last executing test programs:

638.697801ms ago: executing program 2 (id=8021):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb06"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

570.65577ms ago: executing program 2 (id=8022):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_rs}}}}}, 0x0)

570.43142ms ago: executing program 2 (id=8024):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0)

499.378937ms ago: executing program 2 (id=8026):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0)

499.181867ms ago: executing program 2 (id=8027):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000f80)={0xa, 0x4, 0x0, @loopback, 0xa7a}, 0x1c)

498.823496ms ago: executing program 2 (id=8030):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000040)=[{r1, 0x4185}], 0x1, 0x0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10000, 0x0)

300.697652ms ago: executing program 1 (id=8035):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x20)

149.795498ms ago: executing program 0 (id=8036):
unshare(0x22020400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0xe8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0xfffffd3a, 0x10, 0x0, 0x0, 0x0}}, 0x7)

149.652554ms ago: executing program 1 (id=8037):
socketpair(0x29, 0x2, 0x0, &(0x7f0000000140))

149.548681ms ago: executing program 0 (id=8038):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=@migrate={0xa8, 0x21, 0x1, 0x70bd26, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e21, 0xffff, 0x2, 0xa0, 0xa0, 0x3a}, 0x6e6bb3, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @migrate={0x50, 0x11, [{@in=@empty, @in=@local, @in=@remote, @in6=@empty, 0x32, 0x1, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x90)

100.601567ms ago: executing program 1 (id=8039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0)

100.487287ms ago: executing program 1 (id=8040):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="4e952711cdc9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="21c42100", 0x4}], 0x1}}], 0x2, 0x40)
close(0x4)

100.267466ms ago: executing program 0 (id=8041):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
close(r0)

49.132226ms ago: executing program 1 (id=8042):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @union={0x9, 0x6, 0x0, 0x5, 0x1, 0x7, [{0x7, 0x3, 0x5}, {0x8, 0x3, 0x6b81}, {0x8, 0x1, 0x8f}, {0x4, 0x0, 0x37c}, {0xd, 0x2, 0x1000}, {0xd, 0x2, 0x1}]}]}}, &(0x7f0000000f40)=""/4089, 0x86, 0xff9, 0x1}, 0x28)

48.984558ms ago: executing program 0 (id=8043):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x8}, 0x28)

48.817398ms ago: executing program 1 (id=8044):
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)

178.678µs ago: executing program 0 (id=8045):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b00010065787468647200002400028008000140000000020800034000000000080004400000002205000200890000002c0001800c00010062697477697365001c0002800800014000000014080002400000801708000340000000040900010073797a30"], 0x100}, 0x1, 0x0, 0x0, 0x4004084}, 0x0)

0s ago: executing program 0 (id=8046):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

kernel console output (not intermixed with test programs):

] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2377'.
[  151.752882][T11415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2377'.
[  152.839826][T11447] netlink: 'syz.0.2388': attribute type 4 has an invalid length.
[  153.718762][T11492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2410'.
[  153.928029][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2414'.
[  153.949192][T11500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2414'.
[  154.374984][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2426'.
[  154.409304][T11531] macsec2: entered promiscuous mode
[  154.411815][T11531] dummy0: entered promiscuous mode
[  154.421505][T11531] dummy0: left promiscuous mode
[  154.579663][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'.
[  154.588805][T11541] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  154.594480][T11541] ip6gretap0: entered promiscuous mode
[  154.597676][T11541] macvtap1: entered promiscuous mode
[  154.599699][T11541] macvtap1: entered allmulticast mode
[  154.601746][T11541] ip6gretap0: entered allmulticast mode
[  154.609873][T11541] netlink: 'syz.1.2433': attribute type 13 has an invalid length.
[  154.615827][T11541] macvtap1: left promiscuous mode
[  154.617974][T11541] macvtap1: left allmulticast mode
[  154.620163][T11541] ip6gretap0: left allmulticast mode
[  154.623399][T11541] macvtap1: refused to change device tx_queue_len
[  154.650911][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2435'.
[  154.902122][T11549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'.
[  155.016886][T11580] syzkaller1: entered promiscuous mode
[  155.018886][T11580] syzkaller1: entered allmulticast mode
[  155.180072][T11596] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  155.359972][T11611] netlink: 'syz.0.2454': attribute type 9 has an invalid length.
[  156.357310][T11683] netlink: 'syz.2.2477': attribute type 2 has an invalid length.
[  156.765426][T11723] __nla_validate_parse: 4 callbacks suppressed
[  156.765441][T11723] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2496'.
[  156.970785][T11742] netlink: 'syz.0.2505': attribute type 30 has an invalid length.
[  157.158397][T11755] pimreg: entered allmulticast mode
[  157.171770][T11757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2512'.
[  157.559842][T11782] netlink: 'syz.0.2521': attribute type 12 has an invalid length.
[  158.383860][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2541'.
[  159.229800][T11894] netlink: 'syz.2.2562': attribute type 3 has an invalid length.
[  159.454501][T11904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2566'.
[  159.712141][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'.
[  159.767069][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2571'.
[  159.846030][T11915] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2571'.
[  159.910339][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'.
[  159.916970][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'.
[  159.923975][T11930] netlink: 'syz.1.2576': attribute type 1 has an invalid length.
[  159.927235][T11930] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2576'.
[  159.963174][T11930] nbd: socks must be embedded in a SOCK_ITEM attr
[  159.966534][T11930] block nbd0: shutting down sockets
[  160.124021][T11946] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.181094][T11946] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.258814][T11946] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.337633][T11946] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.431245][ T5877] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.452253][ T5877] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.466854][ T5877] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.484943][ T5877] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.924052][T12017] vlan2: entered allmulticast mode
[  160.926153][T12017] batadv0: entered allmulticast mode
[  160.940958][T12019] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.944140][T12019] syzkaller0: entered promiscuous mode
[  160.946933][T12019] syzkaller0: entered allmulticast mode
[  160.964522][T12019] tipc: Resetting bearer <eth:syzkaller0>
[  160.968721][T12018] tipc: Resetting bearer <eth:syzkaller0>
[  160.993166][T12018] tipc: Disabling bearer <eth:syzkaller0>
[  161.004561][T12021] pim6reg: entered allmulticast mode
[  161.006412][T12023] netlink: 'syz.2.2618': attribute type 7 has an invalid length.
[  161.011030][T12023] netlink: 'syz.2.2618': attribute type 8 has an invalid length.
[  161.015418][T12021] pim6reg: left allmulticast mode
[  161.154915][T12038] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.158918][T12038] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.205272][T12045] netlink: 'syz.2.2627': attribute type 30 has an invalid length.
[  161.208786][T12045] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  161.872758][T12114] __nla_validate_parse: 4 callbacks suppressed
[  161.872772][T12114] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2661'.
[  161.916994][T12117] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2662'.
[  161.958823][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'.
[  162.374168][T12155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2680'.
[  162.740409][T12193] lo speed is unknown, defaulting to 1000
[  162.741489][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2698'.
[  162.746673][T12193] lo speed is unknown, defaulting to 1000
[  162.767383][T12193] lo speed is unknown, defaulting to 1000
[  162.777649][T12193] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  162.787928][T12193] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  162.852617][T12193] lo speed is unknown, defaulting to 1000
[  162.861401][T12193] lo speed is unknown, defaulting to 1000
[  162.868930][T12193] lo speed is unknown, defaulting to 1000
[  162.883600][T12193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2697'.
[  162.930132][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'.
[  163.188008][T12238] netlink: 'syz.1.2719': attribute type 21 has an invalid length.
[  163.254693][T12245] netlink: 'syz.1.2720': attribute type 4 has an invalid length.
[  164.199575][T12268] syz_tun: entered promiscuous mode
[  164.246316][T12271] vxcan0: entered allmulticast mode
[  164.599367][T12307] team0: entered promiscuous mode
[  164.601343][T12307] team_slave_0: entered promiscuous mode
[  164.605147][T12307] team_slave_1: entered promiscuous mode
[  164.805420][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2753'.
[  164.810111][T12324] netdevsim0: renamed from gre0
[  164.817326][T12324] tipc: Disabling bearer <eth:gre0>
[  164.820471][T12324] netdevsim0: entered promiscuous mode
[  164.924209][T12327] netlink: 'syz.0.2754': attribute type 1 has an invalid length.
[  165.058130][T12341] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  165.405697][T12380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2774'.
[  165.408775][T12380] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2774'.
[  165.704088][T12387] syzkaller0: entered promiscuous mode
[  165.706035][T12387] syzkaller0: entered allmulticast mode
[  166.869522][T12426] bridge2: port 1(veth9) entered blocking state
[  166.873287][T12426] bridge2: port 1(veth9) entered disabled state
[  166.877646][T12426] veth9: entered allmulticast mode
[  166.881470][T12426] veth9: entered promiscuous mode
[  166.889388][T12426] bridge2: port 2(veth0_to_bond) entered blocking state
[  166.893696][T12426] bridge2: port 2(veth0_to_bond) entered disabled state
[  166.896693][T12426] veth0_to_bond: entered allmulticast mode
[  166.900621][T12426] veth0_to_bond: entered promiscuous mode
[  166.913642][T12426] vlan2: entered allmulticast mode
[  166.915974][T12426] veth1: entered allmulticast mode
[  166.918585][T12426] bridge2: port 3(vlan2) entered blocking state
[  166.921481][T12426] bridge2: port 3(vlan2) entered disabled state
[  166.928146][T12426] vlan2: entered promiscuous mode
[  166.930463][T12426] veth1: entered promiscuous mode
[  167.394254][T12483] netlink: 'syz.0.2821': attribute type 21 has an invalid length.
[  167.480538][T12491] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  167.565131][T12502] sock: sock_set_timeout: `syz.0.2830' (pid 12502) tries to set negative timeout
[  168.079373][T12548] __nla_validate_parse: 1 callbacks suppressed
[  168.079392][T12548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2850'.
[  168.109658][T12552] netlink: 'syz.0.2852': attribute type 7 has an invalid length.
[  168.356118][T12574] netlink: 'syz.0.2863': attribute type 12 has an invalid length.
[  169.269312][T12594] tun0: tun_chr_ioctl cmd 1074025673
[  169.390989][T12600] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2870'.
[  169.697854][T12630] syzkaller1: entered promiscuous mode
[  169.701315][T12630] syzkaller1: entered allmulticast mode
[  169.986126][T12653] lo speed is unknown, defaulting to 1000
[  170.081114][T12653] netlink: 'syz.1.2895': attribute type 2 has an invalid length.
[  170.090645][T12653] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2895'.
[  170.246817][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'.
[  170.251812][T12673] netlink: 'syz.0.2901': attribute type 5 has an invalid length.
[  170.256249][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'.
[  171.921661][T12791] netlink: 'syz.1.2938': attribute type 2 has an invalid length.
[  171.954420][T12795] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2940'.
[  171.957520][T12795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2940'.
[  171.960764][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'.
[  171.971484][T12798] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  172.053577][T12805] dummy0: entered promiscuous mode
[  172.057290][T12805] dummy0: left promiscuous mode
[  172.560129][T12833] lo speed is unknown, defaulting to 1000
[  173.426769][T12856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2965'.
[  173.669498][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2973'.
[  174.545531][T12884] pimreg: tun_chr_ioctl cmd 2147767506
[  174.563514][T12875] lo speed is unknown, defaulting to 1000
[  174.920534][   T56] block nbd1: Receive control failed (result -107)
[  174.942446][T12905] nbd1: detected capacity change from 0 to 32
[  174.947248][T12656] block nbd1: Dead connection, failed to find a fallback
[  174.950039][T12656] block nbd1: shutting down sockets
[  174.959185][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  174.965671][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  174.968540][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  174.971682][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  174.975003][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  174.985595][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  174.988682][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  174.991864][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  174.996385][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  174.998994][T12918] lo speed is unknown, defaulting to 1000
[  174.999285][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  175.006274][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.009436][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  175.019801][T12918] lo speed is unknown, defaulting to 1000
[  175.021231][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.025571][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  175.025805][T12918] lo speed is unknown, defaulting to 1000
[  175.028614][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.033697][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2993'.
[  175.034673][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  175.040971][T12656] ldm_validate_partition_table(): Disk read failed.
[  175.044503][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.048421][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  175.052898][T12656] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.056247][T12656] Buffer I/O error on dev nbd1, logical block 0, async page read
[  175.059291][T12656] Dev nbd1: unable to read RDB block 0
[  175.061417][T12656]  nbd1: unable to read partition table
[  175.081559][T12656] ldm_validate_partition_table(): Disk read failed.
[  175.087343][T12656] Dev nbd1: unable to read RDB block 0
[  175.090230][T12656]  nbd1: unable to read partition table
[  175.101862][T12923] netdevsim0: left promiscuous mode
[  175.114888][T12923] erspan0: entered promiscuous mode
[  175.127160][T12923] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.132905][T12923] 8021q: adding VLAN 0 to HW filter on device team0
[  175.143972][T12923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.198088][T12929] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2997'.
[  175.209384][T12929] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  175.222070][T12929] openvswitch: netlink: Message has 252 unknown bytes.
[  175.347641][T12918] infiniband syz0: set active
[  175.350887][   T10] lo speed is unknown, defaulting to 1000
[  175.353815][   T10] syz0: Port: 1 Link ACTIVE
[  175.360345][T12918] infiniband syz0: added lo
[  175.393421][T12918] RDS/IB: syz0: added
[  175.395612][T12918] smc: adding ib device syz0 with port count 1
[  175.398273][T12918] smc:    ib device syz0 port 1 has no pnetid
[  175.406591][   T10] lo speed is unknown, defaulting to 1000
[  175.411507][T12918] lo speed is unknown, defaulting to 1000
[  175.486887][T12944] pimreg: entered allmulticast mode
[  175.567747][T12946] lo speed is unknown, defaulting to 1000
[  175.621207][T12918] lo speed is unknown, defaulting to 1000
[  175.742519][T12946] lo speed is unknown, defaulting to 1000
[  175.862972][T12918] lo speed is unknown, defaulting to 1000
[  176.639073][T12993] netlink: 'syz.1.3020': attribute type 1 has an invalid length.
[  176.681463][T12993] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.923079][T13021] syzkaller1: entered promiscuous mode
[  176.925493][T13021] syzkaller1: entered allmulticast mode
[  177.256739][T13049] Bluetooth: MGMT ver 1.23
[  177.351779][T13059] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode
[  177.578021][T13085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3062'.
[  178.529287][T13111] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  178.557967][T13113] block nbd2: Unsupported socket: shutdown callout must be supported.
[  179.954705][T13176] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3100'.
[  179.956154][T13177] netlink: 'syz.0.3101': attribute type 6 has an invalid length.
[  180.195347][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3109'.
[  180.273437][T13200] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3113'.
[  180.492527][T13213] block nbd2: server does not support multiple connections per device.
[  180.498409][T13213] block nbd2: shutting down sockets
[  180.514794][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3122'.
[  181.571330][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  181.575283][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  181.579382][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  181.583642][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  181.588808][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  181.593701][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'.
[  181.871085][ T5911] lo speed is unknown, defaulting to 1000
[  181.875485][ T5911] syz0: Port: 1 Link DOWN
[  181.879170][ T5911] lo speed is unknown, defaulting to 1000
[  181.881421][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.893896][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.898875][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.908943][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  181.945546][T13302] pimreg: entered allmulticast mode
[  182.441257][T13337] ip6tnl1: entered promiscuous mode
[  182.451737][T13337] ip6tnl1: entered allmulticast mode
[  182.465584][T13337] team0: Device ip6tnl1 is of different type
[  182.644352][T13348] netlink: 'syz.1.3170': attribute type 6 has an invalid length.
[  182.666030][T13348] netlink: 'syz.1.3170': attribute type 12 has an invalid length.
[  183.205080][T13370] bridge4: entered allmulticast mode
[  183.528616][T13393] IPv4: Oversized IP packet from 127.202.26.0
[  184.622663][T13448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.626424][T13448] syzkaller0: entered promiscuous mode
[  184.628552][T13448] syzkaller0: entered allmulticast mode
[  184.644195][T13448] tipc: Resetting bearer <eth:syzkaller0>
[  184.648745][T13446] tipc: Resetting bearer <eth:syzkaller0>
[  184.658352][T13446] tipc: Disabling bearer <eth:syzkaller0>
[  185.354152][T13474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.822466][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  185.915324][T13528] __nla_validate_parse: 13 callbacks suppressed
[  185.915339][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3247'.
[  186.058064][T13528] team0 (unregistering): left allmulticast mode
[  186.061017][T13528] team0 (unregistering): left promiscuous mode
[  186.065661][T13528] bridge0: port 1(team0) entered disabled state
[  186.085567][T13531] veth0_vlan: entered allmulticast mode
[  186.430737][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3263'.
[  186.439027][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'.
[  186.520857][T13581] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3267'.
[  186.624068][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3272'.
[  186.641667][T13593] netlink: 'syz.1.3273': attribute type 10 has an invalid length.
[  186.668834][T13593] bond0: entered promiscuous mode
[  186.682372][T13593] bond_slave_0: entered promiscuous mode
[  186.685047][T13593] bond_slave_1: entered promiscuous mode
[  186.688205][T13593] team0: Port device bond0 added
[  186.801195][T13607] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3280'.
[  187.014300][T13626] lo speed is unknown, defaulting to 1000
[  187.020833][T13626] lo speed is unknown, defaulting to 1000
[  188.270772][T13726] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  188.440759][T13743] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3329'.
[  188.544938][T13751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3333'.
[  188.553335][T13751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.555906][T13751] IPv6: NLM_F_CREATE should be set when creating new route
[  188.559038][T13751] IPv6: NLM_F_CREATE should be set when creating new route
[  188.640340][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3337'.
[  188.667323][T13761] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.3337'.
[  188.989571][T13775] team0: left promiscuous mode
[  188.995555][T13775] team_slave_0: left promiscuous mode
[  189.002285][T13775] team_slave_1: left promiscuous mode
[  189.004872][T13775] bond0: left promiscuous mode
[  189.007133][T13775] bond_slave_0: left promiscuous mode
[  189.009630][T13775] bond_slave_1: left promiscuous mode
