last executing test programs:

1.00512972s ago: executing program 0 (id=4653):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x4031, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14)

941.347714ms ago: executing program 1 (id=4654):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xfdef)

940.934321ms ago: executing program 0 (id=4656):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='afs_call\x00', r0}, 0x18)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
unshare(0x62040200)

940.862428ms ago: executing program 1 (id=4657):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b0001006272696467650000400002800800050000000000050029000100000006002700040000000c00220006000000000000000c0021"], 0x70}}, 0x0)

880.21473ms ago: executing program 1 (id=4659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)

879.923208ms ago: executing program 1 (id=4660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x44, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x51, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0xa0}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_LABEL={0x14, 0x3, 'veth0_to_bridge\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

822.896961ms ago: executing program 1 (id=4663):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x7, 0xfffffffe, 0xf})

822.615946ms ago: executing program 1 (id=4665):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48)

770.06133ms ago: executing program 0 (id=4667):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

701.3524ms ago: executing program 0 (id=4668):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

701.072225ms ago: executing program 0 (id=4670):
clock_gettime(0x6, &(0x7f00000003c0))

700.73978ms ago: executing program 0 (id=4672):
r0 = socket(0x10, 0x2, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0)

103.254546ms ago: executing program 2 (id=4686):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x4)

103.07945ms ago: executing program 2 (id=4687):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

102.930983ms ago: executing program 2 (id=4688):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88f7}}}}, 0x16)

2.2908ms ago: executing program 2 (id=4689):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x14)
bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r13 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48)
r14 = socket$netlink(0x10, 0x3, 0x4)
writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

1.808343ms ago: executing program 2 (id=4690):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0)
getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

