last executing test programs:

889.737134ms ago: executing program 1 (id=5206):
syz_emit_ethernet(0x62, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x2c, 0x3c, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @local, {[@hopopts={0x33, 0x2, '\x00', [@calipso={0x7, 0x8}, @jumbo={0xc2, 0x4, 0x6}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

828.234811ms ago: executing program 1 (id=5208):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x10, 0x802, 0x0)
write(r1, &(0x7f0000000140)="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", 0xfc)

758.375628ms ago: executing program 1 (id=5210):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000160800034000000014500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a0001"], 0xdc}}, 0x0)

757.878619ms ago: executing program 1 (id=5212):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)

699.861442ms ago: executing program 1 (id=5214):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x17}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x8000000)

609.981461ms ago: executing program 1 (id=5215):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket(0x10, 0x803, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
unshare(0x24060400)
socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50)
socket$netlink(0x10, 0x3, 0x8000000004)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28)
shutdown(r0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

277.39206ms ago: executing program 0 (id=5222):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

277.259165ms ago: executing program 0 (id=5223):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="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", 0x101)

198.722503ms ago: executing program 0 (id=5226):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x72)
sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647f8c4dc935c2243790d3b957d276dc04f77fb8ea704f31a85eeb9fcc6976ff8", 0x21}], 0x1}}], 0x1, 0x40408c1)
recvmmsg(r0, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/32, 0x20}, {0x0, 0x3c}], 0x2}, 0x80}], 0x1, 0x10002, 0x0)

198.574026ms ago: executing program 2 (id=5227):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast2, 0x80800}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dstopts_2292={{0x18, 0x29, 0x32, {0x6c}}}], 0x18}, 0x40c0)

149.917594ms ago: executing program 0 (id=5228):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

149.773732ms ago: executing program 2 (id=5229):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005880)={&(0x7f0000005780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x30, 0x634eefca6c36d413]}}, 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28)

149.702006ms ago: executing program 0 (id=5230):
unshare(0x8000400)
r0 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r0, 0x0, 0x0)

79.162355ms ago: executing program 2 (id=5231):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, 0x0}}], 0x1, 0x24000045)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xc5, 0xd662}, &(0x7f00000000c0)=0x90)

78.986281ms ago: executing program 0 (id=5232):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="05", 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x8, 0x2, 0xffffffff, 0x9, 0x7fffffff}}], 0x30}, 0x0)

78.865349ms ago: executing program 2 (id=5233):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)

119.037µs ago: executing program 2 (id=5234):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000090000dd0a0000000000007301a300000000009500000000000000425e494e53a90f38f870e056d03b2010633dee8a3a6601dbd212"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)

0s ago: executing program 2 (id=5235):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

kernel console output (not intermixed with test programs):

