last executing test programs:

598.681765ms ago: executing program 2 (id=5339):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x20, 0x49, 0x1, 0x70bd26, 0xfffffffc, {0xa, 0x0, 0x6e80}, [@nested={0x9, 0x1, 0x0, 0x1, [@generic='\r*y\aX']}]}, 0x20}}, 0x20048800)

528.32022ms ago: executing program 2 (id=5341):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)

456.632114ms ago: executing program 2 (id=5343):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x5, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3c9a5253c36338db, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x28}}, 0x20008004)

456.06571ms ago: executing program 1 (id=5345):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @private0}, 0x1c)
getsockname$packet(r0, 0x0, &(0x7f0000000180))

368.573661ms ago: executing program 2 (id=5347):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}}, 0x0)

368.050918ms ago: executing program 1 (id=5349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x301}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xa2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10)

367.804862ms ago: executing program 2 (id=5350):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x32}, @in6=@private2, {0x0, 0x7}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x765}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfffffff9}]}, 0x100}}, 0x0)

309.529351ms ago: executing program 1 (id=5351):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000))

309.343162ms ago: executing program 1 (id=5353):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0)

309.111853ms ago: executing program 2 (id=5354):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$alg(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c)

238.742502ms ago: executing program 1 (id=5356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0)

238.597531ms ago: executing program 1 (id=5357):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818)
sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081)

179.583059ms ago: executing program 0 (id=5360):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100)

120.263553ms ago: executing program 0 (id=5361):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000))

70.222615ms ago: executing program 0 (id=5362):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x9)

70.081721ms ago: executing program 0 (id=5363):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r2, 0x4}}]}, 0xc4}}, 0x0)

226.321µs ago: executing program 0 (id=5364):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

0s ago: executing program 0 (id=5365):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x4, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @tfcpad={0x8, 0x16, 0x49}]}, 0x144}}, 0x0)

kernel console output (not intermixed with test programs):

