19750]  ? __pfx___mutex_trylock_common+0x10/0x10
[  278.476283][T19750]  ? rcu_is_watching+0x15/0xb0
[  278.476298][T19750]  ? trace_contention_end+0x39/0x120
[  278.476314][T19750]  ? __mutex_lock+0x335/0x1360
[  278.476332][T19750]  netlink_rcv_skb+0x208/0x470
[  278.476346][T19750]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  278.476361][T19750]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  278.476385][T19750]  ? netlink_deliver_tap+0x2e/0x1b0
[  278.476400][T19750]  ? netlink_deliver_tap+0x2e/0x1b0
[  278.476416][T19750]  xfrm_netlink_rcv+0x79/0x90
[  278.476429][T19750]  netlink_unicast+0x82f/0x9e0
[  278.476448][T19750]  ? __pfx_netlink_unicast+0x10/0x10
[  278.476465][T19750]  ? netlink_sendmsg+0x642/0xb30
[  278.476482][T19750]  ? skb_put+0x11b/0x210
[  278.476502][T19750]  netlink_sendmsg+0x805/0xb30
[  278.476524][T19750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.476543][T19750]  ? aa_sock_msg_perm+0xf1/0x1d0
[  278.476564][T19750]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  278.476580][T19750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.476599][T19750]  __sock_sendmsg+0x21c/0x270
[  278.476615][T19750]  ____sys_sendmsg+0x505/0x830
[  278.476636][T19750]  ? __pfx_____sys_sendmsg+0x10/0x10
[  278.476661][T19750]  ? import_iovec+0x74/0xa0
[  278.476675][T19750]  ___sys_sendmsg+0x21f/0x2a0
[  278.476694][T19750]  ? __pfx____sys_sendmsg+0x10/0x10
[  278.476726][T19750]  ? __fget_files+0x2a/0x420
[  278.476744][T19750]  ? __fget_files+0x3a0/0x420
[  278.476768][T19750]  __x64_sys_sendmsg+0x19b/0x260
[  278.476790][T19750]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  278.476818][T19750]  ? do_syscall_64+0xbe/0x3b0
[  278.476839][T19750]  do_syscall_64+0xfa/0x3b0
[  278.476858][T19750]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.476874][T19750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.476889][T19750]  ? exc_page_fault+0x9f/0xf0
[  278.476907][T19750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.476929][T19750] RIP: 0033:0x7fcd1278ebe9
[  278.476944][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.476959][T19750] RSP: 002b:00007fcd135f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.476976][T19750] RAX: ffffffffffffffda RBX: 00007fcd129b5fa0 RCX: 00007fcd1278ebe9
[  278.476988][T19750] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[  278.476996][T19750] RBP: 00007fcd12811e19 R08: 0000000000000000 R09: 0000000000000000
[  278.477004][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.477012][T19750] R13: 00007fcd129b6038 R14: 00007fcd129b5fa0 R15: 00007ffc5880a118
[  278.477029][T19750]  </TASK>
[  278.477034][T19750] 
[  278.500645][T19754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5977'.
[  278.501039][T19750] The buggy address belongs to the physical page:
[  278.633139][T19750] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021cb8000 pfn:0x21cb8
[  278.637058][T19750] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  278.639868][T19750] page_type: f0(buddy)
[  278.641526][T19750] raw: 00fff00000000000 ffffea0000e50608 ffffea0000c86208 0000000000000000
[  278.644863][T19750] raw: ffff888021cb8000 0000000000000002 00000000f0000000 0000000000000000
[  278.648203][T19750] page dumped because: kasan: bad access detected
[  278.650675][T19750] page_owner tracks the page as freed
[  278.652786][T19750] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 19100, tgid 19099 (syz.0.5688), ts 266650729716, free_ts 267587433574
[  278.658915][T19750]  post_alloc_hook+0x240/0x2a0
[  278.660837][T19750]  get_page_from_freelist+0x21e4/0x22c0
[  278.663015][T19750]  __alloc_frozen_pages_noprof+0x181/0x370
[  278.665272][T19750]  alloc_pages_bulk_noprof+0x560/0x710
[  278.667425][T19750]  kasan_populate_vmalloc+0xba/0x1a0
[  278.669527][T19750]  alloc_vmap_area+0xd51/0x1490
[  278.671467][T19750]  __get_vm_area_node+0x1f8/0x300
[  278.673481][T19750]  __vmalloc_node_range_noprof+0x301/0x12f0
[  278.675809][T19750]  bpf_map_area_alloc+0x12d/0x180
[  278.677818][T19750]  bloom_map_alloc+0x22f/0x470
