last executing test programs:

1.420291247s ago: executing program 1 (id=3655):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000007d000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005ed70000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

1.349563254s ago: executing program 1 (id=3656):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8000000000000000200012800900010069706970000000001000028008000100", @ANYRES32=0x0, @ANYBLOB="040013001400030074756e6c3000"], 0x54}}, 0x1020)

1.349049493s ago: executing program 1 (id=3658):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xb, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.287284252s ago: executing program 0 (id=3660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0010c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000440)="0000e100000000000068", 0xa}], 0x2}, 0x0)

1.286696715s ago: executing program 0 (id=3661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000001c0)=r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

1.060734744s ago: executing program 2 (id=3663):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)

1.060506615s ago: executing program 2 (id=3664):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20)

989.465775ms ago: executing program 2 (id=3665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

144.654752ms ago: executing program 2 (id=3666):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)

130.283829ms ago: executing program 0 (id=3667):
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000800)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24)

70.352496ms ago: executing program 2 (id=3668):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000200)="82f57c000200000000000000000000000004acf3", 0x14}], 0x1}}], 0x1, 0x24004044)

70.15481ms ago: executing program 0 (id=3669):
syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0)

69.827254ms ago: executing program 1 (id=3670):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0xfdef, &(0x7f0000001c00)={@random="bbc5f3bdc430", @empty, @void, {@ipv4={0x3000, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0)

67.564992ms ago: executing program 2 (id=3671):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8}, 0x10)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x2061, 0x0)

2.026999ms ago: executing program 1 (id=3672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0xe}, 0x7, 0x8, 0x5, 0x5, 0x16, 'syz1\x00', "603f6c7964b14eb7d5d48a7dec4f3ff39ae66d885cc68a406ad1ee14ca5733fe", "7af34044f11f0a582145c36f9210f11fdf664063b6cb9cd91b41b287be824f69", [{0x7, 0x1ba7, {0x1, 0x6}}, {0x1, 0x5, {0x3, 0x2}}, {0x5, 0x1}, {0x9, 0x8, {0x2, 0xf}}, {0x10, 0x5, {0x3, 0x1}}, {0x200, 0x4c, {0x1, 0x2000000}}, {0x7, 0x0, {0x1, 0x1}}, {0xf684, 0x9, {0x2, 0x5}}, {0xffff, 0x36, {0x0, 0x9}}, {0x8, 0xa1f1, {0x3, 0xd}}, {0x5, 0x3, {0x3, 0x8}}, {0x9, 0xd, {0x1, 0xe211}}, {0xffff, 0x1ff, {0x2, 0x2}}, {0x5, 0x5, {0x2, 0x8}}, {0x1, 0x100, {0x0, 0x8001}}, {0x2, 0x3, {0x2, 0x2}}, {0xfffa, 0xc2c5, {0x1, 0x5}}, {0x6, 0x8, {0x1, 0xdd0}}, {0x8001, 0x2, {0x2, 0xfffffffd}}, {0x0, 0x0, {0x0, 0x400}}, {0x8, 0x2000, {0x2, 0x3}}, {0xbb, 0x4da, {0x1, 0x9}}, {0xa, 0x5, {0x0, 0x6}}, {0xdf, 0x7, {0x1, 0x800}}, {0x7f99, 0x3, {0x1, 0x9a23}}, {0x6, 0x3, {0x2, 0x2}}, {0xf53b, 0x6, {0x1, 0xf8}}, {0x3, 0x35, {0x1}}, {0x9, 0xc, {0x0, 0xfffffff7}}, {0x4, 0x1, {0x1, 0x9}}, {0x10, 0x9f, {0x3, 0xf6}}, {0x8a, 0xe317, {0x1, 0xe}}, {0x2d5, 0x7, {0x3, 0x3}}, {0x7, 0x8, {0x3, 0xfffffffd}}, {0x1, 0xe7, {0x1, 0x82}}, {0x4, 0x0, {0x1, 0x10}}, {0x9, 0x8, {0x3, 0x2}}, {0x800, 0x3, {0x0, 0x4}}, {0x58, 0xe, {0x2, 0x6}}, {0x3, 0x4, {0x2, 0x1000}}]}}}]}, 0x268}}, 0x4000000)

1.874761ms ago: executing program 0 (id=3673):
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000003780)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x1, 0x4f}], 0x10}}], 0x1, 0x8000)

1.747013ms ago: executing program 1 (id=3674):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0xffffffff, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x1, @private}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}]}, 0x50}}, 0x0)