[  189.070969][T13775] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.119147][T13775] veth0_vlan: left allmulticast mode
[  189.160377][T13775] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  189.166868][T13775] gretap1: left promiscuous mode
[  189.169119][T13775] gretap1: left allmulticast mode
[  189.188328][T13775] vlan2: left promiscuous mode
[  189.190556][T13775] bond1: left promiscuous mode
[  189.192766][T13775] gretap2: left promiscuous mode
[  189.194591][T13775] vlan2: left allmulticast mode
[  189.196402][T13775] bond1: left allmulticast mode
[  189.198143][T13775] gretap2: left allmulticast mode
[  189.208753][   T47] lo speed is unknown, defaulting to 1000
[  189.211536][   T47] syz1: Port: 1 Link DOWN
[  189.239904][ T5717] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.243412][ T5717] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.246310][ T5717] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  189.255090][ T5717] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.573354][ T5877] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  191.499927][T13889] __nla_validate_parse: 5 callbacks suppressed
[  191.499938][T13889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3388'.
[  192.216949][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3405'.
[  192.379818][T13930] wg1: entered promiscuous mode
[  192.381623][T13930] wg1: entered allmulticast mode
[  192.449721][T13929] syz_tun: left promiscuous mode
[  192.457778][T13929] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.460955][T13929] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.481816][T13929] team_slave_0: left promiscuous mode
[  192.484840][T13929] team_slave_1: left promiscuous mode
[  192.575024][T13929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.588463][T13929] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.614540][T13929] hsr0: left promiscuous mode
[  192.616185][T13929] hsr0: left allmulticast mode
[  192.617774][T13929] hsr_slave_0: left allmulticast mode
[  192.619616][T13929] hsr_slave_1: left allmulticast mode
[  192.808953][T13929] hsr1: left promiscuous mode
[  192.817408][T13929] ip6gretap0: left allmulticast mode
[  192.820033][T13929] macsec1: left promiscuous mode
[  192.823265][T13929] macsec1: left allmulticast mode
[  192.840850][T13929] erspan0: left allmulticast mode
[  192.844116][T13929] macvtap2: left promiscuous mode
[  192.846269][T13929] macvtap2: left allmulticast mode
[  192.937326][ T5717] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.955259][ T5717] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.958897][ T5717] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.966654][ T5717] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.313011][T13953] siw: device registration error -23
[  193.612591][T13969] lo speed is unknown, defaulting to 1000
[  193.616650][T13969] lo speed is unknown, defaulting to 1000
[  193.694122][  T976] hid-generic 0005:16C0:0009.0002: unknown main item tag 0x0
[  193.794921][  T976] hid-generic 0005:16C0:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  193.979288][T13969] netlink: 'syz.2.3422': attribute type 6 has an invalid length.
[  194.217136][T14004] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3435'.
[  194.221261][T14004] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  194.367828][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3439'.
[  194.371581][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'.
[  195.087305][T14052] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3456'.
[  195.096284][T14052] batadv1: entered promiscuous mode
[  195.098147][T14052] batadv1: entered allmulticast mode
[  195.137153][T14050] netlink: 'syz.1.3453': attribute type 1 has an invalid length.
[  195.140282][T14050] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3453'.
[  195.143993][T14050] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3453'.
[  195.934686][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'.
[  196.026178][T14073] netlink: 'syz.0.3464': attribute type 3 has an invalid length.
[  196.034123][T14073] syz_tun: entered allmulticast mode
[  196.036417][T14073] pimreg: left allmulticast mode
[  196.088689][T14076] siw: device registration error -23
[  196.109245][T14076] erspan0: left promiscuous mode
[  196.130127][T14076] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.146765][T14076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  196.158309][  T976] lo speed is unknown, defaulting to 1000
[  196.160564][  T976] syz0: Port: 1 Link ACTIVE
[  196.164199][  T976] lo speed is unknown, defaulting to 1000
[  196.179666][T14072] syz_tun: left allmulticast mode
[  196.222396][T14087] netlink: del zone limit has 4 unknown bytes
[  196.310115][T14097] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3475'.
[  196.367519][T14102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.583938][T14124] __nla_validate_parse: 1 callbacks suppressed
[  196.583948][T14124] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3489'.
[  196.638972][T14134] netlink: 'syz.0.3494': attribute type 21 has an invalid length.
[  196.641603][T14134] netlink: 'syz.0.3494': attribute type 1 has an invalid length.
[  196.644303][T14134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3494'.
[  196.687085][T14144] netlink: 'syz.0.3499': attribute type 3 has an invalid length.
[  196.791912][T14158] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3506'.
[  197.967923][T14223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.971202][T14223] syzkaller0: entered promiscuous mode
[  197.976657][T14223] syzkaller0: entered allmulticast mode
[  197.989225][T14223] tipc: Resetting bearer <eth:syzkaller0>
[  197.997408][T14222] tipc: Resetting bearer <eth:syzkaller0>
[  198.007658][T14222] tipc: Disabling bearer <eth:syzkaller0>
[  198.059757][T14237] netlink: 'syz.2.3535': attribute type 29 has an invalid length.
[  198.073057][T14237] netlink: 'syz.2.3535': attribute type 29 has an invalid length.
[  198.076247][T14237] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3535'.
[  198.079385][T14237] unsupported nla_type 58
[  198.113939][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3538'.
[  198.117356][T14244] netlink: 'syz.1.3538': attribute type 19 has an invalid length.
[  198.120556][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'.
[  198.130890][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  198.134301][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3538'.
[  198.138053][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  198.141276][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  198.144462][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  198.147167][T14244] netlink: 'syz.1.3538': attribute type 19 has an invalid length.
[  198.149724][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'.
[  198.705762][T14268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.708860][T14268] syzkaller0: entered promiscuous mode
[  198.710842][T14268] syzkaller0: entered allmulticast mode
[  198.716886][T14268] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  198.730157][T14268] tipc: Resetting bearer <eth:syzkaller0>
[  198.734425][T14267] tipc: Resetting bearer <eth:syzkaller0>
[  198.743446][T14267] tipc: Disabling bearer <eth:syzkaller0>
[  199.458902][T14286] batadv0: entered promiscuous mode
[  199.529119][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'.
[  199.541416][T14293] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  199.696708][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3561'.
[  199.812323][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  200.264853][T14326] bridge_slave_0: left allmulticast mode
[  200.267503][T14326] bridge_slave_0: left promiscuous mode
[  200.270296][T14326] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.280383][T14326] bridge_slave_1: left allmulticast mode
[  200.286363][T14326] bridge_slave_1: left promiscuous mode
[  200.289094][T14326] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.297605][T14326] bond0: (slave bond_slave_0): Releasing backup interface
[  200.303238][T14326] bond0: (slave bond_slave_1): Releasing backup interface
[  200.311668][T14326] team0: Port device team_slave_0 removed
[  200.315223][T14326] team0: Port device team_slave_1 removed
[  200.317761][T14326] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.321191][T14326] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.335709][T14327] team0: Failed to send options change via netlink (err -105)
[  200.339071][T14327] team0: Mode changed to "loadbalance"
[  200.555379][T14332] lo speed is unknown, defaulting to 1000
[  200.559702][T14332] lo speed is unknown, defaulting to 1000
[  200.852295][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  201.300056][T14364] lo speed is unknown, defaulting to 1000
[  201.306389][T14364] lo speed is unknown, defaulting to 1000
[  201.652093][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  201.892272][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  201.977126][T14384] __nla_validate_parse: 2 callbacks suppressed
[  201.977137][T14384] netlink: 452 bytes leftover after parsing attributes in process `syz.1.3583'.
[  202.592968][T14400] lo speed is unknown, defaulting to 1000
[  202.596572][T14400] lo speed is unknown, defaulting to 1000
[  202.698283][T14411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.701758][T14411] syzkaller0: entered promiscuous mode
[  202.704397][T14411] syzkaller0: entered allmulticast mode
[  202.744374][T14411] tipc: Resetting bearer <eth:syzkaller0>
[  202.752322][T14410] tipc: Resetting bearer <eth:syzkaller0>
[  202.774103][T14410] tipc: Disabling bearer <eth:syzkaller0>
[  202.932147][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  202.964480][T14425] bridge3: entered allmulticast mode
[  203.241043][T14437] netlink: 'syz.2.3605': attribute type 32 has an invalid length.
[  203.437384][T14467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.440060][T14467] syzkaller0: entered promiscuous mode
[  203.442435][T14467] syzkaller0: entered allmulticast mode
[  203.462294][T14467] tipc: Resetting bearer <eth:syzkaller0>
[  203.466614][T14466] tipc: Resetting bearer <eth:syzkaller0>
[  203.484313][T14466] tipc: Disabling bearer <eth:syzkaller0>
[  203.617664][T14481] lo speed is unknown, defaulting to 1000
[  203.623436][T14481] lo speed is unknown, defaulting to 1000
[  203.972379][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  204.950159][T14544] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  205.012566][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  205.023284][T14549] netlink: 'syz.1.3650': attribute type 13 has an invalid length.
[  205.026323][T14549] netlink: 'syz.1.3650': attribute type 17 has an invalid length.
[  205.054873][T14549] erspan0: left promiscuous mode
[  205.086372][T14549] ip6gretap0: left promiscuous mode
[  205.104881][T14549] 8021q: adding VLAN 0 to HW filter on device team0
[  205.110852][T14549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.118468][  T793] lo speed is unknown, defaulting to 1000
[  205.120499][  T793] syz1: Port: 1 Link ACTIVE
[  205.137071][T14554] lo speed is unknown, defaulting to 1000
[  205.163652][T14554] lo speed is unknown, defaulting to 1000
[  205.327293][T14558] bond0 (unregistering): Released all slaves
[  205.533406][T14585] nftables ruleset with unbound set
[  205.622889][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  205.665253][T14596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3668'.
[  205.725360][T14599] lo speed is unknown, defaulting to 1000
[  205.728931][T14599] lo speed is unknown, defaulting to 1000
[  206.052202][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  206.434329][T14626] lo speed is unknown, defaulting to 1000
[  206.437862][T14626] lo speed is unknown, defaulting to 1000
[  206.950623][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3696'.
[  206.957037][T14664] IPv6: sit1: Disabled Multicast RS
[  206.959245][T14664] sit1: entered allmulticast mode
[  207.028488][   T55] Bluetooth: hci0: command tx timeout
[  207.092087][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  207.139071][T14684] openvswitch: netlink: IP tunnel TTL not specified.
[  207.192941][T14690] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  207.511761][T14729] openvswitch: netlink: Duplicate or invalid key (type 0).
[  207.515162][T14729] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  207.577255][T14735] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3730'.
[  207.578590][T14731] lo speed is unknown, defaulting to 1000
[  207.586634][T14731] lo speed is unknown, defaulting to 1000
[  207.634348][T14740] netlink: 'syz.2.3732': attribute type 30 has an invalid length.
[  208.132121][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  209.107663][T14788] netlink: 'syz.1.3750': attribute type 13 has an invalid length.
[  209.172097][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  209.390660][T14823] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3766'.
[  209.447314][T14824] lo speed is unknown, defaulting to 1000
[  209.459277][T14824] lo speed is unknown, defaulting to 1000
[  209.492115][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  209.871367][T14836] netlink: 'syz.2.3770': attribute type 3 has an invalid length.
[  210.212130][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  210.761513][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'.
[  210.948498][T14866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.252044][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  211.261896][T14913] sctp: [Deprecated]: syz.1.3801 (pid 14913) Use of int in max_burst socket option.
[  211.261896][T14913] Use struct sctp_assoc_value instead
[  211.311670][T14901] netlink: 'syz.2.3795': attribute type 74 has an invalid length.
[  211.677645][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'.
[  211.900059][T14990] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  212.146742][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3841'.
[  212.292121][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  212.380685][T15019] lo speed is unknown, defaulting to 1000
[  212.383465][T15019] lo speed is unknown, defaulting to 1000
[  212.467576][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3850'.
[  212.850163][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'.
[  213.332092][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  213.449537][T15058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3863'.
[  213.912818][T15076] syzkaller1: entered promiscuous mode
[  213.915585][T15076] syzkaller1: entered allmulticast mode
[  214.179018][T15090] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3877'.
[  214.372516][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  215.021049][T15140] netlink: 'syz.2.3900': attribute type 1 has an invalid length.
[  215.030855][T15140] netlink: 'syz.2.3900': attribute type 1 has an invalid length.
[  215.225186][T15161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3909'.
[  215.354924][T15178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3913'.
[  215.412179][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  215.464168][T15189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3922'.
[  215.666519][T15202] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3927'.
[  215.670017][T15202] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3927'.
[  215.709977][T15206] netlink: 'syz.1.3929': attribute type 5 has an invalid length.
[  215.805011][T15218] netlink: 'syz.1.3933': attribute type 10 has an invalid length.
[  215.861402][T15221] lo speed is unknown, defaulting to 1000
[  215.884815][T15221] lo speed is unknown, defaulting to 1000
[  216.442141][T15251] raw_sendmsg: syz.0.3944 forgot to set AF_INET. Fix it!
[  216.452059][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  216.491419][T15253] netlink: 'syz.0.3945': attribute type 1 has an invalid length.
[  216.518089][T15253] gretap2: entered allmulticast mode
[  216.533311][T15253] bond0: (slave gretap2): making interface the new active one
[  216.537206][T15253] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  216.694283][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3947'.
[  217.012186][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  217.492076][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  218.095370][T15295] netlink: 'syz.1.3961': attribute type 13 has an invalid length.
[  218.098559][T15295] netlink: 'syz.1.3961': attribute type 17 has an invalid length.
[  218.104913][T15295] 8021q: adding VLAN 0 to HW filter on device team0
[  218.108042][T15295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  218.124573][T15294] xfrm0: entered promiscuous mode
[  218.126547][T15294] xfrm0: entered allmulticast mode
[  218.147279][T15294] lo speed is unknown, defaulting to 1000
[  218.150582][T15294] lo speed is unknown, defaulting to 1000
[  218.532173][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  218.758238][T15304] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  219.146788][ T5878] lo speed is unknown, defaulting to 1000
[  219.148878][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  219.151909][ T5878] syz1: Port: 1 Link DOWN
[  219.159997][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  219.164051][T15334] netlink: 'syz.0.3977': attribute type 1 has an invalid length.
[  219.167202][T15334] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3977'.
[  219.167966][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  219.171047][T15334] netlink: 'syz.0.3977': attribute type 2 has an invalid length.
[  219.181885][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  219.193240][T15334] netlink: 'syz.0.3977': attribute type 1 has an invalid length.
[  219.317959][T15350] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3983'.
[  219.324292][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'.
[  219.409234][   T55] Bluetooth: hci2: link tx timeout
[  219.415979][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  219.545374][T15387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3995'.
[  219.572145][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  219.665370][T15399] syz_tun: entered allmulticast mode
[  219.671809][T15399] dvmrp8: entered allmulticast mode
[  219.691344][T15399] lo speed is unknown, defaulting to 1000
[  219.695710][T15399] lo speed is unknown, defaulting to 1000
[  220.245665][T15403] bridge3: left allmulticast mode
[  220.402676][T15400] netlink: 'syz.0.3999': attribute type 23 has an invalid length.
[  220.448487][T15398] syz_tun: left allmulticast mode
[  220.451125][T15398] dvmrp8: left allmulticast mode
[  220.612066][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  220.666682][T15425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4009'.
[  221.492436][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  221.598228][T15494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.662047][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  221.729766][T15510] "syz.2.4048" (15510) uses obsolete ecb(arc4) skcipher