evsim1: renamed from eth1
[   56.905154][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.913654][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.954377][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.986867][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   57.010518][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.013711][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.020810][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.023909][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.054498][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.101892][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   57.125627][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.128596][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.134263][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.137149][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.159210][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.200779][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   57.210380][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.213568][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.249813][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.253020][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.276570][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.358774][ T5834] veth0_vlan: entered promiscuous mode
[   57.371063][ T5834] veth1_vlan: entered promiscuous mode
[   57.386068][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.422295][ T5834] veth0_macvtap: entered promiscuous mode
[   57.453101][ T5834] veth1_macvtap: entered promiscuous mode
[   57.468508][ T5837] Bluetooth: hci0: command tx timeout
[   57.468969][ T5830] veth0_vlan: entered promiscuous mode
[   57.471206][ T5837] Bluetooth: hci1: command tx timeout
[   57.480693][ T5830] veth1_vlan: entered promiscuous mode
[   57.502444][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.512286][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.522165][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.540967][ T5830] veth0_macvtap: entered promiscuous mode
[   57.547808][   T54] Bluetooth: hci2: command tx timeout
[   57.554228][ T5830] veth1_macvtap: entered promiscuous mode
[   57.570744][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.574090][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.598571][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.618510][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.653652][ T5839] veth0_vlan: entered promiscuous mode
[   57.660762][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.673616][ T5839] veth1_vlan: entered promiscuous mode
[   57.702713][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.751129][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.765075][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.770453][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.789250][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.814877][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.818972][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.822088][ T5839] veth0_macvtap: entered promiscuous mode
[   57.842312][ T5839] veth1_macvtap: entered promiscuous mode
[   57.897259][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.903811][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.908551][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.922314][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.928915][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.936305][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.953412][ T5660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.971247][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.987014][ T5660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.987284][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.992354][ T5660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.994234][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.010908][ T5660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.170676][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.176374][ T5902] netlink: 'syz.2.3': attribute type 39 has an invalid length.
[   58.179924][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.259382][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.262856][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.008890][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'.
[   59.190467][ T5943] netlink: 248 bytes leftover after parsing attributes in process `syz.1.21'.
[   59.218068][ T5945] veth1_macvtap: left promiscuous mode
[   59.306259][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'.
[   59.547723][   T54] Bluetooth: hci1: command tx timeout
[   59.549605][   T54] Bluetooth: hci0: command tx timeout
[   59.627795][ T5837] Bluetooth: hci2: command tx timeout
[   59.669058][ T5972] veth0: entered promiscuous mode
[   59.690086][ T5969] veth0: left promiscuous mode
[   60.130715][ T5660] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   60.691311][ T6008] netlink: 'syz.1.40': attribute type 1 has an invalid length.
[   60.708826][ T6008] vlan2: entered promiscuous mode
[   60.711525][ T6008] veth0_to_hsr: entered promiscuous mode
[   60.714195][ T6008] vlan2: entered allmulticast mode
[   60.716540][ T6008] veth0_to_hsr: entered allmulticast mode
[   61.046709][ T6024] Bluetooth: MGMT ver 1.23
[   61.126389][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.161599][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.195654][ T6033] tipc: Started in network mode
[   61.199726][ T6033] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[   61.209577][ T6033] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   61.367600][ T6042] tipc: Started in network mode
[   61.369766][ T6042] tipc: Node identity 827f73b86efe, cluster identity 4711
[   61.372712][ T6042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.379628][ T6042] syzkaller0: entered promiscuous mode
[   61.383494][ T6042] syzkaller0: entered allmulticast mode
[   61.419608][ T6042] tipc: Resetting bearer <eth:syzkaller0>
[   61.434404][ T6041] tipc: Resetting bearer <eth:syzkaller0>
[   61.454620][ T6041] tipc: Disabling bearer <eth:syzkaller0>
[   61.475108][ T6048] netlink: 88 bytes leftover after parsing attributes in process `syz.1.54'.
[   61.629353][ T5837] Bluetooth: hci0: command tx timeout
[   61.631854][   T54] Bluetooth: hci1: command tx timeout
[   61.710218][ T5837] Bluetooth: hci2: command tx timeout
[   61.969060][ T6079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.328652][  T973] tipc: Node number set to 9480874
[   62.431517][ T6100] netlink: 312 bytes leftover after parsing attributes in process `syz.1.72'.
[   62.909389][ T6128] syz.0.80 uses obsolete (PF_INET,SOCK_PACKET)
[   63.210116][ T6145] warning: `syz.0.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.491181][ T6156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.93'.
[   63.511252][ T6156] bond0: entered promiscuous mode
[   63.515961][ T6156] bond_slave_0: entered promiscuous mode
[   63.522319][ T6156] bond_slave_1: entered promiscuous mode
[   63.530941][ T6156] bond0: left promiscuous mode
[   63.535741][ T6156] bond_slave_0: left promiscuous mode
[   63.542281][ T6156] bond_slave_1: left promiscuous mode
[   63.712280][   T54] Bluetooth: hci1: command tx timeout
[   63.714772][ T5837] Bluetooth: hci0: command tx timeout
[   63.788786][ T5837] Bluetooth: hci2: command tx timeout
[   64.296962][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   64.333692][ T6199] netlink: 'syz.2.112': attribute type 1 has an invalid length.
[   64.340002][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'.
[   64.430226][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'.
[   64.435144][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.114'.
[   64.450392][ T6207] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.115'.
[   64.631656][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'.
[   64.649582][ T6221] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   64.692801][ T6221] tipc: Resetting bearer <eth:syzkaller0>
[   64.721305][ T6220] tipc: Resetting bearer <eth:syzkaller0>
[   65.345939][ T6220] tipc: Disabling bearer <eth:syzkaller0>
[   65.439486][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'.
[   65.444409][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.127'.
[   65.744543][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888028ff9c00: rx timeout, send abort
[   65.753612][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028ff9c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   65.861862][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'.
[   66.234117][ T6295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.239826][ T6295] syzkaller0: entered promiscuous mode
[   66.242254][ T6295] syzkaller0: entered allmulticast mode
[   66.278100][ T6295] tipc: Resetting bearer <eth:syzkaller0>
[   66.307937][ T6293] tipc: Resetting bearer <eth:syzkaller0>
[   66.322092][ T6293] tipc: Disabling bearer <eth:syzkaller0>
[   66.744987][ T6324] syzkaller0: entered promiscuous mode
[   66.746889][ T6324] syzkaller0: entered allmulticast mode
[   67.102093][ T6336] sctp: [Deprecated]: syz.1.168 (pid 6336) Use of struct sctp_assoc_value in delayed_ack socket option.
[   67.102093][ T6336] Use struct sctp_sack_info instead
[   67.271182][ T6351] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   67.277378][ T5895] IPVS: starting estimator thread 0...
[   67.388634][ T6358] IPVS: using max 77 ests per chain, 184800 per kthread
[   67.589303][ T6390] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[   67.616023][ T6388] tun0: tun_chr_ioctl cmd 2147767520
[   67.911498][ T6407] netlink: 68 bytes leftover after parsing attributes in process `syz.2.201'.
[   67.949405][ T6410] Zero length message leads to an empty skb
[   67.985686][ T6413] netlink: 'syz.0.204': attribute type 9 has an invalid length.
[   68.611816][ T6461] netlink: 'syz.0.221': attribute type 9 has an invalid length.
[   68.870072][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028c3e000: rx timeout, send abort
[   69.315221][ T6492] netlink: 'syz.0.231': attribute type 10 has an invalid length.
[   69.341734][ T6492] team0: Port device dummy0 added
[   69.373669][    C1] vcan0: j1939_tp_rxtimer: 0xffff888028c3e000: abort rx timeout. Force session deactivation
[   69.437192][ T6496] netem: incorrect gi model size
[   69.441474][ T6496] netem: change failed
[   69.662791][ T6510] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.831815][ T6516] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.846198][ T6516] syzkaller0: entered promiscuous mode
[   69.852456][ T6516] syzkaller0: entered allmulticast mode
[   69.964777][ T6516] tipc: Resetting bearer <eth:syzkaller0>
[   69.987956][ T6515] tipc: Resetting bearer <eth:syzkaller0>
[   70.042427][ T6515] tipc: Disabling bearer <eth:syzkaller0>
[   70.230072][ T6532] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   70.240039][ T6532] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   70.393807][ T6546] __nla_validate_parse: 2 callbacks suppressed
[   70.393825][ T6546] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.256'.
[   70.444950][ T6548] netlink: 'syz.2.257': attribute type 1 has an invalid length.
[   70.456888][ T6548] netlink: 144 bytes leftover after parsing attributes in process `syz.2.257'.
[   70.462324][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.257'.
[   70.768780][ T6561] netlink: 'syz.1.262': attribute type 1 has an invalid length.
[   70.999014][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.002231][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.015333][ T6581] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[   71.223202][ T6597] openvswitch: netlink: Flow key attribute not present in set flow.
[   71.273542][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'.
[   71.342506][ T6607] netlink: 64 bytes leftover after parsing attributes in process `syz.0.284'.
[   71.508851][ T6623] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   71.958854][ T6651] block nbd0: NBD_DISCONNECT
[   72.423420][ T6681] netlink: 128 bytes leftover after parsing attributes in process `syz.1.321'.
[   72.433304][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.442753][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.449348][ T6683] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[   72.641056][ T6697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.327'.
[   72.684147][ T6699] netlink: 'syz.0.328': attribute type 4 has an invalid length.
[   72.702287][ T6699] netlink: 'syz.0.328': attribute type 4 has an invalid length.
[   72.831110][ T6705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'.
[   72.836349][ T6705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'.
[   73.091739][ T6717] bridge3: entered allmulticast mode
[   73.210560][ T6723] netlink: 'syz.0.340': attribute type 1 has an invalid length.
[   73.213999][ T6723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.340'.
[   73.253838][   T47] cfg80211: failed to load regulatory.db
[   73.676194][ T6757] openvswitch: netlink: IPv6 tunnel dst address is zero
[   73.680056][ T6754] Illegal XDP return value 4294967282 on prog  (id 46) dev N/A, expect packet loss!
[   73.866573][ T6769] bridge1: entered allmulticast mode
[   73.951986][ T6779] netlink: 'syz.0.364': attribute type 4 has an invalid length.
[   73.962219][ T6779] netlink: 'syz.0.364': attribute type 4 has an invalid length.
[   74.018704][ T6787] netlink: 'syz.0.368': attribute type 46 has an invalid length.
[   74.074991][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.080959][ T6794] netlink: 'syz.2.370': attribute type 8 has an invalid length.
[   74.084693][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.107206][ T6790] tipc: Resetting bearer <eth:macvtap0>
[   74.119549][  T973] IPVS: starting estimator thread 0...
[   74.134245][ T6790] tipc: Resetting bearer <eth:macvtap0>
[   74.149480][ T4941] tipc: Resetting bearer <eth:macvtap0>
[   74.207658][ T6799] IPVS: using max 78 ests per chain, 187200 per kthread
[   74.331888][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.352550][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.424684][ T6790] tipc: Resetting bearer <eth:macvtap0>
[   74.485804][ T6804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.516155][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.522261][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.525758][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.535841][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.694699][ T6826] syzkaller1: entered promiscuous mode
[   74.696635][ T6826] syzkaller1: entered allmulticast mode
[   74.921531][ T6843] syz.0.387 uses old SIOCAX25GETINFO
[   75.661823][ T6920] validate_nla: 3 callbacks suppressed
[   75.661835][ T6920] netlink: 'syz.1.418': attribute type 4 has an invalid length.
[   75.693959][ T6922] netlink: 'syz.2.419': attribute type 1 has an invalid length.
[   75.701139][ T6922] __nla_validate_parse: 6 callbacks suppressed
[   75.701160][ T6922] netlink: 232 bytes leftover after parsing attributes in process `syz.2.419'.
[   75.852479][ T6941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.858537][ T6941] syzkaller0: entered promiscuous mode
[   75.860571][ T6941] syzkaller0: entered allmulticast mode
[   75.889969][ T6941] tipc: Resetting bearer <eth:syzkaller0>
[   75.896101][ T6940] tipc: Resetting bearer <eth:syzkaller0>
[   75.923509][ T6940] tipc: Disabling bearer <eth:syzkaller0>
[   76.160824][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'.
[   76.577595][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'.
[   76.592817][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[   76.595764][ T7023] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   76.603141][ T7023] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.708232][ T7031] netlink: 'syz.0.465': attribute type 10 has an invalid length.
[   76.726689][ T7031] batman_adv: batadv0: Adding interface: team0
[   76.734430][ T7031] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.751510][ T7031] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   76.764345][ T7037] trusted_key: syz.1.468 sent an empty control message without MSG_MORE.
[   76.778626][ T7031] netlink: 'syz.0.465': attribute type 10 has an invalid length.
[   76.781405][ T7031] netlink: 2 bytes leftover after parsing attributes in process `syz.0.465'.
[   76.784752][ T7031] team0: entered promiscuous mode
[   76.786436][ T7031] team_slave_0: entered promiscuous mode
[   76.792311][ T7031] team_slave_1: entered promiscuous mode
[   76.794273][ T7031] dummy0: entered promiscuous mode
[   76.799634][ T7031] 8021q: adding VLAN 0 to HW filter on device team0
[   76.802036][ T7031] batman_adv: batadv0: Interface activated: team0
[   76.804132][ T7031] batman_adv: batadv0: Interface deactivated: team0
[   76.806584][ T7031] batman_adv: batadv0: Removing interface: team0
[   76.810729][ T7031] bridge0: port 3(team0) entered blocking state
[   76.813383][ T7031] bridge0: port 3(team0) entered disabled state
[   76.816013][ T7031] team0: entered allmulticast mode
[   76.821274][ T7031] team_slave_0: entered allmulticast mode
[   76.824773][ T7031] team_slave_1: entered allmulticast mode
[   76.827255][ T7031] dummy0: entered allmulticast mode
[   76.832965][ T7031] bridge0: port 3(team0) entered blocking state
[   76.835818][ T7031] bridge0: port 3(team0) entered forwarding state
[   76.899199][ T7043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'.
[   76.903113][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'.
[   76.913666][ T7043] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[   76.989553][ T7056] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[   77.089710][ T7065] netlink: 'syz.2.478': attribute type 4 has an invalid length.
[   77.096552][ T7065] netlink: 'syz.2.478': attribute type 4 has an invalid length.
[   77.369066][ T7078] netlink: 'syz.0.485': attribute type 1 has an invalid length.
[   77.531684][ T7085] netlink: 'syz.0.488': attribute type 4 has an invalid length.