0s ago: executing program 0 (id=3675):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0xffff, @multicast1}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000003c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64458' (ED25519) to the list of known hosts.
syzkaller login: [   56.073736][ T5832] cgroup: Unknown subsys name 'net'
[   56.167787][ T5832] cgroup: Unknown subsys name 'cpuset'
[   56.172100][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.985818][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.584543][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.588532][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.592658][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.596915][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.600770][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.661713][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.664609][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.668725][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.677712][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.680927][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.733052][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.736578][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.739898][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.746229][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.752409][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.999682][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   63.026968][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   63.138862][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   63.168261][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.172701][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.175817][ T5846] bridge_slave_0: entered allmulticast mode
[   63.179246][ T5846] bridge_slave_0: entered promiscuous mode
[   63.193922][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.196680][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.199707][ T5851] bridge_slave_0: entered allmulticast mode
[   63.204217][ T5851] bridge_slave_0: entered promiscuous mode
[   63.221038][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.224512][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.227645][ T5846] bridge_slave_1: entered allmulticast mode
[   63.233240][ T5846] bridge_slave_1: entered promiscuous mode
[   63.248214][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.250898][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.254959][ T5851] bridge_slave_1: entered allmulticast mode
[   63.258020][ T5851] bridge_slave_1: entered promiscuous mode
[   63.293647][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.328573][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.334555][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.337678][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.340127][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.344043][ T5853] bridge_slave_0: entered allmulticast mode
[   63.346881][ T5853] bridge_slave_0: entered promiscuous mode
[   63.377757][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.383248][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.385959][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.388477][ T5853] bridge_slave_1: entered allmulticast mode
[   63.391902][ T5853] bridge_slave_1: entered promiscuous mode
[   63.395610][ T5846] team0: Port device team_slave_0 added
[   63.423553][ T5846] team0: Port device team_slave_1 added
[   63.426916][ T5851] team0: Port device team_slave_0 added
[   63.448282][ T5851] team0: Port device team_slave_1 added
[   63.454462][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.466849][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.471110][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.474852][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.483941][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.522560][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.525282][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.535240][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.539519][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.543590][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.553211][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.558228][ T5853] team0: Port device team_slave_0 added
[   63.565147][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.567453][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.576209][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.581183][ T5853] team0: Port device team_slave_1 added
[   63.608553][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.611024][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.620030][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.625911][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.628433][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.637677][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.664523][ T5846] hsr_slave_0: entered promiscuous mode
[   63.667394][ T5846] hsr_slave_1: entered promiscuous mode
[   63.709541][ T5851] hsr_slave_0: entered promiscuous mode
[   63.712724][ T5851] hsr_slave_1: entered promiscuous mode
[   63.715204][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   63.717532][ T5851] Cannot create hsr debugfs directory
[   63.754727][ T5853] hsr_slave_0: entered promiscuous mode
[   63.757232][ T5853] hsr_slave_1: entered promiscuous mode
[   63.759371][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   63.761417][ T5853] Cannot create hsr debugfs directory
[   63.984724][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.991939][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.997590][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.010955][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.055836][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.062701][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.069502][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.075767][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.147892][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.153850][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.159464][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.169788][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.237732][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.267157][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   64.278441][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.285325][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.288402][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.307575][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.310625][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.320018][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   64.339028][  T581] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.341596][  T581] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.357885][  T581] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.360528][  T581] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.385714][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.433268][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   64.455004][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.458436][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.477802][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.481054][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.631720][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.680350][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.692015][ T5848] Bluetooth: hci0: command tx timeout
[   64.719861][ T5851] veth0_vlan: entered promiscuous mode
[   64.741115][ T5851] veth1_vlan: entered promiscuous mode
[   64.763817][ T5848] Bluetooth: hci1: command tx timeout
[   64.779757][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.789427][ T5846] veth0_vlan: entered promiscuous mode
[   64.804491][ T5851] veth0_macvtap: entered promiscuous mode
[   64.813053][ T5851] veth1_macvtap: entered promiscuous mode
[   64.823609][ T5846] veth1_vlan: entered promiscuous mode
[   64.838470][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.841906][ T5848] Bluetooth: hci2: command tx timeout
[   64.857403][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.882338][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.886371][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.899612][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.910687][ T5853] veth0_vlan: entered promiscuous mode
[   64.919100][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.931187][ T5846] veth0_macvtap: entered promiscuous mode
[   64.947496][ T5846] veth1_macvtap: entered promiscuous mode
[   64.957415][ T5853] veth1_vlan: entered promiscuous mode
[   65.010679][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.036388][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.040048][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.042803][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.058487][ T5853] veth0_macvtap: entered promiscuous mode
[   65.069131][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.076083][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.097499][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.103081][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.112271][ T5853] veth1_macvtap: entered promiscuous mode
[   65.119639][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.126620][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.178012][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.208980][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.249104][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.257984][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.265143][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.268887][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.290157][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.296282][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.310704][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.383851][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.387308][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.450315][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.458322][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.497518][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.500787][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.622139][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5'.
[   66.254610][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'.
[   66.762181][ T5848] Bluetooth: hci0: command tx timeout
[   66.777089][ T5973] netlink: 'syz.0.22': attribute type 23 has an invalid length.
[   66.841737][ T5848] Bluetooth: hci1: command tx timeout
[   66.874353][ T5981] lo: entered promiscuous mode
[   66.878676][ T5981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   66.922185][ T5848] Bluetooth: hci2: command tx timeout
[   66.954915][ T5985] bridge_slave_0: left allmulticast mode
[   66.957250][ T5985] bridge_slave_0: left promiscuous mode
[   66.960034][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.980639][ T5987] netlink: 264 bytes leftover after parsing attributes in process `syz.0.29'.
[   66.983903][ T5987] netlink: 56 bytes leftover after parsing attributes in process `syz.0.29'.
[   67.000847][ T5985] bridge_slave_1: left allmulticast mode
[   67.006711][ T5985] bridge_slave_1: left promiscuous mode
[   67.008760][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.019463][ T5985] bond0: (slave bond_slave_0): Releasing backup interface
[   67.044830][ T5985] bond0: (slave bond_slave_1): Releasing backup interface
[   67.053671][ T5985] team0: Port device team_slave_0 removed
[   67.060278][ T5985] team0: Port device team_slave_1 removed
[   67.064144][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.066667][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.070405][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.073560][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.077219][ T5985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   67.091844][ T5993] warning: `syz.1.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.236124][ T5999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.317840][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'.
[   67.327353][ T6003] netlink: 1 bytes leftover after parsing attributes in process `syz.0.36'.
[   67.428215][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   67.449835][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   67.461439][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   67.666379][ T6035] Bluetooth: MGMT ver 1.23
[   67.930746][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'.
[   68.103008][ T6079] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET)
[   68.267094][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810afd1400: rx timeout, send abort
[   68.291517][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   68.770393][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810afd1400: abort rx timeout. Force session deactivation
[   68.841840][ T5848] Bluetooth: hci0: command tx timeout
[   68.848840][ T6098] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[   68.921405][ T5848] Bluetooth: hci1: command tx timeout
[   69.002502][ T5848] Bluetooth: hci2: command tx timeout
[   69.240071][ T6119] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   69.244664][ T6119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.660291][ T6137] tipc: Started in network mode
[   69.663280][ T6137] tipc: Node identity 3278de36febc, cluster identity 4711
[   69.665995][ T6137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.669847][ T6137] syzkaller0: entered promiscuous mode
[   69.672537][ T6137] syzkaller0: entered allmulticast mode
[   69.687509][ T6137] tipc: Resetting bearer <eth:syzkaller0>
[   69.693571][ T6136] tipc: Resetting bearer <eth:syzkaller0>
[   69.700160][ T6136] tipc: Disabling bearer <eth:syzkaller0>
[   69.794128][ T6141] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   69.809352][ T6141] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   70.922118][ T5848] Bluetooth: hci0: command tx timeout
[   70.987747][ T6185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.001472][ T5848] Bluetooth: hci1: command tx timeout
[   71.076887][ T6195] __nla_validate_parse: 5 callbacks suppressed
[   71.076897][ T6195] netlink: 676 bytes leftover after parsing attributes in process `syz.0.120'.
[   71.086566][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.089670][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.093483][ T5848] Bluetooth: hci2: command tx timeout
[   71.105094][ T6195] netlink: 676 bytes leftover after parsing attributes in process `syz.0.120'.
[   71.144914][ T6199] Zero length message leads to an empty skb
[   71.169644][ T6201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.170807][ T6199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.222381][ T6204] netlink: 'syz.2.123': attribute type 4 has an invalid length.
[   71.236862][ T6204] netlink: 'syz.2.123': attribute type 4 has an invalid length.
[   71.317790][ T6199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.355878][ T6214] Driver unsupported XDP return value 0 on prog  (id 24) dev N/A, expect packet loss!
[   71.407837][ T6199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.420363][ T6216] netlink: 67 bytes leftover after parsing attributes in process `syz.2.128'.
