last executing test programs:

1.0839396s ago: executing program 1 (id=4272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180000000000c000440", @ANYBLOB='FQLk'], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x50)

1.08357694s ago: executing program 1 (id=4273):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"})

1.023399346s ago: executing program 1 (id=4275):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0)

995.256885ms ago: executing program 1 (id=4276):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

892.810125ms ago: executing program 1 (id=4279):
unshare(0x4038c00)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0)
socket$unix(0x1, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x9, 0x1b, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000061d8d837000000002c2c00001811dbf3", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000184900000400000000000000000000001800000007000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000100000000000000000000008520000004"], 0x0, 0x800, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94)
r2 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="320001", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
connect$inet(r5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r6=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000300)={'tunl0\x00', r6, 0x7, 0xa0, 0x2e4, 0x5, {{0x9, 0x4, 0x0, 0x1c, 0x24, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x10, 0xa8, 0x0, 0xd, [0x5, 0xfffffff9, 0xfffffffe]}]}}}}})
sendmmsg$inet(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)="bdce5026d17d126e", 0x8}], 0x1}}], 0x2, 0x2004000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fcdbdf250205dc1f9c573126", @ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x24044000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

761.912687ms ago: executing program 1 (id=4286):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x4, [<r3=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000440)=0x14)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e23, 0xfffffff7, @mcast1, 0x16b}}, 0x1, 0x4fd6, 0x7fffffff, 0x4, 0xc2, 0x6, 0x7}, 0x9c)
shutdown(r2, 0x1)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000600)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
socket$inet(0xa, 0x801, 0x84)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x19, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7, 0x0, 0x7, 0x8, 0xa, 0xc}, @ldst={0x3, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb721704}, @ringbuf_query, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10)
socketpair(0x10, 0x80f, 0x9, &(0x7f0000000000))
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000500)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r8, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0)
close(r9)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r4, 0x0, r7, 0x0, 0x1100000000f336, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040885)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000100)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0)

610.952683ms ago: executing program 2 (id=4293):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4)
recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)

414.132088ms ago: executing program 0 (id=4297):
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a0000000000000008000100"], 0x24}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040030db918bc8ccf0be2dd96793159ba6a59ac3d6bdbeea02dc4f60f807c9b1f96d01fd76e189f2aad75bddc1cb9f51a262dd6585b4d25b1b99de9a1b38b6989dc6"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c)
r6 = socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f25232", 0x77, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x4a, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000200000004000000ffa93f5cf7bf2d0514c0de6e8851e9f0cd90e1ca4f050ff06a8eebb7639dc7b3d8464f36a654c3e8e5c40235c4f2e1dea05fa2b6121be3b92e3147702a2df422977e8c32a92414a745b18963d0aa79533a6c07febed0ea7e5482b33dd26673174572d22660e2d0566a2a341e5e7b8d2490b202f5df9edda70efbc40f849dfb43fb66f5045efb1bd4e3abc8a7d05e2db035387ca32c785ca85ed1ffb787d9f5bc10f3031dff90b33d5e520bc49c8ef70a09eeba6d95956a07c171c83fa16aa79434a54904"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

303.72581ms ago: executing program 2 (id=4298):
unshare(0x22020600)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0)

242.354731ms ago: executing program 0 (id=4299):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0xa, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0x5}], 0x4000000000000bd, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x27)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32=r7], 0x9)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000180)={r7, 0x54e5, 0xd0e6}, 0x8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000680)=r10, 0x4)
sendmsg$inet(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x20000000)

241.603965ms ago: executing program 2 (id=4300):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
close(r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10)
sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

178.516332ms ago: executing program 2 (id=4301):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x5, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x85, &(0x7f0000000100)=""/133, 0x40f00, 0x41}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}, 0x1})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)

138.874773ms ago: executing program 0 (id=4302):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000030000004d6d000000000000", @ANYRES64=0x0, @ANYRES64], 0x48}}, 0x0)

74.146179ms ago: executing program 0 (id=4303):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x0)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)

73.876151ms ago: executing program 2 (id=4304):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x20, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfffffef8, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xb1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004001}, 0x0)

13.802795ms ago: executing program 0 (id=4305):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

13.275934ms ago: executing program 2 (id=4306):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x40000000000, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa}}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)

0s ago: executing program 0 (id=4307):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190043000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)

kernel console output (not intermixed with test programs):