[  221.795119][T15512] bridge5: entered promiscuous mode
[  221.797200][T15512] bridge5: entered allmulticast mode
[  222.145710][T15556] netlink: 'syz.1.4068': attribute type 12 has an invalid length.
[  222.150736][T15556] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4068'.
[  222.260054][T15570] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4075'.
[  222.264070][T15570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4075'.
[  222.301800][T15576] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  222.350987][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4081'.
[  222.525966][T15600] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4089'.
[  222.692115][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  222.844574][T15638] netlink: 'syz.1.4104': attribute type 10 has an invalid length.
[  222.951119][T15650] syz.1.4109 uses old SIOCAX25GETINFO
[  223.076189][T15658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.080130][T15658] syzkaller0: entered promiscuous mode
[  223.083859][T15658] syzkaller0: entered allmulticast mode
[  223.091722][T15658] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) !
[  223.127329][T15658] tipc: Resetting bearer <eth:syzkaller0>
[  223.136455][T15657] tipc: Resetting bearer <eth:syzkaller0>
[  223.148353][T15657] tipc: Disabling bearer <eth:syzkaller0>
[  223.250804][T15667] lo speed is unknown, defaulting to 1000
[  223.255752][T15667] lo speed is unknown, defaulting to 1000
[  223.306851][T15672] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  223.723885][T15685] netlink: 'syz.0.4121': attribute type 1 has an invalid length.
[  223.732099][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  224.608979][T15740] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  224.623867][T15740] team0: Port device bond0 removed
[  224.631036][T15740] bond0: (slave bond_slave_0): Releasing backup interface
[  224.652847][T15740] bond0: (slave bond_slave_1): Releasing backup interface
[  224.659783][T15740] team0: Port device team_slave_0 removed
[  224.665189][T15740] team0: Port device team_slave_1 removed
[  224.669406][T15740] bond1: (slave gretap2): Releasing active interface
[  224.713647][T15740] netlink: 'syz.1.4145': attribute type 10 has an invalid length.
[  224.716504][T15740] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  224.720488][T15740] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  224.734264][T15740] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  224.738195][T15740] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.772096][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  224.936056][  T793] lo speed is unknown, defaulting to 1000
[  224.939009][  T793] syz0: Port: 1 Link DOWN
[  224.940995][  T793] lo speed is unknown, defaulting to 1000
[  225.230372][T15780] __nla_validate_parse: 4 callbacks suppressed
[  225.230383][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4162'.
[  225.237127][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4162'.
[  225.241689][T15780] netlink: 540 bytes leftover after parsing attributes in process `syz.0.4162'.
[  225.439321][T15791] netlink: 'syz.0.4167': attribute type 10 has an invalid length.
[  225.442483][T15791] netlink: 'syz.0.4167': attribute type 10 has an invalid length.
[  225.473220][T15793] netlink: 'syz.1.4168': attribute type 1 has an invalid length.
[  225.482098][T15793] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4168'.
[  225.624850][T15799] openvswitch: netlink: IP tunnel dst address not specified
[  225.812147][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  226.308333][T15825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.557060][T15848] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  226.560435][T15848] tipc: Enabled bearer <udp:s>, priority 10
[  226.692327][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  226.852027][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  226.962125][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  227.492527][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  227.537982][T15914] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  227.541414][T15914] syzkaller0: entered promiscuous mode
[  227.543411][T15914] syzkaller0: entered allmulticast mode
[  227.549338][T15914] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  227.775194][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4228'.
[  227.778247][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4228'.
[  227.781463][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4228'.
[  227.785155][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4228'.
[  227.788925][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4228'.
[  227.794797][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4228'.
[  227.892090][    C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  228.164014][T15957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.710869][T15989] netlink: 'syz.1.4254': attribute type 4 has an invalid length.
[  228.769040][T15993] netlink: 'syz.1.4256': attribute type 1 has an invalid length.
[  230.646486][T16054] __nla_validate_parse: 20 callbacks suppressed
[  230.646500][T16054] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4280'.
[  230.679498][T16056] netlink: 'syz.0.4281': attribute type 1 has an invalid length.
[  230.738496][T16060] gretap3: entered promiscuous mode
[  231.053294][T16098] netlink: 'syz.1.4298': attribute type 49 has an invalid length.
[  231.113662][T16105] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4301'.
[  231.413396][T16122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  231.840462][T16159] lo speed is unknown, defaulting to 1000
[  231.846846][T16159] lo speed is unknown, defaulting to 1000
[  232.385935][T16183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4336'.
[  232.398845][T16183] batman_adv: batadv0: Adding interface: ip6gretap3
[  232.403319][T16183] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.403478][T16185] sctp: [Deprecated]: syz.1.4338 (pid 16185) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.403478][T16185] Use struct sctp_sack_info instead
[  232.432512][T16183] batman_adv: batadv0: Interface activated: ip6gretap3
[  232.544111][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4344'.
[  232.549125][T16200] tipc: Can't bind to reserved service type 0
[  232.617593][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4345'.
[  232.820836][T16219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4351'.
[  232.935883][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4357'.
[  232.947010][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4358'.
[  232.950922][T16233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4358'.
[  233.019656][T16243] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  233.228910][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4375'.
[  233.442689][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.451001][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.460188][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.476036][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.576415][T16308] Bluetooth: hci0: Opcode 0x080f failed: -22
[  233.709163][T16323] bridge0: the hash_elasticity option has been deprecated and is always 16
[  233.814197][T16341] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  233.853259][T16345] geneve0: entered promiscuous mode
[  233.856331][ T5717] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.859098][ T5717] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.870261][ T5717] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.873466][ T5717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.929561][T16351] netlink: 'syz.0.4411': attribute type 11 has an invalid length.
[  233.930519][T16331] netlink: 'syz.1.4404': attribute type 3 has an invalid length.
[  233.938403][T16331] netlink: 'syz.1.4404': attribute type 1 has an invalid length.
[  234.527234][T16436] net_ratelimit: 1 callbacks suppressed
[  234.527248][T16436] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  235.652100][ T5853] Bluetooth: hci0: command tx timeout
[  235.780248][T16492] __nla_validate_parse: 9 callbacks suppressed
[  235.780262][T16492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4473'.
[  235.805521][T16492] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4473'.
[  235.846057][T16495] netlink: 272 bytes leftover after parsing attributes in process `syz.2.4474'.
[  236.023573][T16510] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  236.567389][T16558] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4501'.
[  236.570348][T16558] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4501'.
[  236.573954][T16558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4501'.
[  236.766550][T16578] netlink: 'syz.1.4511': attribute type 3 has an invalid length.
[  236.769203][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'.
[  236.774645][T16578] netlink: 'syz.1.4511': attribute type 3 has an invalid length.
[  236.777125][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'.
[  236.888080][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'.
[  237.037033][T16598] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  237.135639][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4523'.
[  237.257933][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.261669][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.394491][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.398074][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.761500][T16622] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  237.766231][T16622] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  237.918971][T16634] netlink: 'syz.1.4537': attribute type 3 has an invalid length.
[  237.925405][T16634] netlink: 'syz.1.4537': attribute type 2 has an invalid length.
[  237.928728][T16634] netlink: 'syz.1.4537': attribute type 2 has an invalid length.
[  238.214690][T16652] netlink: 'syz.0.4546': attribute type 16 has an invalid length.
[  238.217625][T16652] netlink: 'syz.0.4546': attribute type 17 has an invalid length.
[  238.243570][T16652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.248668][T13934] lo speed is unknown, defaulting to 1000
[  238.256202][T13934] syz0: Port: 1 Link ACTIVE
[  238.257746][T13934] lo speed is unknown, defaulting to 1000
[  238.457557][T16695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.274155][T16726] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  239.450246][T16731] atomic_op ffff888122ac7198 conn xmit_atomic 0000000000000000
[  240.211074][T16756] lo speed is unknown, defaulting to 1000
[  240.214967][T16756] lo speed is unknown, defaulting to 1000
[  240.280382][T16762] lo speed is unknown, defaulting to 1000
[  240.394889][T16762] lo speed is unknown, defaulting to 1000
[  241.449229][T16837] __nla_validate_parse: 8 callbacks suppressed
[  241.449249][T16837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4625'.
[  241.732607][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  241.972409][T16881] veth0_to_bridge: entered promiscuous mode
[  241.975347][T16881] veth0_to_bridge: left promiscuous mode
[  242.333208][T16915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.364714][T16920] netlink: 'syz.0.4662': attribute type 7 has an invalid length.
[  242.367681][T16920] netlink: 'syz.0.4662': attribute type 8 has an invalid length.
[  242.464203][T16933] netlink: 'syz.2.4670': attribute type 1 has an invalid length.
[  242.555308][T16941] syzkaller0: entered promiscuous mode
[  242.557473][T16941] syzkaller0: entered allmulticast mode
[  242.564368][T16943] x9: renamed from bridge_slave_0
[  242.730425][T16963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4682'.
[  242.800266][T16966] netlink: 'syz.1.4681': attribute type 1 has an invalid length.
[  242.809125][T16966] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4681'.
[  243.642191][T16966] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  243.661098][T16960] lo speed is unknown, defaulting to 1000
[  243.664381][T16960] lo speed is unknown, defaulting to 1000
[  243.842297][T16975] nbd0: detected capacity change from 0 to 63
[  243.848215][T16980] block nbd0: NBD_DISCONNECT
[  243.852481][T16980] block nbd0: Disconnected due to user request.
[  243.854890][T16980] block nbd0: shutting down sockets
[  243.900692][    C1] blk_print_req_error: 27 callbacks suppressed
[  243.900704][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.905758][    C1] buffer_io_error: 27 callbacks suppressed
[  243.905767][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  243.910910][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.913948][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  243.916408][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.919245][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  243.922180][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.925173][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  243.928789][T16517] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.931883][T16517] Buffer I/O error on dev nbd0, logical block 0, async page read
[  243.936187][T16517] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.939126][T16517] Buffer I/O error on dev nbd0, logical block 1, async page read
[  243.945004][T16517] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.948571][T16517] Buffer I/O error on dev nbd0, logical block 2, async page read
[  243.961357][T16517] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.975970][T16517] Buffer I/O error on dev nbd0, logical block 3, async page read
[  243.979544][T16517] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.984155][T16517] Buffer I/O error on dev nbd0, logical block 0, async page read
[  243.986944][T16517] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  243.990231][T16517] Buffer I/O error on dev nbd0, logical block 1, async page read
[  244.023049][T16517] ldm_validate_partition_table(): Disk read failed.
[  244.026219][T16517] Dev nbd0: unable to read RDB block 0
[  244.029196][T16517]  nbd0: unable to read partition table
[  244.067245][T16517] ldm_validate_partition_table(): Disk read failed.
[  244.070628][T16517] Dev nbd0: unable to read RDB block 0
[  244.109766][T16517]  nbd0: unable to read partition table
[  244.151345][T17010] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  244.162727][T17010] batman_adv: batadv0: Removing interface: ip6gretap3
[  244.172422][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4699'.
[  244.178849][T17008] nbd: socks must be embedded in a SOCK_ITEM attr
[  244.185588][T17008] block nbd2: shutting down sockets
[  244.410770][T17028] lo speed is unknown, defaulting to 1000
[  244.414232][T17028] lo speed is unknown, defaulting to 1000
[  244.462155][T17033] netlink: 'syz.2.4710': attribute type 1 has an invalid length.
[  244.465287][T17033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4710'.
[  244.698724][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4720'.
[  244.866380][T17070] netlink: 'syz.0.4726': attribute type 9 has an invalid length.
[  244.869408][T17070] netlink: 212160 bytes leftover after parsing attributes in process `syz.0.4726'.
[  244.896609][T17072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4728'.
[  244.916745][T17074] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4729'.
[  245.101542][T17096] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4739'.
[  245.203798][T17108] netlink: 'syz.0.4745': attribute type 2 has an invalid length.
[  245.353329][T17127] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  245.357300][T17125] IPVS: stopping backup sync thread 17127 ...
[  245.639905][T17145] !: renamed from dummy0 (while UP)
[  245.667560][T17145] lo speed is unknown, defaulting to 1000
[  245.671537][T17145] lo speed is unknown, defaulting to 1000
[  245.868267][T17147] lo speed is unknown, defaulting to 1000
[  245.871776][T17147] lo speed is unknown, defaulting to 1000
[  246.630477][T17197] __nla_validate_parse: 4 callbacks suppressed
[  246.630488][T17197] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4779'.
[  246.671301][T17201] netlink: 'syz.1.4782': attribute type 21 has an invalid length.
[  246.715106][T17207] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4784'.
[  246.772754][T17215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4788'.
[  246.915634][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4797'.
[  247.068583][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4805'.
[  248.089016][T17273] lo speed is unknown, defaulting to 1000
[  248.101728][T17273] lo speed is unknown, defaulting to 1000
[  248.123336][T17281] openvswitch: netlink: Missing key (keys=40, expected=80)
[  248.545878][T17317] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  248.776711][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4849'.
[  248.779994][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4849'.
[  248.827290][T17351] lo speed is unknown, defaulting to 1000
[  248.830170][T17351] lo speed is unknown, defaulting to 1000
[  248.965475][T17369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4856'.
[  249.064662][T17381] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4863'.
[  249.113163][T17380] pim6reg1: entered promiscuous mode
[  249.115178][T17380] pim6reg1: entered allmulticast mode
[  249.140023][T17385] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  250.150823][T17417] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4878'.
[  251.020451][T17483] netlink: 'syz.1.4908': attribute type 1 has an invalid length.
[  251.038085][T17483] netlink: 'syz.1.4908': attribute type 4 has an invalid length.
[  251.041412][T17483] NCSI netlink: No device for ifindex 3321692160
[  252.149396][T17518] lo speed is unknown, defaulting to 1000
[  252.153729][T17518] lo speed is unknown, defaulting to 1000
[  252.951333][T17562] bridge_slave_0: default FDB implementation only supports local addresses
[  253.096675][T17570] __nla_validate_parse: 3 callbacks suppressed
[  253.096686][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'.
[  253.120023][T17571] can: request_module (can-proto-0) failed.
[  253.258626][T17586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4948'.
[  253.298995][T17589] lo speed is unknown, defaulting to 1000
[  253.301819][T17589] lo speed is unknown, defaulting to 1000
[  253.368824][T17594] netlink: 'syz.1.4951': attribute type 11 has an invalid length.
[  253.635838][T17607] bridge4: left allmulticast mode
[  253.638532][T17607] gretap2: left allmulticast mode
[  253.640672][T17607] bridge5: left promiscuous mode
[  253.643029][T17607] bridge5: left allmulticast mode
[  253.645487][T17607] gretap3: left promiscuous mode
[  253.651212][ T5313] lo speed is unknown, defaulting to 1000
[  253.654155][ T5313] syz0: Port: 1 Link DOWN
[  253.656071][ T5313] lo speed is unknown, defaulting to 1000
[  253.898009][T17629] netlink: 'syz.1.4967': attribute type 322 has an invalid length.