[   71.540984][ T6199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.628853][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.632822][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.638053][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.649435][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.125068][ T6284] netlink: 76 bytes leftover after parsing attributes in process `syz.2.161'.
[   72.129599][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'.
[   72.135587][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   72.139277][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'.
[   72.144875][ T6284] netlink: 40 bytes leftover after parsing attributes in process `syz.2.161'.
[   72.197793][ T6291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.316994][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'.
[   72.331061][ T6304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.171'.
[   72.339528][ T6307] netlink: 'syz.1.172': attribute type 7 has an invalid length.
[   72.342296][ T6307] netlink: 'syz.1.172': attribute type 8 has an invalid length.
[   72.751089][ T6345] netlink: 'syz.0.190': attribute type 1 has an invalid length.
[   72.754453][ T6345] netlink: 'syz.0.190': attribute type 4 has an invalid length.
[   73.621928][ T6388] netlink: 'syz.2.210': attribute type 1 has an invalid length.
[   73.624763][ T6388] netlink: 'syz.2.210': attribute type 4 has an invalid length.
[   74.640322][ T6444] netlink: 'syz.1.233': attribute type 1 has an invalid length.
[   74.809075][ T6461] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.247711][ T6501] tipc: Started in network mode
[   75.250416][ T6501] tipc: Node identity b2cdab89b985, cluster identity 4711
[   75.256214][ T6501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.269165][ T6501] syzkaller0: entered promiscuous mode
[   75.272864][ T6501] syzkaller0: entered allmulticast mode
[   75.283230][ T6501] tipc: Resetting bearer <eth:syzkaller0>
[   75.287052][ T6500] tipc: Resetting bearer <eth:syzkaller0>
[   75.294042][ T6500] tipc: Disabling bearer <eth:syzkaller0>
[   75.401643][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   75.401860][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout
[   75.766926][ T6533] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   76.054424][ T6555] netlink: 'syz.0.285': attribute type 3 has an invalid length.
[   76.429643][ T6578] __nla_validate_parse: 16 callbacks suppressed
[   76.429653][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   76.485446][ T6581] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.297'.
[   76.557759][ T6590] netlink: 830 bytes leftover after parsing attributes in process `syz.0.300'.
[   76.682067][ T6594] syzkaller1: entered allmulticast mode
[   76.815283][ T6601] openvswitch: netlink: Key type 251 is out of range max 32
[   76.822905][ T6602] openvswitch: netlink: IP tunnel dst address not specified
[   76.977883][ T6614] netlink: 300 bytes leftover after parsing attributes in process `syz.0.312'.
[   77.100711][ T6620] ieee802154 phy0 wpan0: encryption failed: -22
[   77.393127][ T6644] netlink: 108 bytes leftover after parsing attributes in process `syz.0.327'.
[   77.397311][ T6644] netlink: 108 bytes leftover after parsing attributes in process `syz.0.327'.
[   77.664948][ T6663] delete_channel: no stack
[   77.844708][ T6674] netlink: 'syz.0.340': attribute type 12 has an invalid length.
[   77.959409][ T6662] geneve0: entered promiscuous mode
[   78.107126][ T6680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.365512][ T6697] netlink: 256 bytes leftover after parsing attributes in process `syz.1.349'.
[   78.695327][   T33] audit: type=1800 audit(1757519795.989:2): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.349" name="memory.events" dev="tmpfs" ino=628 res=0 errno=0
[   79.070357][ T6729] syzkaller1: entered promiscuous mode
[   79.073276][ T6729] syzkaller1: entered allmulticast mode
[   79.396063][ T6740] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.365'.
[   79.618279][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'.
[   79.827615][ T6771] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.209027][ T6794] netlink: 348 bytes leftover after parsing attributes in process `syz.1.390'.
[   80.220151][ T5857] tipc: Subscription rejected, illegal request
[   80.497994][ T6819] netlink: 'syz.1.402': attribute type 1 has an invalid length.
[   80.537339][ T6823] veth0_to_bridge: entered promiscuous mode
[   80.540919][ T6822] veth0_to_bridge: left promiscuous mode
[   81.655252][ T6904] netlink: 'syz.0.442': attribute type 39 has an invalid length.
[   81.829537][ T6919] __nla_validate_parse: 1 callbacks suppressed
[   81.829553][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[   81.837645][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'.
[   81.846191][ T6919] netlink: 'syz.2.450': attribute type 15 has an invalid length.
[   82.662491][ T6998] netlink: 52 bytes leftover after parsing attributes in process `syz.0.487'.
[   82.990228][ T7027] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   82.995741][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'.
[   82.999069][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'.
[   83.134879][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'.
[   83.141037][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'.
[   83.148564][ T7038] netlink: 'syz.1.504': attribute type 1 has an invalid length.
[   83.153400][ T7038] netlink: 10 bytes leftover after parsing attributes in process `syz.1.504'.
[   83.198849][ T7038] nbd: socks must be embedded in a SOCK_ITEM attr
[   83.201188][ T7038] block nbd0: shutting down sockets
[   83.396145][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.514'.
[   83.413513][   T33] audit: type=1800 audit(1757519800.699:3): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.511" name="memory.events" dev="tmpfs" ino=921 res=0 errno=0
[   83.466578][ T7067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'.
[   83.549733][ T7076] netlink: 'syz.0.523': attribute type 10 has an invalid length.
[   83.554110][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.556944][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.568661][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.571538][ T7076] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.574678][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.577564][ T7076] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.584846][ T7076] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   84.313145][ T7147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.318651][ T7147] syzkaller0: entered promiscuous mode
[   84.320924][ T7147] syzkaller0: entered allmulticast mode
[   84.337598][ T7147] tipc: Resetting bearer <eth:syzkaller0>
[   84.343884][ T7146] tipc: Resetting bearer <eth:syzkaller0>
[   84.367836][ T7146] tipc: Disabling bearer <eth:syzkaller0>
[   84.733773][   T10] hid-generic 0005:8009:5505.0001: unknown main item tag 0x0
[   84.737114][   T10] hid-generic 0005:8009:5505.0001: unbalanced collection at end of report description
[   84.744137][   T10] hid-generic 0005:8009:5505.0001: probe with driver hid-generic failed with error -22
[   85.348146][ T5910] IPVS: starting estimator thread 0...
[   85.431561][ T7200] IPVS: using max 79 ests per chain, 189600 per kthread
[   85.468254][ T7214] netlink: 'syz.2.581': attribute type 1 has an invalid length.
[   85.513231][ T7217] netlink: 'syz.1.583': attribute type 11 has an invalid length.
[   86.421359][ T7280] Unsupported ieee802154 address type: 0
[   86.462946][    T9] cfg80211: failed to load regulatory.db
[   86.507810][ T7284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.514800][ T7284] syzkaller0: entered promiscuous mode
[   86.517141][ T7284] syzkaller0: entered allmulticast mode
[   86.566103][ T7284] tipc: Resetting bearer <eth:syzkaller0>
[   86.589680][ T7283] tipc: Resetting bearer <eth:syzkaller0>
[   86.600373][ T7283] tipc: Disabling bearer <eth:syzkaller0>
[   86.639558][ T7296] netlink: 'syz.2.619': attribute type 6 has an invalid length.
[   86.844091][ T7304] __nla_validate_parse: 9 callbacks suppressed
[   86.844107][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'.
[   86.887249][ T7314] x_tables: ip_tables: udp match: only valid for protocol 17
[   87.107869][ T7325] netlink: 'syz.1.632': attribute type 21 has an invalid length.
[   87.201702][ T7328] syzkaller1: entered allmulticast mode
[   87.330136][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'.
[   87.340327][ T7336] netlink: 'syz.1.637': attribute type 7 has an invalid length.
[   87.349852][ T7336] netlink: 'syz.1.637': attribute type 8 has an invalid length.
[   87.363539][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'.
[   87.369990][ T7336] gretap0: entered promiscuous mode
[   87.373690][ T7336] batadv_slave_1: entered promiscuous mode
[   87.376210][ T7336] erspan0: entered promiscuous mode
[   87.380589][ T7338] sch_tbf: burst 1023 is lower than device lo mtu (65550) !
[   87.984569][ T7383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.656'.
[   88.238991][ T7404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'.
[   88.334146][ T7412] openvswitch: netlink: Duplicate or invalid key (type 0).
[   88.338509][ T7412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.586404][ T7433] netlink: 'syz.1.677': attribute type 3 has an invalid length.
[   88.625079][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'.
[   88.639938][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.680'.
[   88.656498][ T7439] netlink: 92 bytes leftover after parsing attributes in process `syz.1.679'.
[   88.816674][ T7450] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.685'.
[   88.821216][ T7450] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   88.825321][ T7450] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   89.020654][ T7466] netlink: 'syz.0.692': attribute type 2 has an invalid length.
[   89.021771][ T7465] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   89.026731][ T7466] netlink: 'syz.0.692': attribute type 8 has an invalid length.
[   89.031124][ T7466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.692'.
[   89.413762][ T7498] netlink: 'syz.0.708': attribute type 2 has an invalid length.
[   89.466745][ T7504] netlink: 'syz.2.711': attribute type 3 has an invalid length.
[   89.762587][ T7527] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.768095][ T7527] syzkaller0: entered promiscuous mode
[   89.772101][ T7527] syzkaller0: entered allmulticast mode
[   89.777194][ T7524] netlink: 'syz.0.721': attribute type 10 has an invalid length.
[   89.785208][ T7527] tipc: Resetting bearer <eth:syzkaller0>
[   89.790145][ T7525] tipc: Resetting bearer <eth:syzkaller0>
[   89.814310][ T7525] tipc: Disabling bearer <eth:syzkaller0>
[   90.980038][ T7594] netlink: 'syz.0.752': attribute type 1 has an invalid length.
[   90.990213][ T7592] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   91.069389][ T7599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.090607][ T7599] syzkaller0: entered promiscuous mode
[   91.203252][ T7599] syzkaller0: entered allmulticast mode
[   91.213777][ T7602] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   91.255089][ T7599] tipc: Resetting bearer <eth:syzkaller0>
[   91.271817][ T7596] tipc: Resetting bearer <eth:syzkaller0>
[   91.315007][ T7596] tipc: Disabling bearer <eth:syzkaller0>
[   92.030177][ T7643] __nla_validate_parse: 7 callbacks suppressed
[   92.030213][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'.
[   92.476250][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'.
[   92.549642][ T7700] netlink: 240 bytes leftover after parsing attributes in process `syz.0.785'.
[   92.689630][ T7714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.695466][ T7714] syzkaller0: entered promiscuous mode
[   92.697641][ T7714] syzkaller0: entered allmulticast mode
[   92.913452][ T7714] tipc: Resetting bearer <eth:syzkaller0>
[   92.921906][ T7713] tipc: Resetting bearer <eth:syzkaller0>
[   92.940615][ T7713] tipc: Disabling bearer <eth:syzkaller0>
[   92.948879][ T5857] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.956098][ T5857] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.960096][ T5857] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.966477][ T5857] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   93.366234][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'.
[   93.370144][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.811'.
[   93.617199][ T7749] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   93.634399][ T7749] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   93.701089][ T7751] netlink: 'syz.1.818': attribute type 1 has an invalid length.
[   93.825234][ T7754] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[   93.829123][ T7754] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   93.848738][ T7754] bond1: (slave vti0): making interface the new active one
[   93.862639][ T7754] bond1: (slave vti0): Enslaving as an active interface with an up link
[   93.894177][ T7760] bond0: entered promiscuous mode
[   93.897972][ T7760] bond_slave_0: entered promiscuous mode
[   93.900500][ T7760] bond_slave_1: entered promiscuous mode
[   93.909341][ T7760] batadv0: entered promiscuous mode
[   93.920176][ T7760] debugfs: 'hsr1' already exists in 'hsr'
[   93.923133][ T7760] Cannot create hsr debugfs directory
[   93.926195][ T7760] 8021q: adding VLAN 0 to HW filter on device hsr1
[   94.387484][ T7787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.834'.
[   94.505767][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'.
[   94.548892][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'.
[   94.552162][ T7803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'.
[   94.556012][ T7803] netlink: 'syz.0.841': attribute type 4 has an invalid length.
[   94.560222][ T7800] bridge_slave_1: left allmulticast mode
[   94.568698][ T7800] bridge_slave_1: left promiscuous mode
[   94.571231][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.585658][ T7800] bridge_slave_0: left allmulticast mode
[   94.589778][ T7800] bridge_slave_0: left promiscuous mode
[   94.592516][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.799188][ T7817] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.810510][ T7817] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   96.077873][ T7860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.262873][ T7881] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[   96.268952][ T7879] netlink: 'syz.0.873': attribute type 11 has an invalid length.
[   96.281566][ T7879] netlink: 224 bytes leftover after parsing attributes in process `syz.0.873'.
[   96.302438][ T7881] bond1: entered promiscuous mode
[   96.306065][ T7881] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.342602][ T7881] 8021q: adding VLAN 0 to HW filter on device bond1
[   96.345409][ T7881] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.349013][ T7881] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   96.359108][ T7881] bond1: (slave vxcan3): making interface the new active one
[   96.363579][ T7881] vxcan3: entered promiscuous mode
[   96.373029][ T7881] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[   96.593731][ T5857] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.597936][ T5857] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.603766][ T5857] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.611383][ T5857] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.880295][ T7928] netlink: zone id is out of range