0s ago: executing program 2 (id=4691):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x101, 0x4)
sendmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15262' (ED25519) to the list of known hosts.
syzkaller login: [   40.661883][ T5769] cgroup: Unknown subsys name 'net'
[   40.780248][ T5769] cgroup: Unknown subsys name 'cpuset'
[   40.783591][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.907312][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   50.182251][ T5872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   50.197577][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   50.200650][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   50.203668][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   50.206723][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   50.210500][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   50.213532][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   50.213710][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   50.216437][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   50.221960][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   50.225733][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   50.225752][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   50.229743][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   50.235568][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   50.247630][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   50.464853][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   50.494527][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   50.501667][ T5870] chnl_net:caif_netlink_parms(): no params data found
[   50.537320][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.540469][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.543347][ T5875] bridge_slave_0: entered allmulticast mode
[   50.546390][ T5875] bridge_slave_0: entered promiscuous mode
[   50.559053][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.561661][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.564156][ T5875] bridge_slave_1: entered allmulticast mode
[   50.566690][ T5875] bridge_slave_1: entered promiscuous mode
[   50.591455][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.594478][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.597439][ T5870] bridge_slave_0: entered allmulticast mode
[   50.600540][ T5870] bridge_slave_0: entered promiscuous mode
[   50.607753][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.612200][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.615009][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.617756][ T5870] bridge_slave_1: entered allmulticast mode
[   50.621165][ T5870] bridge_slave_1: entered promiscuous mode
[   50.633425][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.643467][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.659600][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.687293][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.690134][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.692900][ T5873] bridge_slave_0: entered allmulticast mode
[   50.695721][ T5873] bridge_slave_0: entered promiscuous mode
[   50.700138][ T5875] team0: Port device team_slave_0 added
[   50.704237][ T5870] team0: Port device team_slave_0 added
[   50.707147][ T5875] team0: Port device team_slave_1 added
[   50.710163][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.712877][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.715535][ T5873] bridge_slave_1: entered allmulticast mode
[   50.718256][ T5873] bridge_slave_1: entered promiscuous mode
[   50.722435][ T5870] team0: Port device team_slave_1 added
[   50.756620][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.759540][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.770446][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.776924][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.781024][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.783220][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.792783][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.797082][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.800345][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.809786][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.815185][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.825953][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.828698][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.838625][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.863545][ T5873] team0: Port device team_slave_0 added
[   50.880737][ T5873] team0: Port device team_slave_1 added
[   50.885103][ T5870] hsr_slave_0: entered promiscuous mode
[   50.887633][ T5870] hsr_slave_1: entered promiscuous mode
[   50.892796][ T5875] hsr_slave_0: entered promiscuous mode
[   50.895022][ T5875] hsr_slave_1: entered promiscuous mode
[   50.897242][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   50.899413][ T5875] Cannot create hsr debugfs directory
[   50.915660][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.918064][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.927301][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.949602][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.952195][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.962151][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.001722][ T5873] hsr_slave_0: entered promiscuous mode
[   51.004028][ T5873] hsr_slave_1: entered promiscuous mode
[   51.006413][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   51.008703][ T5873] Cannot create hsr debugfs directory
[   51.086833][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   51.097284][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   51.102655][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   51.114948][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   51.140349][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   51.144639][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   51.155516][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.158348][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.161413][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.164270][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.169868][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   51.173937][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   51.191975][ T5873] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   51.198393][ T5873] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   51.205391][ T5873] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   51.213898][ T5873] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   51.230913][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.233835][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.236677][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.239402][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.250200][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.252447][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.254784][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.257043][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.286551][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.295525][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.306609][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.309621][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.313465][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.316191][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.320591][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.323421][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.332203][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   51.337672][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.340081][ T4657] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.345221][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   51.354131][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.359201][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.361428][ T4657] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.368536][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.371124][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.383078][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.385659][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.397418][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   51.406569][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.409392][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.427537][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.429975][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.464362][ T5875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   51.528073][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.563044][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.592497][ T5870] veth0_vlan: entered promiscuous mode
[   51.596495][ T5873] veth0_vlan: entered promiscuous mode
[   51.601153][ T5870] veth1_vlan: entered promiscuous mode
[   51.604723][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.613299][ T5873] veth1_vlan: entered promiscuous mode
[   51.627705][ T5870] veth0_macvtap: entered promiscuous mode
[   51.635668][ T5870] veth1_macvtap: entered promiscuous mode
[   51.646148][ T5875] veth0_vlan: entered promiscuous mode
[   51.654122][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.661967][ T5875] veth1_vlan: entered promiscuous mode
[   51.666619][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.671574][ T5873] veth0_macvtap: entered promiscuous mode
[   51.678512][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.683830][ T5873] veth1_macvtap: entered promiscuous mode
[   51.689108][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.692241][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.700147][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.712362][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.730281][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.733149][ T5875] veth0_macvtap: entered promiscuous mode
[   51.741158][ T5875] veth1_macvtap: entered promiscuous mode
[   51.750973][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.751116][ T5883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.758376][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.765990][ T5883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.771481][ T5883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.774994][ T5883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.792345][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.795604][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.803336][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.826465][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.831937][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.832218][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.845477][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.863934][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.868235][ T4092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.882084][ T4092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.890510][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.895055][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.902493][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.944007][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.946755][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.957723][ T5943] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET)
[   51.970966][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.976261][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.316729][ T5981] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.39'.
[   52.320688][ T5876] Bluetooth: hci0: command tx timeout
[   52.320863][ T5232] Bluetooth: hci2: command tx timeout
[   52.331328][ T5232] Bluetooth: hci1: command tx timeout
[   52.402237][ T5986] netlink: 144 bytes leftover after parsing attributes in process `syz.0.42'.
[   52.417015][    T9] hid-generic 0005:046D:8002.0001: collection stack underflow
[   52.427585][    T9] hid-generic 0005:046D:8002.0001: item 0 0 0 12 parsing failed
[   52.439866][    T9] hid-generic 0005:046D:8002.0001: probe with driver hid-generic failed with error -22
[   52.549747][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.48'.
[   52.814379][ T6027] netlink: 566 bytes leftover after parsing attributes in process `syz.1.61'.
[   52.870536][ T6033] netlink: 132 bytes leftover after parsing attributes in process `syz.1.64'.
[   52.874924][ T6035] netlink: 'syz.2.65': attribute type 5 has an invalid length.
[   52.932732][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.961160][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'.
[   52.981001][ T6044] pim6reg: entered allmulticast mode
[   52.984303][ T6044] pim6reg: left allmulticast mode
[   52.994262][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[   53.019679][ T6049] netlink: 'syz.1.72': attribute type 1 has an invalid length.
[   53.022911][ T6049] netlink: 212 bytes leftover after parsing attributes in process `syz.1.72'.
[   53.026446][ T6049] netlink: 'syz.1.72': attribute type 1 has an invalid length.
[   53.050196][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'.
[   53.189561][ T6069] netlink: 488 bytes leftover after parsing attributes in process `syz.2.82'.
[   53.313279][ T6084] lo speed is unknown, defaulting to 1000
[   53.315456][ T6084] lo speed is unknown, defaulting to 1000
[   53.317693][ T6084] lo speed is unknown, defaulting to 1000
[   53.321944][ T6084] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   53.326680][ T6084] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   53.335264][ T6084] lo speed is unknown, defaulting to 1000
[   53.341897][ T6084] lo speed is unknown, defaulting to 1000
[   53.344231][ T6084] lo speed is unknown, defaulting to 1000
[   53.393999][ T6089] netlink: 'syz.1.91': attribute type 21 has an invalid length.
[   53.536912][ T6103] lo speed is unknown, defaulting to 1000
[   53.539918][ T6103] lo speed is unknown, defaulting to 1000
[   53.543105][ T6103] lo speed is unknown, defaulting to 1000
[   53.551934][ T6103] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   53.575487][ T6103] lo speed is unknown, defaulting to 1000
[   53.578458][ T6103] lo speed is unknown, defaulting to 1000
[   53.590617][ T6103] lo speed is unknown, defaulting to 1000
[   53.596013][ T6110] Zero length message leads to an empty skb
[   54.398973][ T5232] Bluetooth: hci0: command tx timeout
[   54.410629][ T5232] Bluetooth: hci1: command tx timeout
[   54.410693][ T5876] Bluetooth: hci2: command tx timeout
[   54.458186][ T6172] vlan2: entered promiscuous mode
[   54.460071][ T6172] team0: entered promiscuous mode
[   54.462243][ T6172] team_slave_0: entered promiscuous mode
[   54.465039][ T6172] team_slave_1: entered promiscuous mode
[   54.576127][ T6184] lo speed is unknown, defaulting to 1000
[   54.746046][ T6202] warning: `syz.0.141' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   54.748206][ T6204] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.464571][ T6264] netlink: 'syz.1.169': attribute type 11 has an invalid length.
[   55.686084][ T6299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.479565][ T5880] Bluetooth: hci2: command tx timeout
[   56.482074][ T5876] Bluetooth: hci1: command tx timeout
[   56.482459][ T5232] Bluetooth: hci0: command tx timeout
[   56.997858][ T6400] blkio.reset_stats is deprecated
[   57.076652][ T6405] tipc: Started in network mode
[   57.091240][ T6405] tipc: Node identity ac14140f, cluster identity 4711
[   57.094933][ T6405] tipc: New replicast peer: 255.255.255.255
[   57.108253][ T6405] tipc: Enabled bearer <udp:syz2>, priority 10
[   57.190297][ T6410] v: renamed from ip6_vti0 (while UP)
[   57.831644][ T6434] __nla_validate_parse: 8 callbacks suppressed
[   57.831660][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.246'.
[   58.022349][ T6443] netlink: 14 bytes leftover after parsing attributes in process `syz.0.249'.
[   58.047603][ T6443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.066574][ T6443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.080279][ T6443] bond0 (unregistering): Released all slaves
[   58.209458][ T5941] tipc: Node number set to 2886997007
[   58.502547][ T6487] vxcan2: entered promiscuous mode
[   58.504129][ T6482] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[   58.511808][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'.
[   58.515352][ T6482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.254'.
[   58.521574][ T6482] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   58.526672][ T6482] gretap1: entered promiscuous mode
[   58.559984][ T5232] Bluetooth: hci1: command tx timeout
[   58.560315][ T5876] Bluetooth: hci0: command tx timeout
[   58.562000][ T5880] Bluetooth: hci2: command tx timeout
[   58.661215][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'.
[   58.664524][ T6502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.261'.
[   58.697815][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'.
[   58.749346][ T6514] lo speed is unknown, defaulting to 1000
[   58.817661][ T6518] batadv_slave_0: entered promiscuous mode
[   58.829551][ T6517] batadv_slave_0: left promiscuous mode
[   59.000143][ T6537] netlink: 'syz.1.273': attribute type 1 has an invalid length.
[   59.052685][ T6541] netlink: 'syz.0.275': attribute type 1 has an invalid length.
[   59.078307][ T6541] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.096297][ T6541] bond0: (slave bridge1): making interface the new active one
[   59.101731][ T6541] bond0: (slave bridge1): Enslaving as an active interface with an up link