[  253.911798][T17631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4968'.
[  254.419494][T17677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4989'.
[  254.529345][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4992'.
[  254.534069][T17684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4992'.
[  254.538242][T17684] netlink: 'syz.1.4992': attribute type 1 has an invalid length.
[  254.542942][T17684] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4992'.
[  254.592747][T17684] nbd: socks must be embedded in a SOCK_ITEM attr
[  254.595618][T17684] block nbd0: shutting down sockets
[  254.648608][T17702] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  254.671277][T17702] syzkaller0: entered promiscuous mode
[  254.681250][T17702] syzkaller0: entered allmulticast mode
[  255.601681][T17709] netlink: 'syz.2.4999': attribute type 4 has an invalid length.
[  255.694547][T17722] netlink: 'syz.1.5005': attribute type 1 has an invalid length.
[  255.858393][T17737] netlink: 'syz.1.5013': attribute type 1 has an invalid length.
[  255.861679][T17737] netlink: 6 bytes leftover after parsing attributes in process `syz.1.5013'.
[  256.060635][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5019'.
[  256.101530][T17743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5015'.
[  256.340915][T17774] lo speed is unknown, defaulting to 1000
[  256.344874][T17774] lo speed is unknown, defaulting to 1000
[  256.969550][T17791] batadv_slave_0: entered promiscuous mode
[  256.972287][T17791] netlink: 'syz.0.5033': attribute type 3 has an invalid length.
[  257.559666][T17840] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  257.600350][T17843] netlink: 'syz.1.5053': attribute type 13 has an invalid length.
[  257.605213][T17843] netlink: 'syz.1.5053': attribute type 17 has an invalid length.
[  257.636908][ T5877] bond0: (slave wlan1): interface is now down
[  257.644895][T17843] 8021q: adding VLAN 0 to HW filter on device team0
[  257.650113][T17843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.657815][  T976] lo speed is unknown, defaulting to 1000
[  257.663950][ T5877] bond0: (slave wlan1): interface is now down
[  257.669796][  T976] syz1: Port: 1 Link ACTIVE
[  257.672433][ T5877] bond0: now running without any active interface!
[  257.695492][T17848] lo speed is unknown, defaulting to 1000
[  257.698746][T17848] lo speed is unknown, defaulting to 1000
[  257.792904][ T5877] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  258.040210][T17865] lo speed is unknown, defaulting to 1000
[  258.046559][T17865] lo speed is unknown, defaulting to 1000
[  258.318778][T17865] netlink: 'syz.2.5065': attribute type 2 has an invalid length.
[  258.325710][T17865] __nla_validate_parse: 4 callbacks suppressed
[  258.325720][T17865] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5065'.
[  258.639009][T17887] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5070'.
[  259.806361][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5082'.
[  260.608046][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5089'.
[  260.733223][T17945] 8021q: adding VLAN 0 to HW filter on device bond5
[  260.738647][T17945] bond0: (slave bond5): Enslaving as an active interface with a down link
[  260.900700][T17965] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5099'.
[  260.905540][T17967] netlink: 'syz.2.5100': attribute type 1 has an invalid length.
[  260.927934][T17967] 8021q: adding VLAN 0 to HW filter on device bond3
[  260.966597][T17967] 8021q: adding VLAN 0 to HW filter on device bond3
[  260.971291][T17967] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  260.977344][T17967] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  261.037353][T17971] veth9: entered promiscuous mode
[  261.046600][T17971] bond3: (slave veth9): Enslaving as an active interface with a down link
[  261.087042][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5104'.
[  261.093636][T17979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5104'.
[  261.100181][T17979] gretap4: entered promiscuous mode
[  261.159299][T17985] syzkaller1: entered promiscuous mode
[  261.161518][T17985] syzkaller1: entered allmulticast mode
[  261.496658][T18019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5125'.
[  261.591291][T18027] netlink: 'syz.2.5126': attribute type 3 has an invalid length.
[  261.798190][T18036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.801009][T18036] syzkaller0: entered promiscuous mode
[  261.803219][T18036] syzkaller0: entered allmulticast mode
[  261.818136][T18036] tipc: Resetting bearer <eth:syzkaller0>
[  261.821426][T18035] tipc: Resetting bearer <eth:syzkaller0>
[  261.830810][T18035] tipc: Disabling bearer <eth:syzkaller0>
[  261.892497][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.548033][T18070] lo speed is unknown, defaulting to 1000
[  262.550922][T18070] lo speed is unknown, defaulting to 1000
[  263.236831][T18107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5161'.
[  263.576095][T18146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.580359][T18146] netlink: 'syz.2.5181': attribute type 1 has an invalid length.
[  263.592132][T18146] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5181'.
[  263.596100][T18146] netlink: 'syz.2.5181': attribute type 1 has an invalid length.
[  263.654622][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5182'.
[  263.824472][T18168] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  263.835241][T18168] syzkaller0: entered promiscuous mode
[  263.837554][T18168] syzkaller0: entered allmulticast mode
[  263.855306][T18174] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.859485][T18174] syzkaller0: entered promiscuous mode
[  263.861690][T18174] syzkaller0: entered allmulticast mode
[  263.877122][T18174] tipc: Resetting bearer <eth:syzkaller0>
[  263.905247][T18174] tipc: Resetting bearer <eth:syzkaller0>
[  263.917606][T18174] tipc: Disabling bearer <eth:syzkaller0>
[  264.126431][T18198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5201'.
[  265.928145][T18285] lo speed is unknown, defaulting to 1000
[  265.931890][T18285] lo speed is unknown, defaulting to 1000
[  265.954417][T18289] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5240'.
[  266.080057][T18299] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  266.552673][T18348] batadv0: entered allmulticast mode
[  266.555893][T18348] 8021q: adding VLAN 0 to HW filter on device batadv0
[  266.841466][T18388] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  267.195556][T18428] netlink: 'syz.1.5304': attribute type 11 has an invalid length.
[  268.605650][T18476] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  269.151509][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5336'.
[  270.132084][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  270.921742][T18556] netlink: 'syz.2.5360': attribute type 1 has an invalid length.
[  270.952744][T18558] netlink: 'syz.1.5361': attribute type 13 has an invalid length.
[  270.955356][T18558] netlink: 'syz.1.5361': attribute type 17 has an invalid length.
[  270.969898][T18558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.034400][T18558] lo speed is unknown, defaulting to 1000
[  271.038154][T18558] lo speed is unknown, defaulting to 1000
[  271.104266][T18573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5367'.
[  271.246668][T18583] netlink: 'syz.0.5371': attribute type 10 has an invalid length.
[  271.249324][T18583] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5371'.
[  271.367748][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5376'.
[  271.546891][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5382'.
[  271.649348][T18611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5384'.
[  271.654838][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5384'.
[  271.827796][T18633] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5394'.
[  272.201278][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5410'.
[  272.328790][T18680] netlink: 'syz.0.5416': attribute type 13 has an invalid length.
[  272.338390][T18680] netlink: 'syz.0.5416': attribute type 17 has an invalid length.
[  272.475348][T18680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  272.485442][  T976] lo speed is unknown, defaulting to 1000
[  272.488004][  T976] syz0: Port: 1 Link ACTIVE
[  272.490051][  T976] lo speed is unknown, defaulting to 1000
[  273.812131][T18812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.930372][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5480'.
[  273.984824][T18825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.988326][T18825] syzkaller0: entered promiscuous mode
[  273.990558][T18825] syzkaller0: entered allmulticast mode
[  274.033939][T18825] tipc: Resetting bearer <eth:syzkaller0>
[  274.045486][T18824] tipc: Resetting bearer <eth:syzkaller0>
[  274.065090][T18824] tipc: Disabling bearer <eth:syzkaller0>
[  274.506044][T18888] tipc: New replicast peer: 255.255.255.255
[  274.508491][T18888] tipc: Enabled bearer <udp:s>, priority 10
[  274.729763][T18918] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  274.791191][T18922] netlink: 'syz.1.5524': attribute type 8 has an invalid length.
[  274.795334][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5524'.
[  274.878601][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5527'.
[  275.181250][T18964] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5544'.
[  275.220626][T18967] netlink: 'syz.0.5546': attribute type 1 has an invalid length.
[  275.253088][T18969] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.310340][T18969] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.367890][T18969] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.403414][T18979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5551'.
[  275.407392][T18979] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  275.441085][T18969] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.487097][ T5717] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.496418][ T5717] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.504848][ T5717] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.520511][ T5717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.721339][T18990] lo speed is unknown, defaulting to 1000
[  275.725720][T18990] lo speed is unknown, defaulting to 1000
[  276.583659][T19058] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  276.617101][T19058] syzkaller0: entered promiscuous mode
[  276.619522][T19058] syzkaller0: entered allmulticast mode
[  277.775488][T19092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5602'.
[  279.020965][T19149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  279.180323][T19153] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  279.251400][T19160] lo speed is unknown, defaulting to 1000
[  279.256003][T19160] lo speed is unknown, defaulting to 1000
[  279.804912][T19204] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.854126][T19204] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.899391][T19209] 8021q: adding VLAN 0 to HW filter on device batadv1
[  279.913306][T19209] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  279.923930][T19209] team0: Failed to send options change via netlink (err -105)
[  279.926958][T19209] team0: Port device batadv1 added
[  279.937775][T19204] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  279.988079][T19204] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  280.104767][ T5877] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  280.115435][ T5877] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  280.146248][ T5877] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  280.159638][ T5877] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.006059][T19246] netlink: 'syz.0.5665': attribute type 1 has an invalid length.
[  281.008635][T19246] netlink: 'syz.0.5665': attribute type 1 has an invalid length.
[  282.034174][T19270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5675'.
[  282.357355][T19288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5680'.
[  282.360734][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5680'.
[  282.381381][T19288] bond3: entered promiscuous mode
[  282.383920][T19288] bond3: entered allmulticast mode
[  282.386170][T19288] 8021q: adding VLAN 0 to HW filter on device bond3
[  282.435677][T19288] lo speed is unknown, defaulting to 1000
[  282.438524][T19288] lo speed is unknown, defaulting to 1000
[  282.967583][T19318] openvswitch: netlink: IP tunnel dst address not specified
[  283.292749][T19357] openvswitch: netlink: Message has 4 unknown bytes.
[  283.295453][T19357] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.388219][T19364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5712'.
[  283.578542][T19378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5719'.
[  283.629748][T19381] netlink: 'syz.0.5719': attribute type 10 has an invalid length.
[  283.659415][T19385] netlink: 'syz.1.5722': attribute type 2 has an invalid length.
[  283.668268][T19385] : entered promiscuous mode
[  283.772487][T19393] netlink: 'syz.2.5726': attribute type 4 has an invalid length.
[  284.201699][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5737'.
[  284.616454][T19453] vlan0: entered promiscuous mode
[  284.662140][T19456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5751'.
[  284.875858][T19480] netlink: 'syz.2.5761': attribute type 1 has an invalid length.
[  284.991015][T19492] lo speed is unknown, defaulting to 1000
[  284.994762][T19492] lo speed is unknown, defaulting to 1000
[  285.084125][T19498] IPVS: persistence engine module ip_vs_pe_ not found
[  285.611179][T19537] lo speed is unknown, defaulting to 1000
[  285.615577][T19537] lo speed is unknown, defaulting to 1000
[  285.690705][T19543] netlink: 'syz.2.5785': attribute type 31 has an invalid length.
[  286.132084][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  286.194951][T19587] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5805'.
[  286.247693][T19591] vlan3: entered promiscuous mode
[  286.250078][T19591] bridge0: entered promiscuous mode
[  286.878761][T19626] lo speed is unknown, defaulting to 1000
[  286.883938][T19626] lo speed is unknown, defaulting to 1000
[  287.000457][T19636] lo speed is unknown, defaulting to 1000
[  287.037139][T19636] lo speed is unknown, defaulting to 1000
[  287.223795][T19650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5832'.
[  287.853705][T19681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5846'.
[  287.859488][T19681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5846'.
[  288.377603][T19668] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  288.653407][T19737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5873'.
[  288.831651][T19756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5882'.
[  289.215377][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5889'.
[  289.225690][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5889'.
[  289.624949][T19788] ipvlan2: entered promiscuous mode
[  289.695053][T19797] lo speed is unknown, defaulting to 1000
[  289.698711][T19797] lo speed is unknown, defaulting to 1000
[  290.588787][T19822] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  290.725119][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5910'.
[  291.000431][T19846] netlink: 'syz.1.5916': attribute type 2 has an invalid length.
[  291.424162][T19870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5928'.
[  291.616165][T19879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5930'.
[  291.701807][T19889] netlink: 'syz.2.5936': attribute type 4 has an invalid length.
[  291.868395][T19907] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.605808][T19918] __nla_validate_parse: 3 callbacks suppressed
[  292.605822][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5949'.
[  292.805988][T19934] netlink: 'syz.0.5957': attribute type 5 has an invalid length.
[  292.994154][T19959] vlan3: entered promiscuous mode
[  292.996289][T19959] macvtap0: entered promiscuous mode
[  293.038932][T19961] lo speed is unknown, defaulting to 1000
[  293.041836][T19961] lo speed is unknown, defaulting to 1000
[  293.055561][T19966] netlink: 'syz.1.5972': attribute type 2 has an invalid length.
[  293.941424][T19996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5983'.
[  294.428889][T20039] openvswitch: netlink: Missing valid actions attribute.
[  294.435197][T20039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.441275][T20041] netlink: 'syz.0.6003': attribute type 30 has an invalid length.
[  294.444922][T20041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6003'.
[  294.448463][T20041] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  294.686505][T20060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6012'.
[  294.920632][T20072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.924554][T20072] syzkaller0: entered promiscuous mode
[  294.927109][T20072] syzkaller0: entered allmulticast mode
[  294.954517][T20072] tipc: Resetting bearer <eth:syzkaller0>
[  294.959950][T20071] tipc: Resetting bearer <eth:syzkaller0>
[  294.969794][T20071] tipc: Disabling bearer <eth:syzkaller0>
[  295.416898][T20086] lo speed is unknown, defaulting to 1000
[  295.425626][T20086] lo speed is unknown, defaulting to 1000
[  295.564142][T20100] netlink: 664 bytes leftover after parsing attributes in process `syz.0.6030'.
[  295.567950][T20100] netlink: 664 bytes leftover after parsing attributes in process `syz.0.6030'.
[  296.107857][T20136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6046'.
[  296.114535][T20136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6046'.
[  296.525937][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6057'.
[  296.535596][T20159] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  296.658854][T20166] nbd: socks must be embedded in a SOCK_ITEM attr
[  296.875984][T20182] netlink: 'syz.1.6066': attribute type 1 has an invalid length.
[  296.879233][T20182] netlink: 'syz.1.6066': attribute type 2 has an invalid length.
[  296.882985][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6066'.
[  296.930691][T20187] netlink: 'syz.1.6068': attribute type 15 has an invalid length.
[  296.952520][T20189] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  297.135795][T20205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.144538][T20205] syzkaller0: entered promiscuous mode
[  297.146868][T20205] syzkaller0: entered allmulticast mode
[  297.188101][T20205] tipc: Resetting bearer <eth:syzkaller0>
[  297.205343][T20204] tipc: Resetting bearer <eth:syzkaller0>
[  297.232556][T20204] tipc: Disabling bearer <eth:syzkaller0>
[  297.473887][T20235] netdevsim0: renamed from gre0 (while UP)
[  297.478595][T20235] netdevsim0: entered promiscuous mode
[  297.651452][T20251] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  297.674273][T20253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  297.677528][T20253] IPv6: NLM_F_CREATE should be set when creating new route
[  297.831866][T20265] delete_channel: no stack