s mode
[   73.613407][ T5916] veth1_macvtap: entered promiscuous mode
[   73.651095][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.668066][ T5916] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.688494][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.693818][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.700565][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.709712][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.719724][ T5911] veth0_vlan: entered promiscuous mode
[   73.732119][ T5910] veth0_macvtap: entered promiscuous mode
[   73.739333][ T5910] veth1_macvtap: entered promiscuous mode
[   73.745270][ T5911] veth1_vlan: entered promiscuous mode
[   73.789554][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.811136][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.835029][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.836187][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.840639][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.851493][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.873902][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.897860][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.902252][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.905255][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.909263][ T5911] veth0_macvtap: entered promiscuous mode
[   73.949387][ T5911] veth1_macvtap: entered promiscuous mode
[   73.992358][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.018700][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.021646][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.030183][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.057589][ T5720] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.083732][ T5720] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.089336][ T5720] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.102048][ T5720] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.132100][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.135056][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.139345][ T5957] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   74.253100][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   74.271054][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.274011][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.346973][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.349872][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.595654][ T5957] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   74.752564][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'.
[   74.869584][   T33] audit: type=1800 audit(1757761421.859:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.41" name="blkio.bfq.time_recursive" dev="tmpfs" ino=44 res=0 errno=0
[   74.922177][ T6011] netlink: 'syz.0.42': attribute type 282 has an invalid length.
[   75.048980][ T5879] Bluetooth: hci0: command tx timeout
[   75.055776][ T5879] Bluetooth: hci1: command tx timeout
[   75.126998][ T5879] Bluetooth: hci2: command tx timeout
[   75.264285][ T6030] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   75.269028][ T6030] netlink: 'syz.1.51': attribute type 4 has an invalid length.
[   75.281847][ T6030] netlink: 188 bytes leftover after parsing attributes in process `syz.1.51'.
[   75.287748][ T5950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   75.290981][ T5950] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   75.303969][ T6030] NCSI netlink: No device for ifindex 3321692160
[   75.423670][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'.
[   75.462359][ T6042] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57'.
[   75.583703][ T6048] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   75.596678][ T6048] netlink: 144 bytes leftover after parsing attributes in process `syz.1.60'.
[   75.599349][ T6048] netlink: 96 bytes leftover after parsing attributes in process `syz.1.60'.
[   75.614607][ T6051] syz.2.61 uses obsolete (PF_INET,SOCK_PACKET)
[   75.916550][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'.
[   76.090059][ T6069] syzkaller1: entered promiscuous mode
[   76.092444][ T6069] syzkaller1: entered allmulticast mode
[   76.175878][ T5957] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   76.630271][ T6093] netlink: 'syz.0.81': attribute type 14 has an invalid length.
[   76.944478][ T6106] netlink: 'syz.2.88': attribute type 3 has an invalid length.
[   76.948369][ T6108] Illegal XDP return value 102301696 on prog  (id 9) dev N/A, expect packet loss!
[   77.131485][ T5879] Bluetooth: hci1: command tx timeout
[   77.131549][ T5236] Bluetooth: hci0: command tx timeout
[   77.208077][ T5236] Bluetooth: hci2: command tx timeout
[   77.313304][ T6128] warning: `syz.0.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.200100][ T6186] Zero length message leads to an empty skb
[   78.490301][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'.
[   78.681023][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'.
[   78.683774][ T6215] netlink: 32 bytes leftover after parsing attributes in process `syz.0.136'.
[   79.137135][ T6243] netlink: 'syz.0.150': attribute type 2 has an invalid length.
[   79.205476][ T5236] Bluetooth: hci1: command tx timeout
[   79.220394][ T5236] Bluetooth: hci0: command tx timeout
[   79.244877][ T6250] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.398637][ T5236] Bluetooth: hci2: command tx timeout
[   79.445662][ T6256] netlink: 'syz.2.155': attribute type 1 has an invalid length.
[   79.455704][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   79.829877][ T6270] __nla_validate_parse: 2 callbacks suppressed
[   79.829892][ T6270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'.
[   80.096097][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'.
[   80.348353][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'.
[   80.399814][ T6308] netlink: 'syz.0.177': attribute type 4 has an invalid length.
[   80.417160][ T6308] netlink: 'syz.0.177': attribute type 4 has an invalid length.
[   81.307959][ T6340] syzkaller1: entered promiscuous mode
[   81.310223][ T6340] syzkaller1: entered allmulticast mode
[   81.363592][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'.
[   81.618231][ T6353] tipc: Started in network mode
[   81.619994][ T6353] tipc: Node identity 56c9ef0f1357, cluster identity 4711
[   81.622802][ T6353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.630694][ T6353] syzkaller0: entered promiscuous mode
[   81.632712][ T6353] syzkaller0: entered allmulticast mode
[   81.661937][ T6353] tipc: Resetting bearer <eth:syzkaller0>
[   81.668458][ T6353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.672013][ T6353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   81.678126][ T6352] tipc: Resetting bearer <eth:syzkaller0>
[   81.688604][ T6352] tipc: Disabling bearer <eth:syzkaller0>
[   81.691115][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[   81.695169][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'.
[   81.874574][ T6361] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.192'.
[   82.200434][ T6379] netlink: zone id is out of range
[   82.203653][ T6379] netlink: zone id is out of range
[   82.210137][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'.
[   82.220601][ T6379] netlink: zone id is out of range
[   82.222653][ T6379] netlink: zone id is out of range
[   82.226145][ T6379] netlink: zone id is out of range
[   82.228144][ T6379] netlink: zone id is out of range
[   82.230588][ T6379] netlink: zone id is out of range
[   82.232818][ T6379] netlink: zone id is out of range
[   82.415286][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'.
[   83.263261][ T6441] ip6gre1: entered allmulticast mode
[   83.438015][ T6453] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.233'.
[   83.715651][ T6476] netlink: 'syz.2.244': attribute type 1 has an invalid length.
[   83.758270][ T6476] nbd: socks must be embedded in a SOCK_ITEM attr
[   83.761850][ T6476] block nbd0: shutting down sockets
[   84.646984][  T794] cfg80211: failed to load regulatory.db
[   85.750361][ T6587] __nla_validate_parse: 10 callbacks suppressed
[   85.750380][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'.
[   86.594888][ T6624] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.021429][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   89.124259][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.327'.
[   90.037152][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.353'.
[   90.444337][ T6779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.367'.
[   90.493938][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'.
[   90.497081][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.523202][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.594471][ T6828] syzkaller1: entered promiscuous mode
[   91.596816][ T6828] syzkaller1: entered allmulticast mode
[   92.958533][ T6889] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.410'.
[   93.218394][ T6896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.222646][ T6896] syzkaller0: entered promiscuous mode
[   93.224892][ T6896] syzkaller0: entered allmulticast mode
[   93.233773][ T6896] tipc: Resetting bearer <eth:syzkaller0>
[   93.241926][ T6895] tipc: Resetting bearer <eth:syzkaller0>
[   93.254599][ T6895] tipc: Disabling bearer <eth:syzkaller0>
[   93.289667][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'.
[   93.610971][ T6919] wg1: entered promiscuous mode
[   93.616641][ T6919] wg1: entered allmulticast mode
[   95.254897][ T6984] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   95.260876][ T6982] IPVS: stopping backup sync thread 6984 ...
[   95.385820][ T6990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.475097][ T7000] netlink: 'syz.0.448': attribute type 62 has an invalid length.
[   95.649156][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'.
[   95.952862][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'.
[   96.999644][ T7059] netlink: 10 bytes leftover after parsing attributes in process `syz.1.474'.
[   97.131091][   T24] IPVS: starting estimator thread 0...
[   97.228170][ T7078] netlink: 'syz.2.481': attribute type 9 has an invalid length.
[   97.236141][ T7068] IPVS: using max 64 ests per chain, 153600 per kthread
[   97.394760][ T7090] netlink: 'syz.0.488': attribute type 1 has an invalid length.
[   97.399107][ T7090] netlink: 224 bytes leftover after parsing attributes in process `syz.0.488'.
[   97.642702][ T7111] syzkaller1: entered promiscuous mode
[   97.644927][ T7111] syzkaller1: entered allmulticast mode
[   97.848520][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'.
[   97.852402][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'.
[   97.858053][ T7127] netlink: 124 bytes leftover after parsing attributes in process `syz.0.506'.
[   98.164893][ T7154] netlink: 48 bytes leftover after parsing attributes in process `syz.1.513'.
[   98.698112][ T7168] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[   98.701359][ T7168] netlink: 'syz.2.519': attribute type 1 has an invalid length.
[   98.704332][ T7168] netlink: 216 bytes leftover after parsing attributes in process `syz.2.519'.
[   99.060639][ T7182] netlink: 'syz.2.526': attribute type 16 has an invalid length.
[   99.063875][ T7182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'.
[  100.250606][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'.
[  100.278230][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'.
[  100.281408][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.540'.
[  100.284217][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'.
[  100.287770][ T7211] netlink: 2 bytes leftover after parsing attributes in process `syz.1.540'.
[  100.292272][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.540'.
[  100.347333][ T7213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.541'.
[  100.397692][ T7218] netlink: 'syz.2.543': attribute type 10 has an invalid length.
[  100.420161][ T7218] batman_adv: batadv0: Adding interface: virt_wifi0
[  100.422931][ T7218] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.432925][ T7218] batman_adv: batadv0: Interface activated: virt_wifi0
[  100.583974][ T7228] netlink: 'syz.2.549': attribute type 1 has an invalid length.
[  100.640987][ T7228] bond1: (slave geneve2): making interface the new active one
[  100.646734][ T7228] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  100.649805][ T5720] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  100.652990][ T5720] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  100.657109][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  100.660369][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  100.683502][ T7228] 8021q: adding VLAN 0 to HW filter on device bond1
[  100.926240][ T7245] tipc: Started in network mode
[  100.932294][ T7245] tipc: Node identity 4, cluster identity 4711
[  100.934783][ T7245] tipc: Node number set to 4
[  101.268460][ T7264] mac80211_hwsim hwsim6 ;: renamed from wlan0
[  102.434329][ T7334] net_ratelimit: 167 callbacks suppressed
[  102.434363][ T7334] openvswitch: netlink: Flow key attr not present in new flow.
[  103.620542][ T7408] netlink: 'syz.1.618': attribute type 2 has an invalid length.
[  103.902461][ T7422] __nla_validate_parse: 10 callbacks suppressed
[  103.902478][ T7422] netlink: 156 bytes leftover after parsing attributes in process `syz.2.624'.
[  104.371063][ T7449] netlink: 2308 bytes leftover after parsing attributes in process `syz.1.635'.
[  104.374642][ T7449] netlink: 'syz.1.635': attribute type 1 has an invalid length.
[  104.382125][ T7449] netlink: 'syz.1.635': attribute type 5 has an invalid length.
[  104.384642][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  104.646046][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  105.442048][ T7514] netlink: 32 bytes leftover after parsing attributes in process `syz.1.667'.
[  106.154937][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'.
[  107.727275][ T7602] tipc: Started in network mode
[  107.729219][ T7602] tipc: Node identity 5ec94c80485d, cluster identity 4711
[  107.732328][ T7602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.736699][ T7602] syzkaller0: entered promiscuous mode
[  107.738889][ T7602] syzkaller0: entered allmulticast mode
[  107.752694][ T7602] tipc: Resetting bearer <eth:syzkaller0>
[  107.760461][ T7600] tipc: Resetting bearer <eth:syzkaller0>
[  107.798833][ T7600] tipc: Disabling bearer <eth:syzkaller0>
[  108.228364][ T7631] netlink: 3 bytes leftover after parsing attributes in process `syz.0.716'.
[  108.379614][ T7631] batadv1: entered promiscuous mode
[  108.381773][ T7631] batadv1: entered allmulticast mode
[  108.480190][ T7640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.718'.
[  109.622443][ T7690] Bluetooth: MGMT ver 1.23
[  109.808146][ T7700] wg1: entered promiscuous mode
[  109.809766][ T7700] wg1: entered allmulticast mode
[  110.652839][ T7713] netlink: 'syz.0.746': attribute type 1 has an invalid length.
[  110.658427][ T7713] netlink: 'syz.0.746': attribute type 2 has an invalid length.
[  110.667359][ T7713] netlink: 'syz.0.746': attribute type 1 has an invalid length.
[  110.669787][ T7713] netlink: 'syz.0.746': attribute type 2 has an invalid length.
[  110.863440][ T7734] netlink: 'syz.0.756': attribute type 1 has an invalid length.
[  111.767419][ T5879] Bluetooth: hci2: command 0x0405 tx timeout
[  111.968759][ T7769] netlink: 277 bytes leftover after parsing attributes in process `syz.0.767'.
[  111.987393][ T7768] bridge: RTM_NEWNEIGH with invalid ether address
[  112.266986][ T7784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.273841][ T7778] syzkaller0: entered promiscuous mode
[  112.278163][ T7778] syzkaller0: entered allmulticast mode
[  112.404921][ T7778] tipc: Resetting bearer <eth:syzkaller0>
[  112.423966][ T7775] tipc: Resetting bearer <eth:syzkaller0>
[  112.442521][ T7775] tipc: Disabling bearer <eth:syzkaller0>
[  112.449134][ T7790] netlink: 'syz.0.777': attribute type 6 has an invalid length.
[  112.550469][ T7794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.779'.
[  112.631090][ T7801] netlink: 28 bytes leftover after parsing attributes in process `syz.1.782'.
[  112.634516][ T7801] netlink: 'syz.1.782': attribute type 7 has an invalid length.
[  112.646160][ T7801] netlink: 'syz.1.782': attribute type 8 has an invalid length.
[  112.649111][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'.
[  112.764525][ T7811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'.
[  112.769397][ T7811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'.
[  113.198167][   T12] nci: nci_rx_work: unknown MT 0x1
[  114.063684][ T7853] netlink: 'syz.1.802': attribute type 10 has an invalid length.
[  114.079427][ T7853] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  114.172907][ T7861] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  114.214355][ T7862] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  114.369881][ T7875] netlink: 104 bytes leftover after parsing attributes in process `syz.0.812'.
[  114.492285][ T7889] netlink: 'syz.2.814': attribute type 4 has an invalid length.
[  114.711914][ T7903] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.824'.
[  114.951904][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'.
[  115.207914][ T7931] syzkaller1: tun_chr_ioctl cmd 2147767520
[  115.508908][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.840'.
[  116.161181][ T7964] validate_nla: 2 callbacks suppressed
[  116.161215][ T7964] netlink: 'syz.1.845': attribute type 1 has an invalid length.
[  117.200196][ T8002] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20002
[  117.407966][ T8014] netlink: 'syz.1.867': attribute type 21 has an invalid length.
[  117.411077][ T8014] __nla_validate_parse: 2 callbacks suppressed
[  117.411093][ T8014] netlink: 128 bytes leftover after parsing attributes in process `syz.1.867'.
[  117.421622][ T8014] netlink: 'syz.1.867': attribute type 5 has an invalid length.
[  117.424656][ T8014] netlink: 'syz.1.867': attribute type 6 has an invalid length.
[  117.433525][ T8014] netlink: 3 bytes leftover after parsing attributes in process `syz.1.867'.
[  117.636566][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'.
[  117.665075][ T8038] sctp: [Deprecated]: syz.2.876 (pid 8038) Use of int in maxseg socket option.