 00000246 ORIG_RAX: 000000000000012b
[   66.175903][ T6741] RAX: ffffffffffffffda RBX: 00007f63d69b5fa0 RCX: 00007f63d678eb69
[   66.175908][ T6741] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b
[   66.175912][ T6741] RBP: 00007f63d6811df1 R08: 0000000000000000 R09: 0000000000000000
[   66.175916][ T6741] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[   66.175921][ T6741] R13: 0000000000000000 R14: 00007f63d69b5fa0 R15: 00007ffd0ba1f0f8
[   66.175932][ T6741]  </TASK>
[   66.294351][   T33] audit: type=1804 audit(1754399336.960:2): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.378" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=747 res=1 errno=0
[   66.304354][   T33] audit: type=1800 audit(1754399336.960:3): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.378" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=747 res=0 errno=0
[   66.623815][ T6762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.158916][ T6812] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   67.333760][ T6818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.337346][ T6818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.373099][ T6819] netlink: 'syz.1.411': attribute type 5 has an invalid length.
[   67.384537][ T6818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.388014][ T6818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.443960][ T6818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.447672][ T6818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.520910][ T6818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.524489][ T6818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.581484][ T5712] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.584312][ T5712] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.592666][ T5849] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.595441][ T5849] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.605682][ T5849] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.608497][ T5849] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.617071][ T5849] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.619956][ T5849] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.125695][ T6855] __nla_validate_parse: 9 callbacks suppressed
[   68.125707][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.426'.
[   68.382221][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'.
[   68.382815][ T6878] syzkaller1: entered promiscuous mode
[   68.385212][ T6879] netlink: 'syz.0.438': attribute type 14 has an invalid length.
[   68.387032][ T6878] syzkaller1: entered allmulticast mode
[   68.396798][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'.
[   68.399950][ T6879] netlink: 'syz.0.438': attribute type 14 has an invalid length.
[   68.900020][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.448'.
[   69.020656][ T5824] Bluetooth: hci2: command tx timeout
[   69.080071][ T6916] netlink: 'syz.2.456': attribute type 10 has an invalid length.
[   69.091961][ T6916] team0: Port device dummy0 added
[   69.096602][ T6916] netlink: 'syz.2.456': attribute type 10 has an invalid length.
[   69.104847][ T6916] team0: Port device dummy0 removed
[   69.109804][ T6916] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   69.204848][ T6924] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   69.471893][ T6943] netlink: 'syz.0.469': attribute type 21 has an invalid length.
[   69.474477][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.469'.
[   69.791376][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'.
[   69.794478][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'.
[   69.961432][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'.
[   70.271020][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[   70.558314][ T7016] tipc: Started in network mode
[   70.560011][ T7016] tipc: Node identity 468ec323af3e, cluster identity 4711
[   70.569020][ T7016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.574966][ T7015] tipc: Disabling bearer <eth:syzkaller0>
[   70.876134][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.878699][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   70.970069][ T7041] openvswitch: netlink: IP tunnel dst address not specified
[   71.014138][ T7043] netlink: 'syz.2.514': attribute type 5 has an invalid length.
[   71.116830][ T7054] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   71.139463][ T7054] tipc: Resetting bearer <eth:syzkaller0>
[   71.141789][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'.
[   71.146422][ T7053] tipc: Resetting bearer <eth:syzkaller0>
[   72.122483][ T5850] tipc: Node number set to 3920675619
[   72.182151][ T7053] tipc: Disabling bearer <eth:syzkaller0>
[   72.271532][ T7081] netlink: 'syz.2.530': attribute type 1 has an invalid length.
[   72.798537][ T7135] batadv_slave_1: entered promiscuous mode
[   72.828339][ T7141] Illegal XDP return value 4294967274 on prog  (id 91) dev N/A, expect packet loss!
[   73.085299][ T7167] openvswitch: netlink: Duplicate or invalid key (type 0).
[   73.088390][ T7167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.549977][ T7205] __nla_validate_parse: 3 callbacks suppressed
[   73.549986][ T7205] netlink: 104 bytes leftover after parsing attributes in process `syz.1.583'.
[   73.649005][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.586'.
[   73.989677][ T7242] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.601'.
[   74.008179][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'.
[   74.516167][ T7290] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.620'.
[   75.612929][ T7324] netlink: 260 bytes leftover after parsing attributes in process `syz.0.636'.
[   75.616930][ T7324] netlink: 260 bytes leftover after parsing attributes in process `syz.0.636'.
[   75.695669][ T7330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.698990][ T7330] syzkaller0: entered promiscuous mode
[   75.702665][ T7330] syzkaller0: entered allmulticast mode
[   75.719049][ T7330] tipc: Resetting bearer <eth:syzkaller0>
[   75.726579][ T7329] tipc: Resetting bearer <eth:syzkaller0>
[   75.737570][ T7329] tipc: Disabling bearer <eth:syzkaller0>
[   75.973702][ T7348] netlink: 'syz.1.648': attribute type 10 has an invalid length.
[   76.535780][   T33] audit: type=1800 audit(1754399347.190:4): pid=7360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.654" name="cgroup.controllers" dev="tmpfs" ino=1247 res=0 errno=0
[   76.719477][ T7391] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[   76.771253][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[   77.167343][ T7442] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[   77.169919][ T7442] netlink: 'syz.1.690': attribute type 4 has an invalid length.
[   77.185126][ T7442] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.690'.
[   77.188635][ T7442] netlink: 'syz.1.690': attribute type 1 has an invalid length.
[   77.191821][ T7442] netlink: 'syz.1.690': attribute type 4 has an invalid length.
[   77.194920][ T7442] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.690'.
[   77.383565][ T7471] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   77.386644][ T7471] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   77.536964][ T7488] ieee802154 phy0 wpan0: encryption failed: -22
[   77.576680][ T7492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.579348][ T7492] syzkaller0: entered promiscuous mode
[   77.581417][ T7492] syzkaller0: entered allmulticast mode
[   77.601617][ T7492] tipc: Resetting bearer <eth:syzkaller0>
[   77.604686][ T7491] tipc: Resetting bearer <eth:syzkaller0>
[   77.615665][ T7491] tipc: Disabling bearer <eth:syzkaller0>
[   78.439014][ T7568] netlink: 'syz.0.746': attribute type 10 has an invalid length.
[   78.693628][ T7596] netlink: 'syz.2.760': attribute type 3 has an invalid length.
[   78.879942][ T7622] ip6gre1: entered promiscuous mode
[   79.635395][ T7648] netlink: 'syz.1.783': attribute type 11 has an invalid length.
[   81.105530][ T3140] cfg80211: failed to load regulatory.db
[   82.923594][ T7671] __nla_validate_parse: 1 callbacks suppressed
[   82.923609][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'.
[   83.069845][ T7684] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[   83.133826][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'.
[   83.184407][ T7692] team0: Device sit1 is of different type
[   83.472003][ T7716] netlink: 248 bytes leftover after parsing attributes in process `syz.1.814'.
[   83.599264][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.690285][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'.
[   83.834369][ T7746] openvswitch: netlink: IP tunnel TTL not specified.
[   84.283017][ T7763] netlink: 'syz.1.828': attribute type 12 has an invalid length.
[   84.784872][ T7749] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.884180][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'.
[   84.889315][ T7782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.966137][ T7790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'.
[   85.304039][ T7819] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[   86.275581][ T7904] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[   86.312211][ T7904] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.349324][ T7904] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.353926][ T7904] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   86.360403][ T7904] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   86.377566][ T7909] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   86.397046][ T7912] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   87.593333][ T7940] nbd0: detected capacity change from 0 to 549764202496
[   87.600203][   T55] block nbd0: Receive control failed (result -104)
[   87.731789][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.886'.
[   87.901615][ T7976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.895'.
[   88.146962][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.907'.
[   88.343553][ T8017] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.417857][ T8017] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.430136][ T8021] netlink: 'syz.0.917': attribute type 5 has an invalid length.
[   88.509050][ T8017] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.558295][ T8032] netlink: 104 bytes leftover after parsing attributes in process `syz.1.922'.
[   88.591107][ T8017] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.686523][ T5712] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.696751][ T8040] tipc: New replicast peer: 0.0.0.0
[   88.699350][ T8040] tipc: Enabled bearer <udp:syz2>, priority 10
[   88.705675][ T5712] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.717594][ T8040] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   88.720846][ T5712] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.732206][ T5712] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.845845][ T8048] netlink: 'syz.0.930': attribute type 5 has an invalid length.
[   88.846502][ T8046] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.849890][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'.
[   88.852629][ T8046] syzkaller0: entered promiscuous mode
[   88.857267][ T8046] syzkaller0: entered allmulticast mode
[   88.873601][ T8046] tipc: Resetting bearer <eth:syzkaller0>
[   88.877945][ T8045] tipc: Resetting bearer <eth:syzkaller0>
[   88.887635][ T8045] tipc: Disabling bearer <eth:syzkaller0>
[   89.065389][ T8059] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   89.180237][ T8069] lo: entered allmulticast mode
[   89.199122][ T8069] lo: left allmulticast mode
[   89.331900][ T8083] netlink: 100 bytes leftover after parsing attributes in process `syz.2.944'.
[   89.335515][ T8083] netlink: 100 bytes leftover after parsing attributes in process `syz.2.944'.
[   89.374573][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'.
[   89.465601][ T8097] netlink: 'syz.2.951': attribute type 11 has an invalid length.
[   89.468421][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'.
[   89.534233][ T8106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.565716][ T8111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.958'.
[   89.803554][ T8125] netlink: 'syz.0.964': attribute type 1 has an invalid length.
[   90.160321][ T8150] netlink: 'syz.0.976': attribute type 7 has an invalid length.
[   90.169117][ T8150] netlink: 'syz.0.976': attribute type 8 has an invalid length.
[   91.485664][ T8187] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   91.542811][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.996'.
[   91.636923][ T8207] netlink: 'syz.0.1001': attribute type 10 has an invalid length.
[   91.689082][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'.
[   91.874746][ T8238] xt_socket: unknown flags 0xd0
[   91.961166][ T8249] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[   92.747743][ T8283] Bluetooth: MGMT ver 1.23
[   92.895742][ T8291] netlink: 'syz.1.1037': attribute type 1 has an invalid length.
[   92.908317][ T8291] bond2: entered promiscuous mode
[   92.910127][ T8291] bond2: entered allmulticast mode
[   92.931922][ T8291] bridge2: the hash_elasticity option has been deprecated and is always 16
[   93.052851][ T8298] netlink: 'syz.1.1040': attribute type 2 has an invalid length.
[   93.263998][ T8320] __nla_validate_parse: 4 callbacks suppressed
[   93.264009][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'.
[   93.275830][ T8320] batadv0: entered promiscuous mode
[   93.278435][ T8320] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   93.283381][ T8320] batadv0: left promiscuous mode
[   93.718039][ T8364] syzkaller1: entered promiscuous mode
[   93.720220][ T8364] syzkaller1: entered allmulticast mode