[   96.883718][ T7928] netlink: zone id is out of range
[   96.906452][ T7928] netlink: set zone limit has 4 unknown bytes
[   96.947909][ T7934] vlan2: entered allmulticast mode
[   96.950058][ T7934] bridge0: entered allmulticast mode
[   96.961861][ T7934] bridge2: port 1(vlan2) entered blocking state
[   96.964928][ T7934] bridge2: port 1(vlan2) entered disabled state
[   96.969393][ T7934] vlan2: entered promiscuous mode
[   96.970370][ T7928] netlink: del zone limit has 4 unknown bytes
[   96.971815][ T7934] bridge0: entered promiscuous mode
[   96.984753][ T7934] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   97.413101][ T7964] netlink: 'syz.2.912': attribute type 1 has an invalid length.
[   97.468680][ T7968] __nla_validate_parse: 5 callbacks suppressed
[   97.468696][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'.
[   98.074205][ T8007] netlink: 'syz.0.930': attribute type 10 has an invalid length.
[   98.085754][ T8007] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   98.170846][ T8011] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.188423][ T8011] bond_slave_0: entered promiscuous mode
[   98.190831][ T8011] bond_slave_1: entered promiscuous mode
[   98.192950][ T8011] bridge0: entered promiscuous mode
[   98.195108][ T8011] syz_tun: entered promiscuous mode
[   98.200892][ T8011] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   98.208461][ T8011] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0)
[   98.212466][ T8011] bond1: (slave macvlan2): speed changed to 0 on port 1
[   98.217158][ T8011] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   98.292372][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.934'.
[   98.403844][ T8022] netlink: 'syz.0.937': attribute type 10 has an invalid length.
[   98.429585][ T8022] veth0_vlan: left promiscuous mode
[   98.435829][ T8022] veth0_vlan: entered promiscuous mode
[   98.442362][ T8022] team0: Device veth0_vlan failed to register rx_handler
[   98.485489][ T8022] syz.0.937 (8022) used greatest stack depth: 17912 bytes left
[   98.624916][ T8029] netlink: 3 bytes leftover after parsing attributes in process `syz.1.940'.
[   98.630816][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'.
[   98.635285][ T8029] netlink: 3 bytes leftover after parsing attributes in process `syz.1.940'.
[   98.638340][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'.
[   98.642796][ T8029] netlink: 3 bytes leftover after parsing attributes in process `syz.1.940'.
[   98.693335][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'.
[   98.720447][ T8033] 8021q: adding VLAN 0 to HW filter on device bond2
[   98.734564][ T8033] macvlan2: entered promiscuous mode
[   98.736945][ T8033] macvlan2: entered allmulticast mode
[   98.740359][ T8033] bond2: entered promiscuous mode
[   98.745383][ T8033] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   98.751834][ T8033] bond2: left promiscuous mode
[   98.774047][ T8036] netlink: 72 bytes leftover after parsing attributes in process `syz.2.943'.
[   98.780994][ T8036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.943'.
[   98.788833][ T8036] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[   99.018670][ T8055] gretap0: entered promiscuous mode
[   99.023188][ T8055] gretap0: left promiscuous mode
[   99.275268][ T8069] syz_tun: entered allmulticast mode
[   99.424639][ T8068] syz_tun: left allmulticast mode
[   99.790896][   T33] audit: type=1800 audit(1757519817.079:4): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.974" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1590 res=0 errno=0
[   99.800410][   T33] audit: type=1800 audit(1757519817.099:5): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.974" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1590 res=0 errno=0
[  100.314342][ T8157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.355984][ T8162] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  101.804018][ T8268] can: request_module (can-proto-5) failed.
[  102.120506][ T8286] netlink: 'syz.0.1052': attribute type 1 has an invalid length.
[  102.154671][ T8286] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.194943][ T8286] ipvlan2: entered allmulticast mode
[  102.197385][ T8286] bond2: entered allmulticast mode
[  102.208580][ T8295] netlink: 'syz.2.1057': attribute type 12 has an invalid length.
[  102.212415][ T8295] netlink: 'syz.2.1057': attribute type 11 has an invalid length.
[  102.223503][ T8286] bond2: (slave gretap1): making interface the new active one
[  102.227007][ T8286] gretap1: entered allmulticast mode
[  102.231084][ T8286] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  102.474094][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.477097][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.487912][ T8307] bond_slave_0: left promiscuous mode
[  102.489773][ T8307] bond_slave_1: left promiscuous mode
[  102.597114][ T8307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.619451][ T8307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.815277][ T8316] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  102.824720][ T5908] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.833546][ T5908] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.836195][ T5908] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.838803][ T5908] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.949305][ T8347] __nla_validate_parse: 17 callbacks suppressed
[  102.949322][ T8347] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1083'.
[  103.070495][ T8354] sctp: [Deprecated]: syz.2.1085 (pid 8354) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.070495][ T8354] Use struct sctp_sack_info instead
[  103.883762][ T8368] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  103.909818][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1093'.
[  103.964928][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'.
[  103.968969][ T8372] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1094'.
[  104.281372][ T8400] netlink: 'syz.0.1107': attribute type 1 has an invalid length.
[  104.352260][ T8406] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1110'.
[  104.483194][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'.
[  104.684250][ T8421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'.
[  104.697851][ T8423] netlink: 'syz.0.1115': attribute type 10 has an invalid length.
[  104.825548][ T8437] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.035452][ T8460] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1134'.
[  105.219916][ T8478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1144'.
[  105.624956][   T10] hid-generic 0005:0007:5505.0002: unknown main item tag 0x0
[  105.642865][   T10] hid-generic 0005:0007:5505.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  105.716475][ T8530] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  105.800863][ T8535] bond0 (unregistering): left promiscuous mode
[  105.804019][ T8535] bond_slave_0: left promiscuous mode
[  105.806711][ T8535] bond_slave_1: left promiscuous mode
[  105.811154][ T8535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.819834][ T8535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.828029][ T8535] bond0 (unregistering): Released all slaves
[  106.209217][ T8566] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  106.225971][ T8566] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  106.264185][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'.
[  106.385832][ T8586] netlink: 'syz.1.1186': attribute type 11 has an invalid length.
[  106.632490][ T8604] tipc: Failed to remove unknown binding: 66,1,1/0:3185553600/3185553602
[  106.637508][ T8604] tipc: Failed to remove unknown binding: 66,1,1/0:3185553600/3185553602
[  106.660027][ T8605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.665173][ T8605] syzkaller0: entered promiscuous mode
[  106.667454][ T8605] syzkaller0: entered allmulticast mode
[  106.676556][ T8605] tipc: Resetting bearer <eth:syzkaller0>
[  106.693504][ T8602] tipc: Resetting bearer <eth:syzkaller0>
[  106.708941][ T8602] tipc: Disabling bearer <eth:syzkaller0>
[  107.207589][ T8645] netlink: 'syz.1.1215': attribute type 21 has an invalid length.
[  107.230935][ T8645] netlink: 'syz.1.1215': attribute type 21 has an invalid length.
[  107.968149][ T8667] lo: left promiscuous mode
[  107.970237][ T8667] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  107.976022][ T8667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  108.072011][ T8672] netlink: 'syz.1.1228': attribute type 1 has an invalid length.
[  108.075721][ T8672] netlink: 'syz.1.1228': attribute type 1 has an invalid length.
[  108.233261][ T8672] netlink: 'syz.1.1228': attribute type 1 has an invalid length.
[  108.286037][ T8672] 8021q: adding VLAN 0 to HW filter on device bond3
[  108.293605][ T8675] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  108.297326][ T8683] __nla_validate_parse: 4 callbacks suppressed
[  108.297340][ T8683] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1232'.
[  108.304564][ T8675] bond3: (slave wlan0): Enslaving as an active interface with a down link
[  108.345931][ T8672] vlan3: entered allmulticast mode
[  108.348081][ T8672] veth1: entered allmulticast mode
[  108.351943][ T8672] bond3: (slave vlan3): Opening slave failed
[  108.577032][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'.
[  108.706397][ T8698] bridge3: entered promiscuous mode
[  108.708216][ T8698] bridge3: entered allmulticast mode
[  108.712792][ T8698] team0: Port device bridge3 added
[  108.909945][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'.
[  108.969811][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'.
[  109.060716][ T8723] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  109.098539][ T8724] delete_channel: no stack
[  109.288819][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'.
[  109.394581][ T8748] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1261'.
[  109.503321][ T8763] netlink: 716 bytes leftover after parsing attributes in process `syz.2.1268'.
[  109.659206][ T8771] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1267'.
[  109.874223][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'.
[  109.929850][ T8789] batadv_slave_1 (unregistering): left promiscuous mode
[  110.258135][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'.
[  110.340725][ T5857] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.344487][ T5908] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.349286][ T5908] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.356471][ T5908] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.370534][ T8833] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  110.514741][ T8837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.707988][ T8851] bond0: (slave syz_tun): Releasing backup interface
[  110.983893][ T8869] Bluetooth: MGMT ver 1.23
[  111.004127][ T8874] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  111.013121][ T8873] IPVS: stopping backup sync thread 8874 ...
[  111.574729][ T8906] netlink: 'syz.0.1327': attribute type 1 has an invalid length.
[  111.683347][ T8910] netlink: 'syz.0.1329': attribute type 1 has an invalid length.
[  111.749343][ T8910] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  111.757549][ T8910] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  111.795551][ T8912] gretap2: entered promiscuous mode
[  111.800146][ T8912] bond3: (slave gretap2): making interface the new active one
[  111.805379][ T8912] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  112.616219][ T8949] netlink: 'syz.1.1341': attribute type 16 has an invalid length.
[  112.619653][ T8949] netlink: 'syz.1.1341': attribute type 17 has an invalid length.
[  112.689241][ T8949] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.694626][ T8949] 8021q: adding VLAN 0 to HW filter on device team0
[  112.707575][ T8949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.750090][ T8955] vlan2: entered promiscuous mode
[  112.755825][ T8955] macvtap0: entered promiscuous mode
[  113.429639][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.442213][ T8967] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.593178][ T8967] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  113.628187][ T8967] bond1: left promiscuous mode
[  113.629862][ T8967] vxcan3: left promiscuous mode
[  113.636353][ T5857] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.652619][ T5857] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.656058][ T5857] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.659060][ T5857] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.695555][ T8981] sctp: [Deprecated]: syz.0.1358 (pid 8981) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.695555][ T8981] Use struct sctp_sack_info instead
[  114.590888][ T9060] netlink: 'syz.1.1395': attribute type 1 has an invalid length.
[  114.655229][ T9068] __nla_validate_parse: 14 callbacks suppressed
[  114.655240][ T9068] netlink: 57 bytes leftover after parsing attributes in process `syz.0.1399'.
[  114.710076][ T9072] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1400'.
[  115.874532][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'.
[  116.306762][ T9170] 8021q: adding VLAN 0 to HW filter on device bond4
[  116.355547][ T9176] netlink: 'syz.2.1443': attribute type 42 has an invalid length.
[  116.387469][ T9178] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1444'.
[  116.391060][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1444'.
[  116.466967][ T9170] bond4 (unregistering): Released all slaves
[  116.858087][ T9202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1455'.
[  117.276694][ T9212] pim6reg1: entered promiscuous mode
[  117.278571][ T9212] pim6reg1: entered allmulticast mode
[  117.549065][ T9219] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1463'.
[  117.636265][ T5857] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  117.756474][ T9234] netlink: 'syz.1.1468': attribute type 1 has an invalid length.
[  117.782846][ T9234] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.796352][ T9234] bond4: (slave geneve2): making interface the new active one
[  117.800862][ T9234] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  117.805570][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.827427][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.833920][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.837609][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.864554][ T9241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1470'.
[  117.878204][ T9241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1470'.
[  117.984991][ T9249] openvswitch: netlink: Flow actions attr not present in new flow.
[  118.010030][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'.
[  118.382658][ T9264] netlink: 'syz.0.1481': attribute type 1 has an invalid length.
[  118.849058][ T9305] netlink: 'syz.2.1501': attribute type 58 has an invalid length.
[  118.878267][ T9307] netlink: 'syz.1.1502': attribute type 12 has an invalid length.
[  118.943415][ T9314] netlink: 'syz.2.1504': attribute type 15 has an invalid length.
[  119.170345][ T9335] bridge3: entered promiscuous mode
[  119.172729][ T9335] macsec1: entered promiscuous mode
[  119.174536][ T9335] macsec1: entered allmulticast mode
[  119.176314][ T9335] bridge3: entered allmulticast mode