[  117.665075][ T8038] Use struct sctp_assoc_value instead
[  117.683651][ T8040] openvswitch: netlink: EtherType 50a is less than min 600
[  117.786991][ T8051] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.803849][ T8051] syzkaller0: entered promiscuous mode
[  117.806483][ T8051] syzkaller0: entered allmulticast mode
[  117.842137][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'.
[  117.880062][ T8051] tipc: Resetting bearer <eth:syzkaller0>
[  117.887561][ T8050] tipc: Resetting bearer <eth:syzkaller0>
[  117.919936][ T8050] tipc: Disabling bearer <eth:syzkaller0>
[  118.607783][ T8111] netlink: 'syz.1.909': attribute type 1 has an invalid length.
[  118.610387][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'.
[  118.726755][ T8120] netlink: 'syz.0.913': attribute type 2 has an invalid length.
[  118.981971][ T8129] netlink: 'syz.0.917': attribute type 5 has an invalid length.
[  119.660299][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'.
[  119.663638][ T8173] netlink: 120 bytes leftover after parsing attributes in process `syz.2.939'.
[  119.679181][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'.
[  119.741634][ T8181] netlink: 132 bytes leftover after parsing attributes in process `syz.0.942'.
[  119.752288][ T8179] tipc: Enabled bearer <udp:syz2>, priority 10
[  120.053118][ T8205] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  120.102462][ T8205] 8021q: adding VLAN 0 to HW filter on device bond1
[  120.126960][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'.
[  120.725718][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  120.757691][ T5972] tipc: Node number set to 1168043791
[  121.741513][ T8265] netlink: 'syz.2.981': attribute type 3 has an invalid length.
[  122.513954][ T8287] mac80211_hwsim hwsim2 6: renamed from wlan0
[  122.539487][ T8287] Bluetooth: MGMT ver 1.23
[  122.723387][ T8293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.737729][ T8293] syzkaller0: entered promiscuous mode
[  122.748365][ T8293] syzkaller0: entered allmulticast mode
[  122.778463][ T8293] tipc: Resetting bearer <eth:syzkaller0>
[  122.782607][ T8292] tipc: Resetting bearer <eth:syzkaller0>
[  122.812876][ T8292] tipc: Disabling bearer <eth:syzkaller0>
[  122.896652][ T8305] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  122.984898][ T8312] __nla_validate_parse: 2 callbacks suppressed
[  122.984921][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'.
[  122.991738][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'.
[  123.950988][ T8373] netlink: 'syz.2.1032': attribute type 12 has an invalid length.
[  123.953951][ T8373] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1032'.
[  124.642750][ T8400] netdevsim netdevsim2 : renamed from netdevsim0 (while UP)
[  124.814682][ T8410] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  124.949877][ T8416] ip6tnl2: entered promiscuous mode
[  124.951798][ T8416] ip6tnl2: entered allmulticast mode
[  124.954602][ T8416] team0: Device ip6tnl2 is of different type
[  125.441244][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1067'.
[  125.445798][ T8452] netlink: 'syz.2.1066': attribute type 1 has an invalid length.
[  125.449652][ T8452] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1066'.
[  125.453412][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'.
[  125.552283][ T8460] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.621538][ T8466] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.1074'.
[  125.762630][ T8474] tc_dump_action: action bad kind
[  125.973631][ T8492] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  125.978837][ T8492] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  126.145212][ T8504] netlink: 'syz.2.1091': attribute type 8 has an invalid length.
[  126.309623][ T8511] dvmrp8: entered allmulticast mode
[  126.640419][ T8525] netlink: 'syz.1.1099': attribute type 1 has an invalid length.
[  126.642916][ T8525] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1099'.
[  126.691973][ T8531] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  126.703475][ T8531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.748286][ T8533] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1102'.
[  126.751950][ T8533] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  126.882639][ T8543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1106'.
[  126.898727][ T8543] geneve3: entered promiscuous mode
[  127.112719][ T8562] sctp: [Deprecated]: syz.0.1116 (pid 8562) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.112719][ T8562] Use struct sctp_sack_info instead
[  127.199916][ T8568] netlink: 'syz.2.1120': attribute type 11 has an invalid length.
[  127.536701][ T8605] netlink: zone id is out of range
[  127.539415][ T8605] netlink: zone id is out of range
[  127.542868][ T8605] netlink: zone id is out of range
[  127.545195][ T8605] netlink: zone id is out of range
[  127.620503][ T8605] netlink: set zone limit has 4 unknown bytes
[  127.629790][ T8609] netlink: del zone limit has 4 unknown bytes
[  127.926435][ T5879] Bluetooth: hci2: command 0x0405 tx timeout
[  128.182772][ T8646] __nla_validate_parse: 2 callbacks suppressed
[  128.182794][ T8646] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1151'.
[  128.282440][ T8650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.367930][ T8654] erspan0: entered promiscuous mode
[  128.378784][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'.
[  128.933085][ T8688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'.
[  128.974841][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.993791][ T8688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.708614][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'.
[  130.714533][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'.
[  130.992650][ T8784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.001912][ T8784] syzkaller0: entered promiscuous mode
[  131.004101][ T8784] syzkaller0: entered allmulticast mode
[  131.020379][ T8784] tipc: Resetting bearer <eth:syzkaller0>
[  131.028033][ T8782] tipc: Resetting bearer <eth:syzkaller0>
[  131.040300][ T8782] tipc: Disabling bearer <eth:syzkaller0>
[  131.130906][ T8792] tipc: Cannot configure node identity twice
[  131.185836][ T5958] IPVS: starting estimator thread 0...
[  131.297934][ T8797] IPVS: using max 64 ests per chain, 153600 per kthread
[  131.469723][ T8814] netlink: 'syz.2.1216': attribute type 1 has an invalid length.
[  131.472453][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'.
[  131.647858][ T8821] netlink: 'syz.2.1219': attribute type 9 has an invalid length.
[  131.744238][ T8826] netlink: 'syz.0.1221': attribute type 2 has an invalid length.
[  131.755774][ T8828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'.
[  131.997422][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1230'.
[  132.031605][ T8847] atomic_op ffff88811b781198 conn xmit_atomic 0000000000000000
[  132.336936][ T8865] netlink: 'syz.1.1238': attribute type 11 has an invalid length.
[  132.340098][ T8865] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1238'.
[  132.809170][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.811522][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.939511][ T8901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1253'.
[  133.224138][ T8923] netlink: 'syz.2.1264': attribute type 13 has an invalid length.
[  133.228415][ T8923] netlink: 'syz.2.1264': attribute type 17 has an invalid length.
[  133.308254][ T8923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.482891][ T8923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.838181][ T8955] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1277'.
[  133.843794][ T8955] netlink: zone id is out of range
[  133.848347][ T8955] netlink: zone id is out of range
[  133.850511][ T8955] netlink: zone id is out of range
[  133.852461][ T8955] netlink: zone id is out of range
[  133.854329][ T8955] netlink: zone id is out of range
[  133.857504][ T8955] netlink: zone id is out of range
[  133.860122][ T8955] netlink: zone id is out of range
[  133.871059][ T8955] netlink: zone id is out of range
[  133.873153][ T8955] netlink: zone id is out of range
[  134.172632][ T8978] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1288'.
[  134.330633][ T8992] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1294'.
[  134.453277][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'.
[  134.653562][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'.
[  134.714327][   T12] syzkaller0: tun_net_xmit 76
[  134.718858][   T12] syzkaller0: tun_net_xmit 48
[  134.723441][ T9011] syzkaller0: tun_net_xmit 120
[  134.725204][ T9011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.737557][ T5937] syzkaller0: tun_net_xmit 76
[  134.832266][ T9008] tipc: Resetting bearer <eth:syzkaller0>
[  136.005786][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  136.367259][ T9008] tipc: Disabling bearer <eth:syzkaller0>
[  137.087876][ T9075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1328'.
[  137.182211][ T9083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.186935][ T9083] syzkaller0: entered promiscuous mode
[  137.189148][ T9083] syzkaller0: entered allmulticast mode
[  137.231827][ T9083] tipc: Resetting bearer <eth:syzkaller0>
[  137.247233][ T9082] tipc: Resetting bearer <eth:syzkaller0>
[  137.279759][ T9082] tipc: Disabling bearer <eth:syzkaller0>
[  137.287802][ T9091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1335'.
[  137.291713][ T9091] netem: unknown loss type 12
[  137.293549][ T9091] netem: change failed
[  137.717971][ T9115] netlink: 'syz.2.1347': attribute type 1 has an invalid length.
[  137.753062][ T9119] netlink: 'syz.0.1349': attribute type 10 has an invalid length.
[  137.861340][ T9125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1352'.
[  137.950570][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1353'.
[  138.174351][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'.
[  138.179281][ T9128] veth1_macvtap: left promiscuous mode
[  138.378777][ T9135] syzkaller0: entered promiscuous mode
[  138.381552][ T9135] syzkaller0: entered allmulticast mode
[  139.199396][ T9143] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1356'.
[  139.203007][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  139.210094][ T9143] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1356'.
[  139.224484][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  139.232441][ T9143] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1356'.
[  140.128604][ T9104] net_ratelimit: 5 callbacks suppressed
[  140.128621][ T9104] Set syz1 is full, maxelem 65536 reached
[  140.866117][ T9154] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1361'.
[  141.199758][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'.
[  141.510875][ T9178] raw_sendmsg: syz.2.1371 forgot to set AF_INET. Fix it!
[  141.580205][ T9182] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1372'.
[  141.584143][ T9182] netlink: zone id is out of range
[  141.593426][ T9182] netlink: get zone limit has 8 unknown bytes
[  141.971936][ T9204] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1382'.
[  142.764420][ T9218] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.769173][ T9218] syzkaller0: entered promiscuous mode
[  142.771532][ T9218] syzkaller0: entered allmulticast mode
[  142.792343][ T9218] tipc: Resetting bearer <eth:syzkaller0>
[  142.799239][ T9217] tipc: Resetting bearer <eth:syzkaller0>
[  142.810504][ T9217] tipc: Disabling bearer <eth:syzkaller0>
[  143.131260][ T9240] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1399'.
[  143.561915][ T9265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.565554][ T9265] syzkaller0: entered promiscuous mode
[  143.567780][ T9265] syzkaller0: entered allmulticast mode
[  143.581823][ T9265] tipc: Resetting bearer <eth:syzkaller0>
[  143.586801][ T9264] tipc: Resetting bearer <eth:syzkaller0>
[  143.596100][ T9264] tipc: Disabling bearer <eth:syzkaller0>
[  143.980276][ T9297] netlink: 'syz.2.1425': attribute type 1 has an invalid length.
[  143.983769][ T9297] netlink: 'syz.2.1425': attribute type 2 has an invalid length.
[  144.282383][ T9308] hsr_slave_0: left promiscuous mode
[  144.291203][ T9308] hsr_slave_1: left promiscuous mode
[  144.650753][ T9328] netlink: 'syz.2.1438': attribute type 1 has an invalid length.
[  144.695202][ T9332] __nla_validate_parse: 3 callbacks suppressed
[  144.695222][ T9332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1440'.
[  144.702057][ T9332] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1440'.
[  144.880194][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1445'.
[  144.942970][ T9354] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  145.837369][ T9425] netlink: 'syz.0.1481': attribute type 10 has an invalid length.
[  145.840505][ T9425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1481'.
[  145.844080][ T9425] dummy0: entered promiscuous mode
[  145.850074][ T9425] bridge0: port 3(dummy0) entered blocking state
[  145.852804][ T9425] bridge0: port 3(dummy0) entered disabled state
[  145.856108][ T9425] dummy0: entered allmulticast mode
[  145.861741][ T9425] bridge0: port 3(dummy0) entered blocking state
[  145.865723][ T9425] bridge0: port 3(dummy0) entered forwarding state
[  145.931984][ T9429] vcan0: tx drop: invalid da for name 0x0000000000000003
[  146.187580][ T9441] tap0: tun_chr_ioctl cmd 1074025681
[  146.506180][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1500'.
[  146.516561][ T9466] vlan0: entered promiscuous mode
[  146.539504][ T9469] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1502'.
[  146.606933][ T5950] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96
[  146.761665][ T9479] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1507'.
[  146.765154][ T9479] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1507'.
[  146.809058][ T9477] netlink: 'syz.1.1506': attribute type 1 has an invalid length.
[  147.274815][ T9524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'.
[  148.151093][ T9605] openvswitch: netlink: Key type 29 is not supported
[  148.297822][ T9616] netlink: 'syz.0.1573': attribute type 4 has an invalid length.
[  148.479100][ T9626] netlink: 'syz.0.1577': attribute type 3 has an invalid length.
[  148.482404][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  148.980715][ T9651] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  149.010215][ T5937] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  149.726817][ T9673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.760518][ T9676] IPv6: NLM_F_CREATE should be specified when creating new route
[  150.015718][ T5937] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  150.192246][ T9698] 8021q: adding VLAN 0 to HW filter on device bond2
[  150.196438][ T9698] bond0: (slave bond2): Enslaving as an active interface with an up link
[  150.267267][ T9709] netlink: 'syz.2.1613': attribute type 1 has an invalid length.
[  150.270065][ T9709] __nla_validate_parse: 2 callbacks suppressed
[  150.270080][ T9709] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1613'.
[  150.277576][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1613'.
[  150.442104][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'.
[  150.445692][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'.
[  150.448731][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'.
[  150.819670][ T9749] netlink: 'syz.2.1631': attribute type 2 has an invalid length.
[  150.978051][ T9756] syzkaller0: entered promiscuous mode
[  150.979791][ T9756] syzkaller0: entered allmulticast mode
[  152.560560][ T9782] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  152.675937][ T9778] nbd1: detected capacity change from 0 to 127
[  152.680630][   T56] block nbd1: Receive control failed (result -32)
[  153.343131][ T9846] netlink: 'syz.2.1671': attribute type 13 has an invalid length.
[  153.352570][ T9846] netlink: 'syz.2.1671': attribute type 17 has an invalid length.
[  153.368056][ T9846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.592004][ T9867] x_tables: ip_tables: udp match: only valid for protocol 17
[  153.913752][ T9881] netlink: 'syz.2.1689': attribute type 10 has an invalid length.
[  153.933067][ T9881] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  154.114468][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'.
[  154.122214][ T9887] netlink: 'syz.2.1692': attribute type 30 has an invalid length.
[  154.141776][ T5720] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0
[  154.145243][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'.
[  154.148336][ T5720] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.151761][ T9887] netlink: 'syz.2.1692': attribute type 30 has an invalid length.
[  154.154732][ T5720] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.159420][ T5720] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.358951][ T9894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.426866][ T9894] syzkaller0: entered promiscuous mode
[  154.429227][ T9894] syzkaller0: entered allmulticast mode
[  154.432457][ T9894] tipc: Resetting bearer <eth:syzkaller0>
[  154.454390][ T9893] tipc: Resetting bearer <eth:syzkaller0>
[  154.520142][ T9901] ieee802154 phy0 wpan0: encryption failed: -22
[  155.179834][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'.
[  155.791192][ T9922] netlink: 'syz.1.1704': attribute type 2 has an invalid length.
[  156.010514][ T9929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1707'.
[  156.616420][ T9893] tipc: Disabling bearer <eth:syzkaller0>
[  156.635264][ T9916] erspan0: left promiscuous mode
[  156.659323][ T9916] bridge0: port 3(dummy0) entered disabled state
[  156.661616][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.664635][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.738769][ T9916] wg1: left promiscuous mode
[  156.740650][ T9916] wg1: left allmulticast mode
[  156.794588][ T9916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.812226][ T9916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.888158][ T9919] hsr_slave_0: left promiscuous mode
[  156.890727][ T9919] hsr_slave_1: left promiscuous mode
[  156.909052][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.914798][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.920814][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.924360][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.114796][ T9950] smc: net device bond0 applied user defined pnetid SYZ0