[   93.940088][ T8375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1070'.
[   93.943604][ T8375] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1070'.
[   93.946696][ T8375] netlink: 'syz.2.1070': attribute type 5 has an invalid length.
[   93.949645][ T8375] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1070'.
[   94.039287][ T8377] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1070'.
[   94.159530][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'.
[   94.311658][ T8400] netlink: 'syz.2.1078': attribute type 8 has an invalid length.
[   94.337843][ T8400] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.344647][ T8400] bond0: (slave bond1): Enslaving as an active interface with an up link
[   94.526572][ T8419] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1087'.
[   94.530623][ T8419] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1087'.
[   94.638429][ T8431] trusted_key: syz.2.1093 sent an empty control message without MSG_MORE.
[   94.662962][ T8433] hsr0: entered promiscuous mode
[   94.753254][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'.
[   95.319397][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1111'.
[   97.852202][ T8556] netlink: 'syz.0.1143': attribute type 9 has an invalid length.
[   97.856339][ T8556] netlink: 'syz.0.1143': attribute type 9 has an invalid length.
[   97.859068][ T8562] netlink: 'syz.1.1145': attribute type 3 has an invalid length.
[   97.864511][ T8562] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[   97.896135][ T8564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.899926][ T8564] syzkaller0: entered promiscuous mode
[   97.902401][ T8564] syzkaller0: entered allmulticast mode
[   97.918152][ T8564] tipc: Resetting bearer <eth:syzkaller0>
[   97.925438][ T8563] tipc: Resetting bearer <eth:syzkaller0>
[   97.938713][ T8563] tipc: Disabling bearer <eth:syzkaller0>
[   98.331894][ T8587] netlink: 'syz.1.1154': attribute type 1 has an invalid length.
[   98.821611][   T33] audit: type=1800 audit(1754399369.490:5): pid=8628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1173" name=33FFFF dev="tmpfs" ino=2065 res=0 errno=0
[   99.125318][ T8645] __nla_validate_parse: 3 callbacks suppressed
[   99.125334][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'.
[   99.134661][ T8645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'.
[   99.175824][ T8648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.437180][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[   99.589661][ T8693] netlink: 'syz.1.1203': attribute type 15 has an invalid length.
[   99.618955][ T8695] netlink: 'syz.2.1204': attribute type 1 has an invalid length.
[   99.623449][ T8695] netlink: 'syz.2.1204': attribute type 2 has an invalid length.
[   99.783391][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1213'.
[  100.251604][ T8746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1228'.
[  100.255259][ T8746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1228'.
[  100.259036][ T8746] netlink: 'syz.1.1228': attribute type 4 has an invalid length.
[  100.279831][ T8746] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1228'.
[  100.851029][ T8767] netlink: 'syz.2.1236': attribute type 1 has an invalid length.
[  100.869373][ T8767] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.887124][ T8767] bond2: (slave gretap1): making interface the new active one
[  100.890290][ T8767] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  100.938669][ T8773] syzkaller1: entered promiscuous mode
[  100.941334][ T8773] syzkaller1: entered allmulticast mode
[  101.207603][ T8789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.213391][ T8789] syzkaller0: entered promiscuous mode
[  101.215661][ T8789] syzkaller0: entered allmulticast mode
[  101.227707][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'.
[  101.234262][ T8789] tipc: Resetting bearer <eth:syzkaller0>
[  101.240772][ T8788] tipc: Resetting bearer <eth:syzkaller0>
[  101.257152][ T8788] tipc: Disabling bearer <eth:syzkaller0>
[  101.639556][ T8821] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  101.641104][ T8819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  102.855775][ T8892] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.971556][ T8893] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1290'.
[  103.027192][ T8894] sctp: [Deprecated]: syz.0.1290 (pid 8894) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.027192][ T8894] Use struct sctp_sack_info instead
[  103.293917][ T8896] netlink: 'syz.1.1291': attribute type 1 has an invalid length.
[  103.579739][ T8922] netlink: 'syz.1.1304': attribute type 10 has an invalid length.
[  103.589529][ T5738] IPVS: starting estimator thread 0...
[  103.594014][ T8922] team0: Port device dummy0 added
[  103.680812][ T8925] IPVS: using max 44 ests per chain, 105600 per kthread
[  103.729759][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'.
[  103.997936][ T8960] delete_channel: no stack
[  104.903286][ T8974] netlink: 'syz.1.1327': attribute type 3 has an invalid length.
[  104.906688][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1327'.
[  105.029003][ T8982] syzkaller0: entered promiscuous mode
[  105.031344][ T8982] syzkaller0: entered allmulticast mode
[  106.167192][ T9024] af_packet: tpacket_rcv: packet too big, clamped from 65350 to 3958. macoff=82
[  106.172198][ T9027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  106.257938][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1352'.
[  106.299821][ T9034] team0: Port device dummy0 removed
[  106.304468][ T9034] bridge_slave_0: left allmulticast mode
[  106.306808][ T9034] bridge_slave_0: left promiscuous mode
[  106.314850][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.331993][ T9034] bridge_slave_1: left allmulticast mode
[  106.338156][ T9034] bridge_slave_1: left promiscuous mode
[  106.340316][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.349160][ T9034] bond0: (slave bond_slave_0): Releasing backup interface
[  106.355040][ T9034] bond0: (slave bond_slave_1): Releasing backup interface
[  106.363538][ T9034] team0: Port device team_slave_0 removed
[  106.368267][ T9034] team0: Port device team_slave_1 removed
[  106.375644][ T9034] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.378185][ T9034] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.385281][ T9034] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.387841][ T9034] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.396378][ T9034] bond0: (slave wlan1): Releasing backup interface
[  106.400833][ T9034] bond0: (slave vxlan0): Releasing backup interface
[  106.406678][ T9034] bond1: (slave bridge1): Releasing active interface
[  106.420765][ T9037] team0: Mode changed to "broadcast"
[  106.426919][ T5849] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.430358][ T5849] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.454518][ T5849] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.459618][ T5849] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.720146][ T9066] IPVS: persistence engine module ip_vs_pe_ not found
[  106.847167][ T9079] netlink: 'syz.1.1373': attribute type 11 has an invalid length.
[  106.850361][ T9079] netlink: 'syz.1.1373': attribute type 11 has an invalid length.
[  106.858778][ T9079] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1373'.
[  106.947704][ T9081] 8021q: adding VLAN 0 to HW filter on device bond3
[  106.953563][ T9081] bond0: (slave bond3): Enslaving as an active interface with an up link
[  107.067149][ T9094] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  107.102231][ T9096] netlink: 'syz.2.1381': attribute type 1 has an invalid length.
[  107.128647][ T9096] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.165177][ T9096] bond4: (slave veth5): Enslaving as an active interface with a down link
[  107.184078][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv1
[  107.187249][ T9096] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  107.508141][ T9117] netlink: 'syz.0.1388': attribute type 21 has an invalid length.
[  107.512880][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1388'.
[  107.707099][ T9127] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  107.868607][ T9139] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  107.944377][ T9145] nbd: must specify at least one socket
[  108.049011][ T9150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'.
[  108.122401][ T9156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1407'.
[  108.132776][ T9156] vlan2: entered promiscuous mode
[  108.134827][ T9156] bridge0: entered promiscuous mode
[  108.192978][ T9163] IPv6: sit3: Disabled Multicast RS
[  108.195733][ T9163] sit3: entered allmulticast mode
[  109.495587][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1434'.
[  109.529725][ T9241] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1435'.
[  110.005198][ T9270] netlink: 'syz.2.1448': attribute type 1 has an invalid length.
[  110.008526][ T9270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.257110][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'.
[  110.445082][ T9317] netlink: 'syz.1.1469': attribute type 1 has an invalid length.
[  110.642667][ T9330] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee
[  110.780211][ T9336] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  110.783581][ T9336] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  111.043767][ T9352] rdma_op ffff88803bb6f9f0 conn xmit_rdma 0000000000000000
[  111.133548][ T9358] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1487'.
[  111.146199][ T9358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1487'.
[  111.151117][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1487'.
[  111.448677][ T9387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1501'.
[  111.454258][ T9387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1501'.
[  111.457106][ T9387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1501'.
[  111.463846][ T9387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1501'.
[  111.466702][ T9387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1501'.
[  111.475100][ T9387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1501'.
[  111.504002][ T9393] netlink: 'syz.2.1504': attribute type 282 has an invalid length.
[  111.563177][ T9399] netlink: 'syz.1.1507': attribute type 2 has an invalid length.
[  111.566000][ T9399] netlink: 'syz.1.1507': attribute type 1 has an invalid length.
[  111.605199][ T9405] bridge4: the hash_elasticity option has been deprecated and is always 16
[  111.608341][ T9405] bridge4: entered allmulticast mode
[  111.809158][ T5848] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  111.817455][ T5848] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  111.823820][ T5848] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  111.827288][ T5848] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.013175][ T9444] vxcan3: entered allmulticast mode
[  112.134048][ T9455] sctp: [Deprecated]: syz.1.1534 (pid 9455) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.134048][ T9455] Use struct sctp_sack_info instead
[  112.333692][ T9485] netlink: 'syz.2.1549': attribute type 1 has an invalid length.
[  112.421620][ T9492] netlink: 'syz.1.1552': attribute type 7 has an invalid length.
[  112.424211][ T9492] netlink: 'syz.1.1552': attribute type 3 has an invalid length.
[  112.954413][ T9545] netlink: 'syz.1.1574': attribute type 16 has an invalid length.
[  112.957024][ T9545] netlink: 'syz.1.1574': attribute type 17 has an invalid length.
[  113.015206][ T9545] 8021q: adding VLAN 0 to HW filter on device team0
[  113.020184][ T9545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.054836][ T9545] syz.1.1574 (9545) used greatest stack depth: 19608 bytes left
[  113.062371][ T5712] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  113.065259][ T5712] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  113.273255][ T9571] syz_tun: entered allmulticast mode
[  113.277621][ T9570] syz_tun: left allmulticast mode
[  113.311364][ T9573] vlan2: entered promiscuous mode
[  113.313100][ T9573] bond0: entered promiscuous mode
[  113.315019][ T9573] vlan2: entered allmulticast mode
[  113.316742][ T9573] bond0: entered allmulticast mode
[  113.400700][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.146962][ T5849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.152986][ T5849] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  114.333292][ T9637] team0: Mode "" not found
[  114.569240][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.573391][ T9650] 8021q: adding VLAN 0 to HW filter on device team0
[  114.578915][ T9650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.792022][ T5738] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  115.290554][ T9676] __nla_validate_parse: 38 callbacks suppressed
[  115.290566][ T9676] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1626'.
[  115.355640][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1630'.
[  115.363629][ T9687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1631'.
[  115.400838][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1633'.
[  115.454671][ T9697] validate_nla: 4 callbacks suppressed
[  115.454682][ T9697] netlink: 'syz.0.1636': attribute type 15 has an invalid length.
[  115.578654][ T9716] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1645'.
[  115.602756][ T9718] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  115.657558][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1648'.
[  115.663151][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1648'.
[  115.666203][ T9722] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  116.043935][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1659'.