[   59.117485][ T6541] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   59.170535][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.1.278'.
[   59.174513][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.1.278'.
[   59.178462][ T6548] netlink: 52 bytes leftover after parsing attributes in process `syz.1.278'.
[   59.374705][ T6553] veth0_vlan: entered allmulticast mode
[   59.460652][ T6567] netlink: 'syz.2.286': attribute type 1 has an invalid length.
[   59.467538][ T6567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.550260][ T6577] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.620321][ T6577] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.678070][ T6577] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.719509][ T6577] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.775509][ T5883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.785471][ T5883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.801515][ T5883] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.810946][ T5883] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.940501][ T6612] veth3: entered allmulticast mode
[   60.100971][ T6628] lo speed is unknown, defaulting to 1000
[   60.528085][ T6634] netlink: 'syz.2.315': attribute type 6 has an invalid length.
[   60.542776][ T6643] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   60.546639][ T6643] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   60.663664][ T6647] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   60.668590][ T6647] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   61.226000][ T6665] tipc: Started in network mode
[   61.228343][ T6665] tipc: Node identity 0e154e221568, cluster identity 4711
[   61.235848][ T6665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.245675][ T6665] syzkaller0: entered promiscuous mode
[   61.258381][ T6665] syzkaller0: entered allmulticast mode
[   61.266662][ T6665] tipc: Resetting bearer <eth:syzkaller0>
[   61.279491][ T6664] tipc: Resetting bearer <eth:syzkaller0>
[   61.283436][ T6664] tipc: Disabling bearer <eth:syzkaller0>
[   61.392651][ T6673] openvswitch: netlink: Key type 251 is out of range max 32
[   62.190061][ T6747] netlink: 'syz.1.370': attribute type 13 has an invalid length.
[   62.227439][ T6747] gretap0: refused to change device tx_queue_len
[   62.236395][ T6747] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   62.259919][   T24] lo speed is unknown, defaulting to 1000
[   62.262573][   T24] syz2: Port: 1 Link DOWN
[   62.747399][ T6805] netlink: 'syz.2.398': attribute type 1 has an invalid length.
[   63.908199][ T6855] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.931128][ T6855] __nla_validate_parse: 10 callbacks suppressed
[   63.931138][ T6855] netlink: 28 bytes leftover after parsing attributes in process `syz.1.419'.
[   64.166930][ T6871] netlink: 'syz.1.425': attribute type 6 has an invalid length.
[   64.169574][ T6871] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.425'.
[   64.326011][ T6879] netlink: 'syz.1.430': attribute type 11 has an invalid length.
[   64.396873][ T6888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.434'.
[   64.468529][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.436'.
[   64.518303][ T6892] syz.0.436 (6892) used greatest stack depth: 20016 bytes left
[   64.794814][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'.
[   64.798677][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.444'.
[   64.809826][ T6911] netlink: 'syz.1.444': attribute type 13 has an invalid length.
[   64.813874][ T6911] netlink: 'syz.1.444': attribute type 11 has an invalid length.
[   65.159656][ T6946] netlink: 'syz.2.460': attribute type 1 has an invalid length.
[   65.172350][ T6946] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.196775][ T6946] bond1: (slave geneve2): making interface the new active one
[   65.201141][ T6946] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   65.216800][ T6946] bond1: entered promiscuous mode
[   65.219829][ T6946] geneve2: entered promiscuous mode
[   65.343252][ T6973] netlink: 'syz.1.473': attribute type 6 has an invalid length.
[   65.346613][ T6973] netlink: 'syz.1.473': attribute type 6 has an invalid length.
[   65.354616][ T6975] ieee802154 phy0 wpan0: encryption failed: -22
[   65.476703][ T6991] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   65.502196][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.482'.
[   65.645292][ T7001] bond2: entered promiscuous mode
[   65.647281][ T7001] bond2: entered allmulticast mode
[   65.652948][ T7001] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.848588][ T7021] Illegal XDP return value 4294967274 on prog  (id 83) dev N/A, expect packet loss!
[   65.967354][ T7029] tipc: Started in network mode
[   65.969765][ T7029] tipc: Node identity 4eec89107536, cluster identity 4711
[   65.973013][ T7029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.976614][ T7029] syzkaller0: entered promiscuous mode
[   65.980214][ T7029] syzkaller0: entered allmulticast mode
[   65.987713][ T7029] tipc: Resetting bearer <eth:syzkaller0>
[   65.991754][ T7028] tipc: Resetting bearer <eth:syzkaller0>
[   65.994370][ T7028] tipc: Disabling bearer <eth:syzkaller0>
[   66.507623][ T7077] ip6erspan0: entered promiscuous mode
[   66.528037][ T7080] netlink: 3 bytes leftover after parsing attributes in process `syz.0.521'.
[   66.536168][ T7012] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   66.549983][ T7080] tipc: Can't bind to reserved service type 2
[   66.610456][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'.
[   66.728075][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'.
[   66.745016][ T7106] bond_slave_0: entered promiscuous mode
[   66.747433][ T7106] bond_slave_1: entered promiscuous mode
[   66.760412][ T7106] macsec0: entered promiscuous mode
[   66.762646][ T7106] bond0: entered promiscuous mode
[   66.770921][ T7106] bond0: left promiscuous mode
[   66.774179][ T7106] bond_slave_0: left promiscuous mode
[   66.776477][ T7106] bond_slave_1: left promiscuous mode
[   66.825776][ T7116] netlink: 'syz.0.540': attribute type 1 has an invalid length.
[   66.962969][ T7143] netlink: 'syz.2.548': attribute type 1 has an invalid length.
[   67.060447][ T7148] syzkaller1: entered promiscuous mode
[   67.062961][ T7148] syzkaller1: entered allmulticast mode
[   67.770588][ T5232] Bluetooth: hci0: command 0x0c20 tx timeout
[   67.811339][ T7202] openvswitch: netlink: Message has 20 unknown bytes.
[   67.814167][ T7202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.897864][ T7204] syz_tun: entered allmulticast mode
[   67.901154][ T7203] syz_tun: left allmulticast mode
[   67.964302][ T7222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.967227][ T7222] syzkaller0: entered promiscuous mode
[   67.970534][ T7222] syzkaller0: entered allmulticast mode
[   67.977818][ T7222] tipc: Resetting bearer <eth:syzkaller0>
[   67.982614][ T7221] tipc: Resetting bearer <eth:syzkaller0>
[   67.985910][ T7221] tipc: Disabling bearer <eth:syzkaller0>
[   68.257553][ T7251] syzkaller1: entered promiscuous mode
[   68.260151][ T7251] syzkaller1: entered allmulticast mode
[   68.528148][ T7274] netlink: 'syz.2.609': attribute type 29 has an invalid length.
[   68.966986][ T7320] pim6reg1: entered allmulticast mode
[   69.004822][ T7322] __nla_validate_parse: 3 callbacks suppressed
[   69.004836][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'.
[   69.032906][ T7325] Bluetooth: MGMT ver 1.23
[   69.035984][ T7326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.630'.
[   69.153401][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.641'.
[   69.197439][ T7351] netlink: 'syz.1.643': attribute type 5 has an invalid length.
[   69.314274][ T7367] netlink: 'syz.2.649': attribute type 3 has an invalid length.
[   69.401922][ T7378] netlink: 224 bytes leftover after parsing attributes in process `syz.2.654'.
[   69.429876][ T7384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.481606][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'.
[   69.594729][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'.
[   69.678361][ T5934] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[   69.692502][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'.
[   70.024033][ T7451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   70.041381][ T7453] netlink: 'syz.2.689': attribute type 4 has an invalid length.
[   70.067899][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.071125][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.123768][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.131775][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.199220][ T7465] ip6tnl1: entered promiscuous mode
[   70.201116][ T7465] ip6tnl1: entered allmulticast mode
[   70.204573][ T7465] team0: Device ip6tnl1 is of different type
[   70.211750][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.215726][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.222194][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.226496][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.431173][ T7481] bridge_slave_0: left allmulticast mode
[   70.433096][ T7481] bridge_slave_0: left promiscuous mode
[   70.435192][ T7481] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.440280][ T7481] bridge_slave_1: left allmulticast mode
[   70.442575][ T7481] bridge_slave_1: left promiscuous mode
[   70.445011][ T7481] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.452620][ T7481] team0: Port device team_slave_0 removed
[   70.456248][ T7481] team0: Port device team_slave_1 removed
[   70.461382][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.464177][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.467846][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.471871][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.480584][ T7481] bond0: (slave bridge1): Releasing active interface
[   70.487307][ T7482] team0: Mode changed to "broadcast"
[   70.516500][ T7481] vlan0: entered promiscuous mode
[   70.523597][ T7481] tipc: Enabled bearer <eth:team0>, priority 0
[   70.561745][ T7488] xt_socket: unknown flags 0x50
[   70.810794][ T7510] netlink: 'syz.1.715': attribute type 1 has an invalid length.
[   70.814117][ T7510] netlink: 224 bytes leftover after parsing attributes in process `syz.1.715'.
[   70.904994][ T7518] netlink: 'syz.1.719': attribute type 41 has an invalid length.
[   71.200186][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.202611][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.648970][   T47] tipc: Node number set to 1004177680
[   71.808070][ T7558] netlink: 'syz.0.737': attribute type 5 has an invalid length.
[   71.845324][ T7567] netlink: 'syz.0.741': attribute type 1 has an invalid length.
[   71.856879][ T7567] bond1: (slave bridge2): making interface the new active one
[   71.861121][ T7567] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   71.896193][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'.
[   71.901526][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.905459][ T7572] bond0: (slave rose0): Enslaving as an active interface with an up link
[   72.168330][ T7593] netlink: 'syz.0.748': attribute type 6 has an invalid length.
[   72.301480][ T7610] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'.
[   72.738677][ T7629] bond0: entered promiscuous mode
[   72.740786][ T7629] bond_slave_0: entered promiscuous mode
[   72.743163][ T7629] bond_slave_1: entered promiscuous mode
[   72.745678][ T7629] batadv0: entered promiscuous mode
[   72.748150][ T7629] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   72.752001][ T7629] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[   72.755881][ T7629] 8021q: adding VLAN 0 to HW filter on device hsr1
[   72.823182][ T7642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.826059][ T7642] syzkaller0: entered promiscuous mode
[   72.828023][ T7642] syzkaller0: entered allmulticast mode
[   72.835061][ T7642] tipc: Resetting bearer <eth:syzkaller0>
[   72.838330][ T7641] tipc: Resetting bearer <eth:syzkaller0>
[   72.842474][ T7641] tipc: Disabling bearer <eth:syzkaller0>
[   72.873273][ T7644] syzkaller1: entered promiscuous mode
[   72.875802][ T7644] syzkaller1: entered allmulticast mode
[   73.180467][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.183742][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.289681][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.310349][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.394024][ T5883] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.398025][ T5883] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.402001][ T5883] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.404991][ T5883] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.623250][ T7733] ip6gre1: entered allmulticast mode
[   73.720276][ T7758] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[   73.911366][ T7795] sock: sock_timestamping_bind_phc: sock not bind to device
[   73.933165][ T7797] netlink: 'syz.1.828': attribute type 1 has an invalid length.
[   73.956114][ T7797] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.959982][ T7797] bond1: (slave bond2): making interface the new active one
[   73.963306][ T7797] bond1: (slave bond2): Enslaving as an active interface with an up link
[   73.971018][ T7797] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   73.976057][ T7797] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   74.782525][ T7829] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   74.900725][ T7850] __nla_validate_parse: 6 callbacks suppressed
[   74.900736][ T7850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.851'.
[   74.917218][ T7850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.851'.
[   74.971866][ T7856] netlink: 100 bytes leftover after parsing attributes in process `syz.0.853'.
[   75.006630][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'.
[   75.046514][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'.
[   75.145543][ T7884] netlink: 'syz.2.867': attribute type 10 has an invalid length.
[   75.148392][ T7884] veth0_vlan: left promiscuous mode
[   75.152650][ T7884] veth0_vlan: entered promiscuous mode
[   75.155870][ T7884] team0: Device veth0_vlan failed to register rx_handler
[   75.187474][ T7884] syz.2.867 (7884) used greatest stack depth: 19408 bytes left
[   76.451205][ T7887] Set syz1 is full, maxelem 65536 reached
[   76.488108][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.893'.
[   76.746560][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'.
[   76.943246][ T8021] pim6reg1: entered promiscuous mode
[   76.947339][ T8021] pim6reg1: entered allmulticast mode
[   76.972716][ T8025] syzkaller0: entered promiscuous mode
[   76.974965][ T8025] syzkaller0: entered allmulticast mode
[   77.132655][ T8031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.135323][ T8031] syzkaller0: entered promiscuous mode
[   77.137411][ T8031] syzkaller0: entered allmulticast mode
[   77.146142][ T8031] tipc: Resetting bearer <eth:syzkaller0>
[   77.150006][ T8030] tipc: Resetting bearer <eth:syzkaller0>
[   77.153637][ T8030] tipc: Disabling bearer <eth:syzkaller0>
[   77.395412][ T8056] sctp: [Deprecated]: syz.2.941 (pid 8056) Use of int in maxseg socket option.
[   77.395412][ T8056] Use struct sctp_assoc_value instead
[   77.452459][ T8067] syzkaller1: entered promiscuous mode
[   77.454993][ T8067] syzkaller1: entered allmulticast mode
[   78.281098][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'.
[   78.446449][ T8171] netlink: 'syz.2.987': attribute type 3 has an invalid length.
[   78.500427][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.985'.
[   78.568172][ T8187] sctp: [Deprecated]: syz.0.994 (pid 8187) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.568172][ T8187] Use struct sctp_sack_info instead
[   78.595147][ T8193] xt_limit: Overflow, try lower: 271964/0
[   78.598647][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.997'.
[   78.635082][ T8194] smc: net device bond0 applied user defined pnetid SYZ2
[   78.637895][ T8194] smc: net device bond0 erased user defined pnetid SYZ2
[   78.805260][ T8211] macvlan3: entered promiscuous mode
[   78.815848][ T8211] bond0: entered promiscuous mode
[   78.817922][ T8211] bond_slave_0: entered promiscuous mode
[   78.821459][ T8211] bond_slave_1: entered promiscuous mode
[   78.824816][ T8211] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   79.122166][ T8243] syzkaller1: entered promiscuous mode
[   79.125043][ T8243] syzkaller1: entered allmulticast mode
[   79.483701][  T973] cfg80211: failed to load regulatory.db
[   79.512420][ T8250] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[   79.811866][ T5941] IPVS: starting estimator thread 0...
[   79.878011][ T8283] lo speed is unknown, defaulting to 1000
[   79.909156][ T8281] IPVS: using max 71 ests per chain, 170400 per kthread
[   79.919025][ T5232] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   79.919719][ T5880] Bluetooth: hci0: command 0x0c20 tx timeout
[   80.135204][ T8289] netlink: 'syz.1.1037': attribute type 13 has an invalid length.
[   80.138590][ T8289] netlink: 'syz.1.1037': attribute type 17 has an invalid length.
[   80.169633][ T8289] 8021q: adding VLAN 0 to HW filter on device team0
[   80.174253][ T8289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.180629][ T5915] lo speed is unknown, defaulting to 1000
[   80.182738][ T5915] syz2: Port: 1 Link ACTIVE
[   80.816470][ T8352] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.820422][ T8352] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   80.990366][ T8384] __nla_validate_parse: 8 callbacks suppressed
[   80.990378][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'.