[   77.542081][ T7085] netlink: 'syz.0.488': attribute type 4 has an invalid length.
[   77.907142][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'.
[   78.182165][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.502'.
[   78.587072][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'.
[   78.692050][ T7166] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   79.498619][ T7189] netlink: 'syz.1.535': attribute type 1 has an invalid length.
[   79.547536][ T7191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.699540][ T7178] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   80.720227][ T7269] __nla_validate_parse: 3 callbacks suppressed
[   80.720241][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'.
[   82.082773][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'.
[   82.506212][ T7412] netlink: 40 bytes leftover after parsing attributes in process `syz.0.629'.
[   82.778355][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'.
[   82.792823][ T7440] vlan2: entered promiscuous mode
[   82.794800][ T7440] team0: entered promiscuous mode
[   82.796680][ T7440] team_slave_0: entered promiscuous mode
[   82.805077][ T7440] team_slave_1: entered promiscuous mode
[   82.829658][ T7444] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[   82.854259][ T7443] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[   83.355024][ T7479] validate_nla: 5 callbacks suppressed
[   83.355039][ T7479] netlink: 'syz.1.661': attribute type 29 has an invalid length.
[   83.355311][ T7480] netlink: 'syz.2.662': attribute type 16 has an invalid length.
[   83.363094][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'.
[   83.364535][ T7480] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.662'.
[   83.489566][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.1.668'.
[   83.492675][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.668'.
[   83.533478][ T7498] netlink: 'syz.1.670': attribute type 13 has an invalid length.
[   83.810549][ T7531] IPv6: NLM_F_REPLACE set, but no existing node found!
[   84.523487][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'.
[   84.527690][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.691'.
[   86.082579][ T7649] ip6erspan0: entered promiscuous mode
[   86.725618][ T7687] __nla_validate_parse: 4 callbacks suppressed
[   86.725631][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[   86.999849][ T7720] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   87.004193][ T7720] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   87.525764][ T7769] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   87.734000][ T7776] netlink: 244 bytes leftover after parsing attributes in process `syz.2.790'.
[   88.035143][ T7795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.066848][ T7795] syzkaller0: entered promiscuous mode
[   88.070226][ T7795] syzkaller0: entered allmulticast mode
[   88.073663][ T7795] tipc: Resetting bearer <eth:syzkaller0>
[   88.083369][ T7795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.798'.
[   88.092841][ T7794] tipc: Resetting bearer <eth:syzkaller0>
[   88.884109][ T7794] tipc: Disabling bearer <eth:syzkaller0>
[   89.299235][ T7829] netlink: 'syz.2.813': attribute type 5 has an invalid length.
[   89.605793][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.830'.
[   89.708107][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'.
[   89.711985][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.731096][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.926411][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'.
[   89.930635][ T7879] netlink: 64 bytes leftover after parsing attributes in process `syz.2.836'.
[   89.934474][ T7879] tipc: Invalid UDP bearer configuration
[   89.934518][ T7879] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   90.535547][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[   90.539927][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[   90.629112][ T7908] geneve2: entered promiscuous mode
[   90.638777][ T7898] netlink: 27 bytes leftover after parsing attributes in process `syz.0.845'.
[   91.236286][ T7942] sit0: entered promiscuous mode
[   91.245424][ T7942] netlink: 'syz.2.864': attribute type 1 has an invalid length.
[   91.454665][ T7958] vlan3: entered promiscuous mode
[   91.456680][ T7958] batadv0: entered promiscuous mode
[   91.757179][ T7984] netlink: 'syz.1.884': attribute type 10 has an invalid length.
[   91.768580][ T7984] veth0_vlan: left promiscuous mode
[   91.772389][ T7984] veth0_vlan: entered promiscuous mode
[   91.781645][ T7984] team0: Device veth0_vlan failed to register rx_handler
[   91.917239][ T7997] veth1_to_bond: entered allmulticast mode
[   91.933696][ T7997] bond_slave_1: entered promiscuous mode
[   91.938501][ T7995] bond_slave_1: left promiscuous mode
[   91.942060][ T7995] veth1_to_bond: left allmulticast mode
[   93.243232][ T8045] sctp: [Deprecated]: syz.0.911 (pid 8045) Use of int in maxseg socket option.
[   93.243232][ T8045] Use struct sctp_assoc_value instead
[   93.293160][ T8047] netlink: 'syz.0.912': attribute type 6 has an invalid length.
[   93.690911][ T8085] netlink: 'syz.0.929': attribute type 27 has an invalid length.
[   94.297587][ T8148] netlink: 'syz.2.959': attribute type 1 has an invalid length.
[   94.346949][ T8156] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[   94.623514][ T8179] __nla_validate_parse: 5 callbacks suppressed
[   94.623525][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'.
[   94.650649][ T8179] netlink: 'syz.1.971': attribute type 2 has an invalid length.
[   95.059557][ T8218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.985'.
[   95.063480][ T8218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.985'.
[   95.102726][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'.
[   96.002471][ T8275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1015'.
[   96.148485][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'.
[   96.379560][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'.
[   96.384525][ T8301] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1025'.
[   96.914807][ T8361] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[   96.919873][ T8359] IPVS: stopping backup sync thread 8361 ...
[   97.458754][ T8416] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   97.462938][ T8416] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   97.594371][   T33] audit: type=1800 audit(1753744901.581:2): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1087" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1706 res=0 errno=0
[   97.644252][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1089'.
[   97.654981][ T8436] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[   97.663887][ T8436] syzkaller1: entered promiscuous mode
[   97.666019][ T8436] syzkaller1: entered allmulticast mode
[   97.688292][ T8435] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[   98.710393][ T8489] syzkaller0: entered promiscuous mode
[   98.712977][ T8489] syzkaller0: entered allmulticast mode
[   98.723830][ T8489] macsec0: entered promiscuous mode
[   98.765947][ T8495] netlink: 'syz.1.1115': attribute type 9 has an invalid length.
[   98.771509][ T8495] netlink: 'syz.1.1115': attribute type 9 has an invalid length.
[   98.921188][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1120'.
[   98.983175][ T8511] batadv0: entered promiscuous mode
[   98.993068][ T8511] batadv0: left promiscuous mode
[   99.259197][ T8539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.565636][ T8580] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   99.572760][ T8580] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   99.981169][ T8613] dummy0: entered allmulticast mode
[   99.984133][ T8612] dummy0: left allmulticast mode
[  100.875642][ T8673] bond0: option mode: unable to set because the bond device has slaves
[  101.339140][ T8713] __nla_validate_parse: 3 callbacks suppressed
[  101.339151][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'.
[  101.721918][ T8746] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1227'.
[  101.903483][ T8763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.906955][ T8763] syzkaller0: entered promiscuous mode
[  101.912459][ T8763] syzkaller0: entered allmulticast mode
[  101.938790][ T8763] tipc: Resetting bearer <eth:syzkaller0>
[  101.942648][ T8762] tipc: Resetting bearer <eth:syzkaller0>
[  101.944138][ T8765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.959891][ T8762] tipc: Disabling bearer <eth:syzkaller0>
[  102.080957][ T8773] netlink: 'syz.1.1240': attribute type 39 has an invalid length.
[  102.315807][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1250'.
[  102.540007][ T8817] GUP no longer grows the stack in syz.2.1262 (8817): 200000006000-20000000a000 (200000005000)
[  102.545361][ T8817] CPU: 0 UID: 0 PID: 8817 Comm: syz.2.1262 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  102.545384][ T8817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.545392][ T8817] Call Trace:
[  102.545398][ T8817]  <TASK>
[  102.545405][ T8817]  dump_stack_lvl+0x189/0x250
[  102.545431][ T8817]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.545445][ T8817]  ? __pfx__printk+0x10/0x10
[  102.545460][ T8817]  ? find_vma+0xe7/0x160
[  102.545488][ T8817]  __get_user_pages+0x2a60/0x30b0
[  102.545529][ T8817]  ? __pfx___get_user_pages+0x10/0x10
[  102.545545][ T8817]  ? __gup_longterm_locked+0xbf7/0x15b0
[  102.545561][ T8817]  ? down_read_killable+0x1d1/0x350
[  102.545575][ T8817]  ? try_get_folio+0x633/0x660
[  102.545593][ T8817]  __gup_longterm_locked+0xd66/0x15b0
[  102.545612][ T8817]  ? try_grab_folio_fast+0x1be/0x4f0
[  102.545635][ T8817]  ? gup_fast_fallback+0x1afc/0x2260
[  102.545653][ T8817]  gup_fast_fallback+0x1cd4/0x2260
[  102.545694][ T8817]  ? __pfx_gup_fast_fallback+0x10/0x10
[  102.545707][ T8817]  ? trace_contention_end+0x39/0x120
[  102.545723][ T8817]  ? __mutex_lock+0x330/0xe80
[  102.545751][ T8817]  ? is_valid_gup_args+0x11f/0x200
[  102.545768][ T8817]  ? get_user_pages_fast+0x4d/0xb0
[  102.545785][ T8817]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  102.545810][ T8817]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  102.545857][ T8817]  ? wait_for_space+0x24d/0x2d0
[  102.545881][ T8817]  iov_iter_get_pages2+0x5e/0xa0
[  102.545901][ T8817]  __se_sys_vmsplice+0x548/0x10d0
[  102.545930][ T8817]  ? wake_up_q+0xca/0x110
[  102.545948][ T8817]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  102.545970][ T8817]  ? __pfx_futex_wake+0x10/0x10
[  102.545998][ T8817]  ? __lock_acquire+0xab9/0xd20
[  102.546036][ T8817]  ? do_pipe2+0xf7/0x170
[  102.546056][ T8817]  ? rcu_is_watching+0x15/0xb0
[  102.546075][ T8817]  ? do_syscall_64+0xbe/0x3b0
[  102.546092][ T8817]  do_syscall_64+0xfa/0x3b0
[  102.546103][ T8817]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.546115][ T8817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.546128][ T8817]  ? exc_page_fault+0x9f/0xf0
[  102.546148][ T8817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.546161][ T8817] RIP: 0033:0x7f598ed8e9a9
[  102.546173][ T8817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.546184][ T8817] RSP: 002b:00007f598fc6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  102.546199][ T8817] RAX: ffffffffffffffda RBX: 00007f598efb5fa0 RCX: 00007f598ed8e9a9
[  102.546208][ T8817] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  102.546216][ T8817] RBP: 00007f598ee10d69 R08: 0000000000000000 R09: 0000000000000000
[  102.546224][ T8817] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  102.546231][ T8817] R13: 0000000000000000 R14: 00007f598efb5fa0 R15: 00007ffd054a81b8
[  102.546251][ T8817]  </TASK>
[  102.572936][ T8819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.688091][ T8819] syzkaller0: entered promiscuous mode
[  102.689978][ T8819] syzkaller0: entered allmulticast mode
[  102.704630][ T8819] tipc: Resetting bearer <eth:syzkaller0>
[  102.713936][ T8818] tipc: Resetting bearer <eth:syzkaller0>
[  102.739425][ T8818] tipc: Disabling bearer <eth:syzkaller0>
[  102.942488][ T8840] batadv_slave_1: entered promiscuous mode
[  102.954379][ T8839] batadv_slave_1: left promiscuous mode
[  103.144951][ T8853] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  103.229714][ T8872] netlink: 'syz.1.1286': attribute type 1 has an invalid length.
[  103.238011][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1286'.
[  103.242024][ T8872] netlink: 'syz.1.1286': attribute type 1 has an invalid length.
[  103.245358][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'.
[  103.265635][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'.
[  103.303116][ T8879] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  103.332027][ T8878] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  103.968812][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'.
[  104.106362][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1311'.
[  104.203007][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  104.445816][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1328'.
[  104.486702][ T8978] tipc: Can't bind to reserved service type 2
[  104.534632][ T8982] tipc: Started in network mode
[  104.536993][ T8982] tipc: Node identity 76e520b4fb5, cluster identity 4711
[  104.542942][ T8982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.549194][ T8982] syzkaller0: entered promiscuous mode
[  104.551585][ T8982] syzkaller0: entered allmulticast mode
[  104.579310][ T8982] tipc: Resetting bearer <eth:syzkaller0>
[  104.584057][ T8981] tipc: Resetting bearer <eth:syzkaller0>
[  104.613872][ T8981] tipc: Disabling bearer <eth:syzkaller0>
[  105.182726][ T9036] Bluetooth: MGMT ver 1.23
[  105.288145][ T9045] netlink: 'syz.0.1361': attribute type 10 has an invalid length.
[  105.894506][ T9103] batadv_slave_1: entered promiscuous mode
[  106.938075][ T9155] netlink: 'syz.2.1410': attribute type 1 has an invalid length.
[  106.941433][ T9155] __nla_validate_parse: 2 callbacks suppressed
[  106.941447][ T9155] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1410'.
[  107.011795][ T9162] vlan0: entered promiscuous mode
[  107.129321][ T9163] block nbd1: server does not support multiple connections per device.
[  107.133141][ T9163] block nbd1: shutting down sockets
[  108.254087][ T9209] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  108.331238][ T9208] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  108.451068][ T9215] ipvlan2: entered promiscuous mode
[  110.670269][ T9281] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  110.731218][ T9287] netlink: 'syz.2.1466': attribute type 13 has an invalid length.
[  110.733837][ T9287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1466'.
[  110.745751][ T9287] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  110.825601][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'.
[  110.833010][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'.
[  110.836968][ T9293] netlink: 'syz.2.1470': attribute type 1 has an invalid length.
[  110.843144][ T9293] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1470'.
[  110.878159][ T9293] nbd: socks must be embedded in a SOCK_ITEM attr
[  110.883183][ T9293] block nbd1: shutting down sockets
[  110.887703][ T9297] netlink: 'syz.0.1472': attribute type 6 has an invalid length.
[  111.657248][ T9351] netlink: 'syz.2.1493': attribute type 4 has an invalid length.
[  111.996956][ T9361] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  112.473495][ T9379] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  112.520041][ T9378] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  112.625379][ T9390] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  112.629629][ T9391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1510'.
[  112.668972][ T9388] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  113.089019][ T9428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1526'.
[  113.093125][ T9428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1526'.
[  113.097183][ T9428] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1526'.
[  113.109781][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'.
[  113.928690][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1535'.
[  113.957291][ T9456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1538'.
[  114.023923][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1541'.
[  114.376381][ T9492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1553'.
[  114.383913][ T9492] tc_dump_action: action bad kind
[  114.483030][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1558'.
[  114.835123][ T9534] lo speed is unknown, defaulting to 1000
[  114.841223][ T9534] lo speed is unknown, defaulting to 1000
[  114.843420][ T9536] sock: sock_timestamping_bind_phc: sock not bind to device
[  114.846857][ T9534] lo speed is unknown, defaulting to 1000
[  114.894780][ T9539] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.899597][ T9539] 8021q: adding VLAN 0 to HW filter on device team0
[  114.904046][ T9539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.997915][ T5866] lo speed is unknown, defaulting to 1000
[  115.001060][ T9534] infiniband syz0: set active
[  115.002914][ T5866] syz0: Port: 1 Link ACTIVE
[  115.004853][ T9534] infiniband syz0: added lo
[  115.032600][ T9534] RDS/IB: syz0: added
[  115.034545][ T9534] smc: adding ib device syz0 with port count 1
[  115.036912][ T9534] smc:    ib device syz0 port 1 has pnetid 
[  115.042189][ T5866] lo speed is unknown, defaulting to 1000
[  115.046486][ T9534] lo speed is unknown, defaulting to 1000
[  115.176152][ T9534] lo speed is unknown, defaulting to 1000
[  115.327048][ T9534] lo speed is unknown, defaulting to 1000
[  115.559036][ T9539] syz.1.1573 (9539) used greatest stack depth: 20192 bytes left
[  115.584129][ T9534] syz.1.1573 (9534) used greatest stack depth: 19680 bytes left
[  115.708593][ T9553] batadv0: entered promiscuous mode
[  115.712721][ T9552] batadv0: left promiscuous mode
[  115.747216][ T9559] netlink: 'syz.2.1584': attribute type 12 has an invalid length.