[  278.679732][T19750]  map_create+0xaa3/0x14d0
[  278.681479][T19750]  __sys_bpf+0x60f/0x870
[  278.683202][T19750]  __x64_sys_bpf+0x7c/0x90
[  278.685001][T19750]  do_syscall_64+0xfa/0x3b0
[  278.686884][T19750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.689329][T19750] page last free pid 10 tgid 10 stack trace:
[  278.691696][T19750]  __free_frozen_pages+0xbc4/0xd30
[  278.693750][T19750]  kasan_depopulate_vmalloc_pte+0x74/0xa0
[  278.696035][T19750]  __apply_to_page_range+0xb92/0x1380
[  278.698230][T19750]  kasan_release_vmalloc+0xa2/0xd0
[  278.700293][T19750]  purge_vmap_node+0x214/0x8f0
[  278.702200][T19750]  __purge_vmap_area_lazy+0x7a4/0xb40
[  278.704358][T19750]  drain_vmap_area_work+0x27/0x40
[  278.706358][T19750]  process_scheduled_works+0xae1/0x17b0
[  278.708535][T19750]  worker_thread+0x8a0/0xda0
[  278.710346][T19750]  kthread+0x711/0x8a0
[  278.711973][T19750]  ret_from_fork+0x3fc/0x770
[  278.713828][T19750]  ret_from_fork_asm+0x1a/0x30
[  278.715715][T19750] 
[  278.716672][T19750] Memory state around the buggy address:
[  278.718886][T19750]  ffff888021cb8400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  278.722040][T19750]  ffff888021cb8480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  278.725221][T19750] >ffff888021cb8500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  278.728324][T19750]                                            ^
[  278.730733][T19750]  ffff888021cb8580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  278.733867][T19750]  ffff888021cb8600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  278.736952][T19750] ==================================================================
[  278.740420][T19750] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  278.743281][T19750] CPU: 1 UID: 0 PID: 19750 Comm: syz.1.5974 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  278.748116][T19750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.752020][T19750] Call Trace:
[  278.753355][T19750]  <TASK>
[  278.754537][T19750]  dump_stack_lvl+0x99/0x250
[  278.756427][T19750]  ? __asan_memcpy+0x40/0x70
[  278.758342][T19750]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.760463][T19750]  ? __pfx__printk+0x10/0x10
[  278.762357][T19750]  vpanic+0x281/0x750
[  278.763964][T19750]  ? __pfx_vpanic+0x10/0x10
[  278.765784][T19750]  ? irqentry_exit+0x74/0x90
[  278.767628][T19750]  panic+0xb9/0xc0
[  278.769096][T19750]  ? __pfx_panic+0x10/0x10
[  278.770848][T19750]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  278.773243][T19750]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  278.775577][T19750]  ? xfrm_alloc_spi+0x570/0xf30
[  278.777510][T19750]  check_panic_on_warn+0x89/0xb0
[  278.779517][T19750]  ? xfrm_alloc_spi+0x570/0xf30
[  278.781461][T19750]  end_report+0x78/0x160
[  278.783188][T19750]  kasan_report+0x129/0x150
[  278.785007][T19750]  ? xfrm_alloc_spi+0x570/0xf30
[  278.786932][T19750]  xfrm_alloc_spi+0x570/0xf30
[  278.788813][T19750]  ? xfrm_alloc_spi+0x2a0/0xf30
[  278.790786][T19750]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  278.792863][T19750]  ? xfrm_find_acq+0x87/0xa0
[  278.794749][T19750]  xfrm_alloc_userspi+0x70b/0xc90
[  278.796752][T19750]  ? apparmor_capable+0x137/0x1b0
[  278.798747][T19750]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  278.800902][T19750]  ? __nla_parse+0x40/0x60
[  278.802692][T19750]  xfrm_user_rcv_msg+0x7a3/0xab0
[  278.804694][T19750]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  278.806910][T19750]  ? __pfx___mutex_trylock_common+0x10/0x10
[  278.809301][T19750]  ? rcu_is_watching+0x15/0xb0
[  278.811189][T19750]  ? trace_contention_end+0x39/0x120
[  278.813288][T19750]  ? __mutex_lock+0x335/0x1360
[  278.815185][T19750]  netlink_rcv_skb+0x208/0x470
[  278.817105][T19750]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  278.819320][T19750]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  278.821463][T19750]  ? netlink_deliver_tap+0x2e/0x1b0
[  278.823553][T19750]  ? netlink_deliver_tap+0x2e/0x1b0