[   80.997453][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'.
[   81.032255][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1080'.
[   81.066459][ T8392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.220984][ T8414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'.
[   81.224592][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1094'.
[   81.228164][ T8414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'.
[   81.232284][ T8414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1094'.
[   81.320552][ T8421] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   81.323639][ T7700] IPVS: starting estimator thread 0...
[   81.347998][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   81.428828][ T8429] IPVS: using max 133 ests per chain, 319200 per kthread
[   81.666446][ T8446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1105'.
[   82.162801][ T8454] netlink: 'syz.0.1107': attribute type 21 has an invalid length.
[   82.439272][ T8487] netlink: 'syz.2.1123': attribute type 4 has an invalid length.
[   82.545765][ T8497] syzkaller0: entered promiscuous mode
[   82.547789][ T8497] syzkaller0: entered allmulticast mode
[   83.489659][ T8517] netlink: 'syz.2.1134': attribute type 5 has an invalid length.
[   83.697308][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'.
[   83.986613][ T8537] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[   83.992382][ T8537] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1143'.
[   84.165137][ T8563] netlink: 'syz.1.1156': attribute type 64 has an invalid length.
[   84.465797][ T8596] erspan0: entered promiscuous mode
[   84.469119][ T8596] erspan0: left promiscuous mode
[   84.653575][ T8624] netlink: 'syz.2.1185': attribute type 4 has an invalid length.
[   84.756729][ T8649] netlink: 'syz.0.1195': attribute type 1 has an invalid length.
[   84.767215][ T8649] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.777127][ T8649] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.783050][ T8649] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.788046][ T8649] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   84.818888][ T8642] nbd0: detected capacity change from 0 to 127
[   84.822653][   T56] block nbd0: Receive control failed (result -104)
[   84.838182][ T8654] veth3: entered promiscuous mode
[   84.850902][ T8654] bond3: (slave veth3): Enslaving as an active interface with a down link
[   84.863575][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.866191][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.874333][ T8634] lo speed is unknown, defaulting to 1000
[   84.973962][ T8667] netlink: 'syz.1.1205': attribute type 6 has an invalid length.
[   84.976622][ T8667] IPv6: NLM_F_CREATE should be specified when creating new route
[   85.026364][ T8674] netlink: 'syz.2.1200': attribute type 13 has an invalid length.
[   85.031180][ T8674] netlink: 'syz.2.1200': attribute type 17 has an invalid length.
[   85.115039][ T8674] 8021q: adding VLAN 0 to HW filter on device team0
[   85.212564][ T8674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.276793][ T8690] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   85.295454][ T8692] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.098415][ T8743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.101476][ T8743] IPv6: NLM_F_CREATE should be set when creating new route
[   86.104555][ T8743] IPv6: NLM_F_CREATE should be set when creating new route
[   86.107440][ T8743] IPv6: NLM_F_CREATE should be set when creating new route
[   86.418935][ T8770] __nla_validate_parse: 6 callbacks suppressed
[   86.418950][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'.
[   86.425026][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1248'.
[   86.429977][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1248'.
[   86.541156][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1259'.
[   86.548017][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv1
[   86.552049][ T8794] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   86.555248][ T8794] team0: Failed to send options change via netlink (err -105)
[   86.558221][ T8794] team0: Port device batadv1 added
[   86.655145][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803573e400: rx timeout, send abort
[   86.822103][ T8809] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1264'.
[   87.158334][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803573e400: abort rx timeout. Force session deactivation
[   87.183067][ T8843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1278'.
[   87.250232][ T8849] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   87.389469][ T8862] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1287'.
[   87.409626][ T8864] lo speed is unknown, defaulting to 1000
[   87.747071][ T8902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'.
[   87.753665][ T8902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'.
[   88.018023][ T8936] syz_tun: entered allmulticast mode
[   88.021275][ T8936] syz_tun: left allmulticast mode
[   88.159028][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[   88.161673][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[   88.164024][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[   88.166435][   T11] block nbd0: Connection timed out, retrying (0/1 alive)
[   88.169120][   T11] block nbd0: Dead connection, failed to find a fallback
[   88.171732][   T11] block nbd0: shutting down sockets
[   88.173410][   T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.176222][   T11] Buffer I/O error on dev nbd0, logical block 3, async page read
[   88.178915][   T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.182027][   T11] Buffer I/O error on dev nbd0, logical block 2, async page read
[   88.184531][   T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.187563][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[   88.190181][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.193602][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[   88.196211][ T8106] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.199404][ T8106] Buffer I/O error on dev nbd0, logical block 0, async page read
[   88.202171][ T8106] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.205070][ T8106] Buffer I/O error on dev nbd0, logical block 1, async page read
[   88.207700][ T8106] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.210831][ T8106] Buffer I/O error on dev nbd0, logical block 2, async page read
[   88.213656][ T8106] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.217323][ T8106] Buffer I/O error on dev nbd0, logical block 3, async page read
[   88.220777][ T8106] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.224107][ T8106] Buffer I/O error on dev nbd0, logical block 0, async page read
[   88.227065][ T8106] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   88.230387][ T8106] Buffer I/O error on dev nbd0, logical block 1, async page read
[   88.235090][ T8106] ldm_validate_partition_table(): Disk read failed.
[   88.238597][ T8106] Dev nbd0: unable to read RDB block 0
[   88.242029][ T8106]  nbd0: unable to read partition table
[   88.247590][ T8106] ldm_validate_partition_table(): Disk read failed.
[   88.250881][ T8106] Dev nbd0: unable to read RDB block 0
[   88.253646][ T8106]  nbd0: unable to read partition table
[   89.551824][ T8996] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1347'.
[   89.780222][ T9020] dvmrp0: entered allmulticast mode
[   90.036803][ T9057] validate_nla: 3 callbacks suppressed
[   90.036817][ T9057] netlink: 'syz.2.1378': attribute type 2 has an invalid length.
[   90.059855][ T9060] veth0_to_bond: entered allmulticast mode
[   90.087416][ T9066] syzkaller1: entered promiscuous mode
[   90.090059][ T9066] syzkaller1: entered allmulticast mode
[   90.238364][ T9100] netlink: 'syz.2.1398': attribute type 1 has an invalid length.
[   90.333164][ T5934] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[   90.404808][ T9133] syzkaller1: entered promiscuous mode
[   90.407198][ T9133] syzkaller1: entered allmulticast mode
[   90.492677][ T9142] GUP no longer grows the stack in syz.0.1417 (9142): 200000006000-20000000a000 (200000005000)
[   90.496899][ T9142] CPU: 1 UID: 0 PID: 9142 Comm: syz.0.1417 Not tainted syzkaller #0 PREEMPT(full) 
[   90.496914][ T9142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.496921][ T9142] Call Trace:
[   90.496925][ T9142]  <TASK>
[   90.496930][ T9142]  dump_stack_lvl+0x189/0x250
[   90.496949][ T9142]  ? __pfx_css_rstat_updated+0x10/0x10
[   90.496961][ T9142]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.496976][ T9142]  ? __pfx__printk+0x10/0x10
[   90.496989][ T9142]  ? find_vma+0xe7/0x160
[   90.497006][ T9142]  ? __pfx___calc_delta+0x10/0x10
[   90.497022][ T9142]  __get_user_pages+0x24d0/0x2ce0
[   90.497037][ T9142]  ? rcu_is_watching+0x15/0xb0
[   90.497048][ T9142]  ? __gup_longterm_locked+0xc68/0x1660
[   90.497067][ T9142]  ? __gup_longterm_locked+0xc68/0x1660
[   90.497081][ T9142]  __gup_longterm_locked+0xde9/0x1660
[   90.497096][ T9142]  ? try_grab_folio_fast+0x1be/0x4f0
[   90.497111][ T9142]  ? rcu_is_watching+0x15/0xb0
[   90.497123][ T9142]  ? rcu_is_watching+0x15/0xb0
[   90.497135][ T9142]  gup_fast_fallback+0x1e6a/0x2010
[   90.497159][ T9142]  ? __pfx_gup_fast_fallback+0x10/0x10
[   90.497173][ T9142]  ? __mutex_lock+0x335/0x1350
[   90.497184][ T9142]  ? lock_release+0x4b/0x3e0
[   90.497202][ T9142]  ? futex_unqueue+0x22/0x240
[   90.497216][ T9142]  ? futex_unqueue+0x22/0x240
[   90.497229][ T9142]  ? is_valid_gup_args+0x11f/0x200
[   90.497244][ T9142]  ? get_user_pages_fast+0x4d/0xb0
[   90.497259][ T9142]  __iov_iter_get_pages_alloc+0x39a/0xb40
[   90.497275][ T9142]  ? __pfx_pipe_clear_nowait+0x10/0x10
[   90.497292][ T9142]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   90.497308][ T9142]  ? wait_for_space+0x24d/0x2d0
[   90.497324][ T9142]  iov_iter_get_pages2+0x5e/0xa0
[   90.497338][ T9142]  __se_sys_vmsplice+0x548/0x10d0
[   90.497360][ T9142]  ? __pfx___se_sys_vmsplice+0x10/0x10
[   90.497377][ T9142]  ? __pfx_futex_wait+0x10/0x10
[   90.497408][ T9142]  ? do_pipe2+0xf7/0x170
[   90.497426][ T9142]  ? rcu_is_watching+0x15/0xb0
[   90.497439][ T9142]  ? rcu_is_watching+0x15/0xb0
[   90.497451][ T9142]  do_syscall_64+0xfa/0x3b0
[   90.497463][ T9142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.497476][ T9142]  ? exc_page_fault+0x9f/0xf0
[   90.497523][ T9142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.497535][ T9142] RIP: 0033:0x7f02d4b8ebe9
[   90.497546][ T9142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.497556][ T9142] RSP: 002b:00007f02d5a5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[   90.497572][ T9142] RAX: ffffffffffffffda RBX: 00007f02d4db5fa0 RCX: 00007f02d4b8ebe9
[   90.497582][ T9142] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[   90.497591][ T9142] RBP: 00007f02d4c11e19 R08: 0000000000000000 R09: 0000000000000000
[   90.497598][ T9142] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[   90.497605][ T9142] R13: 00007f02d4db6038 R14: 00007f02d4db5fa0 R15: 00007ffed25e5e58
[   90.497625][ T9142]  </TASK>
[   90.648646][ T9157] netlink: 'syz.2.1422': attribute type 1 has an invalid length.
[   90.747683][ T9171] tipc: Enabled bearer <eth:batadv0>, priority 10
[   90.833190][ T9179] lo speed is unknown, defaulting to 1000
[   90.975438][ T9196] syzkaller1: entered promiscuous mode
[   90.977299][ T9196] syzkaller1: entered allmulticast mode
[   91.083379][ T9208] svc: failed to register nfsdv3 RPC service (errno 111).
[   91.097201][ T9208] svc: failed to register nfsaclv3 RPC service (errno 111).
[   91.146918][ T5941] lo speed is unknown, defaulting to 1000
[   91.154934][ T5941] syz2: Port: 1 Link DOWN
[   91.351143][ T9247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.517438][ T9273] lo speed is unknown, defaulting to 1000
[   91.571456][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.316979][ T9297] vti0: entered promiscuous mode
[   92.357573][ T9305] __nla_validate_parse: 23 callbacks suppressed
[   92.357587][ T9305] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1490'.
[   92.357924][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1489'.
[   92.576922][ T9333] netlink: 'syz.2.1504': attribute type 1 has an invalid length.
[   92.581741][ T9333] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1504'.
[   93.054061][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1536'.
[   93.116290][ T9411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1542'.
[   93.165633][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'.
[   93.320573][ T9456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.323179][ T9456] syzkaller0: entered promiscuous mode
[   93.325910][ T9456] syzkaller0: entered allmulticast mode
[   93.341487][ T9456] tipc: Resetting bearer <eth:syzkaller0>
[   93.346125][ T9455] tipc: Resetting bearer <eth:syzkaller0>
[   93.352352][ T9455] tipc: Disabling bearer <eth:syzkaller0>
[   93.357863][ T9461] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1566'.
[   93.395759][ T9464] netlink: 'syz.0.1563': attribute type 13 has an invalid length.
[   93.398448][ T9464] netlink: 'syz.0.1563': attribute type 17 has an invalid length.
[   93.439446][ T9472] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1571'.
[   93.448706][ T9464] tipc: Resetting bearer <eth:team0>
[   93.452755][ T9464] tipc: Resetting bearer <eth:team0>
[   93.456697][ T9464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.524831][ T9454] lo speed is unknown, defaulting to 1000
[   93.668482][ T9495] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1582'.
[   93.699972][ T9501] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1585'.
[   94.631413][ T9578] ip6tnl2: entered promiscuous mode
[   94.633398][ T9578] ip6tnl2: entered allmulticast mode
[   95.163660][ T9623] netlink: 'syz.2.1639': attribute type 8 has an invalid length.
[   95.201984][ T9625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.372506][ T9647] netlink: 'syz.1.1650': attribute type 4 has an invalid length.
[   95.583012][ T9664] netlink: 'syz.1.1655': attribute type 41 has an invalid length.
[   96.722723][ T9724] netlink: 'syz.1.1680': attribute type 11 has an invalid length.
[   96.831993][ T9737] team0: No ports can be present during mode change
[   96.835860][ T9737] vlan0: entered promiscuous mode
[   96.839977][ T9737] team0: Port device vlan0 added
[   96.844263][ T9737] tipc: Enabled bearer <eth:team0>, priority 0
[   97.926278][ T9809] __nla_validate_parse: 8 callbacks suppressed
[   97.926287][ T9809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1714'.
[   97.988237][ T9817] pim6reg1: entered promiscuous mode
[   97.991522][ T9817] pim6reg1: entered allmulticast mode
[   98.023631][ T9818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1716'.
[   98.180776][ T9830] IPVS: persistence engine module ip_vs_pe_ not found
[   98.334309][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'.
[   98.622192][ T9873] syzkaller1: entered promiscuous mode
[   98.624256][ T9873] syzkaller1: entered allmulticast mode
[   98.881682][ T9895] netlink: 'syz.1.1747': attribute type 1 has an invalid length.
[   98.890649][ T9898] netlink: 'syz.0.1748': attribute type 1 has an invalid length.
[   98.904980][ T9898] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.915029][ T9895] bond4: (slave gretap1): making interface the new active one
[   98.919684][ T9895] bond4: (slave gretap1): Enslaving as an active interface with an up link
[   98.934362][ T9898] bond4: (slave geneve3): making interface the new active one
[   98.938551][ T9898] bond4: (slave geneve3): Enslaving as an active interface with an up link
[   98.947989][ T9895] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   98.992832][ T9903] netlink: 'syz.1.1750': attribute type 9 has an invalid length.
[   99.093460][ T9913] batadv_slave_1: entered promiscuous mode
[   99.106956][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1755'.
[   99.111695][ T9912] batadv_slave_1: left promiscuous mode
[   99.232190][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'.
[   99.267820][ T9933] vlan2: entered promiscuous mode
[   99.472767][ T9945] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[   99.475829][ T9945] tipc: Bearer <udp:s>: trying with adjusted priority
[   99.478631][ T9945] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[   99.497816][ T9947] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1768'.
[  100.034029][ T9958] syz.2.1773 (9958) used obsolete PPPIOCDETACH ioctl
[  100.285082][ T9972] netlink: 'syz.2.1778': attribute type 2 has an invalid length.
[  100.323189][ T9974] : entered promiscuous mode
[  100.332458][ T9974] trusted_key: syz.2.1779 sent an empty control message without MSG_MORE.
[  100.407634][ T9980] bridge_slave_0: left allmulticast mode
[  100.416692][ T9980] bridge_slave_0: left promiscuous mode
[  100.421664][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.426208][ T9980] bridge_slave_1: left allmulticast mode
[  100.428193][ T9980] bridge_slave_1: left promiscuous mode
[  100.430368][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.434707][ T9980] bond0: (slave bond_slave_0): Releasing backup interface
[  100.437348][ T9980] bond_slave_0: left promiscuous mode
[  100.440810][ T9980] bond0: (slave bond_slave_1): Releasing backup interface
[  100.444164][ T9980] bond_slave_1: left promiscuous mode
[  100.448275][ T9980] team0: Port device team_slave_0 removed
[  100.452565][ T9980] team0: Port device team_slave_1 removed
[  100.455726][ T9980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.461141][ T9980] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.471342][ T9980] team0: Port device vlan0 removed