[  116.069225][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'.
[  116.073683][ T9747] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  116.076444][ T9747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.136820][ T9751] netlink: 'syz.2.1662': attribute type 3 has an invalid length.
[  117.031716][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'.
[  117.104553][ T9763] netlink: 'syz.0.1667': attribute type 10 has an invalid length.
[  117.113850][ T9763] team0: Port device dummy0 added
[  117.118285][ T9763] netlink: 'syz.0.1667': attribute type 10 has an invalid length.
[  117.121556][ T9763] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  117.127098][ T9763] team0: Failed to send options change via netlink (err -105)
[  117.129711][ T9763] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  117.139971][ T9763] team0: Port device dummy0 removed
[  117.164364][ T9763] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  117.458352][ T9805] netlink: 'syz.0.1679': attribute type 1 has an invalid length.
[  117.464332][ T9805] netlink: 'syz.0.1679': attribute type 1 has an invalid length.
[  117.533517][ T9816] netlink: 'syz.1.1682': attribute type 1 has an invalid length.
[  117.571606][ T9816] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.615985][ T9816] bond3: (slave veth5): Enslaving as an active interface with a down link
[  117.637907][ T9816] vlan4: entered allmulticast mode
[  117.640128][ T9816] veth1: entered allmulticast mode
[  117.644654][ T9816] veth1: entered promiscuous mode
[  117.649917][ T9816] veth1: left promiscuous mode
[  117.660009][ T9816] bond3: (slave vlan4): making interface the new active one
[  117.665263][ T9816] veth1: entered promiscuous mode
[  117.667600][ T9816] vlan4: entered promiscuous mode
[  117.670009][ T9816] bond3: (slave vlan4): Enslaving as an active interface with an up link
[  117.676406][ T9815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.835801][ T9857] tipc: Resetting bearer <eth:ipvlan1>
[  117.859704][ T9859] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  118.140662][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  118.232184][   T60] block nbd0: Possible stuck request ffff888021a30000: control (read@0,4096B). Runtime 30 seconds
[  118.787533][ T9899] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  118.850852][ T9899] nbd1: detected capacity change from 0 to 127
[  118.863011][   T56] block nbd1: Receive control failed (result -32)
[  118.866828][ T9803] block nbd1: Dead connection, failed to find a fallback
[  118.869446][ T9803] block nbd1: shutting down sockets
[  118.886632][ T9803] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.888263][ T9915] netlink: 'syz.0.1719': attribute type 21 has an invalid length.
[  118.889707][ T9803] Buffer I/O error on dev nbd1, logical block 0, async page read
[  118.904034][ T9803] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.907746][ T9803] Buffer I/O error on dev nbd1, logical block 1, async page read
[  118.910675][ T9803] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.913993][ T9803] Buffer I/O error on dev nbd1, logical block 2, async page read
[  118.916642][ T9803] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.917184][ T9915] netlink: 'syz.0.1719': attribute type 5 has an invalid length.
[  118.923095][ T9803] Buffer I/O error on dev nbd1, logical block 3, async page read
[  118.925959][ T9803] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.929001][ T9803] Buffer I/O error on dev nbd1, logical block 0, async page read
[  118.936063][ T9803] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.939078][ T9803] Buffer I/O error on dev nbd1, logical block 1, async page read
[  118.952272][ T9803] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.955344][ T9803] Buffer I/O error on dev nbd1, logical block 2, async page read
[  118.957991][ T9803] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.969061][ T9803] Buffer I/O error on dev nbd1, logical block 3, async page read
[  118.984278][ T9803] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.987264][ T9803] Buffer I/O error on dev nbd1, logical block 0, async page read
[  118.989898][ T9803] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  118.999116][ T9803] Buffer I/O error on dev nbd1, logical block 1, async page read
[  119.003220][ T9803] ldm_validate_partition_table(): Disk read failed.
[  119.005976][ T9922] caif0: entered allmulticast mode
[  119.006533][ T9803] Dev nbd1: unable to read RDB block 0
[  119.016797][ T9923] tun0: tun_chr_ioctl cmd 35111
[  119.027026][ T9803]  nbd1: unable to read partition table
[  119.033946][ T9803] ldm_validate_partition_table(): Disk read failed.
[  119.036793][ T9803] Dev nbd1: unable to read RDB block 0
[  119.040004][ T9803]  nbd1: unable to read partition table
[  119.141657][ T9942] netlink: 'syz.1.1732': attribute type 15 has an invalid length.
[  119.337341][ T9970] bond1: (slave gretap2): making interface the new active one
[  119.342299][ T9970] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  119.379795][ T9970] vlan2: entered allmulticast mode
[  119.384280][ T9970] bond1: entered allmulticast mode
[  119.386426][ T9970] gretap2: entered allmulticast mode
[  119.389691][ T9970] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  120.147185][T10071] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  120.521627][T10115] validate_nla: 4 callbacks suppressed
[  120.521639][T10115] netlink: 'syz.0.1811': attribute type 3 has an invalid length.
[  120.552174][T10117] __nla_validate_parse: 6 callbacks suppressed
[  120.552184][T10117] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1812'.
[  121.548828][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1824'.
[  121.758719][T10162] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1827'.
[  121.837695][T10168] syz_tun: entered allmulticast mode
[  121.852506][T10167] syz_tun: left allmulticast mode
[  122.039226][T10191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.094915][T10198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'.
[  122.333330][T10222] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  122.417078][T10232] netlink: 'syz.2.1850': attribute type 4 has an invalid length.
[  122.530968][T10235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1850'.
[  122.796095][T10265] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1863'.
[  122.988998][T10281] lo: entered allmulticast mode
[  122.995519][T10281] tunl0: entered allmulticast mode
[  122.999155][T10281] gre0: entered allmulticast mode
[  123.027511][T10281] gretap0: entered allmulticast mode
[  123.032824][T10281] erspan0: entered allmulticast mode
[  123.036258][T10281] ip_vti0: entered allmulticast mode
[  123.039075][T10281] ip6_vti0: entered allmulticast mode
[  123.042003][T10281] sit0: entered allmulticast mode
[  123.057207][T10281] ip6tnl0: entered allmulticast mode
[  123.060187][T10281] ip6gre0: entered allmulticast mode
[  123.064675][T10281] syz_tun: entered allmulticast mode
[  123.067621][T10281] ip6gretap0: entered allmulticast mode
[  123.072550][T10281] bridge0: entered allmulticast mode
[  123.076119][T10281] vcan0: entered allmulticast mode
[  123.082396][T10281] team0: entered allmulticast mode
[  123.085355][T10281] dummy0: entered allmulticast mode
[  123.093207][T10281] nlmon0: entered allmulticast mode
[  123.096812][T10281] caif0: entered allmulticast mode
[  123.099539][T10281] batadv0: entered allmulticast mode
[  123.110000][T10281] veth0: entered allmulticast mode
[  123.116196][T10281] wg0: entered allmulticast mode
[  123.120122][T10281] wg1: entered allmulticast mode
[  123.126127][T10281] wg2: entered allmulticast mode
[  123.131486][T10281] veth0_to_bridge: entered allmulticast mode
[  123.136180][T10281] bridge_slave_0: entered allmulticast mode
[  123.140896][T10281] veth1_to_bridge: entered allmulticast mode
[  123.145760][T10281] bridge_slave_1: entered allmulticast mode
[  123.149922][T10281] veth0_to_bond: entered allmulticast mode
[  123.154167][T10281] bond_slave_0: entered allmulticast mode
[  123.156753][T10281] veth1_to_bond: entered allmulticast mode
[  123.161242][T10281] bond_slave_1: entered allmulticast mode
[  123.163257][T10281] veth0_to_team: entered allmulticast mode
[  123.166499][T10281] team_slave_0: entered allmulticast mode
[  123.168504][T10281] veth1_to_team: entered allmulticast mode
[  123.172120][T10281] team_slave_1: entered allmulticast mode
[  123.174376][T10281] veth0_to_batadv: entered allmulticast mode
[  123.177767][T10281] batadv_slave_0: entered allmulticast mode
[  123.181523][T10281] veth1_to_batadv: entered allmulticast mode
[  123.184739][T10281] batadv_slave_1: entered allmulticast mode
[  123.188219][T10281] xfrm0: entered allmulticast mode
[  123.191653][T10281] veth0_to_hsr: entered allmulticast mode
[  123.194686][T10281] hsr_slave_0: entered allmulticast mode
[  123.197557][T10281] veth1_to_hsr: entered allmulticast mode
[  123.202115][T10281] hsr_slave_1: entered allmulticast mode
[  123.206086][T10281] hsr0: left promiscuous mode
[  123.208701][T10281] hsr0: entered allmulticast mode
[  123.213988][T10281] veth1_virt_wifi: entered allmulticast mode
[  123.217247][T10281] veth0_virt_wifi: entered allmulticast mode
[  123.220343][T10281] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  123.223153][T10281] veth1_vlan: entered allmulticast mode
[  123.226190][T10281] veth0_vlan: entered allmulticast mode
[  123.232356][T10281] vlan0: entered allmulticast mode
[  123.234176][T10281] vlan1: entered allmulticast mode
[  123.236113][T10281] macvlan0: entered allmulticast mode
[  123.240209][T10281] macvlan1: entered allmulticast mode
[  123.243455][T10281] ipvlan0: entered allmulticast mode
[  123.245338][T10281] ipvlan1: entered allmulticast mode
[  123.263866][T10281] veth1_macvtap: entered allmulticast mode
[  123.269496][T10281] veth0_macvtap: entered allmulticast mode
[  123.275679][T10281] macvtap0: entered allmulticast mode
[  123.281167][T10281] macsec0: entered allmulticast mode
[  123.286591][T10281] geneve0: entered allmulticast mode
[  123.292902][T10281] geneve1: entered allmulticast mode
[  123.297534][T10281] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  123.301344][T10281] vxlan0: entered allmulticast mode
[  123.304050][T10281] macvlan2: entered allmulticast mode
[  123.306578][T10281] netdevsim netdevsim1 eth0: entered allmulticast mode
[  123.309546][T10281] netdevsim netdevsim1 eth1: entered allmulticast mode
[  123.312919][T10281] netdevsim netdevsim1 eth2: entered allmulticast mode
[  123.315893][T10281] netdevsim netdevsim1 eth3: entered allmulticast mode
[  123.318945][T10281] B: entered allmulticast mode
[  123.321379][T10281] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  123.325344][T10281] bond1: entered allmulticast mode
[  123.327643][T10281] bridge1: entered allmulticast mode
[  123.330037][T10281] veth2: entered allmulticast mode
[  123.332858][T10281] veth3: entered allmulticast mode
[  123.335224][T10281] bond2: left promiscuous mode
[  123.337351][T10281] bridge2: entered allmulticast mode
[  123.339680][T10281] vxlan1: entered allmulticast mode
[  123.344918][T10281] bridge3: entered allmulticast mode
[  123.350160][T10281] erspan1: entered allmulticast mode
[  123.353278][T10281] vlan2: left promiscuous mode
[  123.355241][T10281] bond0: left promiscuous mode
[  123.357879][T10281] gre1: entered allmulticast mode
[  123.362221][T10281] vlan3: entered allmulticast mode
[  123.366667][T10281] gre2: entered allmulticast mode
[  123.371658][T10281] bond3: entered allmulticast mode
[  123.375863][T10281] veth4: entered allmulticast mode
[  123.378411][T10281] veth5: entered allmulticast mode
[  123.387705][ T5848] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.397524][ T5848] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.401314][ T5848] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.405014][ T5848] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.579086][T10314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1878'.
[  123.603701][T10314] bridge7: entered promiscuous mode
[  123.608565][T10314] bridge7: entered allmulticast mode
[  123.613169][T10314] team0: Port device bridge7 added
[  123.819597][T10343] ipvlan2: entered promiscuous mode
[  123.828361][T10343] bridge0: port 1(ipvlan2) entered blocking state
[  123.831597][T10343] bridge0: port 1(ipvlan2) entered disabled state
[  123.833906][T10343] ipvlan2: entered allmulticast mode
[  123.834902][T10345] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1896'.
[  123.837589][T10343] ipvlan2: left allmulticast mode
[  123.913519][T10345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.925160][T10345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.929618][T10345] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  123.934005][T10345] bond0 (unregistering): Released all slaves
[  123.952959][T10346] macsec0: entered promiscuous mode
[  124.022746][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'.
[  124.030715][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'.
[  124.251374][T10380] netlink: 'syz.1.1910': attribute type 9 has an invalid length.
[  124.254188][T10380] netlink: 'syz.1.1910': attribute type 6 has an invalid length.
[  125.089337][T10399] netlink: 'syz.1.1920': attribute type 9 has an invalid length.
[  125.845229][T10473] __nla_validate_parse: 6 callbacks suppressed
[  125.845239][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'.
[  126.190270][T10500] netlink: 'syz.1.1961': attribute type 10 has an invalid length.
[  126.193796][T10500] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1961'.