[  298.240817][T20305] __nla_validate_parse: 2 callbacks suppressed
[  298.240827][T20305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6117'.
[  298.249141][T20305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6117'.
[  298.290374][T20313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6121'.
[  298.310009][T20315] lo speed is unknown, defaulting to 1000
[  298.312795][T20315] lo speed is unknown, defaulting to 1000
[  298.536635][T20334] netlink: 'syz.2.6130': attribute type 6 has an invalid length.
[  298.761107][T20350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6137'.
[  298.904879][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6138'.
[  298.985092][T20358] smc: removing ib device syz0
[  299.116778][T20371] netlink: 'syz.0.6145': attribute type 1 has an invalid length.
[  299.163252][T20375] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.166157][T20375] syzkaller0: entered promiscuous mode
[  299.168183][T20375] syzkaller0: entered allmulticast mode
[  299.185423][T20375] tipc: Resetting bearer <eth:syzkaller0>
[  299.187431][T20375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  299.194341][T20374] tipc: Resetting bearer <eth:syzkaller0>
[  299.216556][T20374] tipc: Disabling bearer <eth:syzkaller0>
[  299.579499][T20399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.586754][T20399] syzkaller0: entered promiscuous mode
[  299.588925][T20399] syzkaller0: entered allmulticast mode
[  299.613392][T20399] tipc: Resetting bearer <eth:syzkaller0>
[  299.619645][T20398] tipc: Resetting bearer <eth:syzkaller0>
[  299.631019][T20398] tipc: Disabling bearer <eth:syzkaller0>
[  299.767191][T20420] netdevsim0: entered allmulticast mode
[  299.769180][T20420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  299.916372][T20434] netlink: 'syz.2.6176': attribute type 1 has an invalid length.
[  299.920145][T20434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  300.025801][   T13] tipc: Subscription rejected, illegal request
[  300.225816][T20458] bridge0: port 1(erspan0) entered blocking state
[  300.228846][T20458] bridge0: port 1(erspan0) entered disabled state
[  300.231515][T20458] erspan0: entered allmulticast mode
[  300.235856][T20458] erspan0: left allmulticast mode
[  300.431908][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6193'.
[  300.670591][T20490] lo speed is unknown, defaulting to 1000
[  300.931233][T20508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6207'.
[  301.075325][T20516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6212'.
[  301.099750][T20518] netlink: 'syz.0.6213': attribute type 1 has an invalid length.
[  301.434214][T20543] netlink: 'syz.0.6225': attribute type 1 has an invalid length.
[  301.751628][T20575] hsr0: entered promiscuous mode
[  301.755185][T20573] hsr0: left promiscuous mode
[  302.286900][T20618] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  302.611830][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6270'.
[  302.615961][T20637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6270'.
[  303.157859][T20679] netlink: 'syz.0.6290': attribute type 4 has an invalid length.
[  303.561597][T20701] syz.1.6302 (20701) used greatest stack depth: 18744 bytes left
[  303.587996][T20706] __nla_validate_parse: 2 callbacks suppressed
[  303.588014][T20706] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6301'.
[  303.712236][T20718] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6308'.
[  303.780499][   T33] audit: type=1800 audit(1757199338.801:2): pid=20726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6312" name=CB dev="tmpfs" ino=11104 res=0 errno=0
[  303.878593][T20738] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  304.300912][T20764] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  304.829012][T20795] lo speed is unknown, defaulting to 1000
[  305.766036][T20819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.770155][T20819] syzkaller0: entered promiscuous mode
[  305.772920][T20819] syzkaller0: entered allmulticast mode
[  305.811437][T20819] tipc: Resetting bearer <eth:syzkaller0>
[  305.826608][T20818] tipc: Resetting bearer <eth:syzkaller0>
[  305.841437][T20818] tipc: Disabling bearer <eth:syzkaller0>
[  305.901167][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6354'.
[  306.130854][T20850] netlink: 'syz.2.6365': attribute type 13 has an invalid length.
[  306.242816][T20861] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6369'.
[  306.259720][ T5877] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.282483][ T5877] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.285959][ T5877] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.289552][ T5877] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.417720][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6378'.
[  306.421595][T20878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6378'.
[  306.489099][T20885] syzkaller1: entered promiscuous mode
[  306.491579][T20885] syzkaller1: entered allmulticast mode
[  306.932225][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  307.476951][T20907] netlink: 'syz.1.6389': attribute type 7 has an invalid length.
[  307.482928][T20907] : entered promiscuous mode
[  307.584690][T20909] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.6390'.
[  307.786884][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6392'.
[  307.997458][T20925] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6397'.
[  308.110224][T20932] netlink: 'syz.2.6400': attribute type 1 has an invalid length.
[  308.143877][T20932] 8021q: adding VLAN 0 to HW filter on device bond4
[  308.311573][T20951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.449041][T20966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6414'.
[  310.186286][T21003] __nla_validate_parse: 1 callbacks suppressed
[  310.186303][T21003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6432'.
[  310.272325][T21005] block nbd2: server does not support multiple connections per device.
[  310.275110][T21005] block nbd2: shutting down sockets
[  310.283176][T21015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6438'.
[  310.714851][T21055] netlink: 'syz.2.6455': attribute type 3 has an invalid length.
[  310.830998][T21064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  310.907444][T21070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6462'.
[  310.911301][T21070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6462'.
[  310.996999][T21077] nbd: must specify at least one socket
[  311.531747][T21136] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6493'.
[  311.631620][T21143] lo speed is unknown, defaulting to 1000
[  312.087423][T21195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6519'.
[  312.159048][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6523'.
[  312.239585][T21213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.479756][T21243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.517640][T21248] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.941667][T21288] team0: entered promiscuous mode
[  312.944413][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6560'.
[  313.061646][T21288] team0 (unregistering): left promiscuous mode
[  313.136909][T21299] netlink: 'syz.0.6565': attribute type 4 has an invalid length.
[  313.145964][T21299] netlink: 'syz.0.6565': attribute type 4 has an invalid length.
[  313.182294][T21297] block nbd1: NBD_DISCONNECT
[  313.184347][T21297] block nbd1: Send disconnect failed -107
[  313.215323][T21297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6564'.
[  313.264036][T21312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6569'.
[  313.472951][T21339] netlink: 'syz.0.6581': attribute type 3 has an invalid length.
[  313.645622][T21353] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  313.989106][T21382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.993471][T21382] syzkaller0: entered promiscuous mode
[  313.995764][T21382] syzkaller0: entered allmulticast mode
[  313.999671][T21382] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  314.229578][T21383] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  314.817405][T21384] tipc: Resetting bearer <eth:syzkaller0>
[  314.837333][T21381] tipc: Resetting bearer <eth:syzkaller0>
[  314.858550][T21381] tipc: Disabling bearer <eth:syzkaller0>
[  314.956321][T21396] syzkaller1: entered promiscuous mode
[  314.958781][T21396] syzkaller1: entered allmulticast mode
[  315.067242][T21405] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  315.072689][T21401] nbd1: detected capacity change from 0 to 127
[  315.081803][   T56] block nbd1: Receive control failed (result -104)
[  316.170990][T21448] : entered promiscuous mode
[  316.413997][T21468] __nla_validate_parse: 2 callbacks suppressed
[  316.414009][T21468] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6635'.
[  316.549016][T21480] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6641'.
[  316.666283][T21487] bridge0: port 1(hsr_slave_0) entered blocking state
[  316.669271][T21487] bridge0: port 1(hsr_slave_0) entered disabled state
[  316.676459][T21487] hsr_slave_0: entered allmulticast mode
[  316.687956][T21487] hsr_slave_0: left allmulticast mode
[  317.031225][T21503] ip6tnl2: entered allmulticast mode
[  317.090705][T21505] lo speed is unknown, defaulting to 1000
[  317.286863][T21514] netlink: 'syz.2.6654': attribute type 21 has an invalid length.
[  317.290461][T21514] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6654'.
[  317.296700][T21514] netlink: 'syz.2.6654': attribute type 4 has an invalid length.
[  317.300111][T21514] netlink: 'syz.2.6654': attribute type 3 has an invalid length.
[  317.303753][T21514] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6654'.
[  317.417725][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'.
[  317.429558][T21520] dummy0: entered promiscuous mode
[  317.436142][T21520] dummy0: left promiscuous mode
[  317.492208][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  317.825653][T21558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6676'.
[  317.868218][T21559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.871393][T21555] tipc: Resetting bearer <eth:syzkaller0>
[  317.885231][T21555] tipc: Disabling bearer <eth:syzkaller0>
[  318.072609][   T10] hid-generic 0005:16C0:0009.0003: unknown main item tag 0x0
[  318.079610][   T10] hid-generic 0005:16C0:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  318.125182][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6686'.
[  318.128943][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6686'.
[  318.273800][T21594] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  318.395700][T21606] netlink: 'syz.0.6698': attribute type 1 has an invalid length.
[  318.411282][T21606] 8021q: adding VLAN 0 to HW filter on device bond6
[  318.425117][T21606] veth13: entered promiscuous mode
[  318.428848][T21606] bond6: (slave veth13): Enslaving as an active interface with a down link
[  318.437004][T21606] erspan0: entered allmulticast mode
[  318.820981][T21631] lo speed is unknown, defaulting to 1000
[  319.497909][T21671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6724'.
[  319.615087][T21631] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  319.723365][T21687] netlink: 'syz.1.6732': attribute type 1 has an invalid length.
[  319.726813][T21687] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6732'.
[  319.774491][T21689] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  320.159838][   T33] audit: type=1800 audit(1757199355.181:3): pid=21725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6749" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=11066 res=0 errno=0
[  320.181930][   T33] audit: type=1804 audit(1757199355.201:4): pid=21725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6749" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=11066 res=1 errno=0
[  320.258062][T21736] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  321.313214][T21774] syzkaller0: entered promiscuous mode
[  321.315602][T21774] syzkaller0: entered allmulticast mode
[  321.388362][T21785] bridge0: port 1(syz_tun) entered blocking state
[  321.390908][T21785] bridge0: port 1(syz_tun) entered disabled state
[  321.394733][T21785] syz_tun: entered allmulticast mode
[  321.401157][T21785] syz_tun: entered promiscuous mode
[  321.477733][T21791] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  321.775317][T21811] __nla_validate_parse: 3 callbacks suppressed
[  321.775330][T21811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6789'.
[  321.791720][T21811] netlink: 'syz.2.6789': attribute type 32 has an invalid length.
[  321.798620][T21811] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  322.251183][T21841] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  322.256604][T21841] syzkaller0: entered promiscuous mode
[  322.258912][T21841] syzkaller0: entered allmulticast mode
[  322.646439][T21865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6816'.
[  323.238599][T21900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.317884][T21908] netlink: 'syz.1.6838': attribute type 13 has an invalid length.
[  323.320510][T21908] netlink: 'syz.1.6838': attribute type 17 has an invalid length.
[  323.328235][T21908] netdevsim0: left promiscuous mode
[  323.330099][T21908] netdevsim0: left allmulticast mode
[  323.339683][T21908] 8021q: adding VLAN 0 to HW filter on device team0
[  323.343570][T21908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.398192][T21908] lo speed is unknown, defaulting to 1000
[  323.551307][T21934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.551346][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6845'.
[  323.861276][T21956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6857'.
[  323.868939][T21956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6857'.
[  324.085515][T21965] delete_channel: no stack
[  324.419373][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6871'.
[  324.521892][T22001] netlink: 'syz.2.6877': attribute type 17 has an invalid length.
[  324.535566][T22001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  324.562312][T22005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6876'.
[  324.614400][T22007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.619511][T22007] syzkaller0: entered promiscuous mode
[  324.622685][T22007] syzkaller0: entered allmulticast mode
[  324.630308][T22009] lo speed is unknown, defaulting to 1000
[  324.643754][T22007] tipc: Resetting bearer <eth:syzkaller0>
[  324.670042][T22006] tipc: Resetting bearer <eth:syzkaller0>
[  324.692662][T22006] tipc: Disabling bearer <eth:syzkaller0>
[  325.104066][T22036] lo speed is unknown, defaulting to 1000
[  325.478244][T22073] netlink: zone id is out of range
[  325.484376][T22073] netlink: zone id is out of range
[  325.519410][T22073] netlink: set zone limit has 4 unknown bytes
[  325.550939][T22073] netlink: del zone limit has 4 unknown bytes
[  325.666144][T22091] IPVS: Error connecting to the multicast addr
[  325.816154][T22105] syzkaller0: entered promiscuous mode
[  325.818519][T22105] syzkaller0: entered allmulticast mode
[  325.825564][T22107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.827548][T22111] openvswitch: netlink: IP tunnel dst address not specified
[  325.950431][T22119] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6928'.
[  325.955069][T22119] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6928'.
[  325.958974][T22119] netlink: 'syz.1.6928': attribute type 6 has an invalid length.
[  325.962364][T22119] netlink: 'syz.1.6928': attribute type 5 has an invalid length.
[  325.965843][T22119] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6928'.
[  326.917232][T22107] syzkaller0: entered promiscuous mode
[  326.919273][T22107] syzkaller0: entered allmulticast mode
[  326.929845][T22124] tipc: Resetting bearer <eth:syzkaller0>
[  326.940843][T22106] tipc: Resetting bearer <eth:syzkaller0>
[  326.948468][T22106] tipc: Disabling bearer <eth:syzkaller0>
[  326.953618][T22125] lo speed is unknown, defaulting to 1000
[  327.299784][T22149] netlink: 'syz.0.6941': attribute type 6 has an invalid length.
[  327.306496][T22151] netlink: 'syz.2.6940': attribute type 1 has an invalid length.
[  327.309858][T22151] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6940'.
[  327.439481][T22159] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  327.580655][T22173] netlink: 'syz.0.6949': attribute type 30 has an invalid length.
[  328.820274][T22216] lo speed is unknown, defaulting to 1000
[  328.987071][T22229] lo speed is unknown, defaulting to 1000
[  330.164443][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6999'.
[  330.306326][T22309] tipc: New replicast peer: 255.255.255.255
[  330.309323][T22309] tipc: Enabled bearer <udp:syz2>, priority 10
[  330.789643][T22344] 8021q: adding VLAN 0 to HW filter on device bond5
[  331.302267][T22367] lo speed is unknown, defaulting to 1000
[  331.427758][   T10] tipc: Node number set to 3919745676
[  331.444585][T22382] netlink: 'syz.2.7039': attribute type 2 has an invalid length.
[  331.478161][T22382] : entered promiscuous mode
[  331.627221][T22398] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7047'.
[  331.710623][T22407] sit0: entered promiscuous mode
[  331.718189][T22405] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  331.729082][T22407] netlink: 'syz.1.7051': attribute type 1 has an invalid length.
[  331.738333][T22407] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7051'.
[  331.846660][T22417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.853149][T22417] syzkaller0: entered promiscuous mode
[  331.855553][T22417] syzkaller0: entered allmulticast mode
[  331.894446][T22417] tipc: Resetting bearer <eth:syzkaller0>
[  331.898823][T22416] tipc: Resetting bearer <eth:syzkaller0>
[  331.908357][T22416] tipc: Disabling bearer <eth:syzkaller0>
[  332.035585][T22441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7067'.
[  332.084958][T22447] netlink: 'syz.1.7071': attribute type 1 has an invalid length.
[  332.088319][T22447] netlink: 'syz.1.7071': attribute type 1 has an invalid length.
[  332.222335][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  332.249646][   T33] audit: type=1800 audit(1757199367.271:5): pid=22458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7072" name="memory.events" dev="tmpfs" ino=12525 res=0 errno=0
[  332.384384][T22481] netlink: 'syz.1.7085': attribute type 3 has an invalid length.
[  332.529277][T22497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7094'.
[  332.595688][T22505] netlink: 'syz.1.7096': attribute type 3 has an invalid length.
[  332.599307][T22505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7096'.
[  332.684925][T22515] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7103'.
[  332.688695][T22515] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7103'.
[  332.788881][T22522] lo speed is unknown, defaulting to 1000
[  333.024336][T22537] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7111'.