[  157.119807][ T9950] smc: net device bond0 erased user defined pnetid SYZ0
[  157.143831][ T9952] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1718'.
[  157.176831][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1719'.
[  157.179947][ T9954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1719'.
[  157.188373][ T9954] bridge0: port 3(macvlan1) entered blocking state
[  157.191091][ T9954] bridge0: port 3(macvlan1) entered disabled state
[  157.193622][ T9954] macvlan1: entered allmulticast mode
[  157.199757][ T9954] veth1_vlan: entered allmulticast mode
[  157.203133][ T9954] macvlan1: entered promiscuous mode
[  157.206470][ T9954] bridge0: port 3(macvlan1) entered blocking state
[  157.209095][ T9954] bridge0: port 3(macvlan1) entered forwarding state
[  157.212695][ T9954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1719'.
[  157.262107][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1722'.
[  157.342883][ T9970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.484489][ T9984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.569792][T10058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1767'.
[  158.776291][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'.
[  158.819195][T10078] netlink: 364 bytes leftover after parsing attributes in process `syz.1.1776'.
[  158.824781][T10078] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  158.855832][T10076] netlink: 'syz.0.1775': attribute type 10 has an invalid length.
[  158.861686][T10076] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  158.882179][T10076] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  159.060414][T10087] netlink: 'syz.0.1778': attribute type 29 has an invalid length.
[  159.190533][T10097] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1784'.
[  159.361009][T10099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.372088][T10099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.379407][T10099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  159.500727][T10099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.504993][T10099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.510341][T10099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  159.599748][T10099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.604055][T10099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.608467][T10099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  159.680339][T10099] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.684452][T10099] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.690292][T10099] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  159.785280][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.788605][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  159.794267][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  159.820735][ T5921] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.834507][ T5921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  159.838601][ T5921] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  159.874637][ T5921] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.878221][ T5921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  159.880946][ T5921] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  159.883561][ T5921] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.887062][ T5921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  159.889948][ T5921] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  160.266541][T10146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.270011][T10146] syzkaller0: entered promiscuous mode
[  160.274189][T10146] syzkaller0: entered allmulticast mode
[  160.299492][T10146] tipc: Resetting bearer <eth:syzkaller0>
[  160.311397][T10145] tipc: Resetting bearer <eth:syzkaller0>
[  160.331510][T10145] tipc: Disabling bearer <eth:syzkaller0>
[  161.258434][T10189] netlink: 'syz.0.1825': attribute type 4 has an invalid length.
[  161.404904][T10195] syzkaller0: entered promiscuous mode
[  161.408011][T10195] syzkaller0: entered allmulticast mode
[  161.425631][T10195] __nla_validate_parse: 4 callbacks suppressed
[  161.425643][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1828'.
[  161.531300][T10205] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1833'.
[  161.547693][T10207] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.1834'.
[  161.622590][T10215] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1838'.
[  163.700392][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1866'.
[  163.964811][T10284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.968569][T10284] syzkaller0: entered promiscuous mode
[  163.970680][T10284] syzkaller0: entered allmulticast mode
[  163.990133][T10284] tipc: Resetting bearer <eth:syzkaller0>
[  163.994566][T10283] tipc: Resetting bearer <eth:syzkaller0>
[  164.008567][T10283] tipc: Disabling bearer <eth:syzkaller0>
[  164.448041][T10295] netlink: 'syz.1.1874': attribute type 2 has an invalid length.
[  164.451189][T10295] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1874'.
[  164.965128][T10304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.969262][T10304] syzkaller0: entered promiscuous mode
[  164.971730][T10304] syzkaller0: entered allmulticast mode
[  164.991694][T10304] tipc: Resetting bearer <eth:syzkaller0>
[  164.998003][T10303] tipc: Resetting bearer <eth:syzkaller0>
[  165.012583][T10303] tipc: Disabling bearer <eth:syzkaller0>
[  165.233357][T10312] netlink: 'syz.0.1882': attribute type 1 has an invalid length.
[  165.303739][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1881'.
[  165.411163][T10319] lo: entered promiscuous mode
[  165.413385][T10319] tunl0: entered promiscuous mode
[  165.425727][T10319] gre0: entered promiscuous mode
[  165.434485][T10319] gretap0: entered promiscuous mode
[  165.437222][T10319] erspan0: entered promiscuous mode
[  165.442916][T10319] ip_vti0: entered promiscuous mode
[  165.449759][T10319] ip6_vti0: entered promiscuous mode
[  165.452210][T10319] sit0: entered promiscuous mode
[  165.454412][T10319] ip6tnl0: entered promiscuous mode
[  165.473524][T10319] ip6gre0: entered promiscuous mode
[  165.476926][T10319] syz_tun: entered promiscuous mode
[  165.485628][T10319] ip6gretap0: entered promiscuous mode
[  165.488125][T10319] bridge0: entered promiscuous mode
[  165.490495][T10319] vcan0: entered promiscuous mode
[  165.492850][T10319] bond0: entered promiscuous mode
[  165.504553][T10319] bond_slave_0: entered promiscuous mode
[  165.512608][T10319] bond_slave_1: entered promiscuous mode
[  165.515254][T10319] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  165.523588][T10319] team0: entered promiscuous mode
[  165.525940][T10319] team_slave_0: entered promiscuous mode
[  165.528514][T10319] team_slave_1: entered promiscuous mode
[  165.531872][T10319] nlmon0: entered promiscuous mode
[  165.534210][T10319] caif0: entered promiscuous mode
[  165.536817][T10319] batadv0: entered promiscuous mode
[  165.539124][T10319] vxcan0: entered promiscuous mode
[  165.541455][T10319] vxcan1: entered promiscuous mode
[  165.543713][T10319] veth0: entered promiscuous mode
[  165.546293][T10319] veth1: entered promiscuous mode
[  165.548486][T10319] wg0: entered promiscuous mode
[  165.550627][T10319] wg1: entered promiscuous mode
[  165.552745][T10319] wg2: entered promiscuous mode
[  165.555034][T10319] veth0_to_bridge: entered promiscuous mode
[  165.557981][T10319] veth1_to_bridge: entered promiscuous mode
[  165.560678][T10319] veth0_to_bond: entered promiscuous mode
[  165.563303][T10319] veth1_to_bond: entered promiscuous mode
[  165.566275][T10319] veth0_to_team: entered promiscuous mode
[  165.569115][T10319] veth1_to_team: entered promiscuous mode
[  165.571700][T10319] veth0_to_batadv: entered promiscuous mode
[  165.574265][T10319] batadv_slave_0: entered promiscuous mode
[  165.577698][T10319] veth1_to_batadv: entered promiscuous mode
[  165.580476][T10319] batadv_slave_1: entered promiscuous mode
[  165.583029][T10319] xfrm0: entered promiscuous mode
[  165.585281][T10319] veth0_to_hsr: entered promiscuous mode
[  165.588021][T10319] hsr_slave_0: entered promiscuous mode
[  165.590589][T10319] veth1_to_hsr: entered promiscuous mode
[  165.592990][T10319] hsr_slave_1: entered promiscuous mode
[  165.595558][T10319] veth1_virt_wifi: entered promiscuous mode
[  165.598140][T10319] veth0_virt_wifi: entered promiscuous mode
[  165.600804][T10319] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  165.604089][T10319] vlan0: entered promiscuous mode
[  165.606590][T10319] vlan1: entered promiscuous mode
[  165.608995][T10319] macvlan0: entered promiscuous mode
[  165.611486][T10319] macvlan1: entered promiscuous mode
[  165.613833][T10319] ipvlan0: entered promiscuous mode
[  165.616228][T10319] ipvlan1: entered promiscuous mode
[  165.618719][T10319] macvtap0: entered promiscuous mode
[  165.621015][T10319] macsec0: entered promiscuous mode
[  165.623369][T10319] geneve0: entered promiscuous mode
[  165.625820][T10319] geneve1: entered promiscuous mode
[  165.627989][T10319] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  165.631045][T10319] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  165.634458][T10319] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  165.637685][T10319] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  165.640829][T10319] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  165.643745][T10319] gretap1: entered promiscuous mode
[  165.646188][T10319] macsec0.2: entered promiscuous mode
[  165.648689][T10319] wlan0.3: entered promiscuous mode
[  165.651099][T10319] gre1: entered promiscuous mode
[  165.653236][T10319] vlan2: entered promiscuous mode
[  165.655686][T10319] bridge1: entered promiscuous mode
[  165.658042][T10319] vxcan2: entered promiscuous mode
[  165.660237][T10319] vxcan3: entered promiscuous mode
[  165.662383][T10319] veth2: entered promiscuous mode
[  165.664498][T10319] veth3: entered promiscuous mode
[  165.666837][T10319] vxcan4: entered promiscuous mode
[  165.669070][T10319] vxcan5: entered promiscuous mode
[  165.671281][T10319] erspan1: entered promiscuous mode
[  165.673542][T10319] ip6erspan0: entered promiscuous mode
[  165.676047][T10319] bond1: entered promiscuous mode
[  165.678202][T10319] bridge2: entered promiscuous mode
[  165.680597][T10319] bridge3: entered promiscuous mode
[  165.682975][T10319] mac80211_hwsim hwsim9 wlan2: entered promiscuous mode
[  165.686329][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  166.305087][T10342] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  166.323219][T10342] netlink: 'syz.2.1893': attribute type 4 has an invalid length.
[  166.413285][T10342] bridge0: port 3(macvlan1) entered disabled state
[  166.416093][T10342] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.420510][T10342] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.439201][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'.
[  166.553712][T10342] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.566354][T10342] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.619451][T10342] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  166.637346][T10342] veth1_vlan: left allmulticast mode
[  166.768386][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.771794][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.775161][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  166.792102][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.799381][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.802889][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  166.807843][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.811088][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.814494][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  166.872095][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.878877][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  166.889013][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  167.014585][T10380] netlink: 'syz.1.1906': attribute type 16 has an invalid length.
[  167.031455][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'.
[  167.405988][ T5879] Bluetooth: hci2: link tx timeout
[  167.408467][ T5879] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.414750][ T5879] Bluetooth: hci2: link tx timeout
[  167.421134][ T5879] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  167.592402][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'.
[  168.039000][T10455] netlink: 'syz.0.1938': attribute type 7 has an invalid length.
[  168.041971][T10455] netlink: 'syz.0.1938': attribute type 8 has an invalid length.
[  168.045229][T10455] netlink: 'syz.0.1938': attribute type 4 has an invalid length.
[  168.051204][T10455] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1938'.
[  168.168435][T10463] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1942'.
[  168.309180][T10470] netlink: 'syz.0.1945': attribute type 1 has an invalid length.
[  168.388981][T10470] bond2: (slave gretap2): making interface the new active one
[  168.397586][T10470] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  168.857955][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'.
[  169.367098][T10504] syzkaller1: entered promiscuous mode
[  169.369336][T10504] syzkaller1: entered allmulticast mode
[  169.384204][T10504] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  169.407049][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1961'.
[  169.410706][T10506] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  169.414624][T10506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.456554][ T5879] Bluetooth: hci2: command 0x0405 tx timeout
[  169.497339][T10513] netlink: 'syz.0.1964': attribute type 10 has an invalid length.
[  169.500514][T10513] dummy0: left allmulticast mode
[  169.502854][T10513] bridge0: port 3(dummy0) entered disabled state
[  169.515131][T10513] team0: Port device dummy0 added
[  169.686590][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'.
[  171.217684][T10612] netlink: 'syz.1.1993': attribute type 33 has an invalid length.
[  171.232805][T10612] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1993'.
[  171.525732][ T5879] Bluetooth: hci2: command 0x0405 tx timeout
[  171.672400][T10678] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2004'.
[  171.773784][T10685] pimreg: entered allmulticast mode
[  171.818706][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'.
[  171.822513][T10690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2008'.
[  172.016365][T10702] macvlan2: entered promiscuous mode
[  172.119075][T10710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2019'.
[  172.168645][T10708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.254488][T10714] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2021'.
[  172.257662][T10714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2021'.
[  172.260841][T10714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2021'.
[  172.339386][T10722] trusted_key: syz.0.2025 sent an empty control message without MSG_MORE.
[  172.380511][T10726] batadv_slave_0: left promiscuous mode
[  172.383017][T10726] batadv_slave_0: entered allmulticast mode
[  172.389323][T10726] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  172.418243][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2028'.
[  172.434572][ T5720] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.442497][ T5720] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.452561][ T5720] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.459529][ T5720] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.540509][T10738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2033'.
[  172.624687][T10748] netlink: 'syz.2.2036': attribute type 1 has an invalid length.
[  172.635812][T10748] netlink: 'syz.2.2036': attribute type 3 has an invalid length.
[  172.643079][T10748] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2036'.
[  172.723543][T10758] netlink: 'syz.2.2042': attribute type 10 has an invalid length.
[  172.811749][T10769] bond0: option arp_validate: invalid value (18446744073491447809)
[  172.895201][T10778] netlink: 'syz.1.2053': attribute type 21 has an invalid length.
[  172.908398][T10777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.284740][T10815] IPVS: nq: FWM 3 0x00000003 - no destination available
[  174.027419][T10848] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  174.558067][T10881] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  174.562330][T10881] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  174.576915][T10881] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  174.824524][T10903] netlink: 'syz.2.2098': attribute type 5 has an invalid length.
[  176.252409][T10968] netlink: 'syz.0.2127': attribute type 10 has an invalid length.
[  176.257662][T10968] batadv_slave_0: left allmulticast mode
[  176.260037][T10968] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.267503][T10968] batadv_slave_0: entered promiscuous mode
[  176.269824][T10968] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  176.673079][T11006] netlink: 'syz.0.2139': attribute type 21 has an invalid length.
[  176.686734][T11006] IPv6: NLM_F_CREATE should be specified when creating new route
[  176.698846][T11006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.702023][T11006] IPv6: NLM_F_CREATE should be set when creating new route
[  176.705025][T11006] IPv6: NLM_F_CREATE should be set when creating new route
[  176.708536][T11006] IPv6: NLM_F_CREATE should be set when creating new route
[  177.065195][T11028] __nla_validate_parse: 9 callbacks suppressed
[  177.065209][T11028] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2150'.
[  178.231976][T11028] 0X: renamed from caif0
[  178.237243][T11028] 0X: entered allmulticast mode
[  178.239426][T11028] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  178.459238][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2160'.
[  178.523561][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'.