[  126.197748][T10500] geneve0: left allmulticast mode
[  126.203983][T10500] geneve0: entered allmulticast mode
[  126.207430][T10500] team0: Port device geneve0 added
[  126.211922][ T5849] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.217640][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1961'.
[  126.226414][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1961'.
[  126.229687][ T5849] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.234553][ T5849] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.256256][T10500] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  126.262779][ T5849] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.315455][T10509] netlink: 'syz.1.1965': attribute type 1 has an invalid length.
[  126.438729][T10516] can: request_module (can-proto-0) failed.
[  126.749427][T10554] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1987'.
[  127.141656][T10591] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2004'.
[  127.294234][T10609] netlink: 'syz.1.2012': attribute type 1 has an invalid length.
[  127.297530][T10609] netlink: 'syz.1.2012': attribute type 11 has an invalid length.
[  127.308120][T10611] batadv_slave_1: entered promiscuous mode
[  127.312093][T10609] netlink: 308 bytes leftover after parsing attributes in process `syz.1.2012'.
[  127.315049][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2012'.
[  127.317957][T10609] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  127.324995][T10610] batadv_slave_1: left promiscuous mode
[  127.566788][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'.
[  127.925259][T10673] netlink: 'syz.2.2040': attribute type 1 has an invalid length.
[  127.942026][T10676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'.
[  127.945513][T10673] bond5: entered promiscuous mode
[  127.948324][T10673] 8021q: adding VLAN 0 to HW filter on device bond5
[  127.976847][T10673] 8021q: adding VLAN 0 to HW filter on device bond5
[  127.980235][T10673] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  127.989968][T10673] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  128.000133][T10673] bond5: (slave wireguard0): making interface the new active one
[  128.004402][T10673] wireguard0: entered promiscuous mode
[  128.008625][T10673] bond5: (slave wireguard0): Enslaving as an active interface with an up link
[  128.027897][T10673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.031030][T10673] IPv6: NLM_F_CREATE should be set when creating new route
[  128.034063][T10673] IPv6: NLM_F_CREATE should be set when creating new route
[  128.039283][T10673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  128.048977][T10673] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address
[  128.058049][T10673] bond5: (slave wireguard1): Enslaving as a backup interface with an up link
[  128.172498][T10697] bridge8: entered allmulticast mode
[  128.414031][    T9] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  128.597834][T10746] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  128.607784][T10746] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  128.891645][T10784] vlan2: entered promiscuous mode
[  128.894055][T10784] dummy0: entered promiscuous mode
[  130.004024][T10882] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  130.014766][T10884] tipc: Cannot configure node identity twice
[  131.024962][T10996] __nla_validate_parse: 6 callbacks suppressed
[  131.024975][T10996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'.
[  131.034520][T10993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2172'.
[  131.152106][T11011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2178'.
[  131.445979][T11052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.463820][T11050] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  131.474964][T11052] syzkaller0: entered promiscuous mode
[  131.476805][T11052] syzkaller0: entered allmulticast mode
[  131.479242][T11052] tipc: Resetting bearer <eth:syzkaller0>
[  131.524444][T11051] tipc: Resetting bearer <eth:syzkaller0>
[  131.874041][T11068] netlink: 'syz.0.2202': attribute type 1 has an invalid length.
[  131.877233][T11068] netlink: 'syz.0.2202': attribute type 4 has an invalid length.
[  131.882052][T11068] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.2202'.
[  132.314554][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.317301][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.417057][T11051] tipc: Disabling bearer <eth:syzkaller0>
[  132.668177][T11101] netlink: 'syz.0.2213': attribute type 1 has an invalid length.
[  132.704636][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'.
[  132.768971][T11113] IPVS: stopping backup sync thread 11114 ...
[  132.914319][T11132] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2224'.
[  133.482082][T11172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.500700][ T5824] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  133.574794][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2240'.
[  133.675665][T11191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.679247][T11191] syzkaller0: entered promiscuous mode
[  133.681974][T11191] syzkaller0: entered allmulticast mode
[  133.704214][T11191] tipc: Resetting bearer <eth:syzkaller0>
[  133.709967][T11190] tipc: Resetting bearer <eth:syzkaller0>
[  133.722215][T11190] tipc: Disabling bearer <eth:syzkaller0>
[  133.810211][T11199] netlink: 'syz.0.2249': attribute type 29 has an invalid length.
[  133.918018][T11211] pimreg: entered allmulticast mode
[  134.465520][T11244] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2269'.
[  134.511669][T11248] syzkaller1: entered promiscuous mode
[  134.514092][T11248] syzkaller1: entered allmulticast mode
[  134.827694][T11270] syzkaller0: entered promiscuous mode
[  134.829880][T11270] syzkaller0: entered allmulticast mode
[  135.108475][T11280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2286'.
[  135.469626][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2301'.
[  135.764431][T11332] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  135.861117][T11343] netlink: 'syz.0.2316': attribute type 13 has an invalid length.
[  135.995136][T11363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.999835][T11363] tipc: Resetting bearer <eth:syzkaller0>
[  136.024723][T11363] tipc: Resetting bearer <eth:syzkaller0>
[  136.205716][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2336'.
[  136.209428][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2336'.
[  136.309049][T11390] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  136.354018][T11394] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  136.444224][T11401] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2344'.
[  136.481948][T11401] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2344'.
[  136.684247][T11419] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.737059][T11425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.743523][T11425] syzkaller0: entered promiscuous mode
[  136.746408][T11425] syzkaller0: entered allmulticast mode
[  136.774762][T11425] tipc: Resetting bearer <eth:syzkaller0>
[  136.794356][T11421] tipc: Resetting bearer <eth:syzkaller0>
[  136.812086][T11421] tipc: Disabling bearer <eth:syzkaller0>
[  136.849946][T11433] openvswitch: netlink: Message has 16 unknown bytes.
[  136.872390][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2359'.
[  136.913124][T11435] netlink: 'syz.0.2359': attribute type 1 has an invalid length.
[  136.917010][T11435] netlink: 'syz.0.2359': attribute type 1 has an invalid length.
[  137.000714][ T5850] tipc: Node number set to 1212500386
[  137.225910][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2370'.
[  137.266461][T11462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2371'.
[  137.350951][T11467] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2372'.
[  137.558543][T11483] netlink: 'syz.1.2381': attribute type 1 has an invalid length.
[  137.591127][T11485] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2382'.
[  137.798617][T11506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2390'.
[  137.953241][T11524] IPv6: NLM_F_REPLACE set, but no existing node found!
[  138.023948][T11532] @: renamed from bond_slave_0
[  138.594298][T11573] netlink: 'syz.0.2419': attribute type 29 has an invalid length.
[  138.603297][T11573] netlink: 'syz.0.2419': attribute type 29 has an invalid length.
[  139.093011][T11619] ieee802154 phy0 wpan0: encryption failed: -22
[  140.507168][T11674] veth0: entered promiscuous mode
[  140.531772][T11674] veth0 (unregistering): left promiscuous mode
[  140.758604][T11690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  140.769183][T11690] vxcan2: entered promiscuous mode
[  140.925664][T11698] vlan5: entered promiscuous mode
[  140.927554][T11698] syz_tun: entered promiscuous mode
[  141.157273][T11713] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  141.279296][T11727] macvlan2: entered allmulticast mode
[  141.282654][T11727] veth1_vlan: entered allmulticast mode
[  141.288152][T11727] veth1_vlan: left allmulticast mode
[  141.551259][T11754] __nla_validate_parse: 6 callbacks suppressed
[  141.551271][T11754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2497'.
[  141.612598][T11758] syzkaller0: entered promiscuous mode
[  141.614654][T11758] syzkaller0: entered allmulticast mode
[  142.814582][T11791] bridge5: entered allmulticast mode
[  142.817751][T11793] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  143.507420][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'.
[  143.517018][T11820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.964644][T11831] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2528'.
[  144.002894][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'.
[  144.028593][T11833] pim6reg: entered allmulticast mode
[  144.042413][T11833] pim6reg: left allmulticast mode
[  144.862315][T11878] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2542'.
[  144.930335][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  144.943843][T11881] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2543'.
[  145.593167][T11925] netlink: 'syz.1.2561': attribute type 23 has an invalid length.
[  145.795275][T11935] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2566'.
[  145.845124][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'.
[  145.848840][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'.
[  146.058958][T11964] netlink: 'syz.1.2579': attribute type 1 has an invalid length.
[  146.812447][T12017] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  146.823939][T12019] netlink: 'syz.2.2601': attribute type 1 has an invalid length.
[  146.827533][T12019] __nla_validate_parse: 3 callbacks suppressed
[  146.827544][T12019] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2601'.
[  146.934149][T12024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2602'.
[  147.036896][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'.
[  147.157587][T12036] veth1_to_bond: entered allmulticast mode
[  147.161587][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2609'.
[  147.191226][T12036] bond0: (slave bond_slave_1): Releasing backup interface
[  147.220366][T12036] veth1_to_bond (unregistering): left allmulticast mode
[  147.533305][T12057] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.592097][T12061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2621'.
[  147.607676][T12063] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.255563][T12111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2641'.
[  148.259336][T12111] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2641'.
[  148.263776][T12111] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2641'.
[  148.309461][T12115] netlink: 'syz.0.2643': attribute type 21 has an invalid length.
[  148.315693][   T60] block nbd0: Possible stuck request ffff888021a30000: control (read@0,4096B). Runtime 60 seconds
[  148.380043][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2645'.
[  148.387703][T12119] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  148.581765][T12137] syzkaller1: entered promiscuous mode
[  148.590768][T12137] syzkaller1: entered allmulticast mode
[  148.658203][T12145] IPv6: syztnl1: Disabled Multicast RS
[  148.711503][T12150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2659'.
[  148.772396][T12156] sock: sock_set_timeout: `syz.1.2662' (pid 12156) tries to set negative timeout
[  149.469283][T12184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  150.258770][T12236] : entered promiscuous mode
[  150.353228][T12245] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.359550][T12245] syzkaller0: entered promiscuous mode
[  150.363110][T12245] syzkaller0: entered allmulticast mode
[  150.397914][T12247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  150.414967][T12245] tipc: Resetting bearer <eth:syzkaller0>
[  150.444185][T12244] tipc: Resetting bearer <eth:syzkaller0>
[  150.511037][T12244] tipc: Disabling bearer <eth:syzkaller0>
[  150.526467][T12256] netlink: 'syz.2.2689': attribute type 29 has an invalid length.
[  150.539524][T12256] netlink: 'syz.2.2689': attribute type 29 has an invalid length.
[  150.735839][T12274] netlink: 'syz.1.2699': attribute type 31 has an invalid length.
[  150.766439][T12280] netlink: 'syz.1.2701': attribute type 29 has an invalid length.
[  150.772063][T12280] netlink: 'syz.1.2701': attribute type 29 has an invalid length.
[  151.918366][T12353] __nla_validate_parse: 12 callbacks suppressed
[  151.918382][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'.
[  152.017246][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2741'.
[  152.050373][T12371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.195907][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2750'.