[  115.753997][ T9559] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  115.973622][ T9585] netlink: 'syz.2.1595': attribute type 3 has an invalid length.
[  116.126245][ T9604] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  116.543826][ T9639] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  116.563857][ T9648] netlink: 'syz.1.1625': attribute type 21 has an invalid length.
[  116.566616][ T9648] netlink: 'syz.1.1625': attribute type 1 has an invalid length.
[  117.317423][ T9706] team_slave_0: left promiscuous mode
[  117.329206][ T9706] team0 (unregistering): Port device team_slave_0 removed
[  117.332604][ T9706] team_slave_1: left promiscuous mode
[  117.337837][ T9706] team0 (unregistering): Port device team_slave_1 removed
[  117.601632][ T9736] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  117.638864][ T9738] __nla_validate_parse: 11 callbacks suppressed
[  117.638877][ T9738] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1667'.
[  117.816500][   T96] lo speed is unknown, defaulting to 1000
[  117.818178][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1674'.
[  117.819217][   T96] syz0: Port: 1 Link DOWN
[  117.823535][   T96] lo speed is unknown, defaulting to 1000
[  117.850366][ T9757] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1675'.
[  117.854220][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1675'.
[  117.859624][ T9757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1675'.
[  117.923168][ T9763] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  117.936689][ T9765] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  117.958957][ T9764] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  118.000573][ T9767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1679'.
[  118.456445][ T9791] lo speed is unknown, defaulting to 1000
[  119.068534][ T9840] netlink: 'syz.0.1713': attribute type 1 has an invalid length.
[  119.072022][ T9840] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1713'.
[  119.147415][ T9848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'.
[  119.215079][ T9854] bridge2: entered promiscuous mode
[  119.227196][ T9854] bridge2: entered allmulticast mode
[  119.244550][ T9845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1712'.
[  119.280822][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'.
[  119.291917][ T9862] netlink: 'syz.0.1722': attribute type 1 has an invalid length.
[  119.654832][ T9902] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  119.658974][ T9902] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  119.665126][ T9904] netlink: 'syz.0.1742': attribute type 21 has an invalid length.
[  119.669651][ T9904] netlink: 'syz.0.1742': attribute type 1 has an invalid length.
[  119.880164][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.885473][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.032271][   T10] IPVS: starting estimator thread 0...
[  120.118127][ T9937] IPVS: using max 45 ests per chain, 108000 per kthread
[  120.274585][ T9960] netlink: 'syz.2.1764': attribute type 1 has an invalid length.
[  120.601124][ T9989] netlink: 'syz.2.1776': attribute type 11 has an invalid length.
[  121.279557][T10033] ieee802154 phy1 wpan1: encryption failed: -22
[  121.529848][T10041] netlink: 'syz.0.1795': attribute type 11 has an invalid length.
[  122.226995][T10046] veth1: entered promiscuous mode
[  122.230034][T10046] netlink: 'syz.1.1798': attribute type 8 has an invalid length.
[  122.240279][T10046] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  122.415114][T10064] tipc: Cannot configure node identity twice
[  122.510522][T10069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  122.559639][T10075] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.562375][T10075] syzkaller0: entered promiscuous mode
[  122.564249][T10075] syzkaller0: entered allmulticast mode
[  122.601712][T10075] tipc: Resetting bearer <eth:syzkaller0>
[  122.615120][T10074] tipc: Resetting bearer <eth:syzkaller0>
[  122.631676][T10074] tipc: Disabling bearer <eth:syzkaller0>
[  124.560911][T10148] lo speed is unknown, defaulting to 1000
[  124.944759][T10155] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  125.027230][T10158] __nla_validate_parse: 12 callbacks suppressed
[  125.027245][T10158] netlink: 1360 bytes leftover after parsing attributes in process `syz.0.1846'.
[  125.035561][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'.
[  125.214536][T10164] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  125.940504][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1867'.
[  126.219736][T10224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.437213][T10244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1880'.
[  126.441653][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1880'.
[  126.724547][T10265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.956460][T10286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.960451][T10290] netlink: 'syz.1.1900': attribute type 1 has an invalid length.
[  126.996579][T10290] 8021q: adding VLAN 0 to HW filter on device bond1
[  127.003195][T10286] syzkaller0: entered promiscuous mode
[  127.007940][T10286] syzkaller0: entered allmulticast mode
[  127.023072][T10290] 8021q: adding VLAN 0 to HW filter on device batadv1
[  127.028446][T10290] bond1: (slave batadv1): making interface the new active one
[  127.032029][T10290] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  127.057411][T10286] tipc: Resetting bearer <eth:syzkaller0>
[  127.063814][T10285] tipc: Resetting bearer <eth:syzkaller0>
[  127.072015][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'.
[  127.084815][T10285] tipc: Disabling bearer <eth:syzkaller0>
[  127.242324][T10316] netlink: 'syz.0.1911': attribute type 1 has an invalid length.
[  127.271555][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'.
[  127.276581][T10320] IPVS: Error joining to the multicast group
[  127.379865][T10330] sctp: [Deprecated]: syz.1.1916 (pid 10330) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.379865][T10330] Use struct sctp_sack_info instead
[  127.425389][T10334] batman_adv: batadv0: Adding interface: ip6gretap1
[  127.431356][T10334] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.448211][T10334] batman_adv: batadv0: Interface activated: ip6gretap1
[  127.463133][T10337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.467102][T10337] syzkaller0: entered promiscuous mode
[  127.471655][T10337] syzkaller0: entered allmulticast mode
[  127.491827][T10337] tipc: Resetting bearer <eth:syzkaller0>
[  127.495955][T10336] tipc: Resetting bearer <eth:syzkaller0>
[  127.520028][T10336] tipc: Disabling bearer <eth:syzkaller0>
[  127.830246][T10359] syzkaller0: entered promiscuous mode
[  127.832675][T10359] syzkaller0: entered allmulticast mode
[  128.786995][T10368] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  128.820912][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.823666][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.830536][T10370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.976887][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.390456][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'.
[  129.562501][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'.
[  129.740147][T10448] macsec0: entered promiscuous mode
[  129.742694][T10448] macvlan1: entered promiscuous mode
[  129.745680][T10448] macsec0: entered allmulticast mode
[  129.748902][T10448] macvlan1: entered allmulticast mode
[  129.751539][T10448] veth1_vlan: entered allmulticast mode
[  129.759665][T10448] macvlan1: left allmulticast mode
[  129.762078][T10448] veth1_vlan: left allmulticast mode
[  129.765340][T10448] macvlan1: left promiscuous mode
[  129.887248][T10452] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1967'.
[  129.930043][T10451] geneve3: entered promiscuous mode
[  129.931884][T10451] geneve3: entered allmulticast mode
[  130.130952][T10463] __nla_validate_parse: 1 callbacks suppressed
[  130.130967][T10463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1974'.
[  131.496315][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1993'.
[  131.783409][T10518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  131.812227][T10520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2001'.
[  132.174459][T10545] netlink: 'syz.0.2012': attribute type 10 has an invalid length.
[  132.180645][T10545] netlink: 'syz.0.2012': attribute type 10 has an invalid length.
[  132.183945][T10545] dummy0: left promiscuous mode
[  132.186094][T10545] dummy0: left allmulticast mode
[  132.192253][T10545] team0: Port device dummy0 removed
[  132.202957][T10545] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  132.252341][T10547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  132.274630][T10547] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  132.285866][T10547] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  132.441426][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.735704][T10575] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  132.774253][T10574] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  132.780710][T10573] syz.0.2026: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  132.786349][T10573] CPU: 1 UID: 0 PID: 10573 Comm: syz.0.2026 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  132.786364][T10573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.786369][T10573] Call Trace:
[  132.786374][T10573]  <TASK>
[  132.786379][T10573]  dump_stack_lvl+0x189/0x250
[  132.786396][T10573]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.786405][T10573]  ? __pfx__printk+0x10/0x10
[  132.786418][T10573]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  132.786429][T10573]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  132.786441][T10573]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  132.786451][T10573]  warn_alloc+0x214/0x310
[  132.786464][T10573]  ? stack_depot_save_flags+0x40/0x900
[  132.786474][T10573]  ? __pfx_warn_alloc+0x10/0x10
[  132.786486][T10573]  ? kasan_save_track+0x4f/0x80
[  132.786495][T10573]  ? xskq_create+0x56/0x170
[  132.786508][T10573]  ? xsk_init_queue+0xb0/0x110
[  132.786518][T10573]  ? xsk_setsockopt+0x4dc/0x8d0
[  132.786527][T10573]  ? do_sock_setsockopt+0x17c/0x1b0
[  132.786536][T10573]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  132.786545][T10573]  ? do_syscall_64+0xfa/0x3b0
[  132.786554][T10573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.786565][T10573]  __vmalloc_node_range_noprof+0x125/0x12f0
[  132.786614][T10573]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  132.786627][T10573]  ? xskq_create+0x56/0x170
[  132.786639][T10573]  ? __kasan_kmalloc+0x93/0xb0
[  132.786651][T10573]  vmalloc_user_noprof+0xad/0xf0
[  132.786663][T10573]  ? xskq_create+0xbf/0x170
[  132.786674][T10573]  xskq_create+0xbf/0x170
[  132.786689][T10573]  xsk_init_queue+0xb0/0x110
[  132.786701][T10573]  xsk_setsockopt+0x4dc/0x8d0
[  132.786712][T10573]  ? __pfx_xsk_setsockopt+0x10/0x10
[  132.786722][T10573]  ? __pfx_aa_sk_perm+0x10/0x10
[  132.786736][T10573]  ? aa_sock_opt_perm+0x74/0x110
[  132.786744][T10573]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  132.786751][T10573]  ? __pfx_xsk_setsockopt+0x10/0x10
[  132.786789][T10573]  do_sock_setsockopt+0x17c/0x1b0
[  132.786801][T10573]  __x64_sys_setsockopt+0x13f/0x1b0
[  132.786812][T10573]  do_syscall_64+0xfa/0x3b0
[  132.786820][T10573]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.786827][T10573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.786834][T10573]  ? exc_page_fault+0x9f/0xf0
[  132.786849][T10573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.786857][T10573] RIP: 0033:0x7ffb3e38e9a9
[  132.786866][T10573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  132.786874][T10573] RSP: 002b:00007ffb3f22f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  132.786883][T10573] RAX: ffffffffffffffda RBX: 00007ffb3e5b5fa0 RCX: 00007ffb3e38e9a9
[  132.786890][T10573] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  132.786894][T10573] RBP: 00007ffb3e410d69 R08: 0000000000000004 R09: 0000000000000000
[  132.786899][T10573] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.786903][T10573] R13: 0000000000000000 R14: 00007ffb3e5b5fa0 R15: 00007ffdb23a3d08
[  132.786915][T10573]  </TASK>
[  132.786941][T10573] Mem-Info:
[  132.910255][T10573] active_anon:4632 inactive_anon:0 isolated_anon:0
[  132.910255][T10573]  active_file:932 inactive_file:38233 isolated_file:0
[  132.910255][T10573]  unevictable:1768 dirty:156 writeback:0
[  132.910255][T10573]  slab_reclaimable:9610 slab_unreclaimable:69018
[  132.910255][T10573]  mapped:18040 shmem:2463 pagetables:971
[  132.910255][T10573]  sec_pagetables:0 bounce:0
[  132.910255][T10573]  kernel_misc_reclaimable:0
[  132.910255][T10573]  free:273908 free_pcp:28742 free_cma:0
[  132.937121][T10573] Node 0 active_anon:12196kB inactive_anon:0kB active_file:2364kB inactive_file:23920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43672kB dirty:360kB writeback:0kB shmem:5080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7748kB pagetables:2436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  132.950245][T10573] Node 1 active_anon:6196kB inactive_anon:0kB active_file:1364kB inactive_file:129012kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28216kB dirty:264kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3540kB pagetables:1448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  132.974244][T10573] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  132.987236][T10573] lowmem_reserve[]: 0 812 812 812 812
[  132.991647][T10576] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  132.994632][T10573] Node 0 DMA32 free:376732kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12060kB inactive_anon:0kB active_file:2364kB inactive_file:23920kB unevictable:3536kB writepending:360kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:47280kB local_pcp:15888kB free_cma:0kB
[  133.008111][T10573] lowmem_reserve[]: 0 0 0 0 0
[  133.010182][T10573] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  133.020360][T10573] lowmem_reserve[]: 0 0 854 854 854
[  133.022395][T10573] Node 1 Normal free:252668kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6264kB inactive_anon:0kB active_file:1364kB inactive_file:129012kB unevictable:3536kB writepending:264kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:61348kB local_pcp:46484kB free_cma:0kB
[  133.037000][T10573] lowmem_reserve[]: 0 0 0 0 0
[  133.040077][T10573] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  133.040359][T10589] openvswitch: netlink: Message has 20 unknown bytes.
[  133.044371][T10573] Node 0 DMA32: 66*4kB (M) 299*8kB (ME) 240*16kB (UME) 617*32kB (UME) 184*64kB (UM) 42*128kB (UM) 26*256kB (UM) 8*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 76*4096kB (UM) = 376704kB
[  133.054464][T10573] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  133.061059][T10573] Node 1 Normal: 748*4kB (UME) 301*8kB (UME) 289*16kB (UE) 1761*32kB (UME) 189*64kB (UME) 47*128kB (UME) 33*256kB (UME) 20*512kB (UM) 24*1024kB (UME) 7*2048kB (U) 27*4096kB (UM) = 252680kB
[  133.062000][T10589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.068995][T10573] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.073941][T10573] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  133.076988][T10573] 41628 total pagecache pages
[  133.092988][T10573] 0 pages in swap cache
[  133.094793][T10573] Free swap  = 124996kB
[  133.096252][T10573] Total swap = 124996kB
[  133.097862][T10573] 786301 pages RAM
[  133.099106][T10573] 0 pages HighMem/MovableOnly
[  133.100716][T10573] 241056 pages reserved
[  133.102120][T10573] 0 pages cma reserved
[  133.298447][T10604] lo speed is unknown, defaulting to 1000
[  133.573566][T10616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2043'.
[  134.364305][T10646] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  134.377573][T10645] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  134.547619][T10652] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  134.556327][T10651] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  134.939925][T10670] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  135.063594][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2072'.
[  135.071025][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  135.177779][T10686] bridge_slave_0: left allmulticast mode
[  135.180108][T10686] bridge_slave_0: left promiscuous mode
[  135.182704][T10686] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.194864][T10686] bridge_slave_1: left allmulticast mode
[  135.197352][T10686] bridge_slave_1: left promiscuous mode
[  135.204525][T10686] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.219350][T10686] bond0: (slave bond_slave_0): Releasing backup interface
[  135.235140][T10686] bond0: (slave bond_slave_1): Releasing backup interface
[  135.244033][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.247239][T10686] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.261099][T10686] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  135.264198][T10686] batman_adv: batadv0: Removing interface: ip6gretap1
[  135.819324][T10741] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  135.857316][T10745] netlink: 'syz.1.2101': attribute type 30 has an invalid length.
[  136.173975][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'.
[  136.719796][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2119'.
[  136.723116][T10783] 8021q: VLANs not supported on vcan0
[  137.114990][T10813] lo speed is unknown, defaulting to 1000
[  137.558563][T10843] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  137.667017][T10852] netlink: 'syz.1.2147': attribute type 1 has an invalid length.
[  137.673660][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2147'.
[  137.865528][T10866] tipc: Failed to remove unknown binding: 66,1,1/9480874:2202359200/2202359202
[  137.870466][T10866] tipc: Failed to remove unknown binding: 66,1,1/9480874:2202359200/2202359202
[  138.676872][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2175'.
[  138.683225][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2175'.