[  178.586572][T11059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.136963][T11081] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.140495][T11081] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.294580][T11081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.458309][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.461630][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.465101][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.470969][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.559584][T11094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2179'.
[  179.788078][T11117] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2190'.
[  179.814077][T11120] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  180.093203][T11146] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2201'.
[  180.598239][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'.
[  180.602103][T11161] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2207'.
[  180.757901][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2211'.
[  181.160062][T11182] netlink: 'syz.2.2216': attribute type 1 has an invalid length.
[  181.162935][T11182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2216'.
[  181.433229][T11208] wg1 speed is unknown, defaulting to 1000
[  181.437934][T11208] wg1 speed is unknown, defaulting to 1000
[  181.444498][T11208] wg1 speed is unknown, defaulting to 1000
[  181.470044][T11208] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  181.489253][T11208] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  181.607529][T11208] wg1 speed is unknown, defaulting to 1000
[  181.611830][T11208] wg1 speed is unknown, defaulting to 1000
[  181.632495][T11208] wg1 speed is unknown, defaulting to 1000
[  181.640169][T11208] wg1 speed is unknown, defaulting to 1000
[  181.750597][T11231] bridge_slave_0: left promiscuous mode
[  181.752760][T11231] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.778145][T11231] bridge_slave_1: left allmulticast mode
[  181.785632][T11231] bridge_slave_1: left promiscuous mode
[  181.787765][T11231] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.798512][T11231] bond0: (slave bond_slave_0): Releasing backup interface
[  181.812535][T11231] bond0: (slave bond_slave_1): Releasing backup interface
[  181.822453][T11231] team0: Port device team_slave_0 removed
[  181.832374][T11231] team0: Port device team_slave_1 removed
[  181.835242][T11231] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.839361][T11231] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  182.150842][T11265] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  182.154051][T11265] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  182.241171][T11273] wg1 speed is unknown, defaulting to 1000
[  182.626312][T11294] __nla_validate_parse: 1 callbacks suppressed
[  182.626335][T11294] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2264'.
[  183.242269][T11315] netlink: 'syz.0.2274': attribute type 1 has an invalid length.
[  184.371705][T11367] wg1 speed is unknown, defaulting to 1000
[  184.432408][T11366] IPVS: length: 4096 != 24
[  185.114732][T11392] netlink: 'syz.1.2307': attribute type 10 has an invalid length.
[  185.133186][T11392] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  185.180502][T11400] netlink: 'syz.2.2310': attribute type 1 has an invalid length.
[  185.211135][T11400] bond3: (slave bridge5): making interface the new active one
[  185.213923][T11400] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  185.651903][ T5972] IPVS: starting estimator thread 0...
[  185.747433][T11433] IPVS: using max 64 ests per chain, 153600 per kthread
[  185.993162][T11449] blkio.reset_stats is deprecated
[  186.208105][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'.
[  186.248765][T11461] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  186.253049][T11461] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  186.256838][T11461] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  186.279972][T11463] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2338'.
[  186.282901][T11463] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2338'.
[  186.488893][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2343'.
[  186.909628][T11491] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.132006][T11501] netlink: 'syz.0.2355': attribute type 10 has an invalid length.
[  187.142327][T11501] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  187.155848][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2355'.
[  187.160965][T11501] bridge_slave_1: left allmulticast mode
[  187.164370][T11501] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.177705][T11501] bridge_slave_0: left allmulticast mode
[  187.180281][T11501] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.206583][T11501] bond0: (slave bridge0): Releasing backup interface
[  188.437529][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2379'.
[  188.832531][T11603] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2397'.
[  188.928559][T11614] ieee802154 phy0 wpan0: encryption failed: -22
[  189.229689][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2412'.
[  189.307520][T11639] siw: device registration error -23
[  189.889536][T11667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.973612][T11675] netlink: 'syz.0.2427': attribute type 21 has an invalid length.
[  189.977101][T11675] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2427'.
[  190.199293][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'.
[  190.456424][T11719] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.464811][T11719] bond0: (slave rose0): Enslaving as an active interface with an up link
[  190.480752][T11725] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  191.333060][T11771] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2464'.
[  191.842552][T11818] lo: left promiscuous mode
[  191.844631][T11818] tunl0: left promiscuous mode
[  191.848732][T11818] gre0: left promiscuous mode
[  191.850869][T11818] gretap0: left promiscuous mode
[  191.853076][T11818] erspan0: left promiscuous mode
[  191.855188][T11818] ip_vti0: left promiscuous mode
[  191.857415][T11818] ip6_vti0: left promiscuous mode
[  191.859259][T11818] sit0: left promiscuous mode
[  191.861054][T11818] ip6tnl0: left promiscuous mode
[  191.863007][T11818] ip6gre0: left promiscuous mode
[  191.865026][T11818] syz_tun: left promiscuous mode
[  191.867551][T11818] ip6gretap0: left promiscuous mode
[  191.869560][T11818] vcan0: left promiscuous mode
[  191.871318][T11818] bond0: left promiscuous mode
[  191.873175][T11818] batadv_slave_0: left promiscuous mode
[  191.880937][T11818] team0: left promiscuous mode
[  191.883594][T11818] dummy0: left promiscuous mode
[  191.890686][T11818] nlmon0: left promiscuous mode
[  191.892507][T11818] caif0: left promiscuous mode
[  191.895029][T11818] batadv0: left promiscuous mode
[  191.897150][T11818] vxcan0: left promiscuous mode
[  191.899457][T11818] vxcan1: left promiscuous mode
[  191.901390][T11818] veth0: left promiscuous mode
[  191.903099][T11818] veth1: left promiscuous mode
[  191.904812][T11818] wg0: left promiscuous mode
[  191.915583][T11818] wg1: left promiscuous mode
[  191.917161][T11818] wg2: left promiscuous mode
[  191.918693][T11818] veth0_to_bridge: left promiscuous mode
[  191.920487][T11818] bridge_slave_0: left promiscuous mode
[  191.922258][T11818] veth1_to_bridge: left promiscuous mode
[  191.924724][T11818] bridge_slave_1: left promiscuous mode
[  191.933130][T11818] veth0_to_bond: left promiscuous mode
[  191.936568][T11818] bond_slave_0: left promiscuous mode
[  191.938850][T11818] veth1_to_bond: left promiscuous mode
[  191.941173][T11818] bond_slave_1: left promiscuous mode
[  191.943441][T11818] veth0_to_team: left promiscuous mode
[  191.956762][T11818] team_slave_0: left promiscuous mode
[  191.959177][T11818] veth1_to_team: left promiscuous mode
[  191.961432][T11818] team_slave_1: left promiscuous mode
[  191.963672][T11818] veth0_to_batadv: left promiscuous mode
[  191.974435][T11818] veth1_to_batadv: left promiscuous mode
[  191.980644][T11827] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2488'.
[  191.983734][T11818] batadv_slave_1: left promiscuous mode
[  191.995859][T11818] xfrm0: left promiscuous mode
[  191.999849][T11818] veth0_to_hsr: left promiscuous mode
[  192.002055][T11818] hsr_slave_0: left promiscuous mode
[  192.004245][T11818] veth1_to_hsr: left promiscuous mode
[  192.007853][T11818] hsr_slave_1: left promiscuous mode
[  192.010089][T11818] veth1_virt_wifi: left promiscuous mode
[  192.012427][T11818] veth0_virt_wifi: left promiscuous mode
[  192.014739][T11818] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  192.021471][T11818] vlan1: left promiscuous mode
[  192.023858][T11818] macvlan0: left promiscuous mode
[  192.029678][T11818] macvlan1: left promiscuous mode
[  192.031962][T11818] ipvlan0: left promiscuous mode
[  192.034491][T11818] ipvlan1: left promiscuous mode
[  192.038369][T11818] macvtap0: left promiscuous mode
[  192.040925][T11818] geneve0: left promiscuous mode
[  192.042820][T11818] geneve1: left promiscuous mode
[  192.050581][T11818] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  192.053649][T11818] netdevsim netdevsim0 netdevsim1: left promiscuous mode
[  192.066852][T11818] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  192.070286][T11818] netdevsim netdevsim0 netdevsim3: left promiscuous mode
[  192.073535][T11818] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  192.076652][T11818] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  192.079588][T11818] gretap1: left promiscuous mode
[  192.081695][T11818] macsec0.2: left promiscuous mode
[  192.083935][T11818] macsec0: left promiscuous mode
[  192.086896][T11818] wlan0.3: left promiscuous mode
[  192.088968][T11818] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  192.091969][T11818] gre1: left promiscuous mode
[  192.094202][T11818] bridge1: left promiscuous mode
[  192.098397][T11818] vxcan2: left promiscuous mode
[  192.100431][T11818] vxcan3: left promiscuous mode
[  192.102255][T11818] veth2: left promiscuous mode
[  192.104343][T11818] veth3: left promiscuous mode
[  192.106908][T11818] vxcan4: left promiscuous mode
[  192.112335][T11818] vxcan5: left promiscuous mode
[  192.118607][T11818] erspan1: left promiscuous mode
[  192.120889][T11818] ip6erspan0: left promiscuous mode
[  192.123176][T11818] bond1: left promiscuous mode
[  192.127115][T11818] bridge2: left promiscuous mode
[  192.130311][T11818] bridge3: left promiscuous mode
[  192.132700][T11818] mac80211_hwsim hwsim9 wlan2: left promiscuous mode
[  192.145658][T11818] vlan0: left promiscuous mode
[  192.147734][T11818] macvlan2: left promiscuous mode
[  192.392965][T11854] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2499'.
[  192.400945][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'.
[  192.454218][T11858] vlan2: entered promiscuous mode
[  192.456471][T11858] syz_tun: entered promiscuous mode
[  192.479382][T11862] netlink: 'syz.0.2503': attribute type 3 has an invalid length.
[  192.641254][T11872] netlink: 'syz.2.2510': attribute type 9 has an invalid length.
[  192.647247][T11872] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2510'.
[  193.943701][T11989] __nla_validate_parse: 2 callbacks suppressed
[  193.943719][T11989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2560'.
[  193.978693][T11988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.984811][T11988] syzkaller0: entered promiscuous mode
[  193.995427][T11988] syzkaller0: entered allmulticast mode
[  194.026811][T11988] tipc: Resetting bearer <eth:syzkaller0>
[  194.031111][T11987] tipc: Resetting bearer <eth:syzkaller0>
[  194.052813][T11987] tipc: Disabling bearer <eth:syzkaller0>
[  194.255976][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  194.258018][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.291535][T12013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2573'.
[  194.434049][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'.
[  194.680889][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'.
[  195.076881][T12061] netlink: 'syz.1.2593': attribute type 10 has an invalid length.
[  195.093263][T12061] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  195.098116][T12061] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  195.659647][T12084] netlink: 'syz.2.2604': attribute type 83 has an invalid length.
[  195.783822][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'.
[  195.788716][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'.
[  195.797905][T12094] netlink: 'syz.2.2609': attribute type 4 has an invalid length.
[  195.800479][T12094] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2609'.
[  195.838349][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'.
[  195.841350][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'.
[  195.951945][T12109] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2616'.
[  196.120030][T12122] netlink: 'syz.0.2622': attribute type 3 has an invalid length.
[  196.186832][T12129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.328053][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  196.840638][T12165] ieee802154 phy0 wpan0: encryption failed: -22
[  196.880987][T12170] openvswitch: netlink: Flow actions attr not present in new flow.
[  196.890878][T12170] vlan2: entered allmulticast mode
[  196.892868][T12170] batadv0: entered allmulticast mode
[  196.957625][T12177] netlink: 'syz.2.2649': attribute type 11 has an invalid length.
[  196.960742][T12177] netlink: 'syz.2.2649': attribute type 4 has an invalid length.
[  197.283281][T12204] netlink: 'syz.2.2662': attribute type 5 has an invalid length.
[  197.312055][T12208] netlink: 'syz.0.2664': attribute type 30 has an invalid length.
[  197.361563][T12212] ieee802154 phy0 wpan0: encryption failed: -22
[  197.832132][T12261] netlink: 'syz.2.2690': attribute type 3 has an invalid length.
[  197.943617][T12272] netlink: 'syz.2.2695': attribute type 16 has an invalid length.
[  198.224839][T12295] netlink: 'syz.2.2705': attribute type 1 has an invalid length.
[  198.688664][T12332] tipc: Resetting bearer <eth:syzkaller0>
[  198.877150][T12353] netlink: 'syz.2.2733': attribute type 16 has an invalid length.
[  198.987380][T12366] smc: net device bond0 applied user defined pnetid SYZ2
[  199.032222][T12370] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  199.041422][T12370] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  199.427116][T12399] netlink: 'syz.1.2755': attribute type 1 has an invalid length.
[  199.569112][T12413] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  199.624488][T12420] bond0: (slave bond2): Error -95 calling ndo_bpf
[  199.636024][T12420] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  199.964358][T12448] __nla_validate_parse: 15 callbacks suppressed
[  199.964377][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2776'.
[  199.993100][T12448] netem: change failed
[  200.011868][T12448] vlan3: entered allmulticast mode
[  200.013849][T12448] bridge0: entered allmulticast mode
[  200.016928][T12448] bridge4: port 1(vlan3) entered blocking state
[  200.019240][T12448] bridge4: port 1(vlan3) entered disabled state
[  200.023577][T12448] vlan3: entered promiscuous mode
[  200.026990][T12448] bridge0: entered promiscuous mode
[  201.841438][T12512] wg1 speed is unknown, defaulting to 1000
[  202.223375][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'.
[  202.588194][T12538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2810'.
[  202.609724][T12538] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2810'.
[  202.620962][T12532] wg1 speed is unknown, defaulting to 1000
[  202.734074][T12547] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  202.968051][T12564] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2820'.
[  203.299319][T12589] wg1 speed is unknown, defaulting to 1000
[  203.645135][T12599] netlink: 'syz.2.2834': attribute type 1 has an invalid length.
[  203.648448][T12599] netlink: 'syz.2.2834': attribute type 1 has an invalid length.
[  203.651069][T12599] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2834'.
[  203.820429][T12603] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2836'.
[  204.126935][T12618] 8021q: adding VLAN 0 to HW filter on device batadv1
[  204.144009][T12618] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  204.148404][T12618] team0: Failed to send options change via netlink (err -105)
[  204.151273][T12618] team0: Port device batadv1 added
[  204.833918][T12684] ieee802154 phy0 wpan0: encryption failed: -22
[  204.871112][T12686] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2874'.
[  205.162636][T12718] netlink: 'syz.0.2888': attribute type 13 has an invalid length.
[  205.165857][T12718] netlink: 'syz.0.2888': attribute type 17 has an invalid length.
[  205.181035][T12718] gretap0: refused to change device tx_queue_len
[  205.184145][T12718] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  205.245708][T12721] netlink: 'syz.0.2889': attribute type 5 has an invalid length.
[  205.515701][T12728] IPVS: stopping backup sync thread 12547 ...
[  205.527534][T12728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'.
[  205.534403][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2891'.
[  205.588548][T12733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2894'.
[  206.192601][T12755] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2904'.
[  206.200772][T12753] wg1 speed is unknown, defaulting to 1000
[  206.466014][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2911'.
[  206.530571][T12769] vlan3: entered allmulticast mode
[  206.532401][T12769] dummy0: entered allmulticast mode
[  206.546948][T12769] bridge9: port 1(vlan3) entered blocking state
[  206.550601][T12769] bridge9: port 1(vlan3) entered disabled state
[  206.558927][T12769] vlan3: entered promiscuous mode
[  206.561136][T12769] dummy0: entered promiscuous mode
[  206.575235][T12775] xt_time: invalid argument - start or stop time greater than 23:59:59
[  206.790117][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2924'.
[  207.004523][T12819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.040412][T12819] syzkaller0: entered promiscuous mode
[  207.042225][T12819] syzkaller0: entered allmulticast mode
[  207.044615][T12819] tipc: Resetting bearer <eth:syzkaller0>
[  207.072512][T12815] tipc: Resetting bearer <eth:syzkaller0>
[  207.113851][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'.
[  208.509073][T12815] tipc: Disabling bearer <eth:syzkaller0>