[  153.205379][T12456] netlink: 'syz.1.2781': attribute type 1 has an invalid length.
[  153.378826][T12466] tipc: New replicast peer: 255.255.255.255
[  153.403248][T12466] tipc: Enabled bearer <udp:syz2>, priority 10
[  153.501560][ T5270] udevd[5270]: worker [7725] /devices/virtual/block/nbd0 is taking a long time
[  154.271108][T12482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2794'.
[  154.344457][T12490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.494380][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2807'.
[  154.505218][T12510] vxcan1 speed is unknown, defaulting to 1000
[  154.508649][T12510] vxcan1 speed is unknown, defaulting to 1000
[  154.515484][T12510] vxcan1 speed is unknown, defaulting to 1000
[  154.648915][   T24] vxcan1 speed is unknown, defaulting to 1000
[  154.651439][T12510] infiniband syz2: set down
[  154.653328][T12510] infiniband syz2: added vxcan1
[  154.684949][T12510] RDS/IB: syz2: added
[  154.688284][T12510] smc: adding ib device syz2 with port count 1
[  154.692072][T12510] smc:    ib device syz2 port 1 has pnetid 
[  154.695628][   T24] vxcan1 speed is unknown, defaulting to 1000
[  154.698888][T12510] vxcan1 speed is unknown, defaulting to 1000
[  154.821133][T12510] vxcan1 speed is unknown, defaulting to 1000
[  154.935649][T12510] vxcan1 speed is unknown, defaulting to 1000
[  155.045221][T12526] vxcan1 speed is unknown, defaulting to 1000
[  155.225120][T12531] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  155.233037][T12531] bridge_slave_0: left allmulticast mode
[  155.234904][T12531] bridge_slave_0: left promiscuous mode
[  155.236782][T12531] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.242280][T12531] bridge_slave_1: left allmulticast mode
[  155.244101][T12531] bridge_slave_1: left promiscuous mode
[  155.245973][T12531] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.266009][T12531] team0: Port device team_slave_0 removed
[  155.273583][T12531] team0: Port device team_slave_1 removed
[  155.276534][T12531] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.284131][T12531] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.287300][T12531] tipc: Resetting bearer <eth:ipvlan1>
[  155.290007][T12531] team0: Port device vxlan0 removed
[  155.294227][T12531] bond1: (slave gretap2): Releasing active interface
[  155.296433][T12531] gretap2: left allmulticast mode
[  155.385196][T12531] netlink: 'syz.0.2815': attribute type 10 has an invalid length.
[  155.392928][T12531] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  155.416463][T12531] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.423517][T12531] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  155.482483][T12543] gtp0: entered promiscuous mode
[  155.484785][T12543] gtp0: entered allmulticast mode
[  155.604111][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2823'.
[  156.062975][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2834'.
[  156.125985][T12573] bond3: (slave vlan4): Releasing active interface
[  156.128196][T12573] vlan4 (unregistering): left promiscuous mode
[  156.182557][T12584] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  156.474821][T12615] dummy0: entered promiscuous mode
[  156.477497][T12615] vlan3: entered promiscuous mode
[  156.558205][T12621] netlink: 'syz.0.2855': attribute type 2 has an invalid length.
[  156.563072][T12621] netlink: 'syz.0.2855': attribute type 1 has an invalid length.
[  156.566262][T12621] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2855'.
[  156.909411][T12645] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  157.641847][T12655] netlink: 'syz.0.2868': attribute type 1 has an invalid length.
[  157.644859][T12655] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2868'.
[  157.648699][T12655] netlink: 'syz.0.2868': attribute type 1 has an invalid length.
[  157.786362][T12662] bond2: entered promiscuous mode
[  157.788487][T12662] bond2: entered allmulticast mode
[  157.791077][T12662] 8021q: adding VLAN 0 to HW filter on device bond2
[  158.000993][T12673] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2876'.
[  158.081667][T12676] netlink: 'syz.2.2877': attribute type 83 has an invalid length.
[  158.168789][T12681] netlink: 'syz.0.2878': attribute type 11 has an invalid length.
[  158.174704][T12681] netlink: 'syz.0.2878': attribute type 4 has an invalid length.
[  158.177607][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'.
[  158.217965][T12685] netlink: 'syz.2.2881': attribute type 4 has an invalid length.
[  158.593913][T12703] netlink: 'syz.0.2889': attribute type 1 has an invalid length.
[  158.645465][T12703] bond3: (slave bridge6): making interface the new active one
[  158.648954][T12703] bond3: (slave bridge6): Enslaving as an active interface with an up link
[  158.698434][T12709] netlink: 'syz.0.2893': attribute type 15 has an invalid length.
[  159.290851][T12760] siw: device registration error -23
[  159.327893][T12760] ipvlan2: entered promiscuous mode
[  160.163324][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'.
[  160.177642][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'.
[  160.193371][T12809] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2939'.
[  160.204312][T12811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2940'.
[  160.208117][T12811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2940'.
[  160.212218][T12811] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  160.261452][T12809] nbd: socks must be embedded in a SOCK_ITEM attr
[  160.263594][T12809] block nbd2: shutting down sockets
[  160.475182][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2953'.
[  160.523729][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2956'.
[  160.627737][T12843] geneve0: left allmulticast mode
[  160.636149][T12843] team0 (unregistering): Port device geneve0 removed
[  160.651279][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.657536][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.660138][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  160.664055][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  161.705159][T12937] validate_nla: 6 callbacks suppressed
[  161.705516][T12937] netlink: 'syz.1.2995': attribute type 3 has an invalid length.
[  163.087833][T12968] __nla_validate_parse: 6 callbacks suppressed
[  163.087852][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3006'.
[  163.144812][T12968] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  163.149429][T12968] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  163.228095][T12974] macvlan3: entered promiscuous mode
[  163.230356][T12974] macvlan3: entered allmulticast mode
[  163.233414][T12974] bond5: (slave macvlan3): Error -98 calling set_mac_address
[  163.247182][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3010'.
[  163.794582][T13026] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3033'.
[  163.799642][T13026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.141279][ T5210] Bluetooth: hci2: command 0x0405 tx timeout
[  164.335208][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'.
[  164.645189][T13098] syzkaller0: entered promiscuous mode
[  164.647444][T13098] syzkaller0: entered allmulticast mode
[  165.171043][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'.
[  166.005697][T13128] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  166.010166][T13128] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  166.231390][T13147] batadv_slave_1: entered promiscuous mode
[  166.234836][T13146] batadv_slave_1: left promiscuous mode
[  166.419216][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3092'.
[  169.487360][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'.
[  169.568181][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3131'.
[  169.575075][T13247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3131'.
[  169.739892][T13254] ipvlan1: left allmulticast mode
[  169.798990][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3135'.
[  170.252960][T13273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3142'.
[  170.355812][T13277] syz.2.3144: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  170.363570][T13277] CPU: 0 UID: 0 PID: 13277 Comm: syz.2.3144 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  170.363582][T13277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.363588][T13277] Call Trace:
[  170.363592][T13277]  <TASK>
[  170.363595][T13277]  dump_stack_lvl+0x189/0x250
[  170.363608][T13277]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.363617][T13277]  ? __pfx__printk+0x10/0x10
[  170.363628][T13277]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  170.363639][T13277]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  170.363650][T13277]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  170.363660][T13277]  warn_alloc+0x214/0x310
[  170.363668][T13277]  ? stack_depot_save_flags+0x40/0x900
[  170.363677][T13277]  ? __pfx_warn_alloc+0x10/0x10
[  170.363685][T13277]  ? kasan_save_track+0x4f/0x80
[  170.363695][T13277]  ? xskq_create+0x56/0x170
[  170.363705][T13277]  ? xsk_init_queue+0xb0/0x110
[  170.363713][T13277]  ? xsk_setsockopt+0x4dc/0x8d0
[  170.363721][T13277]  ? do_sock_setsockopt+0x17c/0x1b0
[  170.363728][T13277]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  170.363736][T13277]  ? do_syscall_64+0xfa/0x3b0
[  170.363746][T13277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.363756][T13277]  __vmalloc_node_range_noprof+0x125/0x12f0
[  170.363775][T13277]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  170.363784][T13277]  ? __kasan_kmalloc+0x93/0xb0
[  170.363796][T13277]  vmalloc_user_noprof+0xad/0xf0
[  170.363803][T13277]  ? xskq_create+0xbf/0x170
[  170.363812][T13277]  xskq_create+0xbf/0x170
[  170.363823][T13277]  xsk_init_queue+0xb0/0x110
[  170.363834][T13277]  xsk_setsockopt+0x4dc/0x8d0
[  170.363846][T13277]  ? __pfx_xsk_setsockopt+0x10/0x10
[  170.363856][T13277]  ? __pfx_aa_sk_perm+0x10/0x10
[  170.363867][T13277]  ? aa_sock_opt_perm+0x74/0x110
[  170.363877][T13277]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  170.363885][T13277]  ? __pfx_xsk_setsockopt+0x10/0x10
[  170.363895][T13277]  do_sock_setsockopt+0x17c/0x1b0
[  170.363903][T13277]  __x64_sys_setsockopt+0x13f/0x1b0
[  170.363912][T13277]  do_syscall_64+0xfa/0x3b0
[  170.363921][T13277]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.363931][T13277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.363938][T13277]  ? exc_page_fault+0x9f/0xf0
[  170.363948][T13277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.363955][T13277] RIP: 0033:0x7fdd7fd8eb69
[  170.363963][T13277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.363969][T13277] RSP: 002b:00007fdd80c60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  170.363977][T13277] RAX: ffffffffffffffda RBX: 00007fdd7ffb5fa0 RCX: 00007fdd7fd8eb69
[  170.363988][T13277] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  170.363992][T13277] RBP: 00007fdd7fe11df1 R08: 0000000000000004 R09: 0000000000000000
[  170.363996][T13277] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.364001][T13277] R13: 0000000000000000 R14: 00007fdd7ffb5fa0 R15: 00007ffffc5f0978
[  170.364012][T13277]  </TASK>
[  170.364015][T13277] Mem-Info:
[  170.421582][T13282] netlink: 308 bytes leftover after parsing attributes in process `syz.0.3146'.
[  170.421826][T13277] active_anon:13776 inactive_anon:0 isolated_anon:0
[  170.421826][T13277]  active_file:1041 inactive_file:38254 isolated_file:0
[  170.421826][T13277]  unevictable:1768 dirty:347 writeback:0
[  170.421826][T13277]  slab_reclaimable:9821 slab_unreclaimable:60324
[  170.421826][T13277]  mapped:18368 shmem:2563 pagetables:1093
[  170.421826][T13277]  sec_pagetables:0 bounce:0
[  170.421826][T13277]  kernel_misc_reclaimable:0
[  170.421826][T13277]  free:278897 free_pcp:18730 free_cma:0
[  170.423445][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'.
[  170.424913][T13277] Node 0 active_anon:14464kB inactive_anon:0kB active_file:2612kB inactive_file:134860kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38140kB dirty:1068kB writeback:0kB shmem:5576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7664kB pagetables:2516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  170.424939][T13277] Node 1 active_anon:40640kB inactive_anon:0kB active_file:1552kB inactive_file:18156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35332kB dirty:320kB writeback:0kB shmem:4676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4812kB pagetables:1856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  170.426984][T13282] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  170.428712][T13277] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  170.552242][T13277] lowmem_reserve[]: 0 814 814 814 814
[  170.554693][T13277] Node 0 DMA32 free:267268kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14464kB inactive_anon:0kB active_file:2612kB inactive_file:134860kB unevictable:3536kB writepending:1068kB present:1556484kB managed:834024kB mlocked:0kB bounce:0kB free_pcp:34172kB local_pcp:20044kB free_cma:0kB
[  170.575604][T13277] lowmem_reserve[]: 0 0 0 0 0
[  170.577688][T13277] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  170.590276][T13277] lowmem_reserve[]: 0 0 854 854 854
[  170.592746][T13277] Node 1 Normal free:373956kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40572kB inactive_anon:0kB active_file:1552kB inactive_file:18156kB unevictable:3536kB writepending:320kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41668kB local_pcp:21520kB free_cma:0kB
[  170.605768][T13277] lowmem_reserve[]: 0 0 0 0 0