[  100.474282][ T9980] bond1: (slave bond2): Releasing backup interface
[  100.485389][ T9980] team0: Port device batadv1 removed
[  100.487994][ T9980] bond4: (slave gretap1): Releasing active interface
[  100.491168][ T9980] bond4: (slave gretap1): the permanent HWaddr of slave - 0a:aa:bd:ae:a5:75 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  100.497385][ T9980] bond4: (slave gretap2): making interface the new active one
[  100.504677][ T9980] bond4: (slave gretap2): Releasing active interface
[  100.509481][ T4317] tipc: Resetting bearer <eth:team0>
[  100.520636][ T9982] team0: Mode changed to "loadbalance"
[  100.675652][ T9995] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1788'.
[  101.224324][T10032] netlink: set zone limit has 4 unknown bytes
[  101.289544][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'.
[  101.306133][T10046] ieee802154 phy0 wpan0: encryption failed: -90
[  101.417299][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'.
[  101.573865][T10089] netlink: 'syz.0.1834': attribute type 13 has an invalid length.
[  101.639081][T10089] tipc: Resetting bearer <eth:team0>
[  101.801985][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.807636][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.817150][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.844668][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.875451][T10095] vlan2: entered promiscuous mode
[  101.877366][T10095] team0: entered promiscuous mode
[  102.163981][T10130] netlink: 'syz.0.1846': attribute type 10 has an invalid length.
[  102.206852][T10137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1848'.
[  102.357070][T10167] netlink: 'syz.2.1864': attribute type 2 has an invalid length.
[  102.360541][T10167] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  102.372042][T10170] netlink: 'syz.1.1861': attribute type 10 has an invalid length.
[  102.432679][T10182] netlink: 'syz.0.1871': attribute type 8 has an invalid length.
[  102.456105][T10184] Bluetooth: MGMT ver 1.23
[  102.531778][T10200] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  102.554653][T10202] macsec1: entered promiscuous mode
[  102.556544][T10202] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  102.560155][T10202] macsec1: entered allmulticast mode
[  102.562024][T10202] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  103.607868][T10267] syzkaller0: entered promiscuous mode
[  103.609954][T10267] syzkaller0: entered allmulticast mode
[  103.804574][T10281] __nla_validate_parse: 4 callbacks suppressed
[  103.804592][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'.
[  103.830201][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'.
[  104.019904][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1921'.
[  104.069531][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'.
[  104.072732][   T56] block nbd1: Receive control failed (result -107)
[  104.109004][T10297] nbd1: detected capacity change from 0 to 32
[  104.112782][T10215] block nbd1: Dead connection, failed to find a fallback
[  104.115720][T10215] block nbd1: shutting down sockets
[  104.117758][T10215] blk_print_req_error: 138 callbacks suppressed
[  104.117768][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.124137][T10215] buffer_io_error: 138 callbacks suppressed
[  104.124148][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.130663][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.134261][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.137637][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.141784][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.145315][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.149201][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.152581][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.156247][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.159630][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.163457][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.166756][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.170694][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.177772][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.181904][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.184893][T10215] ldm_validate_partition_table(): Disk read failed.
[  104.187657][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.191446][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.194686][T10215] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  104.198320][T10215] Buffer I/O error on dev nbd1, logical block 0, async page read
[  104.201855][T10215] Dev nbd1: unable to read RDB block 0
[  104.204335][T10215]  nbd1: unable to read partition table
[  104.208189][T10215] ldm_validate_partition_table(): Disk read failed.
[  104.211247][T10215] Dev nbd1: unable to read RDB block 0
[  104.213877][T10215]  nbd1: unable to read partition table
[  104.622080][   T33] audit: type=1800 audit(1756157598.794:2): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1937" name="memory.events" dev="tmpfs" ino=3167 res=0 errno=0
[  104.780328][T10357] lo speed is unknown, defaulting to 1000
[  104.858046][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'.
[  104.862211][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1947'.
[  105.008467][T10428] netlink: 'syz.1.1951': attribute type 2 has an invalid length.
[  105.011868][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1951'.
[  105.059146][ T7700] IPVS: starting estimator thread 0...
[  105.150569][T10439] IPVS: using max 132 ests per chain, 316800 per kthread
[  105.225814][   T33] audit: type=1800 audit(1756157599.394:3): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1958" name="memory.events" dev="tmpfs" ino=3184 res=0 errno=0
[  105.303481][T10458] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.306676][T10458] bond3: entered promiscuous mode
[  105.310154][T10458] bond0: (slave bond3): Enslaving as an active interface with an up link
[  105.338261][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'.
[  105.345672][T10462] macvtap1: entered promiscuous mode
[  105.347462][T10462] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  105.406149][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1966'.
[  105.444415][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1973'.
[  105.540087][T10499] netlink: 'syz.1.1983': attribute type 10 has an invalid length.
[  105.557889][T10503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  105.561650][T10503] IPv6: NLM_F_CREATE should be set when creating new route
[  105.583772][T10507] netlink: 'syz.1.1986': attribute type 1 has an invalid length.
[  105.660336][T10515] netlink: 'syz.0.1992': attribute type 4 has an invalid length.
[  106.691948][T10594] openvswitch: netlink: Message has 4 unknown bytes.
[  108.012911][T10666] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  108.016384][T10666] syzkaller0: entered promiscuous mode
[  108.018463][T10666] syzkaller0: entered allmulticast mode
[  108.022772][T10666] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  108.163873][T10682] tipc: Enabled bearer <ib:caif0>, priority 14
[  108.212615][T10690] openvswitch: netlink: Flow key attribute not present in set flow.
[  108.324669][T10705] openvswitch: netlink: IP tunnel dst address not specified
[  109.754682][T10767] __nla_validate_parse: 12 callbacks suppressed
[  109.754696][T10767] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2110'.
[  109.760473][T10767] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2110'.
[  109.763479][T10767] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2110'.
[  109.769662][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2110'.
[  110.663901][T10830] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  110.737857][T10834] lo speed is unknown, defaulting to 1000
[  111.205332][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2148'.
[  111.208275][T10859] netlink: 'syz.0.2148': attribute type 4 has an invalid length.
[  111.338154][T10865] sctp: [Deprecated]: syz.0.2151 (pid 10865) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.338154][T10865] Use struct sctp_sack_info instead
[  111.431262][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2153'.
[  111.435009][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2153'.
[  111.622982][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'.
[  111.627618][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'.
[  111.715232][T10896] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  111.785302][ T5915] tipc: Node number set to 461196834
[  111.845871][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.970701][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2180'.
[  112.294229][T10955] netlink: 'syz.0.2192': attribute type 1 has an invalid length.
[  112.347234][T10959] bridge0: port 1(macvlan2) entered blocking state
[  112.350296][T10959] bridge0: port 1(macvlan2) entered disabled state
[  112.353135][T10959] macvlan2: entered allmulticast mode
[  112.355486][T10959] bridge0: entered allmulticast mode
[  112.358611][T10959] macvlan2: left allmulticast mode
[  112.361723][T10959] bridge0: left allmulticast mode
[  112.484052][T10973] netlink: 'syz.1.2201': attribute type 1 has an invalid length.
[  112.487397][T10973] netlink: 'syz.1.2201': attribute type 3 has an invalid length.
[  112.574981][T10991] netlink: 'syz.0.2209': attribute type 1 has an invalid length.
[  112.704802][T11011] sock: sock_timestamping_bind_phc: sock not bind to device
[  112.742264][T11017] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  112.828441][T11023] syzkaller0: entered promiscuous mode
[  112.834342][T11023] syzkaller0: entered allmulticast mode
[  112.995907][T11047] netlink: 'syz.1.2237': attribute type 1 has an invalid length.
[  112.999542][T11047] netlink: 'syz.1.2237': attribute type 1 has an invalid length.
[  113.571586][T11123] netlink: 'syz.0.2272': attribute type 7 has an invalid length.
[  113.574397][T11123] netlink: 'syz.0.2272': attribute type 8 has an invalid length.
[  113.728248][T11136] tc_dump_action: action bad kind
[  114.449040][T11159] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  114.887705][T11202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.890986][T11202] syzkaller0: entered promiscuous mode
[  114.892930][T11202] syzkaller0: entered allmulticast mode
[  114.900981][T11202] tipc: Resetting bearer <eth:syzkaller0>
[  114.904515][T11201] tipc: Resetting bearer <eth:syzkaller0>
[  114.908622][T11201] tipc: Disabling bearer <eth:syzkaller0>
[  115.183348][T11227] __nla_validate_parse: 10 callbacks suppressed
[  115.183362][T11227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2312'.
[  115.330196][ T5880] Bluetooth: hci2: link tx timeout
[  115.332360][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.384079][   T33] audit: type=1800 audit(1756157609.554:4): pid=11215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2312" name="cgroup.controllers" dev="tmpfs" ino=4067 res=0 errno=0
[  115.425095][T11235] netlink: 'syz.0.2320': attribute type 4 has an invalid length.
[  115.601369][T11245] IPVS: Scheduler module ip_vs_sip not found
[  115.654065][T11248] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.669315][T11248] bond5: (slave ip6gretap1): making interface the new active one
[  115.673348][T11248] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  115.762972][T11259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2331'.
[  115.814778][T11265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.817445][T11265] syzkaller0: entered promiscuous mode
[  115.819461][T11265] syzkaller0: entered allmulticast mode
[  115.825506][T11265] tipc: Resetting bearer <eth:syzkaller0>
[  115.829200][T11264] tipc: Resetting bearer <eth:syzkaller0>
[  115.835247][T11264] tipc: Disabling bearer <eth:syzkaller0>
[  115.997895][T11287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2345'.
[  116.215075][T11319] validate_nla: 1 callbacks suppressed
[  116.215086][T11319] netlink: 'syz.1.2360': attribute type 3 has an invalid length.
[  116.220436][T11319] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2360'.
[  116.266900][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'.
[  116.407247][T11338] syzkaller0: entered promiscuous mode
[  116.410496][T11338] syzkaller0: entered allmulticast mode
[  116.513581][T11350] openvswitch: netlink: IPv4 tun info is not correct
[  116.583204][T11360] netlink: 'syz.1.2379': attribute type 1 has an invalid length.
[  116.614076][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2381'.
[  116.618918][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2381'.
[  116.622856][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2381'.
[  116.634029][T11362] lo speed is unknown, defaulting to 1000
[  116.710535][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.028695][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2393'.
[  117.126148][T11404] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.131734][T11404] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.224774][T11405] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2399'.
[  117.343571][T11429] lo speed is unknown, defaulting to 1000
[  117.359079][ T5232] Bluetooth: hci2: command 0x0406 tx timeout
[  118.263168][T11467] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  118.426884][T11495] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0
[  118.697844][   T33] audit: type=1800 audit(1756157612.864:5): pid=11531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2458" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4219 res=0 errno=0
[  118.825974][T11549] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.831811][T11549] bridge_slave_1: left allmulticast mode
[  118.834291][T11549] bridge_slave_1: left promiscuous mode
[  118.843146][T11549] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.848241][T11549] bond0: (slave bond_slave_0): Releasing backup interface
[  118.852442][T11549] bond_slave_0: left promiscuous mode
[  118.856481][T11549] bond0: (slave bond_slave_1): Releasing backup interface
[  118.861613][T11549] bond_slave_1: left promiscuous mode
[  118.864313][T11549] team_slave_0: left promiscuous mode
[  118.867838][T11549] team0: Port device team_slave_0 removed
[  118.871430][T11549] team_slave_1: left promiscuous mode
[  118.874443][T11549] team0: Port device team_slave_1 removed
[  118.877011][T11549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.881360][T11549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.885003][T11549] bond1: (slave geneve2): Releasing active interface
[  118.887854][T11549] geneve2: left promiscuous mode
[  118.891971][T11549] bond0: (slave bond3): Releasing backup interface
[  118.895567][T11549] bond3: left promiscuous mode
[  118.955458][T11558] lo speed is unknown, defaulting to 1000
[  119.147220][T11574] batadv_slave_0: entered promiscuous mode
[  119.162945][T11574] batadv_slave_0: entered allmulticast mode
[  119.310516][T11583] netlink: 'syz.0.2481': attribute type 18 has an invalid length.
[  119.401200][T11597] netlink: 'syz.0.2488': attribute type 10 has an invalid length.
[  119.467179][T11600] lo speed is unknown, defaulting to 1000
[  119.607506][T11625] netlink: 'syz.0.2499': attribute type 10 has an invalid length.
[  119.614187][T11625] dummy0: entered promiscuous mode
[  119.616911][T11625] team0: Port device dummy0 added
[  119.620576][T11625] netlink: 'syz.0.2499': attribute type 10 has an invalid length.
[  119.623810][T11625] dummy0: left promiscuous mode
[  119.640623][T11625] team0: Port device dummy0 removed
[  119.791342][T11648] netlink: 'syz.0.2510': attribute type 9 has an invalid length.
[  119.794543][T11648] netlink: 'syz.0.2510': attribute type 6 has an invalid length.
[  119.805908][T11644] tipc: Resetting bearer <eth:team0>
[  119.811455][T11644] bond0: left promiscuous mode
[  120.048702][T11684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.194401][T11700] __nla_validate_parse: 13 callbacks suppressed
[  120.194415][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2535'.
[  120.314513][T11710] pimreg: entered allmulticast mode
[  120.332786][T11710] dvmrp0: left allmulticast mode
[  120.334960][T11710] pimreg: left allmulticast mode
[  120.573378][T11720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2544'.
[  120.620299][T11727] netlink: 'syz.0.2547': attribute type 1 has an invalid length.
[  120.622977][T11727] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2547'.
[  120.626678][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'.
[  120.915008][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'.
[  120.918611][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'.
[  120.922535][T11750] netlink: 'syz.0.2557': attribute type 12 has an invalid length.
[  121.071276][T11757] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  121.149880][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'.
[  121.513979][T11798] netlink: 'syz.1.2580': attribute type 11 has an invalid length.
[  121.876483][T11832] delete_channel: no stack
[  122.162276][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'.
[  122.165974][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'.
[  122.169818][T11852] validate_nla: 1 callbacks suppressed
[  122.169828][T11852] netlink: 'syz.2.2604': attribute type 5 has an invalid length.
[  122.175391][T11852] netlink: 'syz.2.2604': attribute type 6 has an invalid length.
[  122.419460][T11872] lo: entered allmulticast mode
[  122.878004][T11909] netlink: 'syz.2.2632': attribute type 11 has an invalid length.
[  122.885368][T11909] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2632'.
[  122.953417][T11917] bridge0: entered allmulticast mode
[  122.958205][T11913] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  122.958608][T11917] bridge0 (unregistering): left allmulticast mode