[  138.687127][T10919] netlink: 'syz.0.2175': attribute type 1 has an invalid length.
[  138.691609][T10919] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2175'.
[  138.729437][T10919] nbd: socks must be embedded in a SOCK_ITEM attr
[  138.733936][T10919] block nbd1: shutting down sockets
[  139.060850][T10949] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  140.554040][T10999] netlink: 'syz.0.2211': attribute type 21 has an invalid length.
[  140.913778][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'.
[  140.917701][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'.
[  141.164980][T11031] syzkaller1: entered promiscuous mode
[  141.166811][T11031] syzkaller1: entered allmulticast mode
[  141.266144][T11042] vlan0: entered promiscuous mode
[  141.475617][T11069] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  141.485990][T11069] syzkaller1: entered promiscuous mode
[  141.490067][T11069] syzkaller1: entered allmulticast mode
[  141.524609][T11068] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  141.644981][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2251'.
[  141.711205][T11098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2256'.
[  141.778216][T11107] sit0: left promiscuous mode
[  141.942111][T11107] vlan0: left promiscuous mode
[  141.962959][T11107] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  141.972859][T11107] bridge2: left promiscuous mode
[  141.974615][T11107] bridge2: left allmulticast mode
[  141.980246][T11107] geneve3: left promiscuous mode
[  141.982119][T11107] geneve3: left allmulticast mode
[  141.999425][ T5660] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0
[  142.007682][ T5660] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.013638][ T5660] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.016595][ T5660] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.189240][T11153] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2282'.
[  142.199542][T11154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2281'.
[  142.440511][   T33] audit: type=1800 audit(1753744946.431:3): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2298" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3948 res=0 errno=0
[  142.525201][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'.
[  142.528348][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2301'.
[  142.531144][T11194] netlink: 'syz.1.2301': attribute type 1 has an invalid length.
[  142.533778][T11194] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2301'.
[  142.633401][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2306'.
[  142.813894][T11218] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  143.031108][T11230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.040293][T11230] syzkaller0: entered promiscuous mode
[  143.045270][T11230] syzkaller0: entered allmulticast mode
[  143.061816][T11230] tipc: Resetting bearer <eth:syzkaller0>
[  143.067324][T11229] tipc: Resetting bearer <eth:syzkaller0>
[  143.080043][T11229] tipc: Disabling bearer <eth:syzkaller0>
[  143.200205][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'.
[  143.243030][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2322'.
[  143.262610][T11240] lo speed is unknown, defaulting to 1000
[  143.664202][T11269] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  143.733719][T11268] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  144.457724][T11345] vlan3: entered promiscuous mode
[  144.459618][T11345] bond0: entered promiscuous mode
[  144.461517][T11345] bond_slave_0: entered promiscuous mode
[  144.464573][T11345] bond_slave_1: entered promiscuous mode
[  144.475426][T11347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  144.543330][T11353] gretap0: entered promiscuous mode
[  144.654644][T11363] netlink: 'syz.0.2377': attribute type 7 has an invalid length.
[  144.659101][T11363] netlink: 'syz.0.2377': attribute type 8 has an invalid length.
[  145.034091][T11379] openvswitch: netlink: Message has 4 unknown bytes.
[  145.504590][T11405] lo speed is unknown, defaulting to 1000
[  146.161661][T11454] netlink: 'syz.2.2415': attribute type 13 has an invalid length.
[  146.167660][T11454] netlink: 'syz.2.2415': attribute type 17 has an invalid length.
[  146.222617][T11454] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.230506][T11454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.795110][T11524] netlink: 'syz.0.2449': attribute type 11 has an invalid length.
[  147.075557][T11558] __nla_validate_parse: 7 callbacks suppressed
[  147.075573][T11558] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2465'.
[  147.182790][T11567] netlink: 'syz.0.2469': attribute type 7 has an invalid length.
[  147.189500][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2469'.
[  147.294066][T11573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2472'.
[  147.328137][T11575] sctp: [Deprecated]: syz.0.2473 (pid 11575) Use of int in maxseg socket option.
[  147.328137][T11575] Use struct sctp_assoc_value instead
[  147.374168][T11582] netlink: 'syz.0.2477': attribute type 29 has an invalid length.
[  147.379243][T11582] netlink: 'syz.0.2477': attribute type 29 has an invalid length.
[  147.423547][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'.
[  147.427042][T11587] bridge_slave_1: left allmulticast mode
[  147.429475][T11587] bridge_slave_1: left promiscuous mode
[  147.431538][T11587] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.436193][T11587] bridge_slave_0: left allmulticast mode
[  147.441077][T11587] bridge_slave_0: left promiscuous mode
[  147.443228][T11587] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.495293][T11591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2480'.
[  147.507520][T11591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2480'.
[  147.510488][T11591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2480'.
[  147.513393][T11591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2480'.
[  147.664093][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'.
[  147.758954][T11612] lo speed is unknown, defaulting to 1000
[  149.014223][T11677] netlink: 'syz.0.2520': attribute type 1 has an invalid length.
[  149.019117][T11677] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2520'.
[  149.123567][T11689] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  149.507435][T11735] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  150.183588][T11766] validate_nla: 2 callbacks suppressed
[  150.183605][T11766] netlink: 'syz.0.2561': attribute type 15 has an invalid length.
[  150.197268][T11766] netlink: 'syz.0.2561': attribute type 15 has an invalid length.
[  150.200929][ T5660] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.204357][ T5660] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.208948][ T5660] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.211817][ T5660] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.246546][T11768] smc: net device bond0 applied user defined pnetid SYZ2
[  150.251162][T11768] smc: net device bond0 erased user defined pnetid SYZ2
[  150.814571][T11817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.161036][T11863] netlink: 'syz.2.2604': attribute type 2 has an invalid length.
[  151.164696][T11863] netlink: 'syz.2.2604': attribute type 1 has an invalid length.
[  151.309324][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  151.587915][T11913] netlink: 'syz.0.2629': attribute type 10 has an invalid length.
[  152.315924][T11973] lo speed is unknown, defaulting to 1000
[  152.554613][T11973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  152.623710][ T5837] Bluetooth: hci2: link tx timeout
[  152.626366][ T5837] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.632923][T11972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.407192][T12048] batman_adv: batadv0: Adding interface: dummy0
[  153.416457][T12048] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.438196][T12048] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  153.517986][T12052] __nla_validate_parse: 11 callbacks suppressed
[  153.518005][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'.
[  153.740940][T12072] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  153.743842][T12072] IPv6: NLM_F_CREATE should be set when creating new route
[  153.746863][T12072] IPv6: NLM_F_CREATE should be set when creating new route
[  153.754953][T12066] netlink: 'syz.1.2696': attribute type 39 has an invalid length.
[  153.815347][T12078] netlink: 'syz.2.2700': attribute type 10 has an invalid length.
[  153.825402][T12078] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  153.851060][T12078] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  154.149701][T12111] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2716'.
[  154.153098][T12111] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2716'.
[  154.313134][T12131] TCP: TCP_TX_DELAY enabled
[  154.669426][ T5837] Bluetooth: hci2: command 0x0405 tx timeout
[  154.941694][T12180] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2748'.
[  155.052009][T12187] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2751'.
[  155.631555][T12231] lo speed is unknown, defaulting to 1000
[  155.788691][T12247] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2776'.
[  155.800592][T12248] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2777'.
[  155.828456][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'.
[  156.015462][T12265] netlink: 'syz.1.2783': attribute type 1 has an invalid length.
[  156.043523][T12265] 8021q: adding VLAN 0 to HW filter on device bond2
[  156.052952][T12265] bond2: (slave bridge0): making interface the new active one
[  156.056148][T12265] bond2: (slave bridge0): Enslaving as an active interface with an up link
[  156.073455][T12265] gretap1: entered promiscuous mode
[  156.212337][T12284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'.
[  156.249331][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2794'.
[  157.296773][T12369] netlink: 'syz.0.2832': attribute type 10 has an invalid length.
[  157.312501][T12369] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  158.120071][   T33] audit: type=1800 audit(1753744962.101:4): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2836" name="@" dev="tmpfs" ino=4690 res=0 errno=0
[  158.441220][T12412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.443943][T12412] IPv6: NLM_F_CREATE should be set when creating new route
[  158.446464][T12412] IPv6: NLM_F_CREATE should be set when creating new route
[  158.449026][T12412] IPv6: NLM_F_CREATE should be set when creating new route
[  158.452839][T12412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.874564][T12443] lo speed is unknown, defaulting to 1000
[  159.594114][T12488] __nla_validate_parse: 2 callbacks suppressed
[  159.594131][T12488] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2887'.
[  159.803055][T12502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2894'.
[  159.966358][T12514] lo speed is unknown, defaulting to 1000
[  161.455929][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2928'.
[  161.461582][T12596] netlink: 'syz.2.2928': attribute type 1 has an invalid length.
[  161.464904][T12596] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2928'.
[  161.545502][T12604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2934'.
[  161.744669][T12631] openvswitch: netlink: Message has 4 unknown bytes.
[  161.750091][T12631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.801953][T12637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2950'.
[  161.814403][T12637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2950'.
[  161.880975][T12647] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  161.978778][T12658] netlink: 'syz.2.2960': attribute type 10 has an invalid length.
[  161.981602][T12658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2960'.
[  161.985409][T12658] dummy0: entered promiscuous mode
[  161.988506][T12658] dummy0: entered allmulticast mode
[  161.991412][T12658] bridge0: port 1(dummy0) entered blocking state
[  161.994215][T12658] bridge0: port 1(dummy0) entered disabled state
[  162.004249][T12658] bridge0: port 1(dummy0) entered blocking state
[  162.006885][T12658] bridge0: port 1(dummy0) entered forwarding state
[  162.558043][T12684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  162.561249][T12684] IPv6: NLM_F_CREATE should be set when creating new route
[  162.617127][T12682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2971'.
[  162.631567][T12682] lo: entered allmulticast mode
[  162.636274][T12682] tunl0: entered allmulticast mode
[  162.644538][T12682] gre0: entered allmulticast mode
[  162.659848][T12682] gretap0: left promiscuous mode
[  162.662396][T12682] gretap0: entered allmulticast mode
[  162.666596][T12682] erspan0: entered allmulticast mode
[  162.675793][T12682] ip_vti0: entered allmulticast mode
[  162.682891][T12682] ip6_vti0: entered allmulticast mode
[  162.691919][T12682] sit0: entered allmulticast mode
[  162.704220][T12682] ip6tnl0: entered allmulticast mode
[  162.714334][T12682] ip6gre0: entered allmulticast mode
[  162.722667][T12682] ip6gretap0: entered allmulticast mode
[  162.731555][T12682] bridge0: port 3(team0) entered disabled state
[  162.736302][T12682] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.740168][T12682] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.748793][T12682] bridge0: entered allmulticast mode
[  162.755885][T12682] vcan0: entered allmulticast mode
[  162.763069][T12682] bond0: entered allmulticast mode
[  162.765483][T12682] bond_slave_0: entered allmulticast mode
[  162.769126][T12682] bond_slave_1: entered allmulticast mode
[  162.771844][T12682] dummy0: entered allmulticast mode
[  162.791202][T12682] nlmon0: entered allmulticast mode
[  162.796657][T12682] caif0: entered allmulticast mode
[  162.800787][T12682] batadv0: entered allmulticast mode
[  162.808738][T12682] vxcan0: entered allmulticast mode
[  162.812585][T12682] vxcan1: entered allmulticast mode
[  162.816991][T12682] veth0: entered allmulticast mode
[  162.824904][T12682] veth1: entered allmulticast mode
[  162.841194][T12682] wg0: entered allmulticast mode
[  162.849729][T12682] wg1: entered allmulticast mode
[  162.857297][T12682] wg2: entered allmulticast mode
[  162.863880][T12682] veth0_to_bridge: entered allmulticast mode
[  162.874442][T12682] veth1_to_bridge: entered allmulticast mode
[  162.912666][T12682] veth0_to_bond: entered allmulticast mode
[  162.925335][T12682] veth1_to_bond: entered allmulticast mode
[  162.945010][T12682] veth0_to_team: entered allmulticast mode
[  162.972133][T12682] veth1_to_team: entered allmulticast mode
[  162.979504][T12682] veth0_to_batadv: entered allmulticast mode
[  162.985108][T12682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.991960][T12682] batadv_slave_0: entered allmulticast mode
[  163.000066][T12682] veth1_to_batadv: entered allmulticast mode
[  163.005469][T12682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.009919][T12682] batadv_slave_1: entered allmulticast mode
[  163.015492][T12682] xfrm0: entered allmulticast mode
[  163.021207][T12682] veth0_to_hsr: entered allmulticast mode
[  163.026671][T12682] hsr_slave_0: entered allmulticast mode
[  163.032054][T12682] veth1_to_hsr: entered allmulticast mode
[  163.037093][T12682] hsr_slave_1: entered allmulticast mode
[  163.043879][T12682] hsr0: entered allmulticast mode
[  163.050352][T12682] veth1_virt_wifi: entered allmulticast mode
[  163.055134][T12682] veth0_virt_wifi: entered allmulticast mode
[  163.059764][T12682] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  163.062826][T12682] veth1_vlan: entered allmulticast mode
[  163.066362][T12682] veth0_vlan: entered allmulticast mode
[  163.073786][T12682] vlan0: entered allmulticast mode
[  163.075597][T12682] vlan1: entered allmulticast mode
[  163.081586][T12682] macvlan0: entered allmulticast mode
[  163.086334][T12682] macvlan1: entered allmulticast mode
[  163.090860][T12682] ipvlan0: entered allmulticast mode
[  163.093208][T12682] ipvlan1: entered allmulticast mode
[  163.097390][T12682] veth1_macvtap: entered allmulticast mode
[  163.101412][T12682] veth0_macvtap: entered allmulticast mode
[  163.112375][T12682] macvtap0: entered allmulticast mode
[  163.116925][T12682] macsec0: entered allmulticast mode
[  163.123166][T12682] geneve0: entered allmulticast mode
[  163.126814][T12682] geneve1: entered allmulticast mode
[  163.135913][T12682] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  163.143298][T12682] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  163.150002][T12682] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  163.155190][T12682] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  163.169101][T12682] bond1: entered allmulticast mode
[  163.171550][T12682] bridge1: entered allmulticast mode
[  163.174815][T12682] bridge2: entered allmulticast mode
[  163.180588][T12682] ip6erspan0: left promiscuous mode
[  163.182402][T12682] ip6erspan0: entered allmulticast mode
[  163.187796][T12682] syztnl2: entered allmulticast mode
[  163.190009][T12682] nicvf0: entered allmulticast mode
[  163.192242][T12682] ip6gretap1: entered allmulticast mode
[  163.196937][T12682] macvlan2: entered allmulticast mode
[  163.200582][T12682] ip6tnl1: entered allmulticast mode
[  163.202763][T12682] gretap1: entered allmulticast mode
[  163.208923][T12682] gretap2: entered allmulticast mode
[  163.210935][T12682] bridge4: entered allmulticast mode
[  163.213089][T12682] ipip0: entered allmulticast mode
[  163.217927][T12682] gtp0: entered allmulticast mode
[  163.221038][T12682] ip6_vti1: entered allmulticast mode
[  163.223404][T12682] ieee802154 phy1 wpan1: entered allmulticast mode
[  163.226660][T12682] vlan2: entered allmulticast mode
[  163.232820][T12682] @: entered allmulticast mode
[  163.236322][T12682] syztnl0: entered allmulticast mode
[  163.238252][T12682] syzkaller0: entered allmulticast mode