[  170.607833][T13277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  170.616011][T13277] Node 0 DMA32: 91*4kB (UME) 469*8kB (UME) 207*16kB (UME) 452*32kB (UME) 232*64kB (UME) 109*128kB (UME) 48*256kB (UM) 13*512kB (UM) 13*1024kB (UME) 4*2048kB (UE) 43*4096kB (UM) = 267268kB
[  170.632635][T13277] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  170.639901][T13277] Node 1 Normal: 3*4kB (ME) 70*8kB (UM) 260*16kB (UM) 78*32kB (M) 44*64kB (UM) 93*128kB (UM) 33*256kB (UME) 17*512kB (UM) 3*1024kB (UM) 2*2048kB (UM) 80*4096kB (UM) = 373948kB
[  170.648856][T13277] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  170.654748][T13277] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  170.658843][T13277] 41858 total pagecache pages
[  170.667465][T13277] 0 pages in swap cache
[  170.669930][T13277] Free swap  = 124996kB
[  170.673828][T13277] Total swap = 124996kB
[  170.675724][T13277] 786301 pages RAM
[  170.677412][T13277] 0 pages HighMem/MovableOnly
[  170.679567][T13277] 240547 pages reserved
[  170.682092][T13277] 0 pages cma reserved
[  171.057498][T13314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.384778][T13335] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.388629][T13335] syzkaller0: entered promiscuous mode
[  171.392244][T13335] syzkaller0: entered allmulticast mode
[  171.408860][T13335] tipc: Resetting bearer <eth:syzkaller0>
[  171.415706][T13334] tipc: Resetting bearer <eth:syzkaller0>
[  171.426120][T13334] tipc: Disabling bearer <eth:syzkaller0>
[  171.584595][T13297] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  171.812859][T13357] ieee802154 phy0 wpan0: encryption failed: -90
[  171.949599][T13367] bond0: (slave dummy0): Releasing backup interface
[  171.958975][T13367] bridge_slave_0: left allmulticast mode
[  171.962812][T13367] bridge_slave_0: left promiscuous mode
[  171.965783][T13367] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.975874][T13367] bridge_slave_1: left allmulticast mode
[  171.979044][T13367] bridge_slave_1: left promiscuous mode
[  171.985330][T13367] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.988289][T13370] IPVS: stopping backup sync thread 7819 ...
[  172.003271][T13367] bond0: (slave bond_slave_0): Releasing backup interface
[  172.013943][T13367] team0: Port device team_slave_0 removed
[  172.019954][T13367] team0: Port device team_slave_1 removed
[  172.024724][T13367] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.027661][T13367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.032818][T13367] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.035765][T13367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.045733][T13371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3188'.
[  172.051591][T13371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3188'.
[  172.056727][T13367] bond0: (slave bond1): Releasing backup interface
[  172.067892][T13367] bond2: (slave gretap1): Releasing active interface
[  172.088437][T13367] bond0: (slave bond3): Releasing backup interface
[  172.103402][T13367] bond4: (slave veth5): Releasing active interface
[  172.118680][T13367] team0: Port device bridge7 removed
[  172.122453][T13367] bond5: (slave wireguard0): Releasing backup interface
[  172.128597][T13367] wireguard0: left promiscuous mode
[  172.139929][T13367] bond5: (slave wireguard1): making interface the new active one
[  172.144185][T13367] wireguard1: entered promiscuous mode
[  172.153410][T13367] bond5: (slave wireguard1): Releasing backup interface
[  172.156228][T13367] wireguard1: left promiscuous mode
[  172.194299][T13369] team0: Mode changed to "loadbalance"
[  172.309853][T13380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.346100][T13380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3193'.
[  172.615800][T13407] netlink: 'syz.1.3204': attribute type 7 has an invalid length.
[  172.756567][T13418] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  172.876744][T13438] netlink: 'syz.0.3216': attribute type 21 has an invalid length.
[  172.937020][T13441] vxcan1 speed is unknown, defaulting to 1000
[  173.867383][T13478] tipc: Resetting bearer <eth:ipvlan1>
[  174.156335][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.162772][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.173686][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.180384][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.205554][T13506] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  174.236059][T13506] tipc: Resetting bearer <eth:ipvlan1>
[  174.242102][T13506] bond3: (slave bridge6): Releasing active interface
[  174.355967][T13516] netlink: 'syz.0.3244': attribute type 10 has an invalid length.
[  174.359360][T13516] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  174.366680][T13519] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  174.378054][T13516] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.384820][T13516] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  174.539402][T13531] __nla_validate_parse: 12 callbacks suppressed
[  174.539419][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3255'.
[  174.556382][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3255'.
[  174.675305][T13541] netlink: 'syz.1.3260': attribute type 4 has an invalid length.
[  174.684922][T13541] netlink: 'syz.1.3260': attribute type 4 has an invalid length.
[  174.689220][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'.
[  174.774894][T13551] syzkaller1: entered promiscuous mode
[  174.777265][T13551] syzkaller1: entered allmulticast mode
[  174.940251][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'.
[  175.251172][T13568] vxcan1 speed is unknown, defaulting to 1000
[  175.340795][ T5210] Bluetooth: hci1: command 0x0406 tx timeout
[  175.498950][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3277'.
[  176.132674][T13621] vlan0: entered promiscuous mode
[  176.135247][T13621] vlan0: left allmulticast mode
[  176.392900][T13634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.424860][T13636] caif0: left allmulticast mode
[  176.647619][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3307'.
[  176.905165][T13665] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  176.909336][T13665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.924425][T13668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3314'.
[  177.128247][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'.
[  177.407367][T13714] netlink: 'syz.1.3335': attribute type 3 has an invalid length.
[  177.433731][T13716] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3336'.
[  177.537886][T13721] netlink: 'syz.1.3338': attribute type 13 has an invalid length.
[  177.541203][T13721] netlink: 'syz.1.3338': attribute type 17 has an invalid length.
[  177.544195][T13721] lo: left allmulticast mode
[  177.546936][T13721] tunl0: left allmulticast mode
[  177.550948][T13721] gre0: left allmulticast mode
[  177.559054][T13721] erspan0: left allmulticast mode
[  177.567788][T13721] ip_vti0: left allmulticast mode
[  177.571288][T13721] ip6_vti0: left allmulticast mode
[  177.574509][T13721] sit0: left allmulticast mode
[  177.577506][T13721] ip6tnl0: left allmulticast mode
[  177.580798][T13721] ip6gre0: left allmulticast mode
[  177.584356][T13721] syz_tun: left allmulticast mode
[  177.594478][T13721] ip6gretap0: left allmulticast mode
[  177.604240][T13721] bridge0: left allmulticast mode
[  177.607791][T13721] vcan0: left allmulticast mode
[  177.611682][T13721] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.621215][T13721] dummy0: left allmulticast mode
[  177.624291][T13721] nlmon0: left allmulticast mode
[  177.627602][T13721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  177.651983][T13722] vxcan1 speed is unknown, defaulting to 1000
[  177.992133][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3344'.
[  178.382564][   T60] block nbd0: Possible stuck request ffff888021a30000: control (read@0,4096B). Runtime 90 seconds
[  178.445038][T13769] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  178.928930][T13819] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  178.934356][T13819] team0: Device ipvlan2 is already an upper device of the team interface
[  179.173817][T13832] bond0 (unregistering): Released all slaves
[  179.215970][T13841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.218897][T13841] syzkaller0: entered promiscuous mode
[  179.221325][T13841] syzkaller0: entered allmulticast mode
[  179.235200][T13841] tipc: Resetting bearer <eth:syzkaller0>
[  179.239588][T13840] tipc: Resetting bearer <eth:syzkaller0>
[  179.266250][T13840] tipc: Disabling bearer <eth:syzkaller0>
[  179.347481][   T33] audit: type=1800 audit(1754399450.010:6): pid=13847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3398" name="memory.events" dev="tmpfs" ino=5466 res=0 errno=0
[  179.358175][   T33] audit: type=1804 audit(1754399450.010:7): pid=13847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3398" name="memory.events" dev="tmpfs" ino=5466 res=1 errno=0
[  179.789155][T13873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  179.858020][T13880] __nla_validate_parse: 27 callbacks suppressed
[  179.858085][T13880] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3411'.
[  180.138241][T13899] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  180.143972][T13899] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  180.196993][T13901] netlink: 'syz.1.3421': attribute type 1 has an invalid length.
[  180.210743][T13901] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3421'.
[  180.972534][T13970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3455'.
[  181.121000][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3461'.
[  181.175702][T13990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3463'.
[  182.015699][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3485'.
[  182.240554][T14054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.244196][T14054] syzkaller0: entered promiscuous mode
[  182.250098][T14054] syzkaller0: entered allmulticast mode
[  182.287378][T14060] netlink: 'syz.0.3494': attribute type 1 has an invalid length.
[  182.294099][T14054] tipc: Resetting bearer <eth:syzkaller0>
[  182.305723][T14053] tipc: Resetting bearer <eth:syzkaller0>
[  182.322979][T14053] tipc: Disabling bearer <eth:syzkaller0>
[  182.472695][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'.
[  182.475909][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3504'.
[  182.479518][T14081] netlink: 'syz.0.3504': attribute type 18 has an invalid length.
[  182.575962][T14090] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3507'.
[  182.579814][T14090] 0: renamed from hsr0
[  182.604842][T14090] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.609148][T14090] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.614368][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'.
[  182.615642][T14090] 0: entered allmulticast mode
[  182.617638][T14095] netlink: 'syz.2.3510': attribute type 21 has an invalid length.
[  182.619621][T14090] hsr_slave_0: entered allmulticast mode
[  182.626278][T14090] hsr_slave_1: entered allmulticast mode
[  182.630371][T14090] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  182.887771][T14116] openvswitch: netlink: Missing valid actions attribute.
[  182.891052][T14116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.989321][T14123] vxcan1 speed is unknown, defaulting to 1000
[  184.922240][T14205] netlink: 'syz.2.3558': attribute type 1 has an invalid length.
[  184.924976][T14205] __nla_validate_parse: 7 callbacks suppressed
[  184.924983][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3558'.
[  185.554113][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'.
[  186.928443][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'.
[  187.116714][T14293] IPVS: Scheduler module ip_vs_sip not found
[  187.506204][T14326] dvmrp8: entered allmulticast mode
[  187.514191][T14326] openvswitch: netlink: Flow key attr not present in new flow.
[  187.548804][T14319] dvmrp8: left allmulticast mode
[  187.671031][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'.
[  187.675084][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3613'.
[  188.290729][T14387] netlink: 'syz.0.3628': attribute type 16 has an invalid length.
[  188.294928][T14387] netlink: 'syz.0.3628': attribute type 17 has an invalid length.
[  188.311633][T14387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  188.358738][T14391] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3636'.
[  188.491119][T14399] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  189.592322][T14454] IPv6: NLM_F_REPLACE set, but no existing node found!
[  189.694449][T14467] netlink: 'syz.1.3670': attribute type 1 has an invalid length.
[  189.734836][T14470] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.825033][T14480] netlink: 'syz.2.3675': attribute type 2 has an invalid length.
[  190.068036][T14510] team0: Mode changed to "loadbalance"
[  190.237111][T14532] netlink: 'syz.1.3700': attribute type 1 has an invalid length.
[  190.385426][T14556] sctp: [Deprecated]: syz.2.3710 (pid 14556) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.385426][T14556] Use struct sctp_sack_info instead
[  190.414359][T14559] netlink: 'syz.2.3712': attribute type 11 has an invalid length.
[  190.423312][ T5849] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  190.758595][T14592] syzkaller0: Caught tx_queue_len zero misconfig
[  191.369091][T14632] sctp: [Deprecated]: syz.2.3744 (pid 14632) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.369091][T14632] Use struct sctp_sack_info instead
[  191.654387][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3751'.
[  191.803221][T14658] tun0: tun_chr_ioctl cmd 2148045848
[  191.805713][T14658] tun0: tun_chr_ioctl cmd 21731