[  123.141112][T11931] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  123.272768][T11949] batadv_slave_1: entered promiscuous mode
[  123.280754][T11948] batadv_slave_1: left promiscuous mode
[  123.550399][T11982] netlink: 'syz.0.2664': attribute type 1 has an invalid length.
[  123.559004][T11982] netlink: 'syz.0.2664': attribute type 1 has an invalid length.
[  123.606312][T11985] openvswitch: netlink: Multiple metadata blocks provided
[  123.672812][T11988] batadv_slave_0: left promiscuous mode
[  123.675194][T11988] batadv_slave_0: left allmulticast mode
[  123.678367][T11988] veth0_vlan: left allmulticast mode
[  123.689041][T11988] vlan0: left promiscuous mode
[  123.693001][T11988] veth3: left promiscuous mode
[  123.695514][T11988] vti0: left promiscuous mode
[  123.721749][T11988] @: renamed from veth0_vlan
[  124.187586][T12009] lo speed is unknown, defaulting to 1000
[  125.065784][T12064] netlink: 'syz.0.2701': attribute type 3 has an invalid length.
[  125.068366][T12064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  125.129014][T12074] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  125.311358][T12100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.313929][T12100] IPv6: NLM_F_CREATE should be set when creating new route
[  125.316370][T12100] IPv6: NLM_F_CREATE should be set when creating new route
[  125.443008][T12120] __nla_validate_parse: 11 callbacks suppressed
[  125.443022][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'.
[  125.603087][T12129] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  125.606771][T12129] syzkaller0: entered promiscuous mode
[  125.608595][T12129] syzkaller0: entered allmulticast mode
[  125.722744][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2734'.
[  126.206183][T12159] : entered promiscuous mode
[  126.227858][T12161] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  126.277369][T12165] netlink: 'syz.0.2747': attribute type 1 has an invalid length.
[  126.281221][T12165] netlink: 'syz.0.2747': attribute type 2 has an invalid length.
[  126.500664][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2751'.
[  126.526228][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2753'.
[  126.562046][T12183] tun0: tun_chr_ioctl cmd 1074025672
[  126.565383][T12183] tun0: ignored: set checksum disabled
[  126.613023][T12187] tap0: tun_chr_ioctl cmd 1074025677
[  126.615499][T12187] tap0: linktype set to 804
[  126.700816][T12200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2762'.
[  126.747232][T12208] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  126.978862][T12243] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  127.105632][T12261] lo speed is unknown, defaulting to 1000
[  127.112098][T12267] netlink: 'syz.2.2794': attribute type 11 has an invalid length.
[  127.164113][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2798'.
[  127.404732][T12305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2811'.
[  127.457895][T12314] netlink: 'syz.0.2815': attribute type 1 has an invalid length.
[  127.468809][T12314] netlink: 'syz.0.2815': attribute type 1 has an invalid length.
[  128.709510][T12314] netlink: 'syz.0.2815': attribute type 1 has an invalid length.
[  128.716555][T12314] 8021q: adding VLAN 0 to HW filter on device bond6
[  128.721148][T12314] bond6: (slave wlan0): Enslaving as an active interface with a down link
[  128.734132][T12328] netlink: 'syz.2.2821': attribute type 1 has an invalid length.
[  128.738866][T12328] netlink: 'syz.2.2821': attribute type 3 has an invalid length.
[  128.742265][T12328] netlink: 564 bytes leftover after parsing attributes in process `syz.2.2821'.
[  128.997390][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2841'.
[  129.033841][T12375] netlink: 'syz.0.2843': attribute type 1 has an invalid length.
[  129.176309][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2851'.
[  129.984299][T12422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.142088][T12400] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  130.275301][T12447] veth0_to_bond: left allmulticast mode
[  130.277932][T12447] vlan0: left promiscuous mode
[  130.280425][T12447] ip6erspan0: left promiscuous mode
[  130.282326][T12447] macvlan3: left promiscuous mode
[  130.284613][T12447] ip6tnl2: left promiscuous mode
[  130.286648][T12447] ip6tnl2: left allmulticast mode
[  130.369825][T12459] smc: net device bond0 applied user defined pnetid SYZ2
[  130.373443][T12461] netlink: 'syz.1.2884': attribute type 1 has an invalid length.
[  130.570560][T12484] __nla_validate_parse: 2 callbacks suppressed
[  130.570578][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'.
[  131.166964][T12517] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2907'.
[  131.226050][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'.
[  131.277936][T12523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.284485][T12523] syzkaller0: entered promiscuous mode
[  131.286882][T12523] syzkaller0: entered allmulticast mode
[  131.300350][T12523] tipc: Resetting bearer <eth:syzkaller0>
[  131.304530][T12522] tipc: Resetting bearer <eth:syzkaller0>
[  131.315988][T12522] tipc: Disabling bearer <eth:syzkaller0>
[  131.415008][T12529] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  131.447191][T12527] syzkaller0: entered promiscuous mode
[  131.450404][T12527] syzkaller0: entered allmulticast mode
[  131.588127][T12535] netlink: 'syz.2.2916': attribute type 9 has an invalid length.
[  131.593708][T12535] netlink: 'syz.2.2916': attribute type 9 has an invalid length.
[  131.617667][T12537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2917'.
[  131.961875][T12566] netlink: 'syz.1.2931': attribute type 12 has an invalid length.
[  132.012227][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2935'.
[  132.044060][T12581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.492608][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2949'.
[  132.644271][ T1360] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  132.739863][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2962'.
[  132.753503][T12645] lo speed is unknown, defaulting to 1000
[  132.755474][T12645] lo speed is unknown, defaulting to 1000
[  132.776625][T12645] lo speed is unknown, defaulting to 1000
[  132.786392][T12645] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  132.813299][T12645] lo speed is unknown, defaulting to 1000
[  132.815693][T12645] lo speed is unknown, defaulting to 1000
[  132.821477][T12645] lo speed is unknown, defaulting to 1000
[  132.854766][T12657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2968'.
[  132.858258][T12657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2968'.
[  132.865213][T12657] gretap0: entered promiscuous mode
[  132.868346][T12657] gretap0: left promiscuous mode
[  132.903917][T12661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.184584][T12698] sctp: [Deprecated]: syz.1.2988 (pid 12698) Use of int in max_burst socket option.
[  133.184584][T12698] Use struct sctp_assoc_value instead
[  133.212213][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2990'.
[  133.364456][T12720] IPVS: sh: FWM 3 0x00000003 - no destination available
[  133.384955][T12720] lo speed is unknown, defaulting to 1000
[  133.391758][T12720] lo speed is unknown, defaulting to 1000
[  133.508951][T12735] block nbd3: server does not support multiple connections per device.
[  133.512346][T12735] block nbd3: shutting down sockets
[  133.744028][T12762] vlan2: entered promiscuous mode
[  133.746101][T12762] bond0: entered promiscuous mode
[  134.987742][T12860] netlink: del zone limit has 4 unknown bytes
[  135.095320][T12885] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  135.229926][T12904] batman_adv: batadv0: Adding interface: ip6gretap1
[  135.232377][T12904] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  135.243415][T12904] batman_adv: batadv0: Interface activated: ip6gretap1
[  135.246656][T12904] tipc: Resetting bearer <eth:batadv0>
[  135.320227][T12910] batadv_slave_1: entered promiscuous mode
[  135.323395][T12909] batadv_slave_1: left promiscuous mode
[  135.345976][T12912] gretap2: entered promiscuous mode
[  135.348423][T12912] gretap2: entered allmulticast mode
[  135.561272][T12932] netlink: 'syz.2.3096': attribute type 26 has an invalid length.
[  135.809102][T12952] netlink: 'syz.2.3105': attribute type 1 has an invalid length.
[  135.811914][T12952] __nla_validate_parse: 9 callbacks suppressed
[  135.811921][T12952] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3105'.
[  135.998547][T12963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3110'.
[  136.034630][T12967] netlink: 'syz.1.3112': attribute type 1 has an invalid length.
[  136.037866][T12967] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3112'.
[  136.042530][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3112'.
[  136.063756][T12974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3107'.
[  136.070495][T12973] pim6reg: entered allmulticast mode
[  136.074627][T12973] pim6reg: left allmulticast mode
[  136.205884][T12985] netlink: 'syz.1.3120': attribute type 1 has an invalid length.
[  136.236787][T12991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3123'.
[  136.244280][T12991] IPv6: sit2: Disabled Multicast RS
[  136.246628][T12991] sit2: entered allmulticast mode
[  136.706883][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'.
[  136.765003][T13019] syzkaller0: entered promiscuous mode
[  136.766975][T13019] syzkaller0: entered allmulticast mode
[  137.092781][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'.
[  137.190879][T13044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3146'.
[  137.259580][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3149'.
[  137.292503][T13052] netlink: 'syz.1.3150': attribute type 9 has an invalid length.
[  137.454465][ T5883] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.458597][ T5883] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.466690][ T5883] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.473748][ T5883] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.982670][T13113] netlink: 'syz.2.3179': attribute type 2 has an invalid length.
[  138.179702][T13123] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  138.958793][ T5880] Bluetooth: hci2: command 0x0406 tx timeout
[  139.160268][T13152] netlink: 'syz.2.3197': attribute type 10 has an invalid length.
[  139.163168][T13152] team0: Cannot enslave team device to itself
[  139.410162][T13183] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  139.414632][T13183] syzkaller0: entered promiscuous mode
[  139.416754][T13183] syzkaller0: entered allmulticast mode
[  139.555770][T13199] bridge0: port 1(erspan0) entered blocking state
[  139.557980][T13199] bridge0: port 1(erspan0) entered disabled state
[  139.560707][T13199] erspan0: entered allmulticast mode
[  139.562883][T13199] erspan0: entered promiscuous mode
[  139.603576][T13199] erspan0: left allmulticast mode
[  139.605945][T13199] erspan0: left promiscuous mode
[  139.608356][T13199] bridge0: port 1(erspan0) entered disabled state
[  139.669946][T13211] openvswitch: netlink: IPv4 tun info is not correct
[  139.686704][T13213] netlink: 'syz.1.3223': attribute type 21 has an invalid length.
[  139.691054][T13213] netlink: 'syz.1.3223': attribute type 1 has an invalid length.
[  139.907601][T13235] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  139.913123][T13235] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  139.916102][T13235] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  140.075000][T13249] netlink: 'syz.2.3241': attribute type 1 has an invalid length.
[  140.353673][T13290] lo speed is unknown, defaulting to 1000
[  140.356052][T13290] lo speed is unknown, defaulting to 1000
[  140.542242][ T5883] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  140.551947][T13309] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  140.813252][T13314] validate_nla: 1 callbacks suppressed
[  140.813262][T13314] netlink: 'syz.0.3269': attribute type 1 has an invalid length.
[  140.818924][T13314] __nla_validate_parse: 9 callbacks suppressed
[  140.818933][T13314] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3269'.
[  140.824362][T13314] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3269'.
[  140.941492][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3271'.
[  141.146776][T13335] bridge0: failed insert local address into bridge forwarding table
[  141.152354][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3279'.
[  141.387493][T13351] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3285'.
[  141.391199][T13351] unsupported nlmsg_type 40
[  141.553741][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'.
[  141.556675][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'.
[  141.639093][T13387] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  141.656023][T13387] bond7: entered promiscuous mode
[  141.658240][T13387] bond7: entered allmulticast mode
[  141.664277][T13387] 8021q: adding VLAN 0 to HW filter on device bond7
[  141.812695][T13407] netlink: 41 bytes leftover after parsing attributes in process `syz.2.3311'.
[  142.575143][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'.
[  142.578864][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'.
[  142.645270][T13432] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  142.650864][T13432] Bluetooth: MGMT ver 1.23
[  142.660138][T13434] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  142.820579][T13450] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  142.825286][T13450] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  143.092124][T13488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.107367][T13488] syzkaller0: entered promiscuous mode
[  143.110412][T13488] syzkaller0: entered allmulticast mode
[  143.112766][T13488] tipc: Resetting bearer <eth:syzkaller0>
[  143.123022][T13487] tipc: Resetting bearer <eth:syzkaller0>
[  143.154668][T13487] tipc: Disabling bearer <eth:syzkaller0>
[  143.429780][T13529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  143.433720][T13529] gretap4: entered promiscuous mode
[  143.435946][T13529] gretap4: entered allmulticast mode
[  143.525301][T13541] netlink: 'syz.0.3373': attribute type 39 has an invalid length.
[  143.643203][T13553] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  143.646295][T13553] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  143.747981][T13569] 8021q: adding VLAN 0 to HW filter on device bond5
[  143.760096][T13569] bond5: entered promiscuous mode
[  143.763145][T13569] macvlan4: entered promiscuous mode
[  143.765493][T13569] macvlan4: entered allmulticast mode
[  143.767312][T13569] bond5: entered allmulticast mode
[  143.770544][T13569] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  143.942124][T13594] netlink: 'syz.0.3396': attribute type 1 has an invalid length.
[  144.718879][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  144.719187][ T5232] Bluetooth: hci2: command 0x0406 tx timeout
[  144.722613][ T5880] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  144.832091][T13621] netlink: 'syz.1.3408': attribute type 4 has an invalid length.
[  145.077361][T13631] IPVS: Scheduler module ip_vs_sip not found
[  145.210329][T13640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.214758][T13640] tipc: Failed to remove unknown binding: 66,1,1/1004177680:1192082819/1192082821
[  145.218415][T13640] tipc: Failed to remove unknown binding: 66,1,1/1004177680:1192082819/1192082821
[  145.221579][T13640] tipc: Failed to remove unknown binding: 66,1,1/1004177680:1192082819/1192082821
[  145.681004][T13695] netlink: 'syz.0.3442': attribute type 4 has an invalid length.
[  145.750928][T13704] lo speed is unknown, defaulting to 1000
[  145.753330][T13704] lo speed is unknown, defaulting to 1000
[  145.783263][T13704] netlink: 'syz.2.3446': attribute type 5 has an invalid length.
[  145.791239][ T5913] IPVS: starting estimator thread 0...
[  145.878846][T13708] IPVS: using max 134 ests per chain, 321600 per kthread
[  146.052004][ T5883] IPVS: stop unused estimator thread 0...
[  146.055161][T13744] netlink: 'syz.2.3463': attribute type 1 has an invalid length.
[  146.243664][T13769] lo speed is unknown, defaulting to 1000
[  146.246086][T13769] lo speed is unknown, defaulting to 1000
[  146.347642][T13769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.352323][T13768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.503924][T13774] __nla_validate_parse: 11 callbacks suppressed
[  146.503933][T13774] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3476'.
[  146.820822][T13807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3492'.
[  146.894825][T13821] macsec1: entered promiscuous mode
[  146.948447][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'.
[  146.996364][T13842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3509'.
[  146.997530][T13825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.120529][T13864] netlink: 'syz.2.3519': attribute type 12 has an invalid length.
[  147.860719][T13891] netlink: 'syz.1.3530': attribute type 2 has an invalid length.
[  147.890332][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3531'.
[  147.894130][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3531'.
[  147.942759][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'.
[  147.949521][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3536'.
[  148.130800][T13936] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  148.151691][T13940] netlink: 'syz.0.3551': attribute type 8 has an invalid length.
[  148.256398][T13957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3554'.
[  148.266754][T13964] netlink: 'syz.1.3560': attribute type 11 has an invalid length.