[  333.666970][T22591] openvswitch: netlink: IP tunnel dst address not specified
[  334.381537][T22596] syzkaller0: entered promiscuous mode
[  334.385253][T22596] syzkaller0: entered allmulticast mode
[  334.558219][T22612] nbd: must specify a size in bytes for the device
[  334.645847][T22617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7146'.
[  334.809639][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7147'.
[  334.815385][   T33] audit: type=1800 audit(1757199369.841:6): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7142" name="cgroup.controllers" dev="tmpfs" ino=12652 res=0 errno=0
[  334.948500][T22642] bridge0: entered allmulticast mode
[  334.967564][T22642] pim6reg: entered allmulticast mode
[  334.970865][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7154'.
[  334.989035][T22642] bridge0 (unregistering): left allmulticast mode
[  335.130355][T22657] batadv1: entered promiscuous mode
[  335.134927][T22657] batadv1: entered allmulticast mode
[  335.143208][T22659] syzkaller1: entered promiscuous mode
[  335.145202][T22659] syzkaller1: entered allmulticast mode
[  335.180317][T22661] lo speed is unknown, defaulting to 1000
[  336.038544][T22751] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  336.655770][T22797] netlink: 'syz.2.7223': attribute type 10 has an invalid length.
[  336.975417][T22816] pim6reg1: entered promiscuous mode
[  336.978259][T22816] pim6reg1: entered allmulticast mode
[  337.593717][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7242'.
[  337.597472][T22840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7242'.
[  337.601484][T22840] netlink: 540 bytes leftover after parsing attributes in process `syz.2.7242'.
[  337.780094][T22859] netlink: 51 bytes leftover after parsing attributes in process `syz.2.7249'.
[  337.810836][T22862] IPv6: NLM_F_CREATE should be specified when creating new route
[  337.864763][T22868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7253'.
[  338.129564][T22896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.154614][T22899] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  339.674287][T23007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7317'.
[  339.693300][T23007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7317'.
[  339.826860][T23015] IPVS: Error connecting to the multicast addr
[  339.898430][T23020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7321'.
[  340.177337][T23047] netlink: 'syz.1.7335': attribute type 1 has an invalid length.
[  340.210240][T23047] 8021q: adding VLAN 0 to HW filter on device bond5
[  340.229175][T23047] bond5: (slave geneve2): making interface the new active one
[  340.234270][T23047] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  340.250362][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  340.259548][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  340.264943][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  340.268212][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.277545][T23051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.280956][T23051] syzkaller0: entered promiscuous mode
[  340.283434][T23051] syzkaller0: entered allmulticast mode
[  340.288485][T23051] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  340.307236][T23051] tipc: Resetting bearer <eth:syzkaller0>
[  340.310791][T23049] tipc: Resetting bearer <eth:syzkaller0>
[  340.327695][T23049] tipc: Disabling bearer <eth:syzkaller0>
[  340.521365][T23068] gretap2: entered promiscuous mode
[  340.597734][T23075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.849810][T23093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7356'.
[  341.289626][T23146] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  341.430358][T23156] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  341.436476][T23156] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7383'.
[  341.451122][T23156] bond0 (unregistering): Released all slaves
[  342.266426][T23183] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  342.710813][T23206] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.724290][T23199] syz_tun: left allmulticast mode
[  342.727463][T23199] syz_tun: left promiscuous mode
[  342.729566][T23199] bridge0: port 1(syz_tun) entered disabled state
[  342.736635][T23199] bond3: (slave veth9): Releasing active interface
[  342.851118][T23215] __nla_validate_parse: 2 callbacks suppressed
[  342.851133][T23215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7408'.
[  342.968324][T23229] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1550) !
[  343.349007][T23275] netlink: 25 bytes leftover after parsing attributes in process `syz.2.7436'.
[  343.622765][T23312] netlink: 332 bytes leftover after parsing attributes in process `syz.0.7450'.
[  343.626400][T23312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7450'.
[  343.630006][T23312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7450'.
[  343.696317][T23316] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7451'.
[  343.699826][T23316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7451'.
[  343.967767][T23332] netlink: 'syz.0.7456': attribute type 3 has an invalid length.
[  343.974494][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7456'.
[  344.011291][T23334] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  344.596592][T23353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.600174][T23353] syzkaller0: entered promiscuous mode
[  344.603074][T23353] syzkaller0: entered allmulticast mode
[  344.620883][T23353] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  344.635749][T23353] tipc: Resetting bearer <eth:syzkaller0>
[  344.640801][T23352] tipc: Resetting bearer <eth:syzkaller0>
[  344.653238][T23352] tipc: Disabling bearer <eth:syzkaller0>
[  344.693760][T23361] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.741149][T23365] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  344.993958][T23381] lo speed is unknown, defaulting to 1000
[  345.211812][T23399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7489'.
[  345.414389][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7495'.
[  345.502304][T23416] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000
[  345.657130][   T11] block nbd1: Possible stuck request ffff888020dbca00: control (read@0,1024B). Runtime 30 seconds
[  345.662118][   T11] block nbd1: Possible stuck request ffff888020dbcc00: control (read@1024,1024B). Runtime 30 seconds
[  345.666536][   T11] block nbd1: Possible stuck request ffff888020dbce00: control (read@2048,1024B). Runtime 30 seconds
[  345.671026][   T11] block nbd1: Possible stuck request ffff888020dbd000: control (read@3072,1024B). Runtime 30 seconds
[  345.843881][T23440] nbd: socks must be embedded in a SOCK_ITEM attr
[  347.639061][T23507] netlink: 'syz.2.7539': attribute type 1 has an invalid length.
[  347.793074][T23513] nbd2: detected capacity change from 0 to 63
[  347.795480][T23517] block nbd2: NBD_DISCONNECT
[  347.797181][T23517] block nbd2: Disconnected due to user request.
[  347.799300][T23517] block nbd2: shutting down sockets
[  347.800169][T23442] blk_print_req_error: 138 callbacks suppressed
[  347.800182][T23442] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.810382][T23442] buffer_io_error: 138 callbacks suppressed
[  347.810392][T23442] Buffer I/O error on dev nbd2, logical block 0, async page read
[  347.818073][ T5314] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  347.821706][ T5314] Buffer I/O error on dev nbd2, logical block 1, async page read
[  347.828281][ T5314] Buffer I/O error on dev nbd2, logical block 2, async page read
[  347.832812][ T5314] Buffer I/O error on dev nbd2, logical block 3, async page read
[  347.843386][T23442] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.848697][T23442] Buffer I/O error on dev nbd2, logical block 0, async page read
[  347.858072][T23442] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.861901][T23442] Buffer I/O error on dev nbd2, logical block 1, async page read
[  347.866522][T23442] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.871133][T23442] Buffer I/O error on dev nbd2, logical block 2, async page read
[  347.879846][T23442] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.884622][T23442] Buffer I/O error on dev nbd2, logical block 3, async page read
[  347.887426][T23442] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.890353][T23442] Buffer I/O error on dev nbd2, logical block 0, async page read
[  347.894098][T23442] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.897457][T23442] Buffer I/O error on dev nbd2, logical block 1, async page read
[  347.902163][T23442] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.905425][T23442] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  347.911932][T23442] ldm_validate_partition_table(): Disk read failed.
[  347.917594][T23442] Dev nbd2: unable to read RDB block 0
[  347.923535][T23442]  nbd2: unable to read partition table
[  347.930767][T23442] ldm_validate_partition_table(): Disk read failed.
[  347.935701][T23442] Dev nbd2: unable to read RDB block 0
[  347.938312][T23442]  nbd2: unable to read partition table
[  347.942801][T23523] macvtap1: entered allmulticast mode
[  347.946170][T23522] tipc: Failed to remove unknown binding: 66,1,1/457485075:515236811/515236813
[  347.949969][T23523] veth0_macvtap: entered allmulticast mode
[  347.953765][T23522] tipc: Failed to remove unknown binding: 66,1,1/457485075:515236811/515236813
[  347.956973][T23522] tipc: Failed to remove unknown binding: 66,1,1/457485075:515236811/515236813
[  348.055808][T23533] netlink: 'syz.2.7551': attribute type 8 has an invalid length.
[  348.096440][T23535] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.100616][T23535] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.187899][T23535] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.191206][T23535] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.270140][T23535] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.273591][T23535] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.313430][T23535] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.321428][T23535] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.364208][T23558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.366950][T23558] syzkaller0: entered promiscuous mode
[  348.369083][T23558] syzkaller0: entered allmulticast mode
[  348.389311][T23558] tipc: Resetting bearer <eth:syzkaller0>
[  348.404426][T23557] tipc: Resetting bearer <eth:syzkaller0>
[  348.415430][T23557] tipc: Disabling bearer <eth:syzkaller0>
[  348.460556][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  348.466913][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.477013][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  348.479892][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.500040][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  348.503273][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.520455][T23564] __nla_validate_parse: 1 callbacks suppressed
[  348.520470][T23564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7566'.
[  348.536295][ T5717] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  348.539898][ T5717] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.577787][T23569] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7569'.
[  348.638708][T23578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7570'.
[  348.744002][T23591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  348.779413][T23591] syzkaller0: entered promiscuous mode
[  348.781678][T23591] syzkaller0: entered allmulticast mode
[  348.784546][T23591] tipc: Resetting bearer <eth:syzkaller0>
[  348.788106][T23594] batadv_slave_0: entered promiscuous mode
[  348.790808][T23594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7578'.
[  348.796949][T23590] tipc: Resetting bearer <eth:syzkaller0>
[  349.925060][T23590] tipc: Disabling bearer <eth:syzkaller0>
[  349.941631][T23603] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  350.016228][T23624] netlink: 'syz.2.7583': attribute type 25 has an invalid length.
[  350.157525][T23629] lo speed is unknown, defaulting to 1000
[  350.591683][T23669] tipc: Failed to remove unknown binding: 66,1,1/457485075:1119569887/1119569889
[  350.748967][T23688] lo speed is unknown, defaulting to 1000
[  351.494661][T23741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7628'.
[  351.498488][T23741] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  351.501688][T23741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.714380][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7632'.
[  351.897852][T23760] lo speed is unknown, defaulting to 1000
[  353.286015][T23820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7661'.
[  354.534536][T23881] lo speed is unknown, defaulting to 1000
[  354.927521][T23914] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  354.934458][T23914] ip6gretap0: entered promiscuous mode
[  354.937029][T23914] macsec0: entered promiscuous mode
[  354.939012][T23914] macsec0: entered allmulticast mode
[  354.940822][T23914] ip6gretap0: entered allmulticast mode
[  355.068001][   T33] audit: type=1804 audit(1757199390.091:7): pid=23931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7709" name="/newroot/2695/cgroup.controllers" dev="tmpfs" ino=13609 res=1 errno=0
[  355.081373][   T33] audit: type=1800 audit(1757199390.091:8): pid=23931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7709" name="cgroup.controllers" dev="tmpfs" ino=13609 res=0 errno=0
[  355.353521][T23957] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  355.576432][T23970] lo speed is unknown, defaulting to 1000
[  355.924605][T23988] bond0: (slave wlan1): Releasing backup interface
[  355.933515][T23988] team0: Port device batadv1 removed
[  355.937798][T23988] bond5: (slave geneve2): Releasing active interface
[  355.949890][ T5717] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.957363][ T5717] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.961169][ T5717] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.965330][ T5717] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  355.968857][T23988] team0: Mode changed to "broadcast"
[  355.971730][T23988] vlan0: entered promiscuous mode
[  355.976061][T23988] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  356.404490][T24028] netlink: 'syz.2.7750': attribute type 3 has an invalid length.
[  356.683178][T24054] macvlan4: entered allmulticast mode
[  356.685815][T24054] bond0: entered allmulticast mode
[  356.689088][T24054] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  356.695944][T24054] bond0: left allmulticast mode
[  356.729849][T24056] lo speed is unknown, defaulting to 1000
[  357.756859][T24088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7774'.
[  357.986272][T24108] netlink: 830 bytes leftover after parsing attributes in process `syz.2.7783'.
[  358.319334][T24115] netlink: 'syz.1.7786': attribute type 1 has an invalid length.
[  358.322465][T24115] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7786'.
[  358.339114][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7787'.
[  358.426960][T24123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7788'.
[  358.430934][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7788'.
[  358.440954][T24123] netlink: 'syz.2.7788': attribute type 10 has an invalid length.
[  358.694516][T24137] netlink: 'syz.2.7794': attribute type 10 has an invalid length.
[  359.595657][T24149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7799'.
[  359.737575][T24159] netlink: 'syz.0.7803': attribute type 15 has an invalid length.
[  360.031354][T24182] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7813'.
[  360.797845][T24219] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7829'.
[  361.176060][T24241] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7839'.
[  363.012910][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  363.016262][T24372] netlink: 'syz.1.7898': attribute type 13 has an invalid length.
[  363.019770][T24372] netlink: 'syz.1.7898': attribute type 17 has an invalid length.
[  363.030035][T24372] sit0: left promiscuous mode
[  363.049436][T24372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  363.091172][T24372] lo speed is unknown, defaulting to 1000
[  363.138301][T24382] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  363.344616][T24401] lo speed is unknown, defaulting to 1000
[  363.541544][T24417] __nla_validate_parse: 1 callbacks suppressed
[  363.541564][T24417] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7918'.
[  363.635097][T24425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7922'.
[  364.246928][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7929'.
[  364.440501][T24449] pim6reg1: entered promiscuous mode
[  364.443348][T24449] pim6reg1: entered allmulticast mode
[  364.602304][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7934'.
[  364.605773][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7934'.
[  364.690344][T24462] netdevsim0: entered allmulticast mode
[  364.695857][T24462] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  364.847468][T24484] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  365.093035][T24508] netlink: 'syz.0.7959': attribute type 64 has an invalid length.
[  365.425097][T24534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7968'.
[  365.681339][T24541] lo speed is unknown, defaulting to 1000
[  365.799762][T24549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7973'.
[  365.909079][T24553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7975'.
[  366.291841][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7982'.
[  366.919106][T24635] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8013'.
[  367.060275][T24653] netlink: 'syz.0.8020': attribute type 1 has an invalid length.
[  367.719227][    C1] ==================================================================
[  367.722781][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  367.726236][    C1] Write of size 8 at addr ffff8881083f4db0 by task syz.1.8044/24706
[  367.730688][    C1] 
[  367.731771][    C1] CPU: 1 UID: 0 PID: 24706 Comm: syz.1.8044 Not tainted syzkaller #0 PREEMPT(full) 
[  367.731795][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.731804][    C1] Call Trace:
[  367.731810][    C1]  <IRQ>
[  367.731817][    C1]  dump_stack_lvl+0x189/0x250
[  367.731834][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  367.731850][    C1]  ? rcu_is_watching+0x15/0xb0
[  367.731863][    C1]  ? __kasan_check_byte+0x12/0x40
[  367.731880][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.731893][    C1]  ? rcu_is_watching+0x15/0xb0
[  367.731904][    C1]  ? lock_release+0x4b/0x3e0
[  367.731923][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  367.731937][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  367.731951][    C1]  print_report+0xca/0x240
[  367.731963][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  367.731976][    C1]  kasan_report+0x118/0x150
[  367.731992][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  367.732006][    C1]  __xfrm_state_delete+0x696/0xca0