[  278.825582][T19750]  xfrm_netlink_rcv+0x79/0x90
[  278.827429][T19750]  netlink_unicast+0x82f/0x9e0
[  278.829339][T19750]  ? __pfx_netlink_unicast+0x10/0x10
[  278.831428][T19750]  ? netlink_sendmsg+0x642/0xb30
[  278.833442][T19750]  ? skb_put+0x11b/0x210
[  278.835127][T19750]  netlink_sendmsg+0x805/0xb30
[  278.837023][T19750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.839116][T19750]  ? aa_sock_msg_perm+0xf1/0x1d0
[  278.841117][T19750]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  278.843228][T19750]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.845296][T19750]  __sock_sendmsg+0x21c/0x270
[  278.847147][T19750]  ____sys_sendmsg+0x505/0x830
[  278.849075][T19750]  ? __pfx_____sys_sendmsg+0x10/0x10
[  278.851223][T19750]  ? import_iovec+0x74/0xa0
[  278.853046][T19750]  ___sys_sendmsg+0x21f/0x2a0
[  278.854924][T19750]  ? __pfx____sys_sendmsg+0x10/0x10
[  278.856989][T19750]  ? __fget_files+0x2a/0x420
[  278.858859][T19750]  ? __fget_files+0x3a0/0x420
[  278.860722][T19750]  __x64_sys_sendmsg+0x19b/0x260
[  278.862694][T19750]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  278.864836][T19750]  ? do_syscall_64+0xbe/0x3b0
[  278.866754][T19750]  do_syscall_64+0xfa/0x3b0
[  278.868605][T19750]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.870701][T19750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.873072][T19750]  ? exc_page_fault+0x9f/0xf0
[  278.874966][T19750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.877333][T19750] RIP: 0033:0x7fcd1278ebe9
[  278.879171][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  278.886766][T19750] RSP: 002b:00007fcd135f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.890008][T19750] RAX: ffffffffffffffda RBX: 00007fcd129b5fa0 RCX: 00007fcd1278ebe9
[  278.893101][T19750] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003
[  278.896287][T19750] RBP: 00007fcd12811e19 R08: 0000000000000000 R09: 0000000000000000
[  278.899347][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.902455][T19750] R13: 00007fcd129b6038 R14: 00007fcd129b5fa0 R15: 00007ffc5880a118
[  278.905591][T19750]  </TASK>
[  278.907445][T19750] Kernel Offset: disabled
[  278.909175][T19750] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:54:07  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a023e5 RBX=ffffffff81a023a4 RCX=0000000000080000 RDX=ffffc90003801000
RSI=00000000000149df RDI=00000000000149e0 RBP=ffffc900030ceff0 RSP=ffffc900030ceee0
R8 =ffffc900030cec60 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dcc60
R12=dffffc0000000000 R13=1ffff92000619de0 R14=0000000000000200 R15=000000000000004d
RIP=ffffffff81a023d3 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f81216796c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000540 CR3=000000003aa06000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8120987498 00007f8120987470 XMM03=00007f81209874a8 00007f81209874a0
XMM04=00007f81214ed100 00007f8120987460 XMM05=00007f8120987478 00007f81209874c0
XMM06=00007f81209874b8 00007f81209874b0 XMM07=00007f81209874a8 00007f81209874a0
XMM08=0000000000000000 00007f8120812ee7 XMM09=0000000000000000 00007f8120812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4c6df RBX=0000000000000006 RCX=ffff88810a591cc0 RDX=0000000000000000
RSI=0000000000002610 RDI=0000000000002611 RBP=0000000000000008 RSP=ffffc90004206260
R8 =ffffc90004206340 R9 =ffffc90004206460 R10=0000000000000073 R11=0000000000000002
R12=ffffc90004206380 R13=dffffc0000000000 R14=000000000000006c R15=ffffffff8cbd09d5
RIP=ffffffff81bfabe1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcd135f86c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcd135f7fc8 CR3=00000001241a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcd12987498 00007fcd12987470 XMM03=00007fcd129874a8 00007fcd129874a0
XMM04=00007fcd134ed100 00007fcd12987460 XMM05=00007fcd12987478 00007fcd129874c0
XMM06=00007fcd129874b8 00007fcd129874b0 XMM07=00007fcd129874a8 00007fcd129874a0
XMM08=0000000000000000 00007fcd12812ee7 XMM09=0000000000000000 00007fcd12812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