[  148.310567][T13972] netlink: 'syz.1.3564': attribute type 23 has an invalid length.
[  148.460218][T14002] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3572'.
[  149.493383][T14097] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  149.650152][T14126] netlink: 'syz.2.3632': attribute type 6 has an invalid length.
[  149.662295][T14128] syzkaller1: entered promiscuous mode
[  149.665271][T14128] syzkaller1: entered allmulticast mode
[  149.701547][T14134] netlink: 'syz.0.3636': attribute type 4 has an invalid length.
[  149.707079][T14134] netlink: 'syz.0.3636': attribute type 4 has an invalid length.
[  149.711652][ T7702] lo speed is unknown, defaulting to 1000
[  149.714057][ T7702] syz1: Port: 1 Link ACTIVE
[  149.718407][ T7691] lo speed is unknown, defaulting to 1000
[  149.721134][ T7691] syz1: Port: 1 Link DOWN
[  149.771628][T14144] tipc: Bearer <ib:ip6gre0>: already 2 bearers with priority 10
[  149.774894][T14144] tipc: Bearer <ib:ip6gre0>: trying with adjusted priority
[  149.777984][T14144] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  150.038465][T14175] netlink: 'syz.2.3656': attribute type 7 has an invalid length.
[  150.285684][T14198] syzkaller1: entered promiscuous mode
[  150.288126][T14198] syzkaller1: entered allmulticast mode
[  150.361457][T14204] vlan0: entered allmulticast mode
[  150.363702][T14204] bond0: entered allmulticast mode
[  150.603033][T14237] netlink: 'syz.2.3685': attribute type 9 has an invalid length.
[  150.931030][ T5737] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.934412][ T5737] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.938546][ T5737] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.945658][ T5737] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.984581][T14267] lo speed is unknown, defaulting to 1000
[  150.987360][T14267] lo speed is unknown, defaulting to 1000
[  150.989658][T14267] lo speed is unknown, defaulting to 1000
[  151.034610][ T7702] lo speed is unknown, defaulting to 1000
[  151.041459][T14267] infiniband syz0: set down
[  151.045416][T14267] infiniband syz0: added lo
[  151.080565][T14267] RDS/IB: syz0: added
[  151.091597][T14267] smc: adding ib device syz0 with port count 1
[  151.100146][T14267] smc:    ib device syz0 port 1 has pnetid SYZ1 (user defined)
[  151.114247][T14270] 8021q: adding VLAN 0 to HW filter on device team0
[  151.116914][T14270] tipc: Resetting bearer <eth:team0>
[  151.120460][T14270] tipc: Resetting bearer <eth:team0>
[  151.124343][T14270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.130134][ T7691] lo speed is unknown, defaulting to 1000
[  151.136687][ T7691] syz0: Port: 1 Link ACTIVE
[  151.138933][ T7700] lo speed is unknown, defaulting to 1000
[  151.141645][T14267] lo speed is unknown, defaulting to 1000
[  151.205059][T14267] lo speed is unknown, defaulting to 1000
[  151.273203][T14267] lo speed is unknown, defaulting to 1000
[  151.421703][T14277] validate_nla: 1 callbacks suppressed
[  151.421715][T14277] netlink: 'syz.1.3700': attribute type 1 has an invalid length.
[  151.426466][T14277] netlink: 'syz.1.3700': attribute type 1 has an invalid length.
[  151.521731][T14277] netlink: 'syz.1.3700': attribute type 1 has an invalid length.
[  151.540383][T14277] 8021q: adding VLAN 0 to HW filter on device bond7
[  151.551545][T14277] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  151.556798][T14277] bond7: (slave wlan0): Enslaving as an active interface with a down link
[  151.568612][T14277] vlan2: entered allmulticast mode
[  151.572065][T14277] veth1: entered allmulticast mode
[  151.574733][T14277] bond7: (slave vlan2): Opening slave failed
[  151.788311][T14289] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  151.870863][T14299] __nla_validate_parse: 13 callbacks suppressed
[  151.870877][T14299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3710'.
[  152.050371][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'.
[  152.068150][T14340] team0: Device macvlan2 is already an upper device of the team interface
[  152.352843][T14351] lo speed is unknown, defaulting to 1000
[  152.355904][T14351] lo speed is unknown, defaulting to 1000
[  152.359845][T14351] lo speed is unknown, defaulting to 1000
[  152.505265][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'.
[  152.892634][T14365] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3738'.
[  152.997270][ T5906] lo speed is unknown, defaulting to 1000
[  153.216768][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3761'.
[  153.370730][T14430] tipc: Resetting bearer <eth:team0>
[  153.382011][T14430] syzkaller0: left promiscuous mode
[  153.384022][T14430] syzkaller0: left allmulticast mode
[  153.386932][T14430] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  153.394712][T14430] bond5: left promiscuous mode
[  153.396468][T14430] macvlan4: left promiscuous mode
[  153.398132][T14430] macvlan4: left allmulticast mode
[  153.403203][ T5906] lo speed is unknown, defaulting to 1000
[  153.405241][ T5906] syz0: Port: 1 Link DOWN
[  153.407306][ T7691] lo speed is unknown, defaulting to 1000
[  153.666447][T14479] IPVS: sh: FWM 3 0x00000003 - no destination available
[  154.143670][T14495] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3796'.
[  155.421393][T14555] delete_channel: no stack
[  155.561185][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3835'.
[  155.603644][T14578] lo speed is unknown, defaulting to 1000
[  155.606644][T14578] lo speed is unknown, defaulting to 1000
[  155.609686][T14578] lo speed is unknown, defaulting to 1000
[  155.772579][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3836'.
[  155.776419][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3836'.
[  156.411548][T14616] Unsupported ieee802154 address type: 0
[  156.414251][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3853'.
[  156.469691][T14622] netlink: 'syz.2.3855': attribute type 10 has an invalid length.
[  156.591658][T14641] vlan0: entered promiscuous mode
[  156.613626][T14645] netlink: 'syz.2.3866': attribute type 22 has an invalid length.
[  156.616249][T14645] bond0: option ad_select: invalid value (8)
[  156.646934][T14647] syzkaller1: entered promiscuous mode
[  156.652142][T14647] syzkaller1: entered allmulticast mode
[  157.002084][T14676] netlink: 'syz.0.3881': attribute type 12 has an invalid length.
[  157.005216][T14676] __nla_validate_parse: 6 callbacks suppressed
[  157.005228][T14676] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3881'.
[  157.044234][T14691] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  157.116310][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3894'.
[  157.123495][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3894'.
[  157.162922][T14709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.499805][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3903'.
[  157.505962][T14728] netlink: 'syz.1.3904': attribute type 1 has an invalid length.
[  157.528122][T14728] bond8: entered promiscuous mode
[  157.531539][T14728] bond8: entered allmulticast mode
[  157.535050][T14728] 8021q: adding VLAN 0 to HW filter on device bond8
[  157.542241][T14728] bridge6: entered promiscuous mode
[  157.544392][T14728] bridge6: entered allmulticast mode
[  157.546502][T14728] bond8: (slave bridge6): Enslaving as a backup interface with an up link
[  157.784973][T14747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3912'.
[  158.684732][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3925'.
[  158.709024][T14783] netlink: 'syz.0.3927': attribute type 4 has an invalid length.
[  159.231508][T14820] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3945'.
[  159.585157][T14831] batman_adv: batadv0: Adding interface: ip6gretap1
[  159.587523][T14831] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.596156][T14831] batman_adv: batadv0: Interface activated: ip6gretap1
[  159.758880][ T5880] Bluetooth: hci2: command 0x0406 tx timeout
[  159.766725][T14848] netlink: 'syz.0.3958': attribute type 11 has an invalid length.
[  160.118886][T14877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3970'.
[  160.122310][T14877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3970'.
[  160.125655][T14877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3970'.
[  160.166835][T14882] openvswitch: netlink: IPv6 tunnel dst address is zero
[  160.254244][T14890] sit0: entered promiscuous mode
[  160.256521][T14890] netlink: 'syz.2.3976': attribute type 1 has an invalid length.
[  160.300059][T14894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.688894][T14946] svc: failed to register nfsdv3 RPC service (errno 111).
[  160.691863][T14946] svc: failed to register nfsaclv3 RPC service (errno 111).
[  161.170478][T15029] netlink: 'syz.2.4037': attribute type 5 has an invalid length.
[  161.515355][T15071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.114546][T15088] openvswitch: netlink: Key type 29 is not supported
[  162.357207][T15097] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  162.541223][T15121] __nla_validate_parse: 137 callbacks suppressed
[  162.541233][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4079'.
[  162.594992][T15130] netlink: 'syz.2.4085': attribute type 1 has an invalid length.
[  162.597636][T15130] netlink: 'syz.2.4085': attribute type 4 has an invalid length.
[  162.600672][T15130] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4085'.
[  162.604575][T15130] netlink: 'syz.2.4085': attribute type 1 has an invalid length.
[  162.607160][T15130] netlink: 'syz.2.4085': attribute type 4 has an invalid length.
[  162.611614][T15130] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4085'.
[  162.627382][T15133] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4083'.
[  163.279943][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'.
[  163.283641][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'.
[  163.382428][T15202] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4114'.
[  163.385819][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4114'.
[  163.388846][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4114'.
[  163.483420][T15211] sit2: left allmulticast mode
[  163.485506][T15211] bond7: left promiscuous mode
[  163.499074][T15211] bond7: left allmulticast mode
[  163.669239][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'.
[  163.853846][T15232] macvlan2: entered promiscuous mode
[  163.857953][T15232] macvlan2: entered allmulticast mode
[  163.862021][T15232] bond8: (slave macvlan2): Opening slave failed
[  163.956643][T15249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.130214][T15275] netlink: 'syz.0.4149': attribute type 1 has an invalid length.
[  164.133277][T15275] netlink: 'syz.0.4149': attribute type 2 has an invalid length.
[  164.225382][T15282] batadv_slave_0: entered promiscuous mode
[  164.350379][T15286] dvmrp8: entered allmulticast mode
[  164.354349][T15285] dvmrp8: left allmulticast mode
[  164.464507][T15292] netlink: 'syz.2.4156': attribute type 20 has an invalid length.
[  164.624495][T15320] tap0: tun_chr_ioctl cmd 1074025677
[  164.626800][T15320] tap0: linktype set to 0
[  165.680996][T15389] batadv0: entered promiscuous mode
[  165.683943][T15389] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  165.687470][T15389] batadv0: left promiscuous mode
[  165.859985][T15396] syz_tun: entered allmulticast mode
[  165.866484][T15396] dvmrp1: entered allmulticast mode
[  165.872163][T15395] syz_tun: left allmulticast mode
[  166.104705][T15420] tc_dump_action: action bad kind
[  166.403801][T15463] netlink: 'syz.0.4233': attribute type 1 has an invalid length.
[  166.409285][T15461] netlink: 'syz.1.4234': attribute type 1 has an invalid length.
[  166.412094][T15461] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.444452][T15463] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  166.449039][T15463] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  166.452718][T15463] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  166.649727][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.652407][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.661591][T15484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.665146][T15484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.531612][T15515] netlink: 'syz.0.4257': attribute type 99 has an invalid length.
[  167.543146][T15517] veth1: entered promiscuous mode
[  167.545321][T15517] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  167.564894][T15520] __nla_validate_parse: 20 callbacks suppressed
[  167.564909][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4259'.
[  167.571882][T15520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4259'.
[  167.580352][T15520] gretap0: entered promiscuous mode
[  167.583212][T15520] batadv_slave_1: entered promiscuous mode
[  167.587058][T15520] erspan0: entered promiscuous mode
[  167.589796][T15520] hsr2: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  167.593662][T15520] hsr2: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.600374][T15520] hsr2: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  167.758250][T15539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.761752][T15539] syzkaller0: entered promiscuous mode
[  167.763809][T15539] syzkaller0: entered allmulticast mode
[  167.770473][T15539] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  167.775083][T15539] tipc: Resetting bearer <eth:syzkaller0>
[  167.778635][T15538] tipc: Resetting bearer <eth:syzkaller0>
[  167.783466][T15538] tipc: Disabling bearer <eth:syzkaller0>
[  168.840721][T15558] validate_nla: 3 callbacks suppressed
[  168.840732][T15558] netlink: 'syz.2.4277': attribute type 1 has an invalid length.
[  168.845428][T15558] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4277'.
[  168.972146][T15574] netlink: 'syz.1.4284': attribute type 10 has an invalid length.
[  168.988479][T15570] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.4283'.
[  169.062717][T15584] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  169.072543][T15584] syzkaller0: entered promiscuous mode
[  169.074593][T15584] syzkaller0: entered allmulticast mode
[  169.102684][T15590] netlink: 'syz.1.4292': attribute type 10 has an invalid length.
[  169.106082][T15590] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  169.157184][T15596] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4295'.
[  169.175596][T15598] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4296'.
[  169.312148][T15614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.301704][T15656] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4323'.
[  170.365531][T15663] lo speed is unknown, defaulting to 1000
[  170.367844][T15663] lo speed is unknown, defaulting to 1000
[  170.370341][T15663] lo speed is unknown, defaulting to 1000
[  170.417308][T15667] geneve4: entered allmulticast mode
[  170.424970][ T5737] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.428330][ T5737] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.434976][ T5737] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.438300][ T5737] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.445368][T15668] syzkaller1: entered promiscuous mode
[  170.447412][T15668] syzkaller1: entered allmulticast mode
[  174.245347][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4332'.
[  174.451180][T15699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.469999][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4339'.
[  174.489593][T15699] siw: device registration error -23
[  174.671017][T15747] lo speed is unknown, defaulting to 1000
[  174.674157][T15747] lo speed is unknown, defaulting to 1000
[  174.677154][T15747] lo speed is unknown, defaulting to 1000
[  175.614962][T15806] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4386'.
[  175.679935][ T5880] Bluetooth: hci1: command 0x0406 tx timeout
[  175.715372][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4389'.
[  175.718611][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4389'.
[  175.721960][T15813] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  175.866269][T15828] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4396'.
[  175.975363][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'.
[  175.982343][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4402'.
[  176.107377][T15854] bond7: (slave wlan0): Releasing active interface
[  176.111335][T15854] batman_adv: batadv0: Removing interface: ip6gretap1
[  176.115146][T15854] bond8: (slave bridge6): Releasing backup interface
[  176.118404][T15854] bridge6: left promiscuous mode
[  176.122480][T15854] bridge6: left allmulticast mode
[  176.129628][T15854] rdma_op ffff8880356641f0 conn xmit_rdma 0000000000000000
[  176.135582][T15854] netlink: 'syz.1.4407': attribute type 10 has an invalid length.
[  176.139808][T15854] bond0: (slave wlan1): refused to change device type
[  176.269625][T15855] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  176.874266][T15882] veth1_to_bond: entered allmulticast mode
[  176.878235][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4420'.
[  176.889146][T15882] veth1_to_bond (unregistering): left allmulticast mode
[  177.024381][T15891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4425'.
[  177.395745][T15949] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  177.975528][T15995] netlink: 'syz.0.4471': attribute type 6 has an invalid length.
[  177.979097][T15995] netlink: 'syz.0.4471': attribute type 5 has an invalid length.
[  178.775107][T16046] pimreg: entered allmulticast mode
[  179.087220][T16066] syzkaller0: entered promiscuous mode
[  179.090590][T16066] syzkaller0: entered allmulticast mode
[  179.278909][ T5880] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  179.374350][T16112] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  179.398975][T16118] __nla_validate_parse: 8 callbacks suppressed