[  367.732020][    C1]  xfrm_timer_handler+0x18f/0xa00
[  367.732035][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  367.732046][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  367.732063][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.732078][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.732093][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.732110][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  367.732121][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  367.732133][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  367.732149][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  367.732161][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  367.732175][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  367.732189][    C1]  handle_softirqs+0x286/0x870
[  367.732201][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  367.732213][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  367.732227][    C1]  __irq_exit_rcu+0xca/0x1f0
[  367.732238][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  367.732279][    C1]  irq_exit_rcu+0x9/0x30
[  367.732289][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  367.732301][    C1]  </IRQ>
[  367.732305][    C1]  <TASK>
[  367.732310][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  367.732323][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  367.732341][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 61 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  367.732352][    C1] RSP: 0018:ffffc90002c7f198 EFLAGS: 00000206
[  367.732365][    C1] RAX: 4768019c0f8dbb00 RBX: 0000000000000000 RCX: 4768019c0f8dbb00
[  367.732374][    C1] RDX: 0000000000000000 RSI: ffffffff8dba9250 RDI: ffffffff8be33880
[  367.732382][    C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195
[  367.732390][    C1] R10: ffffc90002c7f358 R11: ffffffff81ac3ae0 R12: 0000000000000002
[  367.732398][    C1] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000246
[  367.732407][    C1]  ? unwind_next_frame+0xa5/0x2390
[  367.732420][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  367.732435][    C1]  ? unwind_next_frame+0xa5/0x2390
[  367.732452][    C1]  ? unwind_next_frame+0x19ae/0x2390
[  367.732465][    C1]  ? stack_trace_save+0x9c/0xe0
[  367.732478][    C1]  ? unwind_next_frame+0xa5/0x2390
[  367.732489][    C1]  unwind_next_frame+0xc2/0x2390
[  367.732502][    C1]  ? unwind_next_frame+0xa5/0x2390
[  367.732514][    C1]  ? arch_stack_walk+0xe4/0x150
[  367.732528][    C1]  ? __unwind_start+0x5b9/0x760
[  367.732542][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  367.732555][    C1]  arch_stack_walk+0x11c/0x150
[  367.732570][    C1]  ? stack_trace_save+0x9c/0xe0
[  367.732583][    C1]  stack_trace_save+0x9c/0xe0
[  367.732597][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  367.732611][    C1]  ? __lock_acquire+0xab9/0xd20
[  367.732627][    C1]  kasan_save_track+0x3e/0x80
[  367.732657][    C1]  kasan_save_free_info+0x46/0x50
[  367.732669][    C1]  __kasan_slab_free+0x5b/0x80
[  367.732684][    C1]  kmem_cache_free_bulk+0x2d1/0x520
[  367.732701][    C1]  ? mt_destroy_walk+0x144/0x7f0
[  367.732718][    C1]  mt_destroy_walk+0x144/0x7f0
[  367.732733][    C1]  __mt_destroy+0x1c2/0x280
[  367.732745][    C1]  exit_mmap+0x69e/0xb50
[  367.732759][    C1]  ? uprobe_clear_state+0x20f/0x290
[  367.732780][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  367.732794][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  367.732810][    C1]  ? __pfx_exit_aio+0x10/0x10
[  367.732829][    C1]  ? uprobe_clear_state+0x274/0x290
[  367.732843][    C1]  __mmput+0x118/0x420
[  367.732856][    C1]  exit_mm+0x1da/0x2c0
[  367.732872][    C1]  ? __pfx_exit_mm+0x10/0x10
[  367.732886][    C1]  ? rcu_is_watching+0x15/0xb0
[  367.732899][    C1]  do_exit+0x648/0x2300
[  367.732914][    C1]  ? cgroup_freezing+0x20/0x350
[  367.732930][    C1]  ? __pfx_do_exit+0x10/0x10
[  367.732945][    C1]  ? cgroup_freezing+0x20/0x350
[  367.732957][    C1]  ? cgroup_freezing+0x20/0x350
[  367.732973][    C1]  do_group_exit+0x21c/0x2d0
[  367.732987][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.732999][    C1]  get_signal+0x1286/0x1340
[  367.733016][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  367.733036][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  367.733057][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  367.733074][    C1]  exit_to_user_mode_loop+0x75/0x110
[  367.733090][    C1]  do_syscall_64+0x2bd/0x3b0
[  367.733102][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.733113][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.733124][    C1]  ? exc_page_fault+0x9f/0xf0
[  367.733136][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.733146][    C1] RIP: 0033:0x7ff84c78ebe9
[  367.733156][    C1] Code: Unable to access opcode bytes at 0x7ff84c78ebbf.
[  367.733162][    C1] RSP: 002b:00007ff84d5fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  367.733172][    C1] RAX: fffffffffffffe00 RBX: 00007ff84c9c5fa8 RCX: 00007ff84c78ebe9
[  367.733182][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff84c9c5fa8
[  367.733189][    C1] RBP: 00007ff84c9c5fa0 R08: 0000000000000000 R09: 0000000000000000
[  367.733195][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  367.733201][    C1] R13: 00007ff84c9c6038 R14: 00007fff7018e650 R15: 00007fff7018e738
[  367.733214][    C1]  </TASK>
[  367.733218][    C1] 
[  367.987404][    C1] Allocated by task 22617:
[  367.989326][    C1]  kasan_save_track+0x3e/0x80
[  367.991344][    C1]  __kasan_slab_alloc+0x6c/0x80
[  367.993490][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  367.995893][    C1]  xfrm_state_alloc+0x24/0x2f0
[  367.997910][    C1]  __find_acq_core+0x8a7/0x1c00
[  368.000055][    C1]  xfrm_find_acq+0x78/0xa0
[  368.002004][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  368.004192][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  368.006363][    C1]  netlink_rcv_skb+0x208/0x470
[  368.008459][    C1]  xfrm_netlink_rcv+0x79/0x90
[  368.010512][    C1]  netlink_unicast+0x82f/0x9e0
[  368.012606][    C1]  netlink_sendmsg+0x805/0xb30
[  368.014722][    C1]  __sock_sendmsg+0x21c/0x270
[  368.016791][    C1]  ____sys_sendmsg+0x505/0x830
[  368.018896][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  368.020965][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  368.023141][    C1]  do_syscall_64+0xfa/0x3b0
[  368.025151][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.027728][    C1] 
[  368.028790][    C1] Freed by task 976:
[  368.030508][    C1]  kasan_save_track+0x3e/0x80
[  368.032463][    C1]  kasan_save_free_info+0x46/0x50
[  368.034651][    C1]  __kasan_slab_free+0x5b/0x80
[  368.036685][    C1]  kmem_cache_free+0x18f/0x400
[  368.038739][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  368.040939][    C1]  process_scheduled_works+0xae1/0x17b0
[  368.043323][    C1]  worker_thread+0x8a0/0xda0
[  368.045271][    C1]  kthread+0x711/0x8a0
[  368.047054][    C1]  ret_from_fork+0x3fc/0x770
[  368.049077][    C1]  ret_from_fork_asm+0x1a/0x30
[  368.051205][    C1] 
[  368.052298][    C1] The buggy address belongs to the object at ffff8881083f4d80
[  368.052298][    C1]  which belongs to the cache xfrm_state of size 928
[  368.058229][    C1] The buggy address is located 48 bytes inside of
[  368.058229][    C1]  freed 928-byte region [ffff8881083f4d80, ffff8881083f5120)
[  368.064106][    C1] 
[  368.065177][    C1] The buggy address belongs to the physical page:
[  368.067936][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881083f4000 pfn:0x1083f4
[  368.072278][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  368.075748][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  368.078966][    C1] page_type: f5(slab)
[  368.080725][    C1] raw: 057ff00000000040 ffff88801aff0640 dead000000000122 0000000000000000
[  368.084463][    C1] raw: ffff8881083f4000 00000000800e000c 00000000f5000000 0000000000000000
[  368.088173][    C1] head: 057ff00000000040 ffff88801aff0640 dead000000000122 0000000000000000
[  368.091909][    C1] head: ffff8881083f4000 00000000800e000c 00000000f5000000 0000000000000000
[  368.095626][    C1] head: 057ff00000000002 ffffea000420fd01 00000000ffffffff 00000000ffffffff
[  368.099197][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  368.102860][    C1] page dumped because: kasan: bad access detected
[  368.105608][    C1] page_owner tracks the page as allocated
[  368.108077][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8878, tgid 8867 (syz.0.1281), ts 113518552723, free_ts 111652465811
[  368.116205][    C1]  post_alloc_hook+0x240/0x2a0
[  368.118300][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  368.120713][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  368.123190][    C1]  alloc_pages_mpol+0x232/0x4a0
[  368.125331][    C1]  allocate_slab+0x8a/0x370
[  368.127307][    C1]  ___slab_alloc+0xbeb/0x1420
[  368.129387][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  368.131803][    C1]  xfrm_state_alloc+0x24/0x2f0
[  368.133912][    C1]  xfrm_state_find+0x37d4/0x5400
[  368.136066][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  368.138750][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  368.141092][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  368.143269][    C1]  udp_sendmsg+0x142e/0x2170
[  368.145300][    C1]  __sock_sendmsg+0x19c/0x270
[  368.147383][    C1]  ____sys_sendmsg+0x52d/0x830
[  368.149448][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  368.151532][    C1] page last free pid 793 tgid 793 stack trace:
[  368.154167][    C1]  __free_frozen_pages+0xbc4/0xd30
[  368.156347][    C1]  __tlb_remove_table+0x2d2/0x3b0
[  368.158458][    C1]  tlb_remove_table_rcu+0x85/0x100
[  368.160543][    C1]  rcu_core+0xcab/0x1770
[  368.162384][    C1]  handle_softirqs+0x286/0x870
[  368.164447][    C1]  do_softirq+0xec/0x180
[  368.166198][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  368.168387][    C1]  wg_packet_encrypt_worker+0x2dc/0x1720
[  368.170807][    C1]  process_scheduled_works+0xae1/0x17b0
[  368.173122][    C1]  worker_thread+0x8a0/0xda0
[  368.175123][    C1]  kthread+0x711/0x8a0
[  368.176828][    C1]  ret_from_fork+0x3fc/0x770
[  368.178760][    C1]  ret_from_fork_asm+0x1a/0x30
[  368.180736][    C1] 
[  368.181763][    C1] Memory state around the buggy address:
[  368.184067][    C1]  ffff8881083f4c80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  368.187483][    C1]  ffff8881083f4d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  368.190936][    C1] >ffff8881083f4d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.194227][    C1]                                      ^
[  368.196645][    C1]  ffff8881083f4e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.200075][    C1]  ffff8881083f4e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  368.203485][    C1] ==================================================================
[  368.207273][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  368.210382][    C1] CPU: 1 UID: 0 PID: 24706 Comm: syz.1.8044 Not tainted syzkaller #0 PREEMPT(full) 
[  368.214385][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  368.218730][    C1] Call Trace:
[  368.220222][    C1]  <IRQ>
[  368.221503][    C1]  dump_stack_lvl+0x99/0x250
[  368.223545][    C1]  ? __asan_memcpy+0x40/0x70
[  368.225575][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.227803][    C1]  ? __pfx__printk+0x10/0x10
[  368.229871][    C1]  vpanic+0x281/0x750
[  368.231627][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  368.233905][    C1]  ? __pfx_vpanic+0x10/0x10
[  368.235912][    C1]  ? irqentry_exit+0x74/0x90
[  368.237979][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.240232][    C1]  panic+0xb9/0xc0
[  368.241908][    C1]  ? __pfx_panic+0x10/0x10
[  368.243847][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  368.246424][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.249174][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  368.251507][    C1]  check_panic_on_warn+0x89/0xb0
[  368.253679][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  368.255961][    C1]  end_report+0x78/0x160
[  368.257806][    C1]  kasan_report+0x129/0x150
[  368.259800][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  368.262050][    C1]  __xfrm_state_delete+0x696/0xca0
[  368.264277][    C1]  xfrm_timer_handler+0x18f/0xa00
[  368.266464][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  368.268888][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  368.271491][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.273768][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  368.276350][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  368.279026][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  368.281353][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  368.283626][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  368.285767][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  368.288138][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  368.290619][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  368.292732][    C1]  handle_softirqs+0x286/0x870
[  368.294836][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  368.296938][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  368.299282][    C1]  __irq_exit_rcu+0xca/0x1f0
[  368.301308][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  368.303449][    C1]  irq_exit_rcu+0x9/0x30
[  368.305238][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  368.307713][    C1]  </IRQ>
[  368.309003][    C1]  <TASK>
[  368.310230][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  368.312752][    C1] RIP: 0010:lock_acquire+0x175/0x360
[  368.315075][    C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 7b 61 03 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  368.323384][    C1] RSP: 0018:ffffc90002c7f198 EFLAGS: 00000206
[  368.325943][    C1] RAX: 4768019c0f8dbb00 RBX: 0000000000000000 RCX: 4768019c0f8dbb00
[  368.329265][    C1] RDX: 0000000000000000 RSI: ffffffff8dba9250 RDI: ffffffff8be33880
[  368.332535][    C1] RBP: ffffffff8172c195 R08: 0000000000000000 R09: ffffffff8172c195
[  368.335890][    C1] R10: ffffc90002c7f358 R11: ffffffff81ac3ae0 R12: 0000000000000002
[  368.339274][    C1] R13: ffffffff8e139f20 R14: 0000000000000000 R15: 0000000000000246
[  368.342660][    C1]  ? unwind_next_frame+0xa5/0x2390
[  368.344830][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  368.347516][    C1]  ? unwind_next_frame+0xa5/0x2390
[  368.349558][    C1]  ? unwind_next_frame+0x19ae/0x2390
[  368.351652][    C1]  ? stack_trace_save+0x9c/0xe0
[  368.353756][    C1]  ? unwind_next_frame+0xa5/0x2390
[  368.355875][    C1]  unwind_next_frame+0xc2/0x2390
[  368.358012][    C1]  ? unwind_next_frame+0xa5/0x2390
[  368.360208][    C1]  ? arch_stack_walk+0xe4/0x150
[  368.362328][    C1]  ? __unwind_start+0x5b9/0x760
[  368.364420][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  368.367067][    C1]  arch_stack_walk+0x11c/0x150
[  368.369138][    C1]  ? stack_trace_save+0x9c/0xe0
[  368.371266][    C1]  stack_trace_save+0x9c/0xe0
[  368.373304][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  368.375584][    C1]  ? __lock_acquire+0xab9/0xd20
[  368.377713][    C1]  kasan_save_track+0x3e/0x80
[  368.379770][    C1]  kasan_save_free_info+0x46/0x50
[  368.382043][    C1]  __kasan_slab_free+0x5b/0x80
[  368.384068][    C1]  kmem_cache_free_bulk+0x2d1/0x520
[  368.386307][    C1]  ? mt_destroy_walk+0x144/0x7f0
[  368.388485][    C1]  mt_destroy_walk+0x144/0x7f0
[  368.390580][    C1]  __mt_destroy+0x1c2/0x280
[  368.392470][    C1]  exit_mmap+0x69e/0xb50
[  368.394350][    C1]  ? uprobe_clear_state+0x20f/0x290
[  368.396444][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  368.398454][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  368.400721][    C1]  ? __pfx_exit_aio+0x10/0x10
[  368.402643][    C1]  ? uprobe_clear_state+0x274/0x290
[  368.404910][    C1]  __mmput+0x118/0x420
[  368.406576][    C1]  exit_mm+0x1da/0x2c0
[  368.408232][    C1]  ? __pfx_exit_mm+0x10/0x10
[  368.410238][    C1]  ? rcu_is_watching+0x15/0xb0
[  368.412307][    C1]  do_exit+0x648/0x2300
[  368.414064][    C1]  ? cgroup_freezing+0x20/0x350
[  368.416121][    C1]  ? __pfx_do_exit+0x10/0x10
[  368.418109][    C1]  ? cgroup_freezing+0x20/0x350
[  368.420235][    C1]  ? cgroup_freezing+0x20/0x350
[  368.422395][    C1]  do_group_exit+0x21c/0x2d0
[  368.424425][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.426587][    C1]  get_signal+0x1286/0x1340
[  368.428579][    C1]  arch_do_signal_or_restart+0x9a/0x750
[  368.430864][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  368.433381][    C1]  ? exit_to_user_mode_loop+0x40/0x110
[  368.435614][    C1]  exit_to_user_mode_loop+0x75/0x110
[  368.437902][    C1]  do_syscall_64+0x2bd/0x3b0
[  368.439795][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.441921][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.444412][    C1]  ? exc_page_fault+0x9f/0xf0
[  368.446347][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.448837][    C1] RIP: 0033:0x7ff84c78ebe9
[  368.450805][    C1] Code: Unable to access opcode bytes at 0x7ff84c78ebbf.
[  368.453792][    C1] RSP: 002b:00007ff84d5fd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  368.457430][    C1] RAX: fffffffffffffe00 RBX: 00007ff84c9c5fa8 RCX: 00007ff84c78ebe9
[  368.460760][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff84c9c5fa8
[  368.464078][    C1] RBP: 00007ff84c9c5fa0 R08: 0000000000000000 R09: 0000000000000000
[  368.467512][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  368.470887][    C1] R13: 00007ff84c9c6038 R14: 00007fff7018e650 R15: 00007fff7018e738
[  368.474290][    C1]  </TASK>
[  368.476472][    C1] Kernel Offset: disabled
[  368.478386][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:56:42  Registers:
info registers vcpu 0

CPU#0
RAX=0ae77560fe3d2600 RBX=ffffffff819683f8 RCX=0ae77560fe3d2600 RDX=0000000000000001
RSI=ffffffff8d9b9d27 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c372974 CR3=00000000282a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff84c812e53
XMM06=0000000000000000 00007ff84c812e4d XMM07=0000000000000000 00007ff84c812e61
XMM08=0000000000000000 00007ff84c812ee7 XMM09=0000000000000000 00007ff84c812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888107f48237 R9 =1ffff11020fe9046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01914 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff84d5fd6c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3325a4 CR3=0000000126dba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7fa1797498 00007f7fa1797470 XMM03=00007f7fa17974a8 00007f7fa17974a0
XMM04=00007f7fa22fd100 00007f7fa1797460 XMM05=00007f7fa1797478 00007f7fa17974c0
XMM06=00007f7fa17974b8 00007f7fa17974b0 XMM07=00007f7fa17974a8 00007f7fa17974a0
XMM08=0000000000000000 00007f7fa1612ee7 XMM09=0000000000000000 00007f7fa1612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