[  119.178945][ T9335] bridge3: port 1(macsec1) entered blocking state
[  119.181488][ T9335] bridge3: port 1(macsec1) entered disabled state
[  119.187657][ T9335] bridge3: left allmulticast mode
[  119.189993][ T9335] bridge3: left promiscuous mode
[  119.485725][ T9368] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  119.688299][ T9384] xt_socket: unknown flags 0x50
[  119.732151][ T9391] __nla_validate_parse: 10 callbacks suppressed
[  119.732163][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1539'.
[  120.064636][ T9430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1554'.
[  120.110979][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'.
[  120.216066][ T9446] netlink: 'syz.2.1561': attribute type 1 has an invalid length.
[  120.222037][ T9446] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1561'.
[  120.243237][ T9447] syzkaller0: entered promiscuous mode
[  120.245565][ T9447] syzkaller0: entered allmulticast mode
[  120.249181][ T5857] syzkaller0: tun_net_xmit 70
[  120.252743][ T9447] syzkaller0: tun_chr_ioctl cmd 1074025677
[  120.255216][ T9447] syzkaller0: Linktype set failed because interface is up
[  120.508628][ T9471] netlink: 'syz.1.1573': attribute type 13 has an invalid length.
[  120.513131][ T9471] netlink: 'syz.1.1573': attribute type 17 has an invalid length.
[  120.551770][ T9471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.774901][ T9475] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  121.446947][   T56] block nbd0: Receive control failed (result -104)
[  121.840431][ T9526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1595'.
[  121.988325][ T9534] netlink: 'syz.1.1598': attribute type 39 has an invalid length.
[  122.075134][ T9540] netlink: 'syz.1.1601': attribute type 4 has an invalid length.
[  122.135934][ T9546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1604'.
[  122.282851][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'.
[  122.329350][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'.
[  122.470737][ T9573] ieee802154 phy0 wpan0: encryption failed: -22
[  122.509481][ T9575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'.
[  122.554921][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'.
[  122.973876][ T9613] sctp: [Deprecated]: syz.1.1631 (pid 9613) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.973876][ T9613] Use struct sctp_sack_info instead
[  122.981140][ T9613] sctp: [Deprecated]: syz.1.1631 (pid 9613) Use of struct sctp_assoc_value in delayed_ack socket option.
[  122.981140][ T9613] Use struct sctp_sack_info instead
[  123.575109][ T9624] netlink: 'syz.0.1633': attribute type 1 has an invalid length.
[  123.588188][ T9624] netlink: 'syz.0.1633': attribute type 1 has an invalid length.
[  123.602952][ T9624] netlink: 'syz.0.1633': attribute type 1 has an invalid length.
[  123.627812][ T9627] netlink: 'syz.1.1634': attribute type 5 has an invalid length.
[  123.637351][ T9627] geneve3: entered promiscuous mode
[  123.639672][ T9627] geneve3: entered allmulticast mode
[  123.664249][   T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  123.675778][   T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  123.680117][   T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  123.687257][   T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  123.779414][ T9640] syzkaller1: entered promiscuous mode
[  123.785994][ T9640] syzkaller1: entered allmulticast mode
[  123.879057][ T9647] netlink: 'syz.1.1639': attribute type 13 has an invalid length.
[  123.973854][ T9640] bond0 (unregistering): Released all slaves
[  124.415704][ T9680] netlink: 'syz.2.1658': attribute type 1 has an invalid length.
[  124.439641][ T9683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.679788][ T9703] syzkaller1: entered promiscuous mode
[  124.682359][ T9703] syzkaller1: entered allmulticast mode
[  124.686703][ T9703] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  124.904675][  T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.907511][  T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.931496][ T9714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.373279][ T9733] _Z`Ԁ@S: entered promiscuous mode
[  125.739396][ T9757] __nla_validate_parse: 8 callbacks suppressed
[  125.739407][ T9757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1694'.
[  125.775204][ T9759] tipc: Can't bind to reserved service type 0
[  125.935761][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'.
[  126.126894][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'.
[  126.258440][ T9795] netlink: 'syz.2.1713': attribute type 58 has an invalid length.
[  126.261959][ T9795] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1713'.
[  126.408136][ T9809] tunl0: Caught tx_queue_len zero misconfig
[  126.533788][ T9821] netlink: 'syz.1.1725': attribute type 4 has an invalid length.
[  126.697383][ T9835] netlink: 'syz.2.1732': attribute type 1 has an invalid length.
[  126.982905][ T9857] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1739'.
[  127.227090][ T9859] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.230511][ T9859] syzkaller0: entered promiscuous mode
[  127.234512][ T9859] syzkaller0: entered allmulticast mode
[  127.250750][ T9859] tipc: Resetting bearer <eth:syzkaller0>
[  127.269164][ T9858] tipc: Resetting bearer <eth:syzkaller0>
[  127.286713][ T9858] tipc: Disabling bearer <eth:syzkaller0>
[  127.424001][ T9879] tipc: Enabling <ib:lo> not permitted
[  127.432292][ T9879] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  127.803560][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1758'.
[  127.848789][ T9912] batman_adv: batadv0: Adding interface: ip6gretap1
[  127.852364][ T9912] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.866803][ T9912] batman_adv: batadv0: Interface activated: ip6gretap1
[  128.263864][ T9949] netlink: 'syz.1.1774': attribute type 1 has an invalid length.
[  128.382964][ T9961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1780'.
[  128.386428][ T9961] ip6tnl0: Caught tx_queue_len zero misconfig
[  128.388622][ T9961] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1780'.
[  128.478465][ T9965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1782'.
[  128.954471][ T9985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'.
[  129.337404][T10019] bridge: RTM_NEWNEIGH with invalid ether address
[  129.604036][T10040] GUP no longer grows the stack in syz.0.1815 (10040): 200000003000-20000000a000 (200000001000)
[  129.608639][T10040] CPU: 0 UID: 0 PID: 10040 Comm: syz.0.1815 Not tainted syzkaller #0 PREEMPT(full) 
[  129.608658][T10040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.608666][T10040] Call Trace:
[  129.608674][T10040]  <TASK>
[  129.608680][T10040]  dump_stack_lvl+0x189/0x250
[  129.608704][T10040]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.608719][T10040]  ? __pfx__printk+0x10/0x10
[  129.608735][T10040]  ? find_vma+0xe7/0x160
[  129.608753][T10040]  ? __lock_acquire+0xab9/0xd20
[  129.608780][T10040]  __get_user_pages+0x24d0/0x2ce0
[  129.608798][T10040]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  129.608835][T10040]  ? rcu_is_watching+0x15/0xb0
[  129.608850][T10040]  __gup_longterm_locked+0xde9/0x1660
[  129.608873][T10040]  ? sanity_check_pinned_pages+0x123a/0x1300
[  129.608894][T10040]  gup_fast_fallback+0x1e6a/0x2010
[  129.608929][T10040]  ? __pfx_gup_fast_fallback+0x10/0x10
[  129.608953][T10040]  ? pin_user_pages_fast+0x4d/0xb0
[  129.608968][T10040]  iov_iter_extract_pages+0x35a/0x5e0
[  129.608990][T10040]  extract_iter_to_sg+0xe46/0x24e0
[  129.609015][T10040]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  129.609041][T10040]  ? __asan_memset+0x22/0x50
[  129.609061][T10040]  af_alg_get_rsgl+0x436/0x810
[  129.609095][T10040]  aead_recvmsg+0x4cc/0x13f0
[  129.609120][T10040]  ? rcu_is_watching+0x15/0xb0
[  129.609139][T10040]  ? __pfx_aead_recvmsg+0x10/0x10
[  129.609158][T10040]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  129.609173][T10040]  ? __pfx_aead_recvmsg+0x10/0x10
[  129.609191][T10040]  sock_recvmsg_nosec+0x186/0x1c0
[  129.609207][T10040]  ____sys_recvmsg+0x3aa/0x460
[  129.609230][T10040]  ? __pfx_____sys_recvmsg+0x10/0x10
[  129.609259][T10040]  ? import_iovec+0x74/0xa0
[  129.609286][T10040]  ___sys_recvmsg+0x1b5/0x510
[  129.609310][T10040]  ? __pfx____sys_recvmsg+0x10/0x10
[  129.609355][T10040]  ? __might_fault+0xb0/0x130
[  129.609379][T10040]  do_recvmmsg+0x307/0x770
[  129.609407][T10040]  ? __pfx_do_recvmmsg+0x10/0x10
[  129.609422][T10040]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  129.609452][T10040]  ? __pfx_do_futex+0x10/0x10
[  129.609479][T10040]  __x64_sys_recvmmsg+0x190/0x240
[  129.609496][T10040]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  129.609510][T10040]  ? rcu_is_watching+0x15/0xb0
[  129.609562][T10040]  ? do_syscall_64+0xbe/0x3b0
[  129.609582][T10040]  do_syscall_64+0xfa/0x3b0
[  129.609598][T10040]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.609613][T10040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.609627][T10040]  ? exc_page_fault+0x9f/0xf0
[  129.609644][T10040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.609657][T10040] RIP: 0033:0x7fe35af8eba9
[  129.609671][T10040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  129.609682][T10040] RSP: 002b:00007fe35bd6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  129.609696][T10040] RAX: ffffffffffffffda RBX: 00007fe35b1d5fa0 RCX: 00007fe35af8eba9
[  129.609705][T10040] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  129.609714][T10040] RBP: 00007fe35b011e19 R08: 0000000000000000 R09: 0000000000000000
[  129.609722][T10040] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  129.609731][T10040] R13: 00007fe35b1d6038 R14: 00007fe35b1d5fa0 R15: 00007ffca1ac2ee8
[  129.609756][T10040]  </TASK>
[  130.245573][T10080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.249191][T10080] syzkaller0: entered promiscuous mode
[  130.258601][T10080] syzkaller0: entered allmulticast mode
[  130.280586][T10080] tipc: Resetting bearer <eth:syzkaller0>
[  130.290730][T10079] tipc: Resetting bearer <eth:syzkaller0>
[  130.302472][T10079] tipc: Disabling bearer <eth:syzkaller0>
[  130.471591][ T5237] Bluetooth: hci2: link tx timeout
[  130.474015][ T5237] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  130.858214][T10102] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  130.865107][T10102] __nla_validate_parse: 8 callbacks suppressed
[  130.865118][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1843'.
[  131.147119][T10127] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1856'.
[  131.267571][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'.
[  131.454067][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'.
[  131.486729][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'.
[  131.664408][T10165] netlink: 'syz.2.1870': attribute type 2 has an invalid length.
[  131.785326][T10176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'.
[  131.860564][T10186] netlink: 'syz.1.1877': attribute type 1 has an invalid length.
[  131.868178][T10186] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1877'.
[  132.038706][T10198] macvlan3: entered allmulticast mode
[  132.040612][T10198] veth1_vlan: entered allmulticast mode
[  132.059485][T10198] veth1_vlan: left allmulticast mode
[  132.088394][T10201] netlink: 'syz.2.1882': attribute type 11 has an invalid length.
[  132.284693][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'.
[  132.524403][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  132.525262][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  133.125813][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'.
[  133.258248][T10257] lo: Caught tx_queue_len zero misconfig
[  133.260676][T10257] sch_tbf: burst 2 is lower than device lo mtu (65503) !
[  133.278673][T10257] sch_tbf: burst 2 is lower than device lo mtu (65503) !
[  133.286025][T10257] sch_tbf: burst 2 is lower than device lo mtu (65503) !
[  133.597154][T10285] xt_l2tp: invalid flags combination: 8
[  133.715855][T10289] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1921'.
[  134.863793][T10368] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  134.866852][   T24] IPVS: starting estimator thread 0...
[  134.868902][T10375] block nbd2: not configured, cannot reconfigure
[  134.951458][T10376] IPVS: using max 79 ests per chain, 189600 per kthread
[  135.293012][T10415] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  136.376209][T10452] netlink: 'syz.2.1989': attribute type 1 has an invalid length.
[  136.400870][T10452] 8021q: adding VLAN 0 to HW filter on device bond3
[  136.868846][T10471] __nla_validate_parse: 1 callbacks suppressed
[  136.868863][T10471] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1992'.
[  137.185958][T10454] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  137.193407][T10454] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  137.227947][T10454] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  137.234904][T10454] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  137.257591][T10454] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  137.267767][T10454] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  137.651204][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2011'.
[  137.976300][T10559] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2018'.
[  138.296513][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'.
[  138.307577][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'.
[  138.610571][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'.
[  138.677277][T10629] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  139.338670][T10677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2072'.
[  139.436306][T10684] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2075'.
[  139.527031][T10692] netlink: 'syz.0.2079': attribute type 1 has an invalid length.
[  139.652882][T10702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2085'.
[  140.098656][T10752] bond0: (slave bridge0): Releasing backup interface
[  140.104325][T10752] bridge_slave_0: left allmulticast mode
[  140.106211][T10752] bridge_slave_0: left promiscuous mode
[  140.108063][T10752] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.117890][T10752] bridge_slave_1: left allmulticast mode
[  140.119892][T10752] bridge_slave_1: left promiscuous mode
[  140.126669][T10752] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.140016][T10752] bond0: (slave bond_slave_0): Releasing backup interface
[  140.145794][T10752] bond0: (slave bond_slave_1): Releasing backup interface
[  140.154416][T10752] team0: Port device team_slave_0 removed
[  140.159998][T10752] team0: Port device team_slave_1 removed
[  140.164904][T10752] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.174765][T10752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.180658][T10752] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  140.215713][T10756] netlink: 'syz.2.2109': attribute type 12 has an invalid length.
[  140.253506][T10758] netlink: 'syz.0.2110': attribute type 2 has an invalid length.
[  140.330974][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2112'.
[  140.748923][T10789] netlink: 'syz.1.2125': attribute type 1 has an invalid length.
[  140.778514][T10793] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  140.782744][T10793] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  140.870275][T10801] netlink: 'syz.1.2128': attribute type 11 has an invalid length.