[  163.250536][ T5660] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.254305][ T5660] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.278021][ T5660] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.289314][ T5660] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.292529][ T5660] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.295504][ T5660] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.305180][ T5660] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.312625][ T5660] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.429363][T12710] netlink: 'syz.0.2983': attribute type 1 has an invalid length.
[  163.437684][T12710] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2983'.
[  163.684801][T12729] vlan0: entered promiscuous mode
[  163.896906][T12744] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  164.179479][T12774] netlink: 'syz.2.3008': attribute type 15 has an invalid length.
[  164.432660][T12796] netlink: 'syz.0.3017': attribute type 4 has an invalid length.
[  164.745036][T12818] lo speed is unknown, defaulting to 1000
[  164.972075][T12835] lo speed is unknown, defaulting to 1000
[  165.446623][T12857] netlink: 'syz.0.3042': attribute type 14 has an invalid length.
[  165.847126][T12872] __nla_validate_parse: 46 callbacks suppressed
[  165.847140][T12872] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3049'.
[  165.898530][T12870] bridge0: port 1(dummy0) entered disabled state
[  165.926765][T12870] vlan0: left promiscuous mode
[  166.147341][T12893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.183934][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3061'.
[  166.187201][T12895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3061'.
[  166.196705][T12895] geneve0: entered promiscuous mode
[  166.206189][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.216870][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.222546][T12899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'.
[  166.225652][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.241528][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.593219][T12933] netlink: 'syz.0.3078': attribute type 21 has an invalid length.
[  166.596060][T12933] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3078'.
[  166.602881][T12933] netlink: 'syz.0.3078': attribute type 5 has an invalid length.
[  166.605680][T12933] netlink: 'syz.0.3078': attribute type 6 has an invalid length.
[  166.610480][T12933] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3078'.
[  166.994437][T12973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.998157][T12973] syzkaller0: entered promiscuous mode
[  167.000264][T12973] syzkaller0: entered allmulticast mode
[  167.014933][T12973] tipc: Resetting bearer <eth:syzkaller0>
[  167.019646][T12971] tipc: Resetting bearer <eth:syzkaller0>
[  167.030722][T12971] tipc: Disabling bearer <eth:syzkaller0>
[  167.086138][  T973] hid-generic 0005:04F3:100C.0001: item fetching failed at offset 0/1
[  167.092896][  T973] hid-generic 0005:04F3:100C.0001: probe with driver hid-generic failed with error -22
[  167.136326][T12978] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  167.321332][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3105'.
[  167.344145][T12995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.355646][T12995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.380044][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'.
[  167.394139][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3106'.
[  167.484425][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3108'.
[  168.465399][T13061] netlink: 'syz.0.3132': attribute type 2 has an invalid length.
[  169.166956][T13086] lo speed is unknown, defaulting to 1000
[  169.274243][T13098] pim6reg0: tun_chr_ioctl cmd 2148553947
[  169.440634][T13095] lo speed is unknown, defaulting to 1000
[  170.255314][T13140] syzkaller1: entered promiscuous mode
[  170.260123][T13140] syzkaller1: entered allmulticast mode
[  170.699208][T13183] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  170.888165][T13203] syzkaller1: entered promiscuous mode
[  170.890401][T13203] syzkaller1: entered allmulticast mode
[  170.923805][T13205] __nla_validate_parse: 5 callbacks suppressed
[  170.923815][T13205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3191'.
[  170.931294][T13205] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  171.084580][T13215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.090245][T13215] syzkaller0: entered promiscuous mode
[  171.092645][T13215] syzkaller0: entered allmulticast mode
[  171.106520][T13215] tipc: Resetting bearer <eth:syzkaller0>
[  171.109636][T13214] tipc: Resetting bearer <eth:syzkaller0>
[  171.120110][T13214] tipc: Disabling bearer <eth:syzkaller0>
[  172.321300][T13273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3219'.
[  172.541714][T13287] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3226'.
[  172.545959][T13287] netlink: 'syz.0.3226': attribute type 1 has an invalid length.
[  173.048085][T13316] syzkaller0: entered promiscuous mode
[  173.050729][T13316] syzkaller0: entered allmulticast mode
[  173.151759][T13324] netlink: 'syz.0.3236': attribute type 1 has an invalid length.
[  174.126851][T13324] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  174.154590][T13334] veth3: entered promiscuous mode
[  174.186364][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3240'.
[  174.368470][T13353] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3248'.
[  174.562953][T13366] bridge_slave_1: default FDB implementation only supports local addresses
[  174.651885][T13375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3257'.
[  174.677314][T13372] lo speed is unknown, defaulting to 1000
[  174.747013][T13383] netlink: 'syz.2.3260': attribute type 9 has an invalid length.
[  174.755569][T13383] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.3260'.
[  175.205817][T13416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3272'.
[  175.395500][T13430] netlink: 'syz.0.3276': attribute type 1 has an invalid length.
[  175.409788][T13430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3276'.
[  175.429954][T13430] netlink: 'syz.0.3276': attribute type 1 has an invalid length.
[  175.433111][T13430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3276'.
[  175.436937][T13430] netlink: 'syz.0.3276': attribute type 1 has an invalid length.
[  175.446962][T13430] netlink: 'syz.0.3276': attribute type 1 has an invalid length.
[  175.452098][T13430] netlink: 'syz.0.3276': attribute type 1 has an invalid length.
[  175.455449][T13430] netlink: 'syz.0.3276': attribute type 1 has an invalid length.
[  175.460417][T13430] netlink: 'syz.0.3276': attribute type 1 has an invalid length.
[  175.523757][T13444] IPVS: Error connecting to the multicast addr
[  175.607981][T13454] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  176.349220][T13500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.352490][T13500] syzkaller0: entered promiscuous mode
[  176.359304][T13500] syzkaller0: entered allmulticast mode
[  176.375006][T13500] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  176.381751][T13500] tipc: Resetting bearer <eth:syzkaller0>
[  176.390897][T13498] tipc: Resetting bearer <eth:syzkaller0>
[  176.400510][T13498] tipc: Disabling bearer <eth:syzkaller0>
[  176.780435][T13529] __nla_validate_parse: 88 callbacks suppressed
[  176.780446][T13529] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3323'.
[  176.786276][T13529] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3323'.
[  177.047262][T13550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'.
[  177.284697][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'.
[  177.347015][T13570] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3340'.
[  177.376517][T13576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3344'.
[  177.726788][T13611] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  177.864840][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'.
[  177.871293][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'.
[  177.874374][T13631] validate_nla: 84 callbacks suppressed
[  177.874382][T13631] netlink: 'syz.0.3367': attribute type 15 has an invalid length.
[  177.880305][T13631] netlink: 'syz.0.3367': attribute type 18 has an invalid length.
[  177.890897][T13634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3368'.
[  177.996564][T13646] macvlan3: entered allmulticast mode
[  178.003501][T13646] veth1_vlan: entered allmulticast mode
[  178.008571][T13646] veth1_vlan: left allmulticast mode
[  178.600992][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3386'.
[  178.922526][T13696] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  178.933007][T13695] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  179.171411][T13709] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  179.178191][T13708] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  179.260684][T13711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.264425][T13711] syzkaller0: entered promiscuous mode
[  179.267078][T13711] syzkaller0: entered allmulticast mode
[  179.285456][T13711] tipc: Resetting bearer <eth:syzkaller0>
[  179.290043][T13710] tipc: Resetting bearer <eth:syzkaller0>
[  179.300225][T13710] tipc: Disabling bearer <eth:syzkaller0>
[  180.016011][T13757] lo speed is unknown, defaulting to 1000
[  180.585478][T13797] sctp: [Deprecated]: syz.1.3440 (pid 13797) Use of struct sctp_assoc_value in delayed_ack socket option.
[  180.585478][T13797] Use struct sctp_sack_info instead
[  180.599353][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.631037][T13802] pim6reg: entered allmulticast mode
[  180.648609][T13802] pim6reg: left allmulticast mode
[  181.112482][T13846] netlink: 'syz.1.3461': attribute type 1 has an invalid length.
[  181.298110][T13864] netlink: 'syz.1.3468': attribute type 3 has an invalid length.
[  181.511302][T13872] netlink: 'syz.2.3473': attribute type 303 has an invalid length.
[  182.083127][T13930] __nla_validate_parse: 6 callbacks suppressed
[  182.083142][T13930] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3499'.
[  182.106236][T13930] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3499'.
[  182.116337][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3499'.
[  182.314994][T13943] lo speed is unknown, defaulting to 1000
[  182.396209][T13953] netlink: 'syz.1.3509': attribute type 1 has an invalid length.
[  182.459831][T13955] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  182.465051][T13955] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  182.521535][T13953] macvlan3: entered promiscuous mode
[  182.523807][T13953] macvlan3: entered allmulticast mode
[  182.527121][T13953] bond3: entered promiscuous mode
[  182.531150][T13953] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  182.540422][T13953] bond3: left promiscuous mode
[  183.019250][T13974] syzkaller0: entered promiscuous mode
[  183.021684][T13974] syzkaller0: entered allmulticast mode
[  184.231869][T13999] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.695996][   T33] audit: type=1800 audit(1753744988.681:5): pid=14021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3538" name="cgroup.controllers" dev="tmpfs" ino=5916 res=0 errno=0
[  184.936676][T14063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3557'.
[  184.979598][T14068] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  184.995395][T14067] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  185.439397][T14108] netlink: 'syz.2.3577': attribute type 3 has an invalid length.
[  185.451786][T14108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3577'.
[  185.835618][T14152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3601'.
[  185.839568][T14152] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3601'.
[  186.635783][T14190] netlink: 'syz.1.3615': attribute type 13 has an invalid length.
[  186.804507][T14198] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3619'.
[  187.110194][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3632'.
[  187.114242][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3632'.
[  187.142517][T14230] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3632'.
[  187.246463][T14238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.255014][T14238] syzkaller0: entered promiscuous mode
[  187.260336][T14238] syzkaller0: entered allmulticast mode
[  187.282542][T14238] tipc: Resetting bearer <eth:syzkaller0>
[  187.286694][T14237] tipc: Resetting bearer <eth:syzkaller0>
[  187.302144][T14237] tipc: Disabling bearer <eth:syzkaller0>
[  188.718261][T14358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3695'.
[  188.724984][T14358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3695'.
[  188.780451][T14364] netlink: 648 bytes leftover after parsing attributes in process `syz.1.3698'.
[  188.850773][T14367] netlink: 'syz.2.3697': attribute type 1 has an invalid length.
[  188.863336][T14367] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3697'.
[  188.970723][T14371] netlink: 'syz.1.3701': attribute type 9 has an invalid length.
[  188.982256][T14371] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.3701'.
[  189.105826][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3704'.
[  189.254116][T14387] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3709'.
[  189.402600][T14395] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  191.381023][T14508] lo speed is unknown, defaulting to 1000
[  191.491852][T14512] netlink: 'syz.1.3768': attribute type 1 has an invalid length.
[  191.515110][T14512] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  191.871146][T14534] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  191.886366][T14534] batman_adv: batadv0: Removing interface: dummy0
[  191.893315][T14534] bond0: (slave bond_slave_0): Releasing backup interface
[  191.896112][T14534] bond_slave_0: left promiscuous mode
[  191.902260][T14534] bond0: (slave bond_slave_1): Releasing backup interface
[  191.906341][T14534] bond_slave_1: left promiscuous mode
[  191.911485][T14534] team0: Port device team_slave_0 removed
[  191.915665][T14534] team0: Port device team_slave_1 removed
[  191.920623][T14534] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.924622][T14534] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.928908][T14534] bond1: (slave batadv1): Releasing active interface
[  191.933019][T14534] bond2: (slave bridge0): Releasing active interface
[  191.998780][T14535] netlink: 'syz.1.3778': attribute type 10 has an invalid length.
[  192.001408][T14535] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  192.008354][T14535] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  192.015511][T14535] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  192.020043][T14535] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  192.779270][T14550] bridge0: entered promiscuous mode
[  192.788760][T14551] netlink: 'syz.0.3782': attribute type 16 has an invalid length.
[  192.792467][T14551] netlink: 'syz.0.3782': attribute type 17 has an invalid length.
[  192.859763][T14551] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.871286][T14551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.890020][T14553] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  192.894295][T14553] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  193.094959][T14569] dummy0: left allmulticast mode
[  193.097283][T14569] dummy0: left promiscuous mode
[  193.100418][T14569] bridge0: port 1(dummy0) entered disabled state
[  193.141974][T14569] bond0: (slave wlan1): Releasing backup interface
[  193.262958][  T973] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  193.266231][  T973] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  193.275057][  T973] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  193.391210][T14588] __nla_validate_parse: 7 callbacks suppressed
[  193.391220][T14588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3796'.
[  193.544529][T14598] x9`.Ā*|: renamed from bridge_slave_0
[  194.087289][T14645] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  194.386267][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3830'.
[  194.699798][T14709] netlink: 'syz.2.3846': attribute type 1 has an invalid length.
[  195.067841][ T5837] Bluetooth: hci2: command 0x0405 tx timeout
[  195.505715][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'.
[  195.714357][T14792] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  195.726292][T14792] syzkaller1: entered promiscuous mode
[  195.733030][T14792] syzkaller1: entered allmulticast mode
[  195.758647][T14791] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  196.642720][T14829] netlink: 'syz.0.3899': attribute type 10 has an invalid length.
[  196.657937][T14829] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3899'.
[  196.805438][T14837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.864117][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3905'.
[  197.070509][T14857] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3911'.
[  197.074644][T14857] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  197.222476][T14867] netlink: 'syz.1.3914': attribute type 1 has an invalid length.
[  197.269158][T14867] bond5: (slave gretap3): making interface the new active one
[  197.275112][T14867] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  197.313137][T14867] syz.1.3914 (14867) used greatest stack depth: 19416 bytes left
[  197.344216][T14876] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3921'.
[  197.403035][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3923'.
[  197.462364][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3926'.
[  197.633301][T14903] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  197.822481][T14924] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3944'.
[  197.829539][T14924] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  197.932965][T14928] lo speed is unknown, defaulting to 1000
[  198.379444][T14959] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  198.418788][T14959] bond5: (slave gretap3): Releasing active interface
[  198.451673][T14959] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  198.457212][T14959] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.623787][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3964'.