[  179.398989][T16118] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4529'.
[  179.444748][T16124] netlink: 'syz.1.4532': attribute type 7 has an invalid length.
[  179.447988][T16124] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4532'.
[  179.461493][T16127] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4534'.
[  179.572260][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4535'.
[  180.031281][T16174] syzkaller1: entered promiscuous mode
[  180.033539][T16174] syzkaller1: entered allmulticast mode
[  180.957180][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4576'.
[  180.969380][T16221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4576'.
[  180.973983][T16221] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  180.976329][T16221] tipc: Enabled bearer <udp:syz2>, priority 10
[  181.005722][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4577'.
[  181.021690][T16223] batadv_slave_1 (unregistering): left promiscuous mode
[  181.089682][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4583'.
[  181.108939][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  181.254124][T16255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4591'.
[  181.379001][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  181.771928][T16294] netlink: 'syz.0.4609': attribute type 9 has an invalid length.
[  181.774885][T16294] netlink: 'syz.0.4609': attribute type 7 has an invalid length.
[  181.777538][T16294] netlink: 'syz.0.4609': attribute type 8 has an invalid length.
[  181.909030][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  182.105158][T16320] macsec2: entered allmulticast mode
[  182.107404][T16320] dummy0: entered allmulticast mode
[  182.111907][T16320] dummy0: left allmulticast mode
[  182.355704][T16350] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  182.522876][T16375] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4647'.
[  182.565841][T16382] netlink: 'syz.2.4650': attribute type 1 has an invalid length.
[  182.569184][T16382] netlink: 'syz.2.4650': attribute type 1 has an invalid length.
[  182.636689][T16395] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  182.666815][T16394] lo speed is unknown, defaulting to 1000
[  182.670459][T16394] lo speed is unknown, defaulting to 1000
[  182.673780][T16394] lo speed is unknown, defaulting to 1000
[  182.836660][T16414] team1: entered promiscuous mode
[  182.839549][T16414] team1: entered allmulticast mode
[  182.842154][T16414] 8021q: adding VLAN 0 to HW filter on device team1
[  182.911698][T16431] netlink: 'syz.2.4674': attribute type 1 has an invalid length.
[  182.958370][T16436] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  182.959040][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  183.056435][T16444] netlink: 'syz.2.4680': attribute type 1 has an invalid length.
[  183.092614][T16448] netlink: 'syz.2.4682': attribute type 1 has an invalid length.
[  183.114687][T16448] 8021q: adding VLAN 0 to HW filter on device bond6
[  183.118481][T16448] bond5: (slave bond6): making interface the new active one
[  183.122709][T16448] bond5: (slave bond6): Enslaving as an active interface with an up link
[  183.143153][T16452] netlink: 'syz.2.4683': attribute type 3 has an invalid length.
[  183.614049][T16472] ==================================================================
[  183.616911][T16472] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  183.620157][T16472] Read of size 2 at addr ffff8881054257c2 by task syz.1.4692/16472
[  183.624074][T16472] 
[  183.625085][T16472] CPU: 1 UID: 0 PID: 16472 Comm: syz.1.4692 Not tainted syzkaller #0 PREEMPT(full) 
[  183.625098][T16472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.625104][T16472] Call Trace:
[  183.625109][T16472]  <TASK>
[  183.625113][T16472]  dump_stack_lvl+0x189/0x250
[  183.625128][T16472]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.625138][T16472]  ? lock_release+0x4b/0x3e0
[  183.625152][T16472]  ? __virt_addr_valid+0x4a5/0x5c0
[  183.625164][T16472]  print_report+0xca/0x240
[  183.625173][T16472]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  183.625181][T16472]  kasan_report+0x118/0x150
[  183.625193][T16472]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  183.625201][T16472]  __xfrm_state_lookup+0x6ad/0x8d0
[  183.625209][T16472]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  183.625217][T16472]  ? xfrm_state_lookup+0x45/0x1e0
[  183.625226][T16472]  xfrm_state_lookup+0x11e/0x1e0
[  183.625236][T16472]  pfkey_get+0x2ae/0x880
[  183.625246][T16472]  pfkey_sendmsg+0xbfe/0x1090
[  183.625254][T16472]  ? trace_sched_exit_tp+0x36/0x110
[  183.625269][T16472]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  183.625281][T16472]  ? rcu_is_watching+0x15/0xb0
[  183.625288][T16472]  ? futex_unqueue+0x22/0x240
[  183.625296][T16472]  ? aa_sock_msg_perm+0xf1/0x1d0
[  183.625304][T16472]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  183.625312][T16472]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  183.625319][T16472]  __sock_sendmsg+0x21c/0x270
[  183.625329][T16472]  ____sys_sendmsg+0x505/0x830
[  183.625337][T16472]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.625346][T16472]  ? import_iovec+0x74/0xa0
[  183.625356][T16472]  ___sys_sendmsg+0x21f/0x2a0
[  183.625363][T16472]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.625372][T16472]  ? futex_wait+0x285/0x360
[  183.625388][T16472]  ? __fget_files+0x2a/0x420
[  183.625394][T16472]  ? __fget_files+0x3a0/0x420
[  183.625402][T16472]  __x64_sys_sendmsg+0x19b/0x260
[  183.625410][T16472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  183.625419][T16472]  ? rcu_is_watching+0x15/0xb0
[  183.625426][T16472]  ? rcu_is_watching+0x15/0xb0
[  183.625433][T16472]  do_syscall_64+0xfa/0x3b0
[  183.625441][T16472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.625448][T16472]  ? exc_page_fault+0x9f/0xf0
[  183.625458][T16472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.625465][T16472] RIP: 0033:0x7f972318ebe9
[  183.625473][T16472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.625480][T16472] RSP: 002b:00007f9723fba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  183.625489][T16472] RAX: ffffffffffffffda RBX: 00007f97233b5fa0 RCX: 00007f972318ebe9
[  183.625494][T16472] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  183.625499][T16472] RBP: 00007f9723211e19 R08: 0000000000000000 R09: 0000000000000000
[  183.625503][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.625508][T16472] R13: 00007f97233b6038 R14: 00007f97233b5fa0 R15: 00007ffe8ba03368
[  183.625516][T16472]  </TASK>
[  183.625519][T16472] 
[  183.724569][T16472] Allocated by task 11038:
[  183.726154][T16472]  kasan_save_track+0x3e/0x80
[  183.727769][T16472]  __kasan_slab_alloc+0x6c/0x80
[  183.729455][T16472]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  183.731433][T16472]  xfrm_state_alloc+0x24/0x2f0
[  183.733100][T16472]  __find_acq_core+0x8a7/0x1c00
[  183.734743][T16472]  xfrm_find_acq+0x78/0xa0
[  183.736366][T16472]  xfrm_alloc_userspi+0x6b3/0xc90
[  183.738086][T16472]  xfrm_user_rcv_msg+0x7a3/0xab0
[  183.739790][T16472]  netlink_rcv_skb+0x208/0x470
[  183.741369][T16472]  xfrm_netlink_rcv+0x79/0x90
[  183.742922][T16472]  netlink_unicast+0x82f/0x9e0
[  183.744507][T16472]  netlink_sendmsg+0x805/0xb30
[  183.746183][T16472]  __sock_sendmsg+0x21c/0x270
[  183.747790][T16472]  ____sys_sendmsg+0x505/0x830
[  183.749405][T16472]  ___sys_sendmsg+0x21f/0x2a0
[  183.751178][T16472]  __x64_sys_sendmsg+0x19b/0x260
[  183.752885][T16472]  do_syscall_64+0xfa/0x3b0
[  183.754337][T16472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.756261][T16472] 
[  183.757056][T16472] Freed by task 7702:
[  183.758351][T16472]  kasan_save_track+0x3e/0x80
[  183.760020][T16472]  kasan_save_free_info+0x46/0x50
[  183.761682][T16472]  __kasan_slab_free+0x5b/0x80
[  183.763254][T16472]  kmem_cache_free+0x18f/0x400
[  183.764832][T16472]  xfrm_state_gc_task+0x52d/0x6b0
[  183.766575][T16472]  process_scheduled_works+0xae1/0x17b0
[  183.768448][T16472]  worker_thread+0x8a0/0xda0
[  183.770031][T16472]  kthread+0x711/0x8a0
[  183.771522][T16472]  ret_from_fork+0x3fc/0x770
[  183.773094][T16472]  ret_from_fork_asm+0x1a/0x30
[  183.774662][T16472] 
[  183.775438][T16472] The buggy address belongs to the object at ffff888105425680
[  183.775438][T16472]  which belongs to the cache xfrm_state of size 928
[  183.780116][T16472] The buggy address is located 322 bytes inside of
[  183.780116][T16472]  freed 928-byte region [ffff888105425680, ffff888105425a20)
[  183.784687][T16472] 
[  183.785575][T16472] The buggy address belongs to the physical page:
[  183.788181][T16472] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888105425b00 pfn:0x105424
[  183.791567][T16472] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  183.794333][T16472] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  183.796803][T16472] page_type: f5(slab)
[  183.798097][T16472] raw: 057ff00000000040 ffff888104aaa640 dead000000000122 0000000000000000
[  183.801229][T16472] raw: ffff888105425b00 00000000800e0005 00000000f5000000 0000000000000000
[  183.804896][T16472] head: 057ff00000000040 ffff888104aaa640 dead000000000122 0000000000000000
[  183.807963][T16472] head: ffff888105425b00 00000000800e0005 00000000f5000000 0000000000000000
[  183.810802][T16472] head: 057ff00000000002 ffffea0004150901 00000000ffffffff 00000000ffffffff
[  183.813635][T16472] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  183.816837][T16472] page dumped because: kasan: bad access detected
[  183.819152][T16472] page_owner tracks the page as allocated
[  183.821016][T16472] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8199, tgid 8172 (syz.2.988), ts 78875255312, free_ts 71682660635
[  183.827354][T16472]  post_alloc_hook+0x240/0x2a0
[  183.828961][T16472]  get_page_from_freelist+0x21e4/0x22c0
[  183.830785][T16472]  __alloc_frozen_pages_noprof+0x181/0x370
[  183.832701][T16472]  alloc_pages_mpol+0x232/0x4a0
[  183.834340][T16472]  allocate_slab+0x8a/0x370
[  183.835856][T16472]  ___slab_alloc+0xbeb/0x1410
[  183.837449][T16472]  kmem_cache_alloc_noprof+0x283/0x3c0
[  183.839302][T16472]  xfrm_state_alloc+0x24/0x2f0
[  183.840966][T16472]  xfrm_state_find+0x37d4/0x5400
[  183.842607][T16472]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  183.844771][T16472]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  183.846560][T16472]  xfrm_lookup_route+0x3c/0x1c0
[  183.848235][T16472]  udp_sendmsg+0x142e/0x2170
[  183.849813][T16472]  __sock_sendmsg+0x19c/0x270
[  183.851414][T16472]  ____sys_sendmsg+0x52d/0x830
[  183.853073][T16472]  ___sys_sendmsg+0x21f/0x2a0
[  183.854983][T16472] page last free pid 7529 tgid 7528 stack trace:
[  183.857428][T16472]  __free_frozen_pages+0xbc4/0xd30
[  183.859185][T16472]  pagetable_dtor_free+0x2d2/0x3b0
[  183.860962][T16472]  __mmdrop+0xb5/0x580
[  183.862342][T16472]  finish_task_switch+0x3ee/0x950
[  183.864061][T16472]  __schedule+0x17a0/0x4cc0
[  183.865570][T16472]  schedule+0x165/0x360
[  183.866974][T16472]  schedule_timeout+0x9a/0x270
[  183.868533][T16472]  __wait_for_common+0x3da/0x710
[  183.870264][T16472]  wait_for_completion_state+0x1c/0x40
[  183.872170][T16472]  call_usermodehelper_exec+0x3d3/0x4b0
[  183.874087][T16472]  __request_module+0x3c0/0x5e0
[  183.875747][T16472]  netlink_create+0x1b2/0x590
[  183.877365][T16472]  __sock_create+0x4b3/0x9f0
[  183.878994][T16472]  __sys_socket+0xd7/0x1b0
[  183.880544][T16472]  __x64_sys_socket+0x7a/0x90
[  183.882168][T16472]  do_syscall_64+0xfa/0x3b0
[  183.883736][T16472] 
[  183.884600][T16472] Memory state around the buggy address:
[  183.886651][T16472]  ffff888105425680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.889776][T16472]  ffff888105425700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.893060][T16472] >ffff888105425780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.896378][T16472]                                            ^
[  183.898829][T16472]  ffff888105425800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.901642][T16472]  ffff888105425880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.904785][T16472] ==================================================================
[  183.910523][T16472] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  183.913060][T16472] CPU: 1 UID: 0 PID: 16472 Comm: syz.1.4692 Not tainted syzkaller #0 PREEMPT(full) 
[  183.916197][T16472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.919446][T16472] Call Trace:
[  183.920606][T16472]  <TASK>
[  183.921576][T16472]  dump_stack_lvl+0x99/0x250
[  183.923116][T16472]  ? __asan_memcpy+0x40/0x70
[  183.924650][T16472]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.926699][T16472]  ? __pfx__printk+0x10/0x10
[  183.928258][T16472]  vpanic+0x281/0x750
[  183.929642][T16472]  ? preempt_schedule+0xae/0xc0
[  183.931744][T16472]  ? __pfx_vpanic+0x10/0x10
[  183.933713][T16472]  ? preempt_schedule_common+0x83/0xd0
[  183.936096][T16472]  ? preempt_schedule+0xae/0xc0
[  183.938185][T16472]  ? __pfx_preempt_schedule+0x10/0x10
[  183.940431][T16472]  panic+0xb9/0xc0
[  183.942073][T16472]  ? __pfx_panic+0x10/0x10
[  183.944029][T16472]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  183.946375][T16472]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  183.948321][T16472]  check_panic_on_warn+0x89/0xb0
[  183.950474][T16472]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  183.952663][T16472]  end_report+0x78/0x160
[  183.954522][T16472]  kasan_report+0x129/0x150
[  183.956114][T16472]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  183.957866][T16472]  __xfrm_state_lookup+0x6ad/0x8d0
[  183.959543][T16472]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  183.961383][T16472]  ? xfrm_state_lookup+0x45/0x1e0
[  183.963059][T16472]  xfrm_state_lookup+0x11e/0x1e0
[  183.964686][T16472]  pfkey_get+0x2ae/0x880
[  183.966118][T16472]  pfkey_sendmsg+0xbfe/0x1090
[  183.967677][T16472]  ? trace_sched_exit_tp+0x36/0x110
[  183.969425][T16472]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  183.971115][T16472]  ? rcu_is_watching+0x15/0xb0
[  183.972766][T16472]  ? futex_unqueue+0x22/0x240
[  183.974472][T16472]  ? aa_sock_msg_perm+0xf1/0x1d0
[  183.976090][T16472]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  183.977866][T16472]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  183.979546][T16472]  __sock_sendmsg+0x21c/0x270
[  183.981141][T16472]  ____sys_sendmsg+0x505/0x830
[  183.982748][T16472]  ? __pfx_____sys_sendmsg+0x10/0x10
[  183.984586][T16472]  ? import_iovec+0x74/0xa0
[  183.986139][T16472]  ___sys_sendmsg+0x21f/0x2a0
[  183.987701][T16472]  ? __pfx____sys_sendmsg+0x10/0x10
[  183.989446][T16472]  ? futex_wait+0x285/0x360
[  183.990979][T16472]  ? __fget_files+0x2a/0x420
[  183.992527][T16472]  ? __fget_files+0x3a0/0x420
[  183.994198][T16472]  __x64_sys_sendmsg+0x19b/0x260
[  183.995912][T16472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  183.997750][T16472]  ? rcu_is_watching+0x15/0xb0
[  183.999526][T16472]  ? rcu_is_watching+0x15/0xb0
[  184.001186][T16472]  do_syscall_64+0xfa/0x3b0
[  184.002692][T16472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.004699][T16472]  ? exc_page_fault+0x9f/0xf0
[  184.006316][T16472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.008284][T16472] RIP: 0033:0x7f972318ebe9
[  184.009799][T16472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.016305][T16472] RSP: 002b:00007f9723fba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.019069][T16472] RAX: ffffffffffffffda RBX: 00007f97233b5fa0 RCX: 00007f972318ebe9
[  184.021956][T16472] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  184.024584][T16472] RBP: 00007f9723211e19 R08: 0000000000000000 R09: 0000000000000000
[  184.027215][T16472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.029896][T16472] R13: 00007f97233b6038 R14: 00007f97233b5fa0 R15: 00007ffe8ba03368
[  184.032769][T16472]  </TASK>
[  184.034680][T16472] Kernel Offset: disabled
[  184.036460][T16472] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:34:37  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff11004dba9cc RBX=ffff888038c90a20 RCX=ffffffff99abd300 RDX=0000000000000002
RSI=0000000000000000 RDI=0000000000000000 RBP=ffff888038c90a20 RSP=ffffc9000927f7d8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000927f96c R11=fffff5200124ff36
R12=1ffff110088da402 R13=0000000000877040 R14=dffffc0000000000 R15=ffffea0000000000
RIP=ffffffff8b7c6a72 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5bc1d426c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5bc11b7dac CR3=000000003c3f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=0000000000000000 ffffffff8133c57e XMM03=0000000000000000 000002fc00060014
XMM04=0400080000001400 0600058019000c00 XMM05=00cf700028000800 1200040000000000
XMM06=0000000000000000 0002fc0006001400 XMM07=0000000000000000 0000000000012000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f02d4c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000f6e RDI=0000000000000f6f RBP=00000000000003f8 RSP=ffffc9000914eed0
R8 =ffff88801f278237 R9 =1ffff11003e4f046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afd90a R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9723fba6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=000000012e382000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9723387498 00007f9723387470 XMM03=00007f97233874a8 00007f97233874a0
XMM04=00007f9723eed100 00007f9723387460 XMM05=00007f9723387478 00007f97233874c0
XMM06=00007f97233874b8 00007f97233874b0 XMM07=00007f97233874a8 00007f97233874a0
XMM08=0000000000000000 00007f9723212ee7 XMM09=0000000000000000 00007f9723212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