[  140.876808][T10801] netlink: 'syz.1.2128': attribute type 11 has an invalid length.
[  141.313241][T10837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  141.468092][T10845] netlink: 'syz.1.2145': attribute type 10 has an invalid length.
[  141.559578][T10850] C: renamed from team_slave_0
[  141.568023][T10850] netlink: 'syz.0.2149': attribute type 3 has an invalid length.
[  141.587736][T10850] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  141.937140][T10875] netlink: 'syz.2.2161': attribute type 83 has an invalid length.
[  142.187475][T10895] IPVS: rr: FWM 3 0x00000003 - no destination available
[  142.376291][T10909] __nla_validate_parse: 9 callbacks suppressed
[  142.376305][T10909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2178'.
[  142.509030][T10925] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  142.555752][T10933] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2190'.
[  142.682527][T10948] Bluetooth: hci0: Opcode 0x080f failed: -22
[  143.045028][T10978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2211'.
[  143.047983][T10978] netlink: 'syz.0.2211': attribute type 3 has an invalid length.
[  143.075596][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2214'.
[  143.079022][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2214'.
[  143.174803][T10988] syzkaller0: entered promiscuous mode
[  143.177317][T10988] syzkaller0: entered allmulticast mode
[  144.744982][T11030] netlink: 'syz.2.2236': attribute type 2 has an invalid length.
[  144.772633][ T5848] Bluetooth: hci0: command tx timeout
[  144.778735][T11034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2238'.
[  145.132615][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'.
[  145.208567][T11077] sctp: [Deprecated]: syz.2.2260 (pid 11077) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.208567][T11077] Use struct sctp_sack_info instead
[  145.266776][T11084] syzkaller1: entered promiscuous mode
[  145.268948][T11084] syzkaller1: entered allmulticast mode
[  145.662342][T11118] netlink: 'syz.0.2279': attribute type 2 has an invalid length.
[  145.790218][T11132] tun0: tun_chr_ioctl cmd 1074812118
[  145.800994][T11134] netlink: 'syz.0.2287': attribute type 13 has an invalid length.
[  145.870058][T11137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2288'.
[  145.917357][T11134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.291419][T11165] netlink: 'syz.2.2302': attribute type 32 has an invalid length.
[  146.294775][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2302'.
[  146.298781][T11165] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  146.838796][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2323'.
[  147.091533][T11228] netlink: 'syz.0.2330': attribute type 8 has an invalid length.
[  147.108036][T11234] sctp: [Deprecated]: syz.1.2331 (pid 11234) Use of struct sctp_assoc_value in delayed_ack socket option.
[  147.108036][T11234] Use struct sctp_sack_info instead
[  147.217558][T11245] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  147.303018][T11251] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  148.488793][T11322] __nla_validate_parse: 2 callbacks suppressed
[  148.488808][T11322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2372'.
[  148.763031][T11341] nbd: must specify a size in bytes for the device
[  149.048783][T11372] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  149.156040][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'.
[  149.305487][T11393] netlink: 'syz.0.2405': attribute type 3 has an invalid length.
[  149.308923][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2405'.
[  149.547280][T11411] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  149.552747][T11411] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  149.595930][T11405] netlink: 'syz.0.2408': attribute type 1 has an invalid length.
[  149.599205][T11405] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2408'.
[  149.603275][T11405] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2408'.
[  149.675097][T11418] macsec1: entered promiscuous mode
[  149.677423][T11418] ip6gretap0: entered promiscuous mode
[  149.680378][T11418] macsec1: entered allmulticast mode
[  149.685011][T11418] ip6gretap0: entered allmulticast mode
[  150.261958][T11446] netlink: 'syz.2.2426': attribute type 1 has an invalid length.
[  150.265238][T11446] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2426'.
[  150.566422][T11468] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2436'.
[  151.274650][T11508] netlink: 826 bytes leftover after parsing attributes in process `syz.1.2455'.
[  151.348221][T11512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2457'.
[  151.405139][T11516] netlink: 'syz.1.2460': attribute type 7 has an invalid length.
[  151.411168][T11516] netlink: 'syz.1.2460': attribute type 8 has an invalid length.
[  151.476227][T11524] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2462'.
[  151.566265][T11534] netlink: 'syz.1.2468': attribute type 5 has an invalid length.
[  151.745484][T11552] netlink: 'syz.1.2477': attribute type 29 has an invalid length.
[  151.755637][T11552] netlink: 'syz.1.2477': attribute type 29 has an invalid length.
[  152.185317][T11590] pim6reg1: entered allmulticast mode
[  152.398074][T11610] siw: device registration error -23
[  152.593015][T11618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.599199][T11618] syzkaller0: entered promiscuous mode
[  152.606217][T11618] syzkaller0: entered allmulticast mode
[  152.623545][T11618] tipc: Resetting bearer <eth:syzkaller0>
[  152.627867][T11617] tipc: Resetting bearer <eth:syzkaller0>
[  152.637827][T11617] tipc: Disabling bearer <eth:syzkaller0>
[  153.072604][T11640] netlink: 'syz.2.2516': attribute type 21 has an invalid length.
[  153.100992][T11642] netlink: 'syz.1.2517': attribute type 1 has an invalid length.
[  153.466560][T11677] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  153.470467][T11677] netlink: 'syz.0.2531': attribute type 13 has an invalid length.
[  153.475705][T11677] netlink: 'syz.0.2531': attribute type 17 has an invalid length.
[  153.518001][T11677] bridge0: left promiscuous mode
[  153.528070][T11677] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.535974][T11677] 8021q: adding VLAN 0 to HW filter on device team0
[  153.634018][T11677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.089862][T11721] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  154.155540][T11729] __nla_validate_parse: 12 callbacks suppressed
[  154.155550][T11729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2551'.
[  154.522238][ T5857] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  155.385604][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2568'.
[  155.608578][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'.
[  155.742425][T11800] validate_nla: 1 callbacks suppressed
[  155.742436][T11800] netlink: 'syz.2.2583': attribute type 33 has an invalid length.
[  155.747886][T11800] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2583'.
[  157.182674][T11842] tipc: Started in network mode
[  157.184681][T11842] tipc: Node identity a2eecaa38c1c, cluster identity 4711
[  157.187171][T11842] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.191568][T11842] syzkaller0: entered promiscuous mode
[  157.193805][T11842] syzkaller0: entered allmulticast mode
[  157.199886][T11842] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  157.206182][T11846] netlink: zone id is out of range
[  157.208542][T11846] netlink: zone id is out of range
[  157.216196][T11846] netlink: zone id is out of range
[  157.218349][T11846] netlink: zone id is out of range
[  157.220556][T11846] netlink: zone id is out of range
[  157.222889][T11846] netlink: zone id is out of range
[  157.225015][T11846] netlink: zone id is out of range
[  157.227361][T11846] netlink: zone id is out of range
[  157.594324][T11857] syzkaller0: entered promiscuous mode
[  157.596744][T11857] syzkaller0: entered allmulticast mode
[  157.932972][T11874] netlink: 'syz.0.2614': attribute type 1 has an invalid length.
[  157.941148][T11874] netlink: 'syz.0.2614': attribute type 3 has an invalid length.
[  157.950562][T11874] netlink: 564 bytes leftover after parsing attributes in process `syz.0.2614'.
[  158.195026][ T5910] tipc: Node number set to 787663523
[  158.923776][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  158.986450][T11869] tipc: Resetting bearer <eth:syzkaller0>
[  159.003663][T11841] tipc: Resetting bearer <eth:syzkaller0>
[  159.025348][T11841] tipc: Disabling bearer <eth:syzkaller0>
[  159.031625][T11876] ieee802154 phy0 wpan0: encryption failed: -126
[  159.107501][T11882] net_ratelimit: 13 callbacks suppressed
[  159.107518][T11882] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  159.151730][T11888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.192693][T11888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2621'.
[  159.206007][T11892] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.208570][T11892] syzkaller0: entered promiscuous mode
[  159.212552][T11892] syzkaller0: entered allmulticast mode
[  159.237576][T11892] tipc: Resetting bearer <eth:syzkaller0>
[  159.242961][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.246546][T11892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.252795][T11889] tipc: Resetting bearer <eth:syzkaller0>
[  159.260898][T11897] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2624'.
[  159.266479][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'.
[  159.278426][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2624'.
[  159.302949][T11889] tipc: Disabling bearer <eth:syzkaller0>
[  159.482023][T11904] bridge2: port 1(vlan2) entered disabled state
[  159.504984][T11904] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  159.526116][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'.
[  159.595733][T11904] bridge3: left promiscuous mode
[  159.599820][T11904] bridge3: left allmulticast mode
[  159.620846][T11904] geneve3: left promiscuous mode
[  159.626355][T11904] geneve3: left allmulticast mode
[  159.651413][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.659382][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.669319][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[  159.673232][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.680028][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.692632][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[  159.695904][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.707780][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.710846][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[  159.719295][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.725753][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.729233][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[  159.886610][T11922] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  159.891466][T11927] trusted_key: syz.2.2635 sent an empty control message without MSG_MORE.
[  159.926760][T11925] geneve2: entered promiscuous mode
[  159.928833][T11925] geneve2: entered allmulticast mode
[  159.940505][ T5874] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.953545][ T5874] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  159.966571][ T5874] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.970913][ T5874] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  159.978566][ T5874] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.984925][ T5874] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  159.988097][ T5874] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.992674][ T5874] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  160.026404][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2639'.
[  160.758360][T11975] bridge5: entered promiscuous mode
[  160.804978][T11977] netlink: 'syz.2.2652': attribute type 1 has an invalid length.
[  160.828003][T11977] bond5: (slave vcan1): The slave device specified does not support setting the MAC address
[  160.834443][T11977] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  160.839916][T11977] bond5: (slave vcan1): making interface the new active one
[  160.844069][T11977] bond5: (slave vcan1): Enslaving as an active interface with an up link
[  160.856358][T11977] bond5: (slave vcan2): The slave device specified does not support setting the MAC address
[  160.867211][T11977] bond5: (slave vcan2): Enslaving as a backup interface with an up link
[  160.876297][T11977] 8021q: adding VLAN 0 to HW filter on device bond5
[  161.113299][T12001] macvlan3: entered allmulticast mode
[  161.115324][T12001] veth1_vlan: entered allmulticast mode
[  161.119223][T12001] veth1_vlan: left allmulticast mode
[  161.360753][T12032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.388489][T12032] syzkaller0: entered promiscuous mode
[  161.390376][T12032] syzkaller0: entered allmulticast mode
[  161.393664][T12032] tipc: Resetting bearer <eth:syzkaller0>
[  161.410715][T12031] tipc: Resetting bearer <eth:syzkaller0>
[  161.457521][T12040] netlink: 'syz.2.2683': attribute type 21 has an invalid length.
[  162.380846][T12031] tipc: Disabling bearer <eth:syzkaller0>
[  162.384631][T12040] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2683'.
[  162.570787][T12074] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  162.575615][T12074] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2697'.
[  162.784457][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'.
[  162.818515][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'.
[  162.925109][T12108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.928518][T12108] syzkaller0: entered promiscuous mode
[  162.930918][T12108] syzkaller0: entered allmulticast mode
[  162.945701][T12108] tipc: Resetting bearer <eth:syzkaller0>
[  162.950826][T12107] tipc: Resetting bearer <eth:syzkaller0>
[  162.968859][T12107] tipc: Disabling bearer <eth:syzkaller0>
[  163.051965][T12117] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  163.222420][T12134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.226009][T12134] syzkaller0: entered promiscuous mode
[  163.231412][T12134] syzkaller0: entered allmulticast mode
[  163.251446][T12134] tipc: Resetting bearer <eth:syzkaller0>
[  163.256524][T12133] tipc: Resetting bearer <eth:syzkaller0>
[  163.289368][T12133] tipc: Disabling bearer <eth:syzkaller0>
[  163.800172][T12192] 8021q: adding VLAN 0 to HW filter on device bond6
[  164.267386][T12233] __nla_validate_parse: 5 callbacks suppressed
[  164.267402][T12233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2773'.
[  164.276753][T12233] tc_dump_action: action bad kind
[  164.436075][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2781'.
[  164.440772][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2781'.
[  164.617416][T12274] ip6gretap0: left allmulticast mode
[  164.619765][T12274] ip6gretap0: left promiscuous mode
[  164.816242][T12293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2785'.
[  165.495819][T12333] infiniband syz2: set down
[  165.499494][T12333] infiniband syz2: added ipvlan0
[  165.544352][T12333] RDS/IB: syz2: added
[  165.546711][T12333] smc: adding ib device syz2 with port count 1
[  165.549492][T12333] smc:    ib device syz2 port 1 has no pnetid
[  165.549861][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2791'.
[  165.736261][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'.
[  166.173133][T12389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2817'.