[  198.629324][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'.
[  198.925692][T14991] syzkaller1: entered promiscuous mode
[  198.932869][T14991] syzkaller1: entered allmulticast mode
[  198.951855][T14993] netlink: 'syz.0.3976': attribute type 1 has an invalid length.
[  198.955554][T14993] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3976'.
[  199.128842][T15003] erspan0: entered promiscuous mode
[  199.804653][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4011'.
[  199.809461][T15066] netlink: 'syz.0.4011': attribute type 14 has an invalid length.
[  199.814101][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4011'.
[  199.818860][T15066] netlink: 'syz.0.4011': attribute type 14 has an invalid length.
[  199.911559][T15075] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4015'.
[  199.916333][T15075] batadv_slave_1: entered promiscuous mode
[  199.926208][T15076] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4016'.
[  199.943818][T15076] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4016'.
[  199.955019][T15076] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4016'.
[  200.173030][T15097] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4025'.
[  200.564672][T15122] netlink: 'syz.0.4036': attribute type 32 has an invalid length.
[  200.569071][T15122] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  200.622035][T15124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.626021][T15124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.124235][T15129] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  201.415133][T15157] geneve1: entered promiscuous mode
[  201.419239][T15157] geneve1: entered allmulticast mode
[  201.600750][T15163] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.606777][T15163] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  201.616654][T15163] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  202.280765][T15170] tipc: Resetting bearer <eth:syzkaller0>
[  202.345059][T15172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  202.349899][T15172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  202.402464][T15185] netlink: 'syz.0.4059': attribute type 64 has an invalid length.
[  202.692140][T15209] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  202.696535][T15209] syzkaller1: entered promiscuous mode
[  202.699001][T15209] syzkaller1: entered allmulticast mode
[  202.717253][T15208] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  203.013966][T15223] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.123902][T15227] 8021q: adding VLAN 0 to HW filter on device bond6
[  203.473929][T15259] tipc: New replicast peer: 255.255.255.255
[  203.476674][T15259] tipc: Enabled bearer <udp:syz2>, priority 6
[  203.483219][T15259] tipc: Disabling bearer <udp:syz2>
[  203.806459][T15295] bridge3: entered allmulticast mode
[  204.825935][T15338] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  204.866941][T15340] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  205.428779][T15353] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.432580][T15353] mac80211_hwsim hwsim7 D: renamed from syzkaller0 (while UP)
[  205.437011][T15353] tipc: Disabling bearer <eth:syzkaller0>
[  205.847208][T15388] __nla_validate_parse: 5 callbacks suppressed
[  205.847227][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4153'.
[  206.010160][T15400] lo speed is unknown, defaulting to 1000
[  206.054285][T15409] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  206.101503][T15408] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  206.350019][T15430] netlink: 'syz.0.4171': attribute type 4 has an invalid length.
[  206.362162][T15430] netlink: 'syz.0.4171': attribute type 4 has an invalid length.
[  206.394969][T15433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4172'.
[  206.680944][T15400] netlink: 'syz.2.4159': attribute type 6 has an invalid length.
[  207.089387][T15472] netlink: 844 bytes leftover after parsing attributes in process `syz.2.4188'.
[  207.110351][T15472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4188'.
[  207.297321][T15488] lo speed is unknown, defaulting to 1000
[  207.800691][T15549] netlink: 'syz.2.4222': attribute type 16 has an invalid length.
[  207.804151][T15549] netlink: 'syz.2.4222': attribute type 1 has an invalid length.
[  207.809205][T15549] netlink: 'syz.2.4222': attribute type 2 has an invalid length.
[  208.006332][T15577] 8021q: adding VLAN 0 to HW filter on device bond2
[  208.155944][T15596] netlink: 'syz.1.4242': attribute type 1 has an invalid length.
[  208.395042][T15614] lo: left allmulticast mode
[  208.397039][T15614] tunl0: left allmulticast mode
[  208.399289][T15614] gre0: left allmulticast mode
[  208.401412][T15614] gretap0: left allmulticast mode
[  208.403739][T15614] erspan0: left allmulticast mode
[  208.405724][T15614] ip_vti0: left allmulticast mode
[  208.407923][T15614] ip6_vti0: left allmulticast mode
[  208.410023][T15614] sit0: left allmulticast mode
[  208.411916][T15614] ip6tnl0: left allmulticast mode
[  208.415001][T15614] ip6gre0: left allmulticast mode
[  208.416934][T15614] ip6gretap0: left allmulticast mode
[  208.420309][T15614] bridge0: left allmulticast mode
[  208.422379][T15614] bond0: left allmulticast mode
[  208.425034][T15614] dummy0: left allmulticast mode
[  208.427118][T15614] nlmon0: left allmulticast mode
[  209.154064][T15614] caif0: left allmulticast mode
[  209.156436][T15614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  209.650543][T15661] netlink: 'syz.0.4274': attribute type 1 has an invalid length.
[  209.755553][T15672] lo speed is unknown, defaulting to 1000
[  210.179318][T15672] netlink: 'syz.1.4279': attribute type 13 has an invalid length.
[  210.191633][T15672] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  211.453851][T15748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4315'.
[  211.606886][T15762] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4321'.
[  211.706083][T15767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4320'.
[  211.919509][   T33] audit: type=1800 audit(1753745015.911:6): pid=15758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4320" name="cgroup.controllers" dev="tmpfs" ino=7153 res=0 errno=0
[  212.154937][T15790] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4333'.
[  212.846274][T15850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4361'.
[  213.164088][T15890] netlink: 'syz.0.4379': attribute type 64 has an invalid length.
[  213.277158][T15908] IPVS: Error connecting to the multicast addr
[  213.759287][T15962] raw_sendmsg: syz.2.4413 forgot to set AF_INET. Fix it!
[  213.919365][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'.
[  214.423971][T16016] lo speed is unknown, defaulting to 1000
[  214.660919][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4446'.
[  214.706552][T16038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4447'.
[  214.716409][T16034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.792929][T16039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4445'.
[  214.805076][T16034] syzkaller0: entered promiscuous mode
[  214.808134][T16034] syzkaller0: entered allmulticast mode
[  214.811286][T16034] tipc: Resetting bearer <eth:syzkaller0>
[  214.835393][T16033] tipc: Resetting bearer <eth:syzkaller0>
[  215.838542][   T96] tipc: Node number set to 2377457844
[  215.999826][T16033] tipc: Disabling bearer <eth:syzkaller0>
[  216.413454][T16096] lo speed is unknown, defaulting to 1000
[  217.300178][T16137] netlink: 'syz.1.4488': attribute type 13 has an invalid length.
[  217.308838][T16137] netlink: 'syz.1.4488': attribute type 17 has an invalid length.
[  217.328881][T16137] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.340327][T16137] 8021q: adding VLAN 0 to HW filter on device team0
[  217.345545][T16137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  217.352947][   T96] lo speed is unknown, defaulting to 1000
[  217.357195][   T96] syz0: Port: 1 Link ACTIVE
[  217.361814][ T5895] lo speed is unknown, defaulting to 1000
[  217.384986][T16137] lo speed is unknown, defaulting to 1000
[  217.436364][T16138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.498263][T16138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.560174][T16137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.941222][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4496'.
[  217.944441][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4496'.
[  219.507417][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4551'.
[  219.516538][T16288] tipc: Enabled bearer <eth:vlan0>, priority 18
[  220.507862][   T96] tipc: Node number set to 3967906744
[  220.859201][   T33] audit: type=1800 audit(1753745024.851:7): pid=16352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4578" name="blkio.bfq.time_recursive" dev="tmpfs" ino=8003 res=0 errno=0
[  220.989703][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4584'.
[  220.993660][T16363] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4584'.
[  221.425915][T16401] xfrm0: entered promiscuous mode
[  221.428419][T16401] xfrm0: entered allmulticast mode
[  221.466445][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4601'.
[  221.905418][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4610'.
[  221.908862][T16426] netlink: 'syz.2.4610': attribute type 1 has an invalid length.
[  221.911949][T16426] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4610'.
[  221.974442][T16433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4613'.
[  221.974968][T16434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4614'.
[  222.904475][T16482] netlink: 'syz.1.4636': attribute type 10 has an invalid length.
[  222.911791][T16482] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.929699][T16482] netlink: 'syz.1.4636': attribute type 10 has an invalid length.
[  222.933889][T16482] batadv0: entered allmulticast mode
[  222.936279][T16482] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  223.355344][T16498] __nla_validate_parse: 7 callbacks suppressed
[  223.355356][T16498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4643'.
[  223.377690][T16498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4643'.
[  223.527387][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4646'.
[  223.539264][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4646'.
[  223.800967][T16513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.808776][T16513] syzkaller0: entered promiscuous mode
[  223.811705][T16513] syzkaller0: entered allmulticast mode
[  223.829342][T16513] tipc: Resetting bearer <eth:syzkaller0>
[  223.835385][T16512] tipc: Resetting bearer <eth:syzkaller0>
[  223.850161][T16512] tipc: Disabling bearer <eth:syzkaller0>
[  224.053456][T16531] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  224.214539][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4664'.
[  224.219927][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4664'.
[  224.519077][T16578] !: renamed from dummy0 (while UP)
[  224.614277][T16584] lo speed is unknown, defaulting to 1000
[  225.895423][T16677] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  225.899606][T16677] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  226.047139][T16691] netlink: 'syz.2.4705': attribute type 1 has an invalid length.
[  226.052674][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4705'.
[  226.073787][T16691] bridge4: the hash_elasticity option has been deprecated and is always 16
[  226.107810][T16693] netlink: 'syz.0.4706': attribute type 10 has an invalid length.
[  226.110527][T16693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4706'.
[  226.217969][T16693] geneve0: left allmulticast mode
[  226.225232][T16693] geneve0: entered promiscuous mode
[  226.228988][T16693] geneve0: entered allmulticast mode
[  226.233596][T16693] team0: Port device geneve0 added
[  226.237072][ T5896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.249405][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.266596][   T81] bridge0: port 3(team0) entered blocking state
[  226.269697][   T81] bridge0: port 3(team0) entered listening state
[  226.281929][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.297898][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.790475][T16726] lo speed is unknown, defaulting to 1000
[  226.865748][T16734] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.885821][T16734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4723'.
[  227.090193][T16741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4724'.
[  227.765507][T16790] netlink: 'syz.0.4744': attribute type 20 has an invalid length.
[  227.773172][T16790] netlink: 'syz.0.4744': attribute type 20 has an invalid length.
[  228.355922][T16825] lo speed is unknown, defaulting to 1000
[  228.598293][T16851] __nla_validate_parse: 8 callbacks suppressed
[  228.598303][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'.
[  228.604667][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4769'.
[  228.802760][T16863] lo speed is unknown, defaulting to 1000
[  229.707036][T16896] bond3: entered promiscuous mode
[  229.711046][T16896] bond3: entered allmulticast mode
[  229.718026][T16896] 8021q: adding VLAN 0 to HW filter on device bond3
[  229.730857][T16898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.738989][T16898] syzkaller0: entered promiscuous mode
[  229.740876][T16898] syzkaller0: entered allmulticast mode
[  229.763999][T16898] tipc: Resetting bearer <eth:syzkaller0>
[  229.805110][T16897] tipc: Resetting bearer <eth:syzkaller0>
[  229.813229][ T5837] Bluetooth: hci2: link tx timeout
[  229.815715][ T5837] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  229.858862][T16897] tipc: Disabling bearer <eth:syzkaller0>
[  229.895202][T16907] macvlan3: entered allmulticast mode
[  229.897090][T16907] bridge0: entered allmulticast mode
[  229.901424][T16907] bridge0: port 1(macvlan3) entered blocking state
[  229.903894][T16907] bridge0: port 1(macvlan3) entered disabled state
[  229.908161][T16907] bridge0: left allmulticast mode
[  230.126400][T16922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4798'.
[  230.129705][T16922] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4798'.
[  230.132814][T16922] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4798'.
[  230.168053][T16924] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  230.171339][T16924] batadv_slave_0: entered promiscuous mode
[  230.174005][T16924] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  230.177357][T16924] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  230.182197][T16924] hsr1: entered promiscuous mode
[  230.330579][T16936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4805'.
[  231.067410][T16986] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4826'.
[  231.071444][T16986] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4826'.
[  231.170038][T16996] sctp: [Deprecated]: syz.1.4831 (pid 16996) Use of int in maxseg socket option.
[  231.170038][T16996] Use struct sctp_assoc_value instead
[  231.215509][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4834'.
[  231.223896][T17001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4834'.
[  231.226960][T17001] netlink: 'syz.1.4834': attribute type 6 has an invalid length.
[  231.423418][T17023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.450591][T17023] syzkaller0: entered promiscuous mode
[  231.452639][T17023] syzkaller0: entered allmulticast mode
[  231.455489][T17023] tipc: Resetting bearer <eth:syzkaller0>
[  231.489743][ T4941] tipc: Resetting bearer <eth:syzkaller0>
[  231.492910][T17022] tipc: Resetting bearer <eth:syzkaller0>
[  231.874342][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  232.559570][T17022] tipc: Disabling bearer <eth:syzkaller0>
[  232.689902][T17050] 8021q: adding VLAN 0 to HW filter on device bond4
[  232.692368][T17050] bridge0: port 4(bond4) entered blocking state
[  232.703519][T17050] bridge0: port 4(bond4) entered disabled state
[  232.705876][T17050] bond4: entered allmulticast mode
[  232.710033][T17050] bond4: entered promiscuous mode
[  232.713079][T17050] bridge0: port 4(bond4) entered blocking state
[  232.715418][T17050] bridge0: port 4(bond4) entered listening state
[  233.641026][ T4941] bridge0: port 4(bond4) entered disabled state
[  234.116180][T17137] __nla_validate_parse: 2 callbacks suppressed
[  234.116200][T17137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4893'.
[  234.331724][T17153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4901'.
[  234.338127][T17153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4901'.
[  234.343997][T17154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4899'.
[  234.353054][T17154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4899'.
[  234.356713][T17154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4899'.
[  234.362922][T17154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4899'.
[  234.553723][T17171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.557244][T17171] syzkaller0: entered promiscuous mode
[  234.563715][T17171] syzkaller0: entered allmulticast mode
[  234.584422][T17171] tipc: Resetting bearer <eth:syzkaller0>
[  234.591368][T17170] tipc: Resetting bearer <eth:syzkaller0>
[  234.602750][T17170] tipc: Disabling bearer <eth:syzkaller0>
[  235.380084][T17204] rdma_rxe: rxe_newlink: failed to add bond0
[  235.511648][T17216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4931'.
[  235.556141][T17220] netlink: 'syz.0.4933': attribute type 10 has an invalid length.
[  235.599293][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4935'.
[  235.602561][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4935'.
[  235.626024][T17226] pimreg: entered allmulticast mode
[  235.636122][T17226] pimreg: left allmulticast mode
[  236.828773][T17309] sock: sock_timestamping_bind_phc: sock not bind to device
[  237.307018][T17343] bridge0: port 5(vlan3) entered blocking state
[  237.310486][T17343] bridge0: port 5(vlan3) entered disabled state
[  237.314577][T17343] vlan3: entered allmulticast mode
[  237.316845][T17343] bridge0: entered allmulticast mode