[  208.640311][T12837] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  208.708547][T12843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2945'.
[  208.769671][T12849] netlink: 'syz.1.2946': attribute type 2 has an invalid length.
[  208.968920][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2954'.
[  209.033788][T12868] netlink: 'syz.1.2956': attribute type 23 has an invalid length.
[  209.200536][T12876] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2961'.
[  209.246420][T12876] ipvlan3: entered promiscuous mode
[  209.249830][T12876] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  209.362225][T12886] macvlan1 (unregistering): left allmulticast mode
[  209.364773][T12886] macvlan1 (unregistering): left promiscuous mode
[  209.368636][T12886] bridge0: port 3(macvlan1) entered disabled state
[  209.439091][T12894] netlink: 'syz.1.2968': attribute type 1 has an invalid length.
[  209.917396][T12908] netlink: 'syz.0.2974': attribute type 1 has an invalid length.
[  210.026265][T12914] bridge10: entered promiscuous mode
[  210.028456][T12914] bridge10: entered allmulticast mode
[  210.034325][T12914] team0: Port device bridge10 added
[  210.630205][T12957] __nla_validate_parse: 6 callbacks suppressed
[  210.630218][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2998'.
[  210.734129][T12963] pimreg: entered allmulticast mode
[  210.742620][T12963] tipc: Resetting bearer <eth:syzkaller0>
[  210.917917][T12975] vxcan2: entered promiscuous mode
[  211.008714][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'.
[  211.049007][T12979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'.
[  211.369776][T12984] netlink: 'syz.1.3010': attribute type 30 has an invalid length.
[  211.685509][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  212.151366][T13005] netlink: 'syz.2.3015': attribute type 6 has an invalid length.
[  213.653317][T13078] !: renamed from dummy0
[  213.758022][T13081] wg1 speed is unknown, defaulting to 1000
[  213.765518][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  214.283042][T13106] geneve2: entered promiscuous mode
[  214.287150][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.299210][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.302453][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.306874][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.333173][T13110] netlink: 'syz.1.3055': attribute type 29 has an invalid length.
[  214.338317][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'.
[  214.494277][T13111] bridge0: port 1(erspan0) entered blocking state
[  214.497948][T13111] bridge0: port 1(erspan0) entered disabled state
[  214.500813][T13111] erspan0: entered allmulticast mode
[  214.522206][T13111] erspan0: entered promiscuous mode
[  214.546008][T13111] erspan0: left allmulticast mode
[  214.548121][T13111] erspan0: left promiscuous mode
[  214.562226][T13111] bridge0: port 1(erspan0) entered disabled state
[  214.598179][T13121] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3059'.
[  214.601165][T13121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3059'.
[  214.609080][T13121] pimreg: left allmulticast mode
[  214.611157][T13121] dvmrp8: left allmulticast mode
[  214.669478][T13124] rdma_rxe: rxe_newlink: failed to add lo
[  214.671678][T13126] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.708506][   T12] bond0: (slave bond_slave_0): interface is now down
[  214.710550][T13124] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.711397][   T12] bond0: (slave bond_slave_1): interface is now down
[  214.716318][T13124] 8021q: adding VLAN 0 to HW filter on device team0
[  214.719562][   T12] bond0: (slave bond2): interface is now down
[  214.722314][   T12] bond0: (slave wlan1): interface is now down
[  214.729810][T13124] bridge9: port 1(vlan3) entered blocking state
[  214.732512][T13124] bridge9: port 1(vlan3) entered forwarding state
[  214.741686][T13124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.754230][T13126] netem: change failed
[  214.756705][   T13] bond0: (slave bond_slave_0): interface is now down
[  214.770461][   T13] bond0: (slave bond_slave_1): interface is now down
[  214.772809][   T13] bond0: (slave bond2): interface is now down
[  214.774906][   T13] bond0: (slave wlan1): interface is now down
[  214.802791][   T13] bond0: now running without any active interface!
[  215.227378][T13168] netlink: 'syz.2.3082': attribute type 5 has an invalid length.
[  215.307047][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'.
[  215.520658][T13187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'.
[  215.576898][T13189] netlink: 'syz.0.3090': attribute type 1 has an invalid length.
[  215.580085][T13189] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3090'.
[  215.980697][T13208] netlink: 'syz.1.3097': attribute type 15 has an invalid length.
[  215.983997][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3097'.
[  216.042136][T13210] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3098'.
[  216.141863][T13214] netlink: 'syz.1.3100': attribute type 2 has an invalid length.
[  216.145676][T13214] netlink: 'syz.1.3100': attribute type 2 has an invalid length.
[  216.441479][T13234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.444504][T13234] IPv6: NLM_F_CREATE should be set when creating new route
[  216.447496][T13234] IPv6: NLM_F_CREATE should be set when creating new route
[  216.885619][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  216.940789][T13251] syzkaller1: entered promiscuous mode
[  216.943204][T13251] syzkaller1: entered allmulticast mode
[  217.282568][T13261] wg1 speed is unknown, defaulting to 1000
[  217.338265][T13262] netlink: 'syz.0.3120': attribute type 10 has an invalid length.
[  217.343340][T13262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3120'.
[  217.346708][T13262] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  217.759035][T13281] wg1 speed is unknown, defaulting to 1000
[  217.807087][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3127'.
[  217.955624][T13291] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3130'.
[  218.095926][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'.
[  218.152762][T13301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.156313][T13301] syzkaller0: entered promiscuous mode
[  218.158150][T13301] syzkaller0: entered allmulticast mode
[  218.171048][T13303] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3136'.
[  218.188076][T13301] tipc: Resetting bearer <eth:syzkaller0>
[  218.196583][T13300] tipc: Resetting bearer <eth:syzkaller0>
[  218.210908][T13300] tipc: Disabling bearer <eth:syzkaller0>
[  218.213086][T13305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.215400][T13305] IPv6: NLM_F_CREATE should be set when creating new route
[  218.218105][T13305] IPv6: NLM_F_CREATE should be set when creating new route
[  218.220660][T13305] IPv6: NLM_F_CREATE should be set when creating new route
[  218.229251][T13305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.318750][ T5720] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  218.326591][ T5720] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  218.332250][ T5720] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  218.341419][ T5720] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  218.698573][T13342] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3156'.
[  218.895775][T13342] nbd2: detected capacity change from 0 to 63
[  218.901297][T13350] block nbd2: NBD_DISCONNECT
[  218.905797][T13350] block nbd2: Disconnected due to user request.
[  218.911808][T13350] block nbd2: shutting down sockets
[  219.027838][T13365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3165'.
[  219.459050][T13404] nbd: device at index 2 is going down
[  219.610709][T13411] netlink: 'syz.0.3183': attribute type 58 has an invalid length.
[  219.613194][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3183'.
[  219.948180][T13431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.951482][T13431] syzkaller0: entered promiscuous mode
[  219.953390][T13431] syzkaller0: entered allmulticast mode
[  219.985874][T13431] tipc: Resetting bearer <eth:syzkaller0>
[  219.990483][T13430] tipc: Resetting bearer <eth:syzkaller0>
[  220.007148][T13430] tipc: Disabling bearer <eth:syzkaller0>
[  220.293949][T13457] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.123836][T13517] : entered promiscuous mode
[  221.177612][T13520] __nla_validate_parse: 2 callbacks suppressed
[  221.177624][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3228'.
[  221.199003][T13522] xt_l2tp: missing protocol rule (udp|l2tpip)
[  221.574459][T13568] netlink: 'syz.1.3243': attribute type 2 has an invalid length.
[  221.579284][T13568] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.3243'.
[  221.842966][T13591] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  221.848961][T13591] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3246'.
[  222.023045][T13591] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  222.028098][T13591] bond0 (unregistering): Released all slaves
[  222.268181][T13609] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  222.490344][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'.
[  222.541155][T13618] vlan3 (unregistering): left promiscuous mode
[  222.544061][T13618] bridge0 (unregistering): left promiscuous mode
[  222.562043][T13618] bridge4: port 1(vlan3) entered disabled state
[  222.749987][T13641] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  222.784224][T13641] bond4: entered promiscuous mode
[  222.786181][T13641] bond4: entered allmulticast mode
[  222.788917][T13641] 8021q: adding VLAN 0 to HW filter on device bond4
[  222.992306][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3271'.
[  222.996488][T13654] netlink: 'syz.2.3271': attribute type 11 has an invalid length.
[  223.013056][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.017094][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3271'.
[  223.020799][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.025574][T13654] netlink: 'syz.2.3271': attribute type 11 has an invalid length.
[  223.034364][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.044131][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.453627][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3279'.
[  223.471787][T13674] batman_adv: batadv0: Removing interface: virt_wifi0
[  223.792234][T13694] netlink: 'syz.2.3286': attribute type 12 has an invalid length.
[  223.862002][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'.
[  224.100683][T13714] wg1 speed is unknown, defaulting to 1000
[  224.161628][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'.
[  224.173239][T13717] wg1 speed is unknown, defaulting to 1000
[  224.329231][T13728] wg1 speed is unknown, defaulting to 1000
[  224.983679][T13759] syzkaller1: entered promiscuous mode
[  224.986869][T13759] syzkaller1: entered allmulticast mode
[  225.047561][T13763] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3315'.
[  225.182076][T13771] netlink: 'syz.1.3319': attribute type 1 has an invalid length.
[  225.257719][T13771] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[  225.261093][T13771] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  225.276657][T13771] bond0: (slave vcan1): making interface the new active one
[  225.281058][T13771] bond0: (slave vcan1): Enslaving as an active interface with an up link
[  225.297294][T13771] bond0: (slave vcan2): The slave device specified does not support setting the MAC address
[  225.307180][T13771] bond0: (slave vcan2): Enslaving as a backup interface with an up link
[  225.315208][T13771] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.759832][T13808] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  225.820662][T13810] netlink: 'syz.2.3335': attribute type 1 has an invalid length.
[  225.823310][T13810] netlink: 'syz.2.3335': attribute type 1 has an invalid length.
[  226.238540][T13838] __nla_validate_parse: 8 callbacks suppressed
[  226.238556][T13838] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3349'.
[  226.600543][T13851] vti0: entered promiscuous mode
[  226.723445][T13853] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3354'.
[  227.796937][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'.
[  227.800021][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3376'.
[  227.931625][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'.
[  227.996922][T13919] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3384'.
[  228.062206][T13929] netlink: 'syz.2.3388': attribute type 21 has an invalid length.
[  228.162760][T13934] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3390'.
[  228.167182][T13934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3390'.
[  228.434168][T13962] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3405'.
[  229.035682][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'.
[  229.211983][T13984] batman_adv: batadv0: Adding interface: ipvlan0
[  229.214111][T13984] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.223491][T13984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  229.227729][T13984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  229.231109][T13984] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  229.498238][T14004] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.331381][T14109] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  231.488140][T14124] __nla_validate_parse: 5 callbacks suppressed
[  231.488153][T14124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3476'.
[  231.493433][T14124] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  231.557298][T14130] vlan0: entered promiscuous mode
[  231.582183][T14131] netlink: 'syz.0.3480': attribute type 1 has an invalid length.
[  232.349591][T14173] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3499'.
[  233.084567][T14207] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3514'.
[  233.241178][T14215] IPVS: Error joining to the multicast group
[  233.287712][T14217] netlink: 'syz.2.3519': attribute type 1 has an invalid length.
[  233.290912][T14217] netlink: 'syz.2.3519': attribute type 1 has an invalid length.
[  233.940824][T14258] netlink: 'syz.0.3539': attribute type 1 has an invalid length.
[  233.943115][T14258] netlink: 'syz.0.3539': attribute type 1 has an invalid length.
[  233.946252][T14258] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3539'.
[  234.184465][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3548'.
[  234.404637][T14294] netlink: 'syz.2.3556': attribute type 21 has an invalid length.
[  234.822096][T14330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3573'.
[  236.210874][T14395] sctp: [Deprecated]: syz.2.3588 (pid 14395) Use of int in maxseg socket option.
[  236.210874][T14395] Use struct sctp_assoc_value instead
[  236.453977][T14409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3591'.
[  236.459599][T14409] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3591'.
[  236.463171][T14409] netlink: 'syz.0.3591': attribute type 5 has an invalid length.
[  236.467238][T14409] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3591'.
[  236.870626][T14438] netlink: 'syz.1.3601': attribute type 6 has an invalid length.
[  236.873833][T14438] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3601'.
[  236.981302][T14444] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  237.019489][T14447] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  237.024021][T14446] IPVS: stopping backup sync thread 14447 ...
[  237.493278][T14480] netlink: 'syz.2.3619': attribute type 2 has an invalid length.
[  237.744360][T14500] netlink: 'syz.0.3627': attribute type 1 has an invalid length.
[  237.751906][T14500] netlink: 'syz.0.3627': attribute type 4 has an invalid length.
[  237.754787][T14500] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.3627'.
[  237.794026][T14506] netlink: 'syz.2.3630': attribute type 3 has an invalid length.
[  237.802341][T14506] netlink: 'syz.2.3630': attribute type 1 has an invalid length.
[  237.809152][T14506] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3630'.
[  237.867753][T14515] 8021q: VLANs not supported on bond0
[  237.872193][T14512] wg1 speed is unknown, defaulting to 1000
[  238.737180][T14578] netlink: 'syz.1.3663': attribute type 3 has an invalid length.
[  238.832170][T14589] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.3668'.
[  239.134300][T14607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3677'.
[  239.147981][T14607] IPv6: sit1: Disabled Multicast RS
[  239.150540][T14607] sit1: entered allmulticast mode
[  239.152788][T14609] tipc: New replicast peer: 0.0.0.0
[  239.156612][T14609] tipc: Enabled bearer <udp:syz2>, priority 10
[  239.159698][T14609] tipc: New replicast peer: 255.255.255.255
[  239.393007][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3687'.
[  239.477260][T14639] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  239.492371][T14639] bridge_slave_0: left allmulticast mode
[  239.494541][T14639] bridge_slave_0: left promiscuous mode
[  239.497663][T14639] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.519523][T14639] bridge_slave_1: left allmulticast mode
[  239.521354][T14639] bridge_slave_1: left promiscuous mode
[  239.523243][T14639] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.536554][T14639] bond0: (slave bond_slave_0): Releasing backup interface
[  239.559606][T14639] bond0: (slave bond_slave_1): Releasing backup interface
[  239.565207][T14639] team0: Port device team_slave_0 removed
[  239.570284][T14639] team0: Port device team_slave_1 removed
[  239.576197][T14639] batman_adv: batadv0: Removing interface: batadv_slave_0
[  239.581481][T14639] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.589199][T14639] bond0: (slave wlan1): Releasing backup interface
[  239.600600][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'.
[  239.621449][T14639] bond1: (slave geneve2): Releasing active interface
[  239.640036][T14639] bond0: (slave bond2): Releasing backup interface
[  239.670259][T14639] bond3: (slave bridge5): Releasing active interface
[  239.679274][T14650] netlink: 'syz.2.3691': attribute type 10 has an invalid length.
[  239.697195][T14639] vlan3: left promiscuous mode
[  239.699179][T14639] dummy0: left promiscuous mode
[  239.701567][T14639] bridge9: port 1(vlan3) entered disabled state