[  166.176180][T12389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2817'.
[  166.260975][T12397] IPVS: Error connecting to the multicast addr
[  166.787893][T12440] batadv1: entered allmulticast mode
[  166.793505][T12440] 8021q: adding VLAN 0 to HW filter on device batadv1
[  166.878072][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2842'.
[  166.917936][T12453] netlink: 'syz.0.2844': attribute type 83 has an invalid length.
[  167.513681][T12497] netlink: 'syz.0.2864': attribute type 1 has an invalid length.
[  167.719854][T12515] netlink: 'syz.0.2872': attribute type 9 has an invalid length.
[  167.725803][T12515] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2872'.
[  167.886062][T12520] netlink: 'syz.0.2873': attribute type 4 has an invalid length.
[  167.892755][T12520] netlink: 'syz.0.2873': attribute type 4 has an invalid length.
[  168.663879][T12584] netlink: 'syz.0.2901': attribute type 5 has an invalid length.
[  168.672777][T12585] netlink: 'syz.2.2895': attribute type 6 has an invalid length.
[  168.966128][T12594] ipvlan2: left allmulticast mode
[  168.968398][T12594] bond2: left allmulticast mode
[  168.970464][T12594] gretap1: left allmulticast mode
[  169.052130][T12594] gretap2: left promiscuous mode
[  169.082516][T12594] geneve2: left promiscuous mode
[  169.084717][T12594] geneve2: left allmulticast mode
[  169.104846][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  169.120668][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  169.133430][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  169.136876][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  169.878397][T12643] __nla_validate_parse: 2 callbacks suppressed
[  169.878408][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2927'.
[  169.917880][T12645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.920774][T12645] syzkaller0: entered promiscuous mode
[  169.923935][T12645] syzkaller0: entered allmulticast mode
[  169.936717][T12649] sctp: [Deprecated]: syz.0.2929 (pid 12649) Use of int in max_burst socket option deprecated.
[  169.936717][T12649] Use struct sctp_assoc_value instead
[  169.959582][T12645] tipc: Resetting bearer <eth:syzkaller0>
[  169.964150][T12644] tipc: Resetting bearer <eth:syzkaller0>
[  169.975806][T12644] tipc: Disabling bearer <eth:syzkaller0>
[  170.054615][T12655] netlink: 'syz.1.2933': attribute type 2 has an invalid length.
[  170.195651][T12657] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  170.417524][T12318] smc: removing ib device syz2
[  170.566056][T12688] IPv6: NLM_F_CREATE should be specified when creating new route
[  170.893512][T12702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2956'.
[  170.896771][T12702] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2956'.
[  170.900481][T12702] netlink: 'syz.0.2956': attribute type 5 has an invalid length.
[  170.922272][T12702] netlink: 'syz.0.2956': attribute type 6 has an invalid length.
[  170.925591][T12702] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2956'.
[  171.206182][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2965'.
[  171.210553][T12720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2965'.
[  171.276802][T12729] geneve4: entered promiscuous mode
[  171.279500][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.288655][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.297751][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.311561][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.867559][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2995'.
[  172.535771][T12828] bond7: entered promiscuous mode
[  172.567970][T12831] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3015'.
[  172.973431][T12867] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3032'.
[  173.070034][T12876] netlink: 'syz.1.3036': attribute type 11 has an invalid length.
[  173.520515][T12901] validate_nla: 1 callbacks suppressed
[  173.520531][T12901] netlink: 'syz.1.3046': attribute type 32 has an invalid length.
[  173.684069][T12905] netlink: 'syz.1.3047': attribute type 1 has an invalid length.
[  173.794893][T12907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3048'.
[  173.978024][T12917] netlink: 'syz.2.3052': attribute type 1 has an invalid length.
[  174.460407][T12943] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  174.746990][T12961] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  174.985198][T12970] __nla_validate_parse: 4 callbacks suppressed
[  174.985209][T12970] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3076'.
[  175.018419][T12970] netlink: 'syz.0.3076': attribute type 2 has an invalid length.
[  175.231569][T12984] openvswitch: netlink: IPv6 tunnel dst address is zero
[  175.273741][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3084'.
[  175.277348][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3084'.
[  175.553093][T13001] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3091'.
[  177.179219][T13060] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3117'.
[  177.236638][T13066] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3118'.
[  177.257451][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'.
[  177.437075][T13084] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  177.927002][T13130] macvtap1: entered promiscuous mode
[  177.928918][T13130] macvtap1: entered allmulticast mode
[  177.931204][T13130] dummy0: entered allmulticast mode
[  177.934758][T13130] dummy0: entered promiscuous mode
[  177.942743][T13130] team0: Device macvtap1 failed to register rx_handler
[  177.951054][T13130] dummy0: left allmulticast mode
[  177.955461][T13130] dummy0: left promiscuous mode
[  178.141418][T13140] nbd2: detected capacity change from 0 to 63
[  178.144316][T13142] block nbd2: NBD_DISCONNECT
[  178.146260][T13142] block nbd2: Disconnected due to user request.
[  178.148413][T13142] block nbd2: shutting down sockets
[  178.184394][ T1118] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  178.187910][ T1118] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.190463][ T1118] Buffer I/O error on dev nbd2, logical block 1, async page read
[  178.190574][T13140] bond8: entered promiscuous mode
[  178.193698][ T1118] Buffer I/O error on dev nbd2, logical block 2, async page read
[  178.195730][T13140] bond8: entered allmulticast mode
[  178.197947][ T1118] Buffer I/O error on dev nbd2, logical block 3, async page read
[  178.201645][T12495] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.206674][T13140] 8021q: adding VLAN 0 to HW filter on device bond8
[  178.206882][T12495] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.213738][T12495] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.217718][T12495] Buffer I/O error on dev nbd2, logical block 1, async page read
[  178.221070][T12495] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.227888][T12495] Buffer I/O error on dev nbd2, logical block 2, async page read
[  178.231553][T12495] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.237689][T12495] Buffer I/O error on dev nbd2, logical block 3, async page read
[  178.240991][T12495] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.247849][T12495] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.251245][T12495] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.255394][T12495] Buffer I/O error on dev nbd2, logical block 1, async page read
[  178.259226][T12495] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.271525][T12495] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.275372][T12495] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.281068][T12495] ldm_validate_partition_table(): Disk read failed.
[  178.297991][T12495] Dev nbd2: unable to read RDB block 0
[  178.307001][T12495]  nbd2: unable to read partition table
[  178.525008][T12495] ldm_validate_partition_table(): Disk read failed.
[  178.544173][T12495] Dev nbd2: unable to read RDB block 0
[  178.548027][T12495]  nbd2: unable to read partition table
[  179.113643][T13205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3184'.
[  179.359464][T13231] sctp: [Deprecated]: syz.0.3198 (pid 13231) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.359464][T13231] Use struct sctp_sack_info instead
[  179.527627][T13245] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  179.581159][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3208'.
[  179.586008][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3208'.
[  179.603571][T13245] nbd1: detected capacity change from 0 to 127
[  179.608747][   T56] block nbd1: Receive control failed (result -32)
[  179.613974][T12495] block nbd1: Dead connection, failed to find a fallback
[  179.618050][T12495] block nbd1: shutting down sockets
[  179.629751][T12495] ldm_validate_partition_table(): Disk read failed.
[  179.635705][T12495] Dev nbd1: unable to read RDB block 0
[  179.639653][T12495]  nbd1: unable to read partition table
[  179.660629][T12495] ldm_validate_partition_table(): Disk read failed.
[  179.664729][T12495] Dev nbd1: unable to read RDB block 0
[  179.667654][T12495]  nbd1: unable to read partition table
[  179.866662][T13280] netlink: 'syz.0.3219': attribute type 21 has an invalid length.
[  179.870027][T13280] netlink: 'syz.0.3219': attribute type 22 has an invalid length.
[  179.874454][T13280] netlink: 'syz.0.3219': attribute type 23 has an invalid length.
[  179.878135][T13280] netlink: 'syz.0.3219': attribute type 25 has an invalid length.
[  180.024493][T13289] netlink: 'syz.0.3222': attribute type 13 has an invalid length.
[  180.029199][T13289] netlink: 'syz.0.3222': attribute type 17 has an invalid length.
[  180.056408][T13289] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.060598][T13289] 8021q: adding VLAN 0 to HW filter on device team0
[  180.067224][T13289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.255501][T13289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.437106][T13309] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.441209][T13309] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  180.762116][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  181.403183][T13362] __nla_validate_parse: 2 callbacks suppressed
[  181.403198][T13362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3257'.
[  181.454017][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3257'.
[  181.541507][T13374] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3262'.
[  182.207150][T13427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.210304][T13427] syzkaller0: entered promiscuous mode
[  182.213658][T13427] syzkaller0: entered allmulticast mode
[  182.252679][T13427] tipc: Resetting bearer <eth:syzkaller0>
[  182.257203][T13425] tipc: Resetting bearer <eth:syzkaller0>
[  182.271255][T13425] tipc: Disabling bearer <eth:syzkaller0>
[  182.446738][T13441] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3288'.
[  182.508052][T13450] Bluetooth: MGMT ver 1.23
[  182.561007][T13457] netlink: 'syz.0.3297': attribute type 1 has an invalid length.
[  182.573458][T13457] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3297'.
[  182.577194][T13457] netlink: 'syz.0.3297': attribute type 1 has an invalid length.
[  182.580811][T13457] netlink: 'syz.0.3297': attribute type 2 has an invalid length.
[  183.338497][T13521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'.
[  183.565139][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3334'.
[  183.677541][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3336'.
[  183.681664][T13542] netlink: 'syz.2.3336': attribute type 7 has an invalid length.
[  183.685307][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3336'.
[  184.157814][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  184.451460][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  184.946140][T13680] validate_nla: 2 callbacks suppressed
[  184.946150][T13680] netlink: 'syz.0.3403': attribute type 4 has an invalid length.
[  185.034310][T13691] IPVS: length: 163 != 8
[  185.116308][T13698] netlink: 'syz.1.3412': attribute type 1 has an invalid length.
[  185.622485][T13724] macsec1: left promiscuous mode
[  185.627243][T13724] macsec1: left allmulticast mode
[  185.631260][T13724] bridge5: left promiscuous mode
[  185.647610][T13724] batadv1: left allmulticast mode
[  185.658925][T13724] bond7: left promiscuous mode
[  185.667144][T13724] bond8: left promiscuous mode
[  185.677074][T13724] bond8: left allmulticast mode
[  186.297694][T13753] lo speed is unknown, defaulting to 1000
[  186.309189][T13753] lo speed is unknown, defaulting to 1000
[  186.312735][T13753] lo speed is unknown, defaulting to 1000
[  186.320914][T13753] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  186.339736][T13753] lo speed is unknown, defaulting to 1000
[  186.343417][T13753] lo speed is unknown, defaulting to 1000
[  186.346565][T13753] lo speed is unknown, defaulting to 1000
[  186.350017][T13753] lo speed is unknown, defaulting to 1000
[  186.796674][T13780] nbd2: detected capacity change from 0 to 127
[  186.804901][   T56] block nbd2: Receive control failed (result -104)
[  186.815178][T13786] netlink: 'syz.2.3448': attribute type 32 has an invalid length.
[  186.818477][T13786] __nla_validate_parse: 3 callbacks suppressed
[  186.818488][T13786] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3448'.
[  187.456643][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3469'.
[  187.460396][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'.
[  187.639843][T13850] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3473'.
[  187.758959][T13859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3477'.
[  187.905086][T13867] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  187.908141][   T24] IPVS: starting estimator thread 0...
[  187.991371][T13875] IPVS: using max 79 ests per chain, 189600 per kthread
[  188.067844][T13888] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  188.092609][T13892] wg1: Caught tx_queue_len zero misconfig
[  188.108250][T13894] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3493'.
[  188.119016][T13894] netlink: 'syz.0.3493': attribute type 1 has an invalid length.
[  188.162703][T13894] 8021q: adding VLAN 0 to HW filter on device bond5
[  188.189429][T13894] bond5: (slave gretap3): making interface the new active one
[  188.196237][T13894] bond5: (slave gretap3): Enslaving as an active interface with an up link
[  188.407704][T13922] netlink: 'syz.0.3506': attribute type 1 has an invalid length.
[  188.600570][T13949] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.645901][T13949] syzkaller0: entered promiscuous mode
[  188.648301][T13949] syzkaller0: entered allmulticast mode
[  188.651217][T13949] tipc: Resetting bearer <eth:syzkaller0>
[  188.657522][T13948] tipc: Resetting bearer <eth:syzkaller0>
[  189.633417][   T24] tipc: Node number set to 189311881
[  189.684143][T13948] tipc: Disabling bearer <eth:syzkaller0>
[  189.690642][T13952] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  189.842709][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'.
[  190.276696][T14007] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  190.324924][T14009] team_slave_1: Caught tx_queue_len zero misconfig
[  190.550192][T14022] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3553'.
[  190.642824][T14026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3555'.
[  190.848277][T14039] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.908851][T14039] 8021q: adding VLAN 0 to HW filter on device team0
[  190.916499][T14039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.093172][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3564'.