[  237.322942][T17343] vlan3: left allmulticast mode
[  237.324705][T17343] bridge0: left allmulticast mode
[  238.769777][T17414] netlink: 'syz.2.5021': attribute type 1 has an invalid length.
[  238.833883][T17420] vlan3: entered allmulticast mode
[  238.906645][T17429] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  238.980200][T17434] syzkaller0: tun_chr_ioctl cmd 1074812118
[  239.310640][T17457] __nla_validate_parse: 11 callbacks suppressed
[  239.310660][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5041'.
[  239.375030][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5042'.
[  239.427324][T17467] netlink: 452 bytes leftover after parsing attributes in process `syz.2.5045'.
[  239.673101][T17482] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.5049'.
[  240.191766][T17495] netlink: 'syz.2.5055': attribute type 12 has an invalid length.
[  240.438295][T17512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5063'.
[  241.167937][T17558] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5080'.
[  241.324960][T17570] team0: left allmulticast mode
[  241.327963][T17570] geneve0: left allmulticast mode
[  241.330391][T17570] team0: left promiscuous mode
[  241.332719][T17570] team_slave_0: left promiscuous mode
[  241.335304][T17570] team_slave_1: left promiscuous mode
[  241.338748][T17570] geneve0: left promiscuous mode
[  241.341310][T17570] bridge0: port 3(team0) entered disabled state
[  241.347263][T17570] bond0: (slave 0!): Releasing backup interface
[  241.355048][T17570] x9`.Ā*|: left promiscuous mode
[  241.358142][T17570] bridge0: port 1(1x9`.Ā*|) entered disabled state
[  241.363253][T17570] bridge_slave_1: left promiscuous mode
[  241.365791][T17570] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.371139][T17570] bond4: left promiscuous mode
[  241.377244][T17570] bond0: (slave bond_slave_0): Releasing backup interface
[  241.382427][T17573] netlink: 'syz.0.5086': attribute type 10 has an invalid length.
[  241.387276][T17570] bond0: (slave bond_slave_1): Releasing backup interface
[  241.396371][T17570] team0: Port device team_slave_0 removed
[  241.401228][T17570] team0: Port device team_slave_1 removed
[  241.411704][T17570] team0: Port device geneve0 removed
[  241.415892][T17570] bond4: left allmulticast mode
[  241.418538][T17570] bridge0: port 4(bond4) entered disabled state
[  241.427313][T17572] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  241.432922][ T5895] syz1: Port: 1 Link DOWN
[  241.432960][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.443423][T17571] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  241.448957][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.452477][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.455841][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  241.510142][T17573] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  241.516223][T17573] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  241.592410][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5089'.
[  243.256493][T17733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5158'.
[  243.308926][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5158'.
[  243.432464][T17762] netlink: 'syz.0.5173': attribute type 21 has an invalid length.
[  243.436478][T17762] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5173'.
[  243.443568][T17762] netlink: 'syz.0.5173': attribute type 4 has an invalid length.
[  243.447991][T17762] netlink: 'syz.0.5173': attribute type 5 has an invalid length.
[  243.487170][T17764] netlink: 'syz.0.5175': attribute type 11 has an invalid length.
[  243.736564][T17787] netlink: 'syz.0.5187': attribute type 1 has an invalid length.
[  243.920961][T17807] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  243.938587][T17807] xfrm0: left promiscuous mode
[  243.944805][T17807] xfrm0: left allmulticast mode
[  244.269295][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  244.271932][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  244.685478][T17800] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  244.801648][T17866] "syz.0.5223" (17866) uses obsolete ecb(arc4) skcipher
[  245.067783][    C1] ==================================================================
[  245.071077][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  245.074275][    C1] Read of size 2 at addr ffff88811ea4f82a by task swapper/1/0
[  245.078179][    C1] 
[  245.079225][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  245.079241][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.079248][    C1] Call Trace:
[  245.079255][    C1]  <IRQ>
[  245.079261][    C1]  dump_stack_lvl+0x189/0x250
[  245.079278][    C1]  ? rcu_is_watching+0x15/0xb0
[  245.079291][    C1]  ? __kasan_check_byte+0x12/0x40
[  245.079307][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.079318][    C1]  ? rcu_is_watching+0x15/0xb0
[  245.079329][    C1]  ? lock_release+0x4b/0x3e0
[  245.079341][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  245.079354][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  245.079368][    C1]  print_report+0xca/0x230
[  245.079384][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.079399][    C1]  kasan_report+0x118/0x150
[  245.079414][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.079431][    C1]  rose_timer_expiry+0x471/0x4b0
[  245.079448][    C1]  call_timer_fn+0x17e/0x5f0
[  245.079458][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.079474][    C1]  ? call_timer_fn+0xbe/0x5f0
[  245.079483][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  245.079496][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.079542][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.079553][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.079568][    C1]  __run_timer_base+0x61a/0x860
[  245.079584][    C1]  ? ktime_get+0x3e/0x1f0
[  245.079601][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  245.079615][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  245.079634][    C1]  run_timer_softirq+0xb7/0x180
[  245.079650][    C1]  handle_softirqs+0x286/0x870
[  245.079664][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  245.079677][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  245.079690][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  245.079707][    C1]  __irq_exit_rcu+0xca/0x1f0
[  245.079718][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  245.079731][    C1]  irq_exit_rcu+0x9/0x30
[  245.079742][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  245.079759][    C1]  </IRQ>
[  245.079763][    C1]  <TASK>
[  245.079768][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  245.079781][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  245.079799][    C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 0d 1b 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  245.079810][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  245.079822][    C1] RAX: 96dd860452c09900 RBX: ffffffff81976a18 RCX: 96dd860452c09900
[  245.079830][    C1] RDX: 0000000000000001 RSI: ffffffff8d999894 RDI: ffffffff8be28d00
[  245.079839][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  245.079848][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1f6f0
[  245.079856][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  245.079865][    C1]  ? do_idle+0x1e8/0x510
[  245.079881][    C1]  default_idle+0x13/0x20
[  245.079893][    C1]  default_idle_call+0x74/0xb0
[  245.079905][    C1]  do_idle+0x1e8/0x510
[  245.079919][    C1]  ? __pfx_do_idle+0x10/0x10
[  245.079930][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.079947][    C1]  cpu_startup_entry+0x44/0x60
[  245.079959][    C1]  start_secondary+0x101/0x110
[  245.079976][    C1]  common_startup_64+0x13e/0x147
[  245.079997][    C1]  </TASK>
[  245.080001][    C1] 
[  245.214181][    C1] Allocated by task 17467:
[  245.216041][    C1]  kasan_save_track+0x3e/0x80
[  245.218034][    C1]  __kasan_kmalloc+0x93/0xb0
[  245.219963][    C1]  __kmalloc_noprof+0x27a/0x4f0
[  245.222010][    C1]  copy_splice_read+0x143/0x9b0
[  245.224062][    C1]  splice_direct_to_actor+0x4d0/0xcc0
[  245.226247][    C1]  do_splice_direct+0x181/0x270
[  245.228293][    C1]  do_sendfile+0x4da/0x7e0
[  245.230163][    C1]  __se_sys_sendfile64+0x13e/0x190
[  245.232099][    C1]  do_syscall_64+0xfa/0x3b0
[  245.233723][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.235984][    C1] 
[  245.236936][    C1] Freed by task 17467:
[  245.238479][    C1]  kasan_save_track+0x3e/0x80
[  245.240263][    C1]  kasan_save_free_info+0x46/0x50
[  245.242170][    C1]  __kasan_slab_free+0x62/0x70
[  245.243978][    C1]  kfree+0x18e/0x440
[  245.245530][    C1]  copy_splice_read+0x881/0x9b0
[  245.247336][    C1]  splice_direct_to_actor+0x4d0/0xcc0
[  245.249314][    C1]  do_splice_direct+0x181/0x270
[  245.250962][    C1]  do_sendfile+0x4da/0x7e0
[  245.252436][    C1]  __se_sys_sendfile64+0x13e/0x190
[  245.254125][    C1]  do_syscall_64+0xfa/0x3b0
[  245.255833][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.258043][    C1] 
[  245.258961][    C1] The buggy address belongs to the object at ffff88811ea4f800
[  245.258961][    C1]  which belongs to the cache kmalloc-512 of size 512
[  245.264062][    C1] The buggy address is located 42 bytes inside of
[  245.264062][    C1]  freed 512-byte region [ffff88811ea4f800, ffff88811ea4fa00)
[  245.269026][    C1] 
[  245.269812][    C1] The buggy address belongs to the physical page:
[  245.271848][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811ea4f400 pfn:0x11ea4c
[  245.275068][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  245.277764][    C1] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  245.280550][    C1] page_type: f5(slab)
[  245.281856][    C1] raw: 057ff00000000240 ffff88801a441c80 ffffea0004790310 ffffea00043d9a10
[  245.284626][    C1] raw: ffff88811ea4f400 000000000010000b 00000000f5000000 0000000000000000
[  245.287327][    C1] head: 057ff00000000240 ffff88801a441c80 ffffea0004790310 ffffea00043d9a10
[  245.290062][    C1] head: ffff88811ea4f400 000000000010000b 00000000f5000000 0000000000000000
[  245.292815][    C1] head: 057ff00000000002 ffffea00047a9301 00000000ffffffff 00000000ffffffff
[  245.295531][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  245.298286][    C1] page dumped because: kasan: bad access detected
[  245.300390][    C1] page_owner tracks the page as allocated
[  245.302228][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 58304177801, free_ts 58287441920
[  245.308881][    C1]  post_alloc_hook+0x240/0x2a0
[  245.310411][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  245.312167][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  245.314055][    C1]  alloc_pages_mpol+0x232/0x4a0
[  245.315657][    C1]  allocate_slab+0x8a/0x3b0
[  245.317143][    C1]  ___slab_alloc+0xbfc/0x1480
[  245.318747][    C1]  __kmalloc_cache_noprof+0x296/0x3d0
[  245.320554][    C1]  binderfs_binder_device_create+0x1eb/0xc40
[  245.322610][    C1]  binderfs_fill_super+0xa0e/0xe90
[  245.324312][    C1]  get_tree_nodev+0xbb/0x150
[  245.325812][    C1]  vfs_get_tree+0x92/0x2b0
[  245.327238][    C1]  do_new_mount+0x24a/0xa40
[  245.328967][    C1]  __se_sys_mount+0x317/0x410
[  245.330591][    C1]  do_syscall_64+0xfa/0x3b0
[  245.332064][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.333938][    C1] page last free pid 5839 tgid 5839 stack trace:
[  245.336007][    C1]  __free_frozen_pages+0xc71/0xe70
[  245.337672][    C1]  stack_depot_save_flags+0x445/0x900
[  245.339378][    C1]  kasan_save_track+0x4f/0x80
[  245.340960][    C1]  __kasan_kmalloc+0x93/0xb0
[  245.342638][    C1]  __kmalloc_node_noprof+0x276/0x4e0
[  245.344322][    C1]  allocate_slab+0x17c/0x3b0
[  245.345814][    C1]  ___slab_alloc+0xbfc/0x1480
[  245.347301][    C1]  kmem_cache_alloc_lru_noprof+0x288/0x3d0
[  245.349459][    C1]  __d_alloc+0x31/0x6f0
[  245.351018][    C1]  d_alloc+0x4b/0x190
[  245.352462][    C1]  lookup_one_qstr_excl_raw+0xc8/0x280
[  245.354692][    C1]  filename_create+0x225/0x470
[  245.356644][    C1]  do_mkdirat+0xa0/0x590
[  245.358390][    C1]  __x64_sys_mkdirat+0x87/0xa0
[  245.360376][    C1]  do_syscall_64+0xfa/0x3b0
[  245.362301][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.364814][    C1] 
[  245.365830][    C1] Memory state around the buggy address:
[  245.368127][    C1]  ffff88811ea4f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  245.371401][    C1]  ffff88811ea4f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  245.374714][    C1] >ffff88811ea4f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.378001][    C1]                                   ^
[  245.380227][    C1]  ffff88811ea4f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.383568][    C1]  ffff88811ea4f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  245.386846][    C1] ==================================================================
[  245.390334][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  245.392812][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller-01993-ge3f96b3556e4-dirty #0 PREEMPT(full) 
[  245.396618][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.400015][    C1] Call Trace:
[  245.401113][    C1]  <IRQ>
[  245.402133][    C1]  dump_stack_lvl+0x99/0x250
[  245.403719][    C1]  ? __asan_memcpy+0x40/0x70
[  245.405205][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.406920][    C1]  ? __pfx__printk+0x10/0x10
[  245.408454][    C1]  panic+0x2db/0x790
[  245.409755][    C1]  ? __pfx_panic+0x10/0x10
[  245.411188][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  245.413061][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  245.415058][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  245.417154][    C1]  ? print_memory_metadata+0x314/0x400
[  245.418948][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.420596][    C1]  check_panic_on_warn+0x89/0xb0
[  245.422201][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.423862][    C1]  end_report+0x78/0x160
[  245.425213][    C1]  kasan_report+0x129/0x150
[  245.426693][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  245.428437][    C1]  rose_timer_expiry+0x471/0x4b0
[  245.430167][    C1]  call_timer_fn+0x17e/0x5f0
[  245.431809][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.433551][    C1]  ? call_timer_fn+0xbe/0x5f0
[  245.435084][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  245.436723][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  245.438590][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.440257][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  245.442012][    C1]  __run_timer_base+0x61a/0x860
[  245.443591][    C1]  ? ktime_get+0x3e/0x1f0
[  245.445080][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  245.446800][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  245.449059][    C1]  run_timer_softirq+0xb7/0x180
[  245.451040][    C1]  handle_softirqs+0x286/0x870
[  245.452999][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  245.454962][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  245.457082][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  245.459016][    C1]  __irq_exit_rcu+0xca/0x1f0
[  245.460719][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  245.462792][    C1]  irq_exit_rcu+0x9/0x30
[  245.464526][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  245.466773][    C1]  </IRQ>
[  245.467974][    C1]  <TASK>
[  245.469160][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  245.471599][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  245.473925][    C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 0d 1b 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  245.480474][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  245.482591][    C1] RAX: 96dd860452c09900 RBX: ffffffff81976a18 RCX: 96dd860452c09900
[  245.485065][    C1] RDX: 0000000000000001 RSI: ffffffff8d999894 RDI: ffffffff8be28d00
[  245.487696][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  245.490242][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1f6f0
[  245.493006][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001e000
[  245.495830][    C1]  ? do_idle+0x1e8/0x510
[  245.497308][    C1]  default_idle+0x13/0x20
[  245.498951][    C1]  default_idle_call+0x74/0xb0
[  245.500575][    C1]  do_idle+0x1e8/0x510
[  245.501986][    C1]  ? __pfx_do_idle+0x10/0x10
[  245.503782][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.505760][    C1]  cpu_startup_entry+0x44/0x60
[  245.507376][    C1]  start_secondary+0x101/0x110
[  245.508973][    C1]  common_startup_64+0x13e/0x147
[  245.510600][    C1]  </TASK>
[  245.512431][    C1] Kernel Offset: disabled
[  245.513854][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:24:09  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000202 RCX=0000000080000000 RDX=0000000000000000
RSI=ffffffff8d9ad1ba RDI=ffffffff8be28d00 RBP=1ffffffff1f44501 RSP=ffffc90003c1f490
R8 =0000000000000000 R9 =ffffffff822adbf5 R10=ffff88801d2e6e70 R11=ffffffff81acfe40
R12=ffff88811e4b8d4c R13=ffffffff822adbf5 R14=ffffffff8e13f0e0 R15=ffff88810909b980
RIP=ffffffff8b6d427c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555571bc8500 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f598fae56c0 CR3=0000000029efe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ffb3e586478 00007ffb3e586450 XMM03=00007ffb3e586488 00007ffb3e586480
XMM04=00007ffb3f0ed100 00007ffb3e586440 XMM05=00007ffb3e586458 00007ffb3e5864a0
XMM06=00007ffb3e586498 00007ffb3e586490 XMM07=00007ffb3e586488 00007ffb3e586480
XMM08=0000000000000000 00007ffb3e411de3 XMM09=0000000000000000 00007ffb3e411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0470
R8 =ffff888107778237 R9 =1ffff11020eef046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99af18c5 R14=ffffffff99df64c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2a24e5 CR3=000000002a244000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f767a011d4f
XMM06=0000000000000000 00007f767a011d49 XMM07=0000000000000000 00007f767a011d5d
XMM08=0000000000000000 00007f767a011de3 XMM09=0000000000000000 00007f767a011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