[  239.728119][T14639] team0: Port device bridge10 removed
[  239.731081][T14639] batman_adv: batadv0: Removing interface: ipvlan0
[  239.774269][T14650] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  239.788752][T14650] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.792686][T14650] bond0: (slave wlan1): Opening slave failed
[  239.798966][T14655] netem: incorrect gi model size
[  239.799592][T14639] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  239.801220][T14655] netem: change failed
[  239.804717][T14639] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  239.809083][T14657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3697'.
[  239.813139][T14657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3697'.
[  239.890165][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3700'.
[  240.089857][T14675] netlink: 'syz.0.3706': attribute type 1 has an invalid length.
[  240.175723][ T5937] tipc: Node number set to 378817664
[  240.414950][T14695] netlink: 'syz.0.3716': attribute type 1 has an invalid length.
[  240.880162][T14740] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  241.502448][T14788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  241.928961][   T33] audit: type=1800 audit(1757761588.919:3): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3769" name="memory.events" dev="tmpfs" ino=6768 res=0 errno=0
[  242.202864][T14845] openvswitch: netlink: Flow actions attr not present in new flow.
[  242.656533][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  242.676694][T14884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  242.687072][T14884] syz.1.3793: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  242.699254][T14884] CPU: 0 UID: 0 PID: 14884 Comm: syz.1.3793 Not tainted syzkaller #0 PREEMPT(full) 
[  242.699274][T14884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.699284][T14884] Call Trace:
[  242.699291][T14884]  <TASK>
[  242.699298][T14884]  dump_stack_lvl+0x189/0x250
[  242.699325][T14884]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.699342][T14884]  ? __pfx__printk+0x10/0x10
[  242.699365][T14884]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  242.699383][T14884]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  242.699401][T14884]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  242.699420][T14884]  warn_alloc+0x214/0x310
[  242.699443][T14884]  ? stack_depot_save_flags+0x40/0x860
[  242.699467][T14884]  ? __pfx_warn_alloc+0x10/0x10
[  242.699490][T14884]  ? kasan_save_track+0x4f/0x80
[  242.699509][T14884]  ? xskq_create+0x56/0x170
[  242.699523][T14884]  ? xsk_init_queue+0xb0/0x110
[  242.699534][T14884]  ? xsk_setsockopt+0x4dc/0x8d0
[  242.699554][T14884]  ? do_sock_setsockopt+0x17c/0x1b0
[  242.699570][T14884]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  242.699584][T14884]  ? do_syscall_64+0xfa/0x3b0
[  242.699600][T14884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.699621][T14884]  __vmalloc_node_range_noprof+0x125/0x12f0
[  242.699666][T14884]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  242.699692][T14884]  ? __kasan_kmalloc+0x93/0xb0
[  242.699713][T14884]  vmalloc_user_noprof+0xad/0xf0
[  242.699733][T14884]  ? xskq_create+0xbf/0x170
[  242.699748][T14884]  xskq_create+0xbf/0x170
[  242.699764][T14884]  xsk_init_queue+0xb0/0x110
[  242.699780][T14884]  xsk_setsockopt+0x4dc/0x8d0
[  242.699802][T14884]  ? __pfx_xsk_setsockopt+0x10/0x10
[  242.699823][T14884]  ? __pfx_aa_sk_perm+0x10/0x10
[  242.699846][T14884]  ? aa_sock_opt_perm+0xff/0x1b0
[  242.699863][T14884]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  242.699877][T14884]  ? __pfx_xsk_setsockopt+0x10/0x10
[  242.699900][T14884]  do_sock_setsockopt+0x17c/0x1b0
[  242.699919][T14884]  __x64_sys_setsockopt+0x13f/0x1b0
[  242.699970][T14884]  do_syscall_64+0xfa/0x3b0
[  242.699985][T14884]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.700001][T14884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.700014][T14884]  ? exc_page_fault+0x9f/0xf0
[  242.700054][T14884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.700068][T14884] RIP: 0033:0x7fdcff78eba9
[  242.700082][T14884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.700094][T14884] RSP: 002b:00007fdd006a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  242.700110][T14884] RAX: ffffffffffffffda RBX: 00007fdcff9d5fa0 RCX: 00007fdcff78eba9
[  242.700120][T14884] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  242.700129][T14884] RBP: 00007fdcff811e19 R08: 0000000000000004 R09: 0000000000000000
[  242.700138][T14884] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.700146][T14884] R13: 00007fdcff9d6038 R14: 00007fdcff9d5fa0 R15: 00007ffc5e1295b8
[  242.700171][T14884]  </TASK>
[  242.702528][T14884] Mem-Info:
[  242.818497][T14884] active_anon:5996 inactive_anon:0 isolated_anon:0
[  242.818497][T14884]  active_file:1426 inactive_file:38326 isolated_file:0
[  242.818497][T14884]  unevictable:1768 dirty:353 writeback:0
[  242.818497][T14884]  slab_reclaimable:10116 slab_unreclaimable:67034
[  242.818497][T14884]  mapped:18073 shmem:2422 pagetables:969
[  242.818497][T14884]  sec_pagetables:0 bounce:0
[  242.818497][T14884]  kernel_misc_reclaimable:0
[  242.818497][T14884]  free:280040 free_pcp:20326 free_cma:0
[  242.837061][T14884] Node 0 active_anon:13432kB inactive_anon:0kB active_file:2728kB inactive_file:132336kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27108kB dirty:732kB writeback:0kB shmem:4872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4580kB pagetables:1692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  242.849435][T14884] Node 1 active_anon:10484kB inactive_anon:0kB active_file:2976kB inactive_file:20968kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45184kB dirty:680kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7248kB pagetables:2252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  242.863685][T14884] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  242.876469][T14884] lowmem_reserve[]: 0 811 811 811 811
[  242.878789][T14884] Node 0 DMA32 free:247928kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13432kB inactive_anon:0kB active_file:2728kB inactive_file:132336kB unevictable:3536kB writepending:732kB present:1556484kB managed:830872kB mlocked:0kB bounce:0kB free_pcp:36584kB local_pcp:19484kB free_cma:0kB
[  242.893443][T14884] lowmem_reserve[]: 0 0 0 0 0
[  242.895247][T14891] netlink: 'syz.1.3793': attribute type 4 has an invalid length.
[  242.895843][T14884] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  242.912990][T14884] lowmem_reserve[]: 0 0 854 854 854
[  242.916650][T14884] Node 1 Normal free:398232kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10536kB inactive_anon:0kB active_file:2976kB inactive_file:20968kB unevictable:3536kB writepending:684kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:44804kB local_pcp:22720kB free_cma:0kB
[  242.919724][T14891] netlink: 'syz.1.3793': attribute type 4 has an invalid length.
[  242.931832][T14893] __nla_validate_parse: 12 callbacks suppressed
[  242.931848][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3797'.
[  242.938998][T14884] lowmem_reserve[]: 0 0 0 0 0
[  242.955733][T14884] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  242.963344][T14884] Node 0 DMA32: 2434*4kB (UM) 564*8kB (UME) 199*16kB (UME) 93*32kB (UME) 97*64kB (UME) 137*128kB (UME) 44*256kB (UM) 8*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 44*4096kB (UM) = 247928kB
[  242.981523][T14884] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  242.988886][T14884] Node 1 Normal: 750*4kB (UME) 374*8kB (UME) 131*16kB (UME) 132*32kB (UME) 138*64kB (UM) 55*128kB (U) 20*256kB (UME) 19*512kB (UM) 7*1024kB (ME) 6*2048kB (M) 82*4096kB (UM) = 398360kB
[  242.999751][T14884] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  243.003624][T14884] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  243.007762][T14884] 42175 total pagecache pages
[  243.009932][T14884] 0 pages in swap cache
[  243.011750][T14884] Free swap  = 124996kB
[  243.020095][T14884] Total swap = 124996kB
[  243.021970][T14884] 786301 pages RAM
[  243.026404][T14884] 0 pages HighMem/MovableOnly
[  243.030258][T14884] 241351 pages reserved
[  243.035705][T14884] 0 pages cma reserved
[  243.216324][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3803'.
[  243.220099][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3805'.
[  243.624659][T14943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3817'.
[  243.779250][T14953] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  243.871757][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3826'.
[  244.459341][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3847'.
[  244.495175][T15008] vlan0: entered allmulticast mode
[  244.499141][T15008] bridge0: entered allmulticast mode
[  244.501160][T15008] bridge11: port 1(vlan0) entered blocking state
[  244.503416][T15008] bridge11: port 1(vlan0) entered disabled state
[  244.508783][T15008] vlan0: entered promiscuous mode
[  244.515676][T15008] bridge0: entered promiscuous mode
[  244.820896][T15045] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  244.838478][T15048] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  244.843491][T15048] netem: change failed
[  244.857747][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3866'.
[  244.932068][T15054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3869'.
[  244.958485][T15061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3869'.
[  245.149792][T15057] netlink: 'syz.2.3871': attribute type 4 has an invalid length.
[  245.529332][T15096] syzkaller0: entered promiscuous mode
[  245.549259][T15096] syzkaller0: entered allmulticast mode
[  245.561061][T15096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.569815][T15095] tipc: Resetting bearer <eth:syzkaller0>
[  246.235106][T15106] netlink: 'syz.1.3887': attribute type 101 has an invalid length.
[  246.238486][T15106] netlink: 'syz.1.3887': attribute type 7 has an invalid length.
[  246.984377][T15095] tipc: Disabling bearer <eth:syzkaller0>
[  247.188079][T15114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3890'.
[  247.386344][T15136] syz_tun: entered allmulticast mode
[  247.422252][T15136] dvmrp1: entered allmulticast mode
[  247.437065][T15134] syz_tun: left allmulticast mode
[  247.724962][T15158] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  247.739120][T15158] bridge5: entered promiscuous mode
[  247.741381][T15158] bridge5: entered allmulticast mode
[  247.748097][T15158] team0: Port device bridge5 added
[  247.998415][   T33] audit: type=1800 audit(1757761594.989:4): pid=15171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3917" name="memory.events" dev="tmpfs" ino=7083 res=0 errno=0
[  248.008958][   T33] audit: type=1804 audit(1757761594.999:5): pid=15171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3917" name="memory.events" dev="tmpfs" ino=7083 res=1 errno=0
[  248.144639][T15177] __nla_validate_parse: 2 callbacks suppressed
[  248.144655][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3919'.
[  248.278706][T15187] lo: entered allmulticast mode
[  248.282133][T15187] lo: left allmulticast mode
[  248.471278][T15206] wg1 speed is unknown, defaulting to 1000
[  248.633950][T15219] wg1 speed is unknown, defaulting to 1000
[  248.971742][T15232] delete_channel: no stack
[  249.307010][T15264] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  249.717463][T15289] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  249.736088][T15289] team0: Port device dummy0 removed
[  249.741660][T15289] bond0: (slave bond_slave_0): Releasing backup interface
[  249.749516][T15289] bond0: (slave bond_slave_1): Releasing backup interface
[  249.756920][T15289] team0: Port device team_slave_0 removed
[  249.762509][T15289] team0: Port device team_slave_1 removed
[  249.768502][T15289] bond0: (slave batadv_slave_0): Releasing backup interface
[  249.772697][T15289] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.778984][T15289] bond0: (slave wlan1): Releasing backup interface
[  249.783896][T15289] bond2: (slave gretap2): Releasing active interface
[  249.820224][T15289] netlink: 'syz.0.3962': attribute type 10 has an invalid length.
[  249.822804][T15289] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  249.825736][T15289] bond0: (slave wlan1): Opening slave failed
[  249.841704][T15289] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.845473][T15289] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  249.901488][T15294] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3964'.
[  250.042361][T15302] netlink: 'syz.1.3968': attribute type 11 has an invalid length.
[  250.309881][T15323] openvswitch: netlink: IP tunnel TTL not specified.
[  250.441896][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'.
[  250.450832][T15333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3981'.
[  250.716433][T15332] vlan0 (unregistering): left promiscuous mode
[  250.729204][T15332] bridge0 (unregistering): left promiscuous mode
[  250.731807][T15332] bridge11: port 1(vlan0) entered disabled state
[  250.800777][T15339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3985'.
[  250.804969][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3985'.
[  250.966339][T15355] netlink: 'syz.0.3992': attribute type 1 has an invalid length.
[  251.141865][T15373] netlink: 'syz.0.4002': attribute type 21 has an invalid length.
[  251.144517][T15373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4002'.
[  251.418448][T15403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4015'.
[  251.490781][T15410] 8021q: VLANs not supported on bond0
[  251.496476][T15410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4015'.
[  251.576492][T15416] vti0: left promiscuous mode
[  251.754694][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4030'.
[  252.282427][T15451] nftables ruleset with unbound chain
[  252.283656][T15452] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  252.301521][T15452] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  252.324920][T15452] netlink: 'syz.1.4037': attribute type 10 has an invalid length.
[  252.328471][T15452] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  252.334172][T15452] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  252.338536][T15452] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  252.519714][T15463] : left promiscuous mode
[  252.717677][T15473] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.720840][T15473] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.778114][T15473] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.781561][T15473] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.809115][T15479] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  252.830101][T15473] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.833232][T15473] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.884233][T15473] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.888450][T15473] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.966413][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.970107][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.988074][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.991570][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.003011][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  253.006102][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.019802][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  253.022798][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.243880][T15511] netlink: 'syz.1.4066': attribute type 4 has an invalid length.
[  253.248995][T15511] __nla_validate_parse: 5 callbacks suppressed
[  253.249006][T15511] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4066'.
[  253.258976][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4067'.
[  253.262339][T15512] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4067'.
[  253.266422][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4067'.
[  253.994884][T15574] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.4098'.
[  254.008854][T15574] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  254.016269][T15574] openvswitch: netlink: Message has 252 unknown bytes.
[  254.130051][T15584] dummy0: entered promiscuous mode
[  254.133217][T15584] vlan0: entered promiscuous mode
[  254.476915][T15612] netlink: 'syz.0.4116': attribute type 8 has an invalid length.
[  254.559447][T15618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4119'.
[  254.722759][T15633] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4126'.
[  254.728103][T15633] Set syz0 is full, maxelem 0 reached
[  254.801118][T15639] C: renamed from lo (while UP)
[  254.815099][T15639] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  254.903350][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4131'.
[  255.041453][T15654] wg1 speed is unknown, defaulting to 1000
[  255.075933][T15658] netlink: 'syz.0.4135': attribute type 29 has an invalid length.
[  255.098868][T15658] netlink: 'syz.0.4135': attribute type 29 has an invalid length.
[  255.338112][T15657] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  255.341159][T15657] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  255.364045][T15673] wg1 speed is unknown, defaulting to 1000
[  255.690684][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  256.277617][T15694] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.340505][T15696] wg1 speed is unknown, defaulting to 1000
[  256.570366][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4157'.
[  256.644489][T15724] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4160'.
[  256.671437][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  256.724144][T15728] macsec0: entered promiscuous mode
[  256.728250][T15728] macsec0: entered allmulticast mode
[  256.783077][T15731] wg1 speed is unknown, defaulting to 1000
[  256.992582][T15739] pim6reg: entered allmulticast mode
[  256.996769][T15739] pim6reg: left allmulticast mode
[  257.533503][T15752] syzkaller1: entered promiscuous mode
[  257.539254][T15752] syzkaller1: entered allmulticast mode
[  257.588708][T15756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.808267][T15768] pim6reg1: entered promiscuous mode
[  257.810414][T15768] pim6reg1: entered allmulticast mode
[  258.104181][T15788] syzkaller1: entered promiscuous mode
[  258.107067][T15788] syzkaller1: entered allmulticast mode