[  191.276623][T14061] netlink: 'syz.1.3571': attribute type 3 has an invalid length.
[  191.479894][T14069] netlink: 'syz.2.3570': attribute type 1 has an invalid length.
[  191.598090][T14078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.234826][T14114] __nla_validate_parse: 39 callbacks suppressed
[  192.234839][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3596'.
[  192.240968][T14114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3596'.
[  192.534488][T14135] syz_tun: entered allmulticast mode
[  192.538137][T14134] syz_tun: left allmulticast mode
[  192.603091][T14139] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.3606'.
[  192.839967][T14146] bond0: Device is already in use.
[  192.860346][T14149] syz.2.3610 uses old SIOCAX25GETINFO
[  193.214467][T14183] netlink: 'syz.1.3627': attribute type 1 has an invalid length.
[  193.218217][T14183] netlink: 'syz.1.3627': attribute type 1 has an invalid length.
[  193.532767][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'.
[  193.812518][T14241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3653'.
[  194.093623][T14256] netlink: 'syz.0.3660': attribute type 29 has an invalid length.
[  194.096336][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'.
[  194.163037][T14259] syzkaller0: entered promiscuous mode
[  194.165060][T14259] syzkaller0: entered allmulticast mode
[  194.178668][T14259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.182094][T14258] tipc: Resetting bearer <eth:syzkaller0>
[  194.427542][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3665'.
[  195.215119][T14258] tipc: Disabling bearer <eth:syzkaller0>
[  195.429770][T14290] ==================================================================
[  195.433078][T14290] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  195.436102][T14290] Read of size 4 at addr ffff888020a8f244 by task syz.1.3674/14290
[  195.440273][T14290] 
[  195.441279][T14290] CPU: 0 UID: 0 PID: 14290 Comm: syz.1.3674 Not tainted syzkaller #0 PREEMPT(full) 
[  195.441296][T14290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.441304][T14290] Call Trace:
[  195.441309][T14290]  <TASK>
[  195.441316][T14290]  dump_stack_lvl+0x189/0x250
[  195.441335][T14290]  ? __kasan_check_byte+0x12/0x40
[  195.441355][T14290]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.441368][T14290]  ? lock_release+0x4b/0x3e0
[  195.441388][T14290]  ? __virt_addr_valid+0x4a5/0x5c0
[  195.441404][T14290]  print_report+0xca/0x240
[  195.441416][T14290]  ? xfrm_alloc_spi+0x570/0xf30
[  195.441432][T14290]  kasan_report+0x118/0x150
[  195.441449][T14290]  ? xfrm_alloc_spi+0x570/0xf30
[  195.441467][T14290]  xfrm_alloc_spi+0x570/0xf30
[  195.441482][T14290]  ? xfrm_alloc_spi+0x2a0/0xf30
[  195.441498][T14290]  ? __local_bh_enable_ip+0x132/0x1c0
[  195.441521][T14290]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  195.441541][T14290]  ? xfrm_find_acq+0x87/0xa0
[  195.441558][T14290]  pfkey_getspi+0x7a8/0xee0
[  195.441576][T14290]  pfkey_sendmsg+0xbfe/0x1090
[  195.441589][T14290]  ? trace_sched_exit_tp+0x36/0x110
[  195.441608][T14290]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  195.441629][T14290]  ? aa_sock_msg_perm+0xf1/0x1d0
[  195.441641][T14290]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  195.441654][T14290]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  195.441668][T14290]  __sock_sendmsg+0x21c/0x270
[  195.441687][T14290]  ____sys_sendmsg+0x505/0x830
[  195.441703][T14290]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.441719][T14290]  ? import_iovec+0x74/0xa0
[  195.441734][T14290]  ___sys_sendmsg+0x21f/0x2a0
[  195.441750][T14290]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.441773][T14290]  ? __fget_files+0x2a/0x420
[  195.441784][T14290]  ? __fget_files+0x3a0/0x420
[  195.441797][T14290]  __x64_sys_sendmsg+0x19b/0x260
[  195.441812][T14290]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.441828][T14290]  ? rcu_is_watching+0x15/0xb0
[  195.441842][T14290]  ? do_syscall_64+0xbe/0x3b0
[  195.441858][T14290]  do_syscall_64+0xfa/0x3b0
[  195.441871][T14290]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.441884][T14290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.441896][T14290]  ? exc_page_fault+0x9f/0xf0
[  195.441910][T14290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.441922][T14290] RIP: 0033:0x7f4d93b8eba9
[  195.441934][T14290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.441945][T14290] RSP: 002b:00007f4d9494d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.441987][T14290] RAX: ffffffffffffffda RBX: 00007f4d93dd5fa0 RCX: 00007f4d93b8eba9
[  195.441998][T14290] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  195.442006][T14290] RBP: 00007f4d93c11e19 R08: 0000000000000000 R09: 0000000000000000
[  195.442014][T14290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.442022][T14290] R13: 00007f4d93dd6038 R14: 00007f4d93dd5fa0 R15: 00007ffe53fd9f28
[  195.442037][T14290]  </TASK>
[  195.442042][T14290] 
[  195.558171][T14290] Allocated by task 13958:
[  195.559642][T14290]  kasan_save_track+0x3e/0x80
[  195.561407][T14290]  __kasan_slab_alloc+0x6c/0x80
[  195.563456][T14290]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  195.565644][T14290]  xfrm_state_alloc+0x24/0x2f0
[  195.567313][T14290]  __find_acq_core+0x8a7/0x1c00
[  195.569282][T14290]  xfrm_find_acq+0x78/0xa0
[  195.570894][T14290]  xfrm_alloc_userspi+0x6b3/0xc90
[  195.572908][T14290]  xfrm_user_rcv_msg+0x7a3/0xab0
[  195.574994][T14290]  netlink_rcv_skb+0x208/0x470
[  195.576735][T14290]  xfrm_netlink_rcv+0x79/0x90
[  195.578702][T14290]  netlink_unicast+0x82f/0x9e0
[  195.580436][T14290]  netlink_sendmsg+0x805/0xb30
[  195.582232][T14290]  __sock_sendmsg+0x21c/0x270
[  195.584158][T14290]  ____sys_sendmsg+0x505/0x830
[  195.586072][T14290]  ___sys_sendmsg+0x21f/0x2a0
[  195.587845][T14290]  __x64_sys_sendmsg+0x19b/0x260
[  195.589859][T14290]  do_syscall_64+0xfa/0x3b0
[  195.591725][T14290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.594152][T14290] 
[  195.595154][T14290] Freed by task 24:
[  195.596734][T14290]  kasan_save_track+0x3e/0x80
[  195.598680][T14290]  kasan_save_free_info+0x46/0x50
[  195.600634][T14290]  __kasan_slab_free+0x5b/0x80
[  195.602252][T14290]  kmem_cache_free+0x18f/0x400
[  195.604100][T14290]  xfrm_state_gc_task+0x52d/0x6b0
[  195.606162][T14290]  process_scheduled_works+0xae1/0x17b0
[  195.608301][T14290]  worker_thread+0x8a0/0xda0
[  195.610083][T14290]  kthread+0x711/0x8a0
[  195.611388][T14290]  ret_from_fork+0x3fc/0x770
[  195.613090][T14290]  ret_from_fork_asm+0x1a/0x30
[  195.615026][T14290] 
[  195.616010][T14290] The buggy address belongs to the object at ffff888020a8f180
[  195.616010][T14290]  which belongs to the cache xfrm_state of size 928
[  195.621450][T14290] The buggy address is located 196 bytes inside of
[  195.621450][T14290]  freed 928-byte region [ffff888020a8f180, ffff888020a8f520)
[  195.626927][T14290] 
[  195.627834][T14290] The buggy address belongs to the physical page:
[  195.630004][T14290] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888020a8ed00 pfn:0x20a8c
[  195.633192][T14290] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  195.635995][T14290] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  195.638317][T14290] page_type: f5(slab)
[  195.639586][T14290] raw: 00fff00000000040 ffff88801d3e5280 dead000000000122 0000000000000000
[  195.642646][T14290] raw: ffff888020a8ed00 00000000800e0009 00000000f5000000 0000000000000000
[  195.645929][T14290] head: 00fff00000000040 ffff88801d3e5280 dead000000000122 0000000000000000
[  195.648811][T14290] head: ffff888020a8ed00 00000000800e0009 00000000f5000000 0000000000000000
[  195.652258][T14290] head: 00fff00000000002 ffffea000082a301 00000000ffffffff 00000000ffffffff
[  195.655768][T14290] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  195.659277][T14290] page dumped because: kasan: bad access detected
[  195.661654][T14290] page_owner tracks the page as allocated
[  195.663798][T14290] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10748, tgid 10747 (syz.1.2105), ts 140620925451, free_ts 138159863447
[  195.670443][T14290]  post_alloc_hook+0x240/0x2a0
[  195.672292][T14290]  get_page_from_freelist+0x21e4/0x22c0
[  195.674113][T14290]  __alloc_frozen_pages_noprof+0x181/0x370
[  195.676073][T14290]  alloc_pages_mpol+0x232/0x4a0
[  195.677738][T14290]  allocate_slab+0x8a/0x370
[  195.679275][T14290]  ___slab_alloc+0xbeb/0x1420
[  195.680988][T14290]  kmem_cache_alloc_noprof+0x283/0x3c0
[  195.682671][T14290]  xfrm_state_alloc+0x24/0x2f0
[  195.684262][T14290]  xfrm_state_find+0x37d4/0x5400
[  195.686163][T14290]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  195.688454][T14290]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  195.690288][T14290]  xfrm_lookup_route+0x3c/0x1c0
[  195.692152][T14290]  udp_sendmsg+0x142e/0x2170
[  195.694087][T14290]  __sock_sendmsg+0x19c/0x270
[  195.696027][T14290]  ____sys_sendmsg+0x52d/0x830
[  195.697494][T14290]  ___sys_sendmsg+0x21f/0x2a0
[  195.699049][T14290] page last free pid 10575 tgid 10575 stack trace:
[  195.701199][T14290]  __free_frozen_pages+0xbc4/0xd30
[  195.702893][T14290]  __slab_free+0x303/0x3c0
[  195.704376][T14290]  qlist_free_all+0x97/0x140
[  195.705905][T14290]  kasan_quarantine_reduce+0x148/0x160
[  195.708032][T14290]  __kasan_slab_alloc+0x22/0x80
[  195.710054][T14290]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  195.712442][T14290]  shmem_alloc_inode+0x28/0x40
[  195.714444][T14290]  alloc_inode+0x6a/0x1b0
[  195.716255][T14290]  new_inode+0x22/0x170
[  195.717788][T14290]  shmem_get_inode+0x346/0xe90
[  195.719387][T14290]  shmem_symlink+0xa3/0x510
[  195.720883][T14290]  vfs_symlink+0x143/0x2f0
[  195.722418][T14290]  do_symlinkat+0x1b1/0x3f0
[  195.724250][T14290]  __x64_sys_symlinkat+0x95/0xb0
[  195.726109][T14290]  do_syscall_64+0xfa/0x3b0
[  195.727629][T14290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.730071][T14290] 
[  195.731063][T14290] Memory state around the buggy address:
[  195.733200][T14290]  ffff888020a8f100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  195.736009][T14290]  ffff888020a8f180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.738626][T14290] >ffff888020a8f200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.741254][T14290]                                            ^
[  195.743259][T14290]  ffff888020a8f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.745854][T14290]  ffff888020a8f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.748451][T14290] ==================================================================
[  195.751244][T14290] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  195.753622][T14290] CPU: 0 UID: 0 PID: 14290 Comm: syz.1.3674 Not tainted syzkaller #0 PREEMPT(full) 
[  195.756715][T14290] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.760022][T14290] Call Trace:
[  195.761129][T14290]  <TASK>
[  195.762126][T14290]  dump_stack_lvl+0x99/0x250
[  195.763654][T14290]  ? __asan_memcpy+0x40/0x70
[  195.765228][T14290]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.767371][T14290]  ? __pfx__printk+0x10/0x10
[  195.769095][T14290]  vpanic+0x281/0x750
[  195.770593][T14290]  ? __pfx_vpanic+0x10/0x10
[  195.772119][T14290]  ? irqentry_exit+0x74/0x90
[  195.773704][T14290]  panic+0xb9/0xc0
[  195.775003][T14290]  ? __pfx_panic+0x10/0x10
[  195.776599][T14290]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  195.778626][T14290]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.780798][T14290]  ? xfrm_alloc_spi+0x570/0xf30
[  195.782585][T14290]  check_panic_on_warn+0x89/0xb0
[  195.784276][T14290]  ? xfrm_alloc_spi+0x570/0xf30
[  195.785981][T14290]  end_report+0x78/0x160
[  195.787393][T14290]  kasan_report+0x129/0x150
[  195.788855][T14290]  ? xfrm_alloc_spi+0x570/0xf30
[  195.790408][T14290]  xfrm_alloc_spi+0x570/0xf30
[  195.791902][T14290]  ? xfrm_alloc_spi+0x2a0/0xf30
[  195.793528][T14290]  ? __local_bh_enable_ip+0x132/0x1c0
[  195.795313][T14290]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  195.797089][T14290]  ? xfrm_find_acq+0x87/0xa0
[  195.798617][T14290]  pfkey_getspi+0x7a8/0xee0
[  195.800144][T14290]  pfkey_sendmsg+0xbfe/0x1090
[  195.801644][T14290]  ? trace_sched_exit_tp+0x36/0x110
[  195.803318][T14290]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  195.805023][T14290]  ? aa_sock_msg_perm+0xf1/0x1d0
[  195.806699][T14290]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  195.808466][T14290]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  195.810199][T14290]  __sock_sendmsg+0x21c/0x270
[  195.812044][T14290]  ____sys_sendmsg+0x505/0x830
[  195.813735][T14290]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.815610][T14290]  ? import_iovec+0x74/0xa0
[  195.817122][T14290]  ___sys_sendmsg+0x21f/0x2a0
[  195.818636][T14290]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.820272][T14290]  ? __fget_files+0x2a/0x420
[  195.821981][T14290]  ? __fget_files+0x3a0/0x420
[  195.823696][T14290]  __x64_sys_sendmsg+0x19b/0x260
[  195.825541][T14290]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.827641][T14290]  ? rcu_is_watching+0x15/0xb0
[  195.829400][T14290]  ? do_syscall_64+0xbe/0x3b0
[  195.831100][T14290]  do_syscall_64+0xfa/0x3b0
[  195.832650][T14290]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.834414][T14290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.836463][T14290]  ? exc_page_fault+0x9f/0xf0
[  195.837980][T14290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.840014][T14290] RIP: 0033:0x7f4d93b8eba9
[  195.841823][T14290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.848783][T14290] RSP: 002b:00007f4d9494d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.851512][T14290] RAX: ffffffffffffffda RBX: 00007f4d93dd5fa0 RCX: 00007f4d93b8eba9
[  195.854024][T14290] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[  195.856685][T14290] RBP: 00007f4d93c11e19 R08: 0000000000000000 R09: 0000000000000000
[  195.859566][T14290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  195.862112][T14290] R13: 00007f4d93dd6038 R14: 00007f4d93dd5fa0 R15: 00007ffe53fd9f28
[  195.864850][T14290]  </TASK>
[  195.866790][T14290] Kernel Offset: disabled
[  195.868460][T14290] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:58:32  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000011c7 RDI=00000000000011c8 RBP=00000000000003f8 RSP=ffffc900082ceeb0
R8 =ffff88801f6b8237 R9 =1ffff11003ed7046 R10=dffffc0000000000 R11=ffffffff854f7540
R12=dffffc0000000000 R13=ffffffff99b028ef R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f75bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4d9494d6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000140 CR3=0000000109f54000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4d93da7498 00007f4d93da7470 XMM03=00007f4d93da74a8 00007f4d93da74a0
XMM04=00007f4d9490d100 00007f4d93da7460 XMM05=00007f4d93da7478 00007f4d93da74c0
XMM06=00007f4d93da74b8 00007f4d93da74b0 XMM07=00007f4d93da74a8 00007f4d93da74a0
XMM08=0000000000000000 00007f4d93c12ee7 XMM09=0000000000000000 00007f4d93c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fd577dce6299d900 RBX=ffffffff81969738 RCX=fd577dce6299d900 RDX=0000000000000001
RSI=ffffffff8d9ba1bd RDI=ffffffff8be33e80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8fa39e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7ab3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005618eed167e8 CR3=000000010e826000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