[  258.149637][T15792] bond0: Unable to set down delay as MII monitoring is disabled
[  258.296565][T15800] __nla_validate_parse: 7 callbacks suppressed
[  258.296591][T15800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4192'.
[  258.341333][T15804] netlink: 'syz.1.4194': attribute type 39 has an invalid length.
[  258.690938][T15822] vlan2: entered promiscuous mode
[  258.693176][T15822] dummy0: entered promiscuous mode
[  258.878935][T15824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  259.491718][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4219'.
[  259.530979][T15862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4220'.
[  260.187898][T15905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4238'.
[  261.036505][T15935] sctp: [Deprecated]: syz.1.4251 (pid 15935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  261.036505][T15935] Use struct sctp_sack_info instead
[  261.042836][T15935] sctp: [Deprecated]: syz.1.4251 (pid 15935) Use of struct sctp_assoc_value in delayed_ack socket option.
[  261.042836][T15935] Use struct sctp_sack_info instead
[  261.334763][T15946] wg1 speed is unknown, defaulting to 1000
[  261.457441][T15957] netlink: 'syz.0.4259': attribute type 1 has an invalid length.
[  261.460495][T15957] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4259'.
[  261.463949][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4259'.
[  261.602191][T15961] netlink: 'syz.0.4261': attribute type 4 has an invalid length.
[  261.605666][T15961] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4261'.
[  261.610728][T15961] : renamed from bond0
[  261.988852][T15964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4262'.
[  262.213057][T15976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4269'.
[  262.311127][T15984] netlink: 732 bytes leftover after parsing attributes in process `syz.1.4272'.
[  262.677658][T16019] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  263.378557][T16062] netlink: 'syz.2.4304': attribute type 5 has an invalid length.
[  263.427647][T16066] ==================================================================
[  263.430915][T16066] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  263.433500][T16066] Read of size 4 at addr ffff8881121412c4 by task syz.2.4306/16066
[  263.437568][T16066] 
[  263.438991][T16066] CPU: 0 UID: 0 PID: 16066 Comm: syz.2.4306 Not tainted syzkaller #0 PREEMPT(full) 
[  263.439012][T16066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.439024][T16066] Call Trace:
[  263.439034][T16066]  <TASK>
[  263.439042][T16066]  dump_stack_lvl+0x189/0x250
[  263.439068][T16066]  ? __kasan_check_byte+0x12/0x40
[  263.439091][T16066]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.439110][T16066]  ? lock_release+0x4b/0x3e0
[  263.439134][T16066]  ? __virt_addr_valid+0x4a5/0x5c0
[  263.439153][T16066]  print_report+0xca/0x240
[  263.439167][T16066]  ? xfrm_alloc_spi+0x570/0xf30
[  263.439188][T16066]  kasan_report+0x118/0x150
[  263.439203][T16066]  ? xfrm_alloc_spi+0x570/0xf30
[  263.439218][T16066]  xfrm_alloc_spi+0x570/0xf30
[  263.439235][T16066]  ? xfrm_alloc_spi+0x2a0/0xf30
[  263.439254][T16066]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  263.439271][T16066]  ? xfrm_find_acq+0x87/0xa0
[  263.439291][T16066]  xfrm_alloc_userspi+0x70b/0xc90
[  263.439315][T16066]  ? apparmor_capable+0x137/0x1b0
[  263.439333][T16066]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  263.439385][T16066]  ? __nla_parse+0x40/0x60
[  263.439402][T16066]  xfrm_user_rcv_msg+0x7a3/0xab0
[  263.439426][T16066]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  263.439460][T16066]  ? __pfx___mutex_trylock_common+0x10/0x10
[  263.439478][T16066]  ? rcu_is_watching+0x15/0xb0
[  263.439492][T16066]  ? trace_contention_end+0x39/0x120
[  263.439506][T16066]  ? __mutex_lock+0x335/0x1350
[  263.439522][T16066]  netlink_rcv_skb+0x208/0x470
[  263.439540][T16066]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  263.439561][T16066]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  263.439589][T16066]  ? netlink_deliver_tap+0x2e/0x1b0
[  263.439603][T16066]  ? netlink_deliver_tap+0x2e/0x1b0
[  263.439617][T16066]  xfrm_netlink_rcv+0x79/0x90
[  263.439634][T16066]  netlink_unicast+0x82f/0x9e0
[  263.439656][T16066]  ? __pfx_netlink_unicast+0x10/0x10
[  263.439675][T16066]  ? netlink_sendmsg+0x642/0xb30
[  263.439688][T16066]  ? skb_put+0x11b/0x210
[  263.439702][T16066]  netlink_sendmsg+0x805/0xb30
[  263.439720][T16066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.439736][T16066]  ? aa_sock_msg_perm+0xf1/0x1d0
[  263.439750][T16066]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  263.439767][T16066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.439783][T16066]  __sock_sendmsg+0x21c/0x270
[  263.439806][T16066]  ____sys_sendmsg+0x505/0x830
[  263.439825][T16066]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.439843][T16066]  ? import_iovec+0x74/0xa0
[  263.439859][T16066]  ___sys_sendmsg+0x21f/0x2a0
[  263.439875][T16066]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.439900][T16066]  ? __fget_files+0x2a/0x420
[  263.439913][T16066]  ? __fget_files+0x3a0/0x420
[  263.439928][T16066]  __x64_sys_sendmsg+0x19b/0x260
[  263.439945][T16066]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.439969][T16066]  ? rcu_is_watching+0x15/0xb0
[  263.439984][T16066]  ? trace_sys_enter+0x25/0x100
[  263.440009][T16066]  do_syscall_64+0xfa/0x3b0
[  263.440026][T16066]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.440040][T16066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.440055][T16066]  ? exc_page_fault+0x9f/0xf0
[  263.440070][T16066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.440085][T16066] RIP: 0033:0x7fb68818eba9
[  263.440103][T16066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.440117][T16066] RSP: 002b:00007fb689080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.440135][T16066] RAX: ffffffffffffffda RBX: 00007fb6883d5fa0 RCX: 00007fb68818eba9
[  263.440146][T16066] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  263.440156][T16066] RBP: 00007fb688211e19 R08: 0000000000000000 R09: 0000000000000000
[  263.440164][T16066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.440172][T16066] R13: 00007fb6883d6038 R14: 00007fb6883d5fa0 R15: 00007ffc993141e8
[  263.440188][T16066]  </TASK>
[  263.440194][T16066] 
[  263.576195][T16066] Allocated by task 11572:
[  263.577694][T16066]  kasan_save_track+0x3e/0x80
[  263.579418][T16066]  __kasan_slab_alloc+0x6c/0x80
[  263.580984][T16066]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  263.582799][T16066]  xfrm_state_alloc+0x24/0x2f0
[  263.584593][T16066]  __find_acq_core+0x8a7/0x1c00
[  263.586098][T16066]  xfrm_find_acq+0x78/0xa0
[  263.587623][T16066]  xfrm_alloc_userspi+0x6b3/0xc90
[  263.589089][T16066]  xfrm_user_rcv_msg+0x7a3/0xab0
[  263.590644][T16066]  netlink_rcv_skb+0x208/0x470
[  263.592097][T16066]  xfrm_netlink_rcv+0x79/0x90
[  263.593624][T16066]  netlink_unicast+0x82f/0x9e0
[  263.595335][T16066]  netlink_sendmsg+0x805/0xb30
[  263.597153][T16066]  __sock_sendmsg+0x21c/0x270
[  263.598853][T16066]  ____sys_sendmsg+0x505/0x830
[  263.600528][T16066]  ___sys_sendmsg+0x21f/0x2a0
[  263.602187][T16066]  __x64_sys_sendmsg+0x19b/0x260
[  263.603644][T16066]  do_syscall_64+0xfa/0x3b0
[  263.605035][T16066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.607077][T16066] 
[  263.607908][T16066] Freed by task 24:
[  263.609326][T16066]  kasan_save_track+0x3e/0x80
[  263.611072][T16066]  kasan_save_free_info+0x46/0x50
[  263.612939][T16066]  __kasan_slab_free+0x5b/0x80
[  263.614669][T16066]  kmem_cache_free+0x18f/0x400
[  263.616232][T16066]  xfrm_state_gc_task+0x52d/0x6b0
[  263.617869][T16066]  process_scheduled_works+0xae1/0x17b0
[  263.619675][T16066]  worker_thread+0x8a0/0xda0
[  263.621225][T16066]  kthread+0x711/0x8a0
[  263.622638][T16066]  ret_from_fork+0x3fc/0x770
[  263.624367][T16066]  ret_from_fork_asm+0x1a/0x30
[  263.625972][T16066] 
[  263.626715][T16066] The buggy address belongs to the object at ffff888112141200
[  263.626715][T16066]  which belongs to the cache xfrm_state of size 928
[  263.630932][T16066] The buggy address is located 196 bytes inside of
[  263.630932][T16066]  freed 928-byte region [ffff888112141200, ffff8881121415a0)
[  263.635387][T16066] 
[  263.636196][T16066] The buggy address belongs to the physical page:
[  263.638296][T16066] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888112141680 pfn:0x112140
[  263.641746][T16066] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  263.644444][T16066] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  263.647123][T16066] page_type: f5(slab)
[  263.648612][T16066] raw: 057ff00000000040 ffff888104b7d780 dead000000000122 0000000000000000
[  263.651812][T16066] raw: ffff888112141680 00000000800e0009 00000000f5000000 0000000000000000
[  263.654901][T16066] head: 057ff00000000040 ffff888104b7d780 dead000000000122 0000000000000000
[  263.658291][T16066] head: ffff888112141680 00000000800e0009 00000000f5000000 0000000000000000
[  263.661786][T16066] head: 057ff00000000002 ffffea0004485001 00000000ffffffff 00000000ffffffff
[  263.664713][T16066] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  263.667379][T16066] page dumped because: kasan: bad access detected
[  263.669366][T16066] page_owner tracks the page as allocated
[  263.671114][T16066] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8017, tgid 8015 (syz.0.869), ts 117408980797, free_ts 114597212789
[  263.677288][T16066]  post_alloc_hook+0x240/0x2a0
[  263.678980][T16066]  get_page_from_freelist+0x21e4/0x22c0
[  263.680651][T16066]  __alloc_frozen_pages_noprof+0x181/0x370
[  263.682413][T16066]  alloc_pages_mpol+0x232/0x4a0
[  263.683922][T16066]  allocate_slab+0x8a/0x370
[  263.685276][T16066]  ___slab_alloc+0xbeb/0x1420
[  263.686694][T16066]  kmem_cache_alloc_noprof+0x283/0x3c0
[  263.688395][T16066]  xfrm_state_alloc+0x24/0x2f0
[  263.689931][T16066]  xfrm_add_sa+0x17d1/0x4070
[  263.691487][T16066]  xfrm_user_rcv_msg+0x7a3/0xab0
[  263.693175][T16066]  netlink_rcv_skb+0x208/0x470
[  263.694765][T16066]  xfrm_netlink_rcv+0x79/0x90
[  263.696244][T16066]  netlink_unicast+0x82f/0x9e0
[  263.697928][T16066]  netlink_sendmsg+0x805/0xb30
[  263.699594][T16066]  __sock_sendmsg+0x21c/0x270
[  263.701146][T16066]  ____sys_sendmsg+0x505/0x830
[  263.702774][T16066] page last free pid 5910 tgid 5910 stack trace:
[  263.705023][T16066]  __free_frozen_pages+0xbc4/0xd30
[  263.706842][T16066]  __put_partials+0x156/0x1a0
[  263.708680][T16066]  put_cpu_partial+0x17c/0x250
[  263.710520][T16066]  __slab_free+0x2d5/0x3c0
[  263.712150][T16066]  qlist_free_all+0x97/0x140
[  263.713972][T16066]  kasan_quarantine_reduce+0x148/0x160
[  263.716079][T16066]  __kasan_slab_alloc+0x22/0x80
[  263.717745][T16066]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  263.719940][T16066]  sock_alloc_inode+0x28/0xc0
[  263.721774][T16066]  alloc_inode+0x6a/0x1b0
[  263.723438][T16066]  __sock_create+0x12d/0x9f0
[  263.725184][T16066]  __sys_socket+0xd7/0x1b0
[  263.726903][T16066]  __x64_sys_socket+0x7a/0x90
[  263.728746][T16066]  do_syscall_64+0xfa/0x3b0
[  263.730470][T16066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.732557][T16066] 
[  263.733403][T16066] Memory state around the buggy address:
[  263.735395][T16066]  ffff888112141180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  263.737949][T16066]  ffff888112141200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  263.740457][T16066] >ffff888112141280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  263.743397][T16066]                                            ^
[  263.745361][T16066]  ffff888112141300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  263.747846][T16066]  ffff888112141380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  263.750492][T16066] ==================================================================
[  263.753322][T16066] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  263.755538][T16066] CPU: 0 UID: 0 PID: 16066 Comm: syz.2.4306 Not tainted syzkaller #0 PREEMPT(full) 
[  263.758212][T16066] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.761287][T16066] Call Trace:
[  263.762324][T16066]  <TASK>
[  263.763253][T16066]  dump_stack_lvl+0x99/0x250
[  263.764673][T16066]  ? __asan_memcpy+0x40/0x70
[  263.766114][T16066]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.767689][T16066]  ? __pfx__printk+0x10/0x10
[  263.769102][T16066]  vpanic+0x281/0x750
[  263.770414][T16066]  ? __pfx_vpanic+0x10/0x10
[  263.771932][T16066]  ? irqentry_exit+0x74/0x90
[  263.773347][T16066]  panic+0xb9/0xc0
[  263.774494][T16066]  ? __pfx_panic+0x10/0x10
[  263.775865][T16066]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  263.777664][T16066]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  263.779448][T16066]  ? xfrm_alloc_spi+0x570/0xf30
[  263.780958][T16066]  check_panic_on_warn+0x89/0xb0
[  263.782481][T16066]  ? xfrm_alloc_spi+0x570/0xf30
[  263.783984][T16066]  end_report+0x78/0x160
[  263.785281][T16066]  kasan_report+0x129/0x150
[  263.786695][T16066]  ? xfrm_alloc_spi+0x570/0xf30
[  263.788220][T16066]  xfrm_alloc_spi+0x570/0xf30
[  263.789622][T16066]  ? xfrm_alloc_spi+0x2a0/0xf30
[  263.791301][T16066]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  263.793027][T16066]  ? xfrm_find_acq+0x87/0xa0
[  263.794718][T16066]  xfrm_alloc_userspi+0x70b/0xc90
[  263.796540][T16066]  ? apparmor_capable+0x137/0x1b0
[  263.798105][T16066]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  263.799919][T16066]  ? __nla_parse+0x40/0x60
[  263.801511][T16066]  xfrm_user_rcv_msg+0x7a3/0xab0
[  263.803307][T16066]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  263.805284][T16066]  ? __pfx___mutex_trylock_common+0x10/0x10
[  263.807429][T16066]  ? rcu_is_watching+0x15/0xb0
[  263.808932][T16066]  ? trace_contention_end+0x39/0x120
[  263.810676][T16066]  ? __mutex_lock+0x335/0x1350
[  263.812416][T16066]  netlink_rcv_skb+0x208/0x470
[  263.814115][T16066]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  263.815918][T16066]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  263.817815][T16066]  ? netlink_deliver_tap+0x2e/0x1b0
[  263.819533][T16066]  ? netlink_deliver_tap+0x2e/0x1b0
[  263.821370][T16066]  xfrm_netlink_rcv+0x79/0x90
[  263.823008][T16066]  netlink_unicast+0x82f/0x9e0
[  263.824496][T16066]  ? __pfx_netlink_unicast+0x10/0x10
[  263.826555][T16066]  ? netlink_sendmsg+0x642/0xb30
[  263.828439][T16066]  ? skb_put+0x11b/0x210
[  263.829769][T16066]  netlink_sendmsg+0x805/0xb30
[  263.831442][T16066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.833363][T16066]  ? aa_sock_msg_perm+0xf1/0x1d0
[  263.835121][T16066]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  263.836860][T16066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  263.838442][T16066]  __sock_sendmsg+0x21c/0x270
[  263.839933][T16066]  ____sys_sendmsg+0x505/0x830
[  263.841647][T16066]  ? __pfx_____sys_sendmsg+0x10/0x10
[  263.843441][T16066]  ? import_iovec+0x74/0xa0
[  263.845025][T16066]  ___sys_sendmsg+0x21f/0x2a0
[  263.846723][T16066]  ? __pfx____sys_sendmsg+0x10/0x10
[  263.848651][T16066]  ? __fget_files+0x2a/0x420
[  263.850058][T16066]  ? __fget_files+0x3a0/0x420
[  263.851743][T16066]  __x64_sys_sendmsg+0x19b/0x260
[  263.853540][T16066]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  263.855437][T16066]  ? rcu_is_watching+0x15/0xb0
[  263.856894][T16066]  ? trace_sys_enter+0x25/0x100
[  263.858689][T16066]  do_syscall_64+0xfa/0x3b0
[  263.860312][T16066]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.862131][T16066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.864009][T16066]  ? exc_page_fault+0x9f/0xf0
[  263.865489][T16066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.867236][T16066] RIP: 0033:0x7fb68818eba9
[  263.868747][T16066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.875246][T16066] RSP: 002b:00007fb689080038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  263.877909][T16066] RAX: ffffffffffffffda RBX: 00007fb6883d5fa0 RCX: 00007fb68818eba9
[  263.880638][T16066] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  263.883738][T16066] RBP: 00007fb688211e19 R08: 0000000000000000 R09: 0000000000000000
[  263.886242][T16066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.888960][T16066] R13: 00007fb6883d6038 R14: 00007fb6883d5fa0 R15: 00007ffc993141e8
[  263.892049][T16066]  </TASK>
[  263.894022][T16066] Kernel Offset: disabled
[  263.895471][T16066] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:06:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012f8 RDI=00000000000012f9 RBP=00000000000003f8 RSP=ffffc9000624e9f0
R8 =ffff88801fcc8237 R9 =1ffff11003f99046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b01908 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb6890806c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=00000000285b4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb6883a7498 00007fb6883a7470 XMM03=00007fb6883a74a8 00007fb6883a74a0
XMM04=00007fb688f0d100 00007fb6883a7460 XMM05=00007fb6883a7478 00007fb6883a74c0
XMM06=00007fb6883a74b8 00007fb6883a74b0 XMM07=00007fb6883a74a8 00007fb6883a74a0
XMM08=0000000000000000 00007fb688212ee7 XMM09=0000000000000000 00007fb688212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822e5b90 RBX=0000000000000001 RCX=ffff888108731cc0 RDX=0000000000000000
RSI=ffffffff8be33860 RDI=ffffffff8be33820 RBP=ffffea00046300c0 RSP=ffffc9000338f340
R8 =0000000000000000 R9 =ffffffff822e5b4d R10=dffffc0000000000 R11=fffff940008c6019
R12=ffffffff822e5b4d R13=0000000000000000 R14=1ffffd40008c6019 R15=0000000000000001
RIP=ffffffff81bfae87 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555d865500 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055637063d000 CR3=0000000112cea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=00000100000001ff ffe4c3e165bb0047 XMM03=0000040043001900 0000250000005600
XMM04=0000000000000000 0000000000000000 XMM05=0000555573c687af 0000555573c686f0
XMM06=0000555573c8f3c4 0000555573c8f3c0 XMM07=0000002500000056 0000000100000001
XMM08=00080004e8030008 0004e00300020004 XMM09=5f72747271206220 3061663731306139
XMM10=657473696765725f 746e696f70646e65 XMM11=6666666666660a32 2e79656b5f5f2e72
XMM12=74735f5f5f69705f 5f20422030303030 XMM13=6574707972636564 5f7373625f747261
XMM14=3030303261396666 6666666666660a64 XMM15=645f7373625f646e 655f5f2042203030