[  191.872832][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3760'.
[  191.879040][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'.
[  191.885835][T14665] netlink: 'syz.1.3760': attribute type 12 has an invalid length.
[  192.257230][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3778'.
[  192.428492][T14722] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  192.525480][T14733] netlink: 'syz.1.3794': attribute type 3 has an invalid length.
[  192.542649][T14737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3796'.
[  192.545911][T14737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3796'.
[  192.548874][T14737] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3796'.
[  192.593254][T14741] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3799'.
[  192.647690][T14746] vxcan1 speed is unknown, defaulting to 1000
[  192.715224][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3801'.
[  192.784731][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'.
[  192.788022][T14759] IPv6: Can't replace route, no match found
[  192.861962][T14758] smc: removing ib device syz2
[  193.427846][T14775] netlink: 'syz.0.3812': attribute type 1 has an invalid length.
[  193.434395][T14775] netlink: 'syz.0.3812': attribute type 2 has an invalid length.
[  193.743821][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.794225][T14817] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  194.069247][T14847] netlink: 'syz.0.3848': attribute type 10 has an invalid length.
[  194.074174][T14847] netlink: 'syz.0.3848': attribute type 49 has an invalid length.
[  194.287887][T14873] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  194.509701][T14900] netlink: 'syz.2.3872': attribute type 1 has an invalid length.
[  194.513169][T14900] netlink: 'syz.2.3872': attribute type 2 has an invalid length.
[  194.813100][T14923] netlink: 'syz.1.3881': attribute type 5 has an invalid length.
[  194.816284][T14923] netlink: 'syz.1.3881': attribute type 6 has an invalid length.
[  194.862676][T14927] syzkaller0: entered promiscuous mode
[  194.864668][T14927] syzkaller0: entered allmulticast mode
[  194.938738][T14931] syzkaller0: left promiscuous mode
[  194.945501][T14931] syzkaller0: left allmulticast mode
[  194.947667][T14931] tipc: Resetting bearer <eth:syzkaller0>
[  195.060680][T14941] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  195.164437][T14954] vlan4: entered promiscuous mode
[  195.166446][T14954] bridge0: entered promiscuous mode
[  195.168555][T14954] vlan4: entered allmulticast mode
[  195.178548][T14954] bridge0: entered allmulticast mode
[  195.415741][T14986] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.431402][T14982] unknown channel width for channel at 909000KHz?
[  196.422502][T15029] netlink: 'syz.0.3931': attribute type 1 has an invalid length.
[  196.557518][T15026] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  196.674405][T15055] netlink: 'syz.1.3944': attribute type 1 has an invalid length.
[  196.677189][T15055] __nla_validate_parse: 10 callbacks suppressed
[  196.677197][T15055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3944'.
[  196.814170][T15073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  197.245692][T15109] macsec0: left allmulticast mode
[  197.349229][T15114] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.3972'.
[  197.706250][T15139] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3984'.
[  197.991485][T15167] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  198.069375][ T9044] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  198.075014][ T9044] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  198.077993][ T9044] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  198.082177][ T9044] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  198.362031][T15192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4006'.
[  198.365223][T15192] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4006'.
[  198.395512][T15194] sctp: [Deprecated]: syz.2.4007 (pid 15194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.395512][T15194] Use struct sctp_sack_info instead
[  198.975955][T15210] netlink: 'syz.2.4013': attribute type 1 has an invalid length.
[  198.978810][T15210] netlink: 'syz.2.4013': attribute type 1 has an invalid length.
[  199.054302][T15216] netlink: 'syz.2.4016': attribute type 8 has an invalid length.
[  199.123891][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4018'.
[  199.127852][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4018'.
[  199.133054][T15224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4020'.
[  199.256384][T15228] IPVS: Scheduler module ip_vs_sip not found
[  199.273806][T15228] IPVS: length: 8 != 446622349272
[  199.583154][T15263] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.4038'.
[  199.586923][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4038'.
[  199.695299][T15276] syzkaller1: entered promiscuous mode
[  199.697644][T15276] syzkaller1: entered allmulticast mode
[  199.756751][T15283] tap0: tun_chr_ioctl cmd 1074025677
[  199.759130][T15283] tap0: linktype set to 0
[  199.867028][T15287] netlink: 'syz.0.4050': attribute type 1 has an invalid length.
[  200.643678][ T5848] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[  201.507096][T15394] netlink: 'syz.2.4096': attribute type 3 has an invalid length.
[  201.586648][T15399] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  201.668816][T15407] netlink: 'syz.2.4102': attribute type 6 has an invalid length.
[  201.763857][T15419] __nla_validate_parse: 5 callbacks suppressed
[  201.763874][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'.
[  201.882948][T15429] nbd: must specify at least one socket
[  201.981808][ T5210] Bluetooth: hci2: command 0x0405 tx timeout
[  202.180064][T15451] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4123'.
[  203.058498][T15558] netlink: 'syz.2.4171': attribute type 2 has an invalid length.
[  203.061911][T15558] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.4171'.
[  203.125148][T15563] vlan5: entered promiscuous mode
[  203.154321][T15567] netlink: 'syz.0.4175': attribute type 12 has an invalid length.
[  203.157115][T15567] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4175'.
[  203.215686][T15572] IPVS: ip_vs_add_dest(): server weight less than zero
[  203.244508][T15577] nbd: illegal input index -1
[  203.517565][T15611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.521704][T15611] syzkaller0: entered promiscuous mode
[  203.524020][T15611] syzkaller0: entered allmulticast mode
[  203.536373][T15613] netlink: 'syz.1.4198': attribute type 1 has an invalid length.
[  203.539559][T15611] tipc: Resetting bearer <eth:syzkaller0>
[  203.539648][T15613] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4198'.
[  203.545418][T15609] tipc: Resetting bearer <eth:syzkaller0>
[  203.545428][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4198'.
[  203.581997][T15609] tipc: Disabling bearer <eth:syzkaller0>
[  203.769302][T15628] netlink: 'syz.1.4205': attribute type 7 has an invalid length.
[  204.595792][T15681] validate_nla: 2 callbacks suppressed
[  204.595808][T15681] netlink: 'syz.2.4231': attribute type 2 has an invalid length.
[  204.643061][T15687] netlink: 'syz.0.4234': attribute type 6 has an invalid length.
[  204.702915][T15686] netlink: 'syz.2.4233': attribute type 10 has an invalid length.
[  204.709905][T15686] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  204.714190][T15686] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  205.133610][T15720] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.136724][T15720] syzkaller0: entered promiscuous mode
[  205.139082][T15720] syzkaller0: entered allmulticast mode
[  205.142528][T15720] tipc: Resetting bearer <eth:syzkaller0>
[  205.620216][T15764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4271'.
[  205.687873][   T47] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  205.713965][   T47] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  205.731109][   T47] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  205.770062][T15778] netlink: 'syz.1.4275': attribute type 58 has an invalid length.
[  205.782211][T15778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4275'.
[  205.979747][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'.
[  206.467298][T15826] netlink: 'syz.2.4295': attribute type 10 has an invalid length.
[  206.516043][T15831] netlink: 'syz.1.4299': attribute type 24 has an invalid length.
[  206.915547][T15849] netlink: 'syz.0.4308': attribute type 1 has an invalid length.
[  206.965744][T15851] delete_channel: no stack
[  207.060072][T15855] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  207.154300][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'.
[  207.513129][T15908] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  207.912557][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'.
[  207.922423][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'.
[  207.986134][T15946] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4349'.
[  208.005709][T15946] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  208.009878][T15946] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  208.462535][   T60] block nbd0: Possible stuck request ffff888021a30000: control (read@0,4096B). Runtime 120 seconds
[  208.767282][T15955] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4350'.
[  208.929823][T15965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4355'.
[  208.958305][T15967] netlink: 'syz.2.4356': attribute type 3 has an invalid length.
[  209.000914][T15973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4359'.
[  209.096405][T15982] netlink: 'syz.2.4365': attribute type 3 has an invalid length.
[  209.100270][T15982] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4365'.
[  209.822812][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4390'.
[  209.825898][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4390'.
[  209.934690][ T5712] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  210.685578][T16070] netlink: 'syz.2.4399': attribute type 1 has an invalid length.
[  211.122565][T16107] netlink: 'syz.2.4416': attribute type 12 has an invalid length.
[  211.206392][T16118] syz.1.4422 (16118) used obsolete PPPIOCDETACH ioctl
[  211.219064][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  211.226477][ T5712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  211.244053][ T5712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  211.250645][ T5712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  211.346506][T16127] syzkaller0: left promiscuous mode
[  211.348805][T16127] syzkaller0: left allmulticast mode
[  211.351574][T16127] tipc: Resetting bearer <eth:syzkaller0>
[  211.357917][T16127] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.490254][T16141] netlink: 'syz.0.4431': attribute type 21 has an invalid length.
[  211.502230][T16141] netlink: 'syz.0.4431': attribute type 1 has an invalid length.
[  212.476275][T16229] __nla_validate_parse: 6 callbacks suppressed
[  212.476292][T16229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4463'.
[  212.507308][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4465'.
[  212.650293][T16247] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4473'.
[  212.770844][T16259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.875482][T16266] pim6reg0: tun_chr_ioctl cmd 1074025677
[  212.878064][T16266] pim6reg0: linktype set to 768
[  213.115683][T16270] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4483'.
[  213.520987][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4499'.
[  213.577304][T16312] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4503'.
[  213.581751][T16314] netlink: 'syz.2.4504': attribute type 1 has an invalid length.
[  214.217891][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'.
[  214.298381][T16360] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4519'.
[  214.576633][T16374] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4525'.
[  214.740048][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4531'.
[  214.802556][T16394] syzkaller0: entered promiscuous mode
[  214.805554][T16394] syzkaller0: entered allmulticast mode
[  214.898277][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  216.084742][T16433] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.089020][T16433] syzkaller0: entered promiscuous mode
[  216.098785][T16433] syzkaller0: entered allmulticast mode
[  216.105932][T16433] tipc: Resetting bearer <eth:syzkaller0>
[  216.217730][T16445] netlink: 'syz.1.4551': attribute type 21 has an invalid length.
[  216.220384][T16445] netlink: 'syz.1.4551': attribute type 22 has an invalid length.
[  216.235109][T16445] netlink: 'syz.1.4551': attribute type 23 has an invalid length.
[  216.237956][T16449] netlink: 'syz.0.4548': attribute type 10 has an invalid length.
[  216.266871][T16440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.291200][T16440] netlink: 'syz.0.4548': attribute type 12 has an invalid length.
[  216.358700][T16459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.364414][T16459] syzkaller0: entered promiscuous mode
[  216.366715][T16459] syzkaller0: entered allmulticast mode
[  216.391251][T16459] tipc: Resetting bearer <eth:syzkaller0>
[  216.396437][T16457] tipc: Resetting bearer <eth:syzkaller0>
[  216.412940][T16457] tipc: Disabling bearer <eth:syzkaller0>
[  216.507535][T16472] netlink: 'syz.2.4563': attribute type 30 has an invalid length.
[  216.754825][T16493] netlink: 'syz.1.4569': attribute type 4 has an invalid length.
[  216.817830][T16497] netlink: 'syz.2.4573': attribute type 83 has an invalid length.
[  217.034220][T16512] netlink: 'syz.0.4580': attribute type 1 has an invalid length.
[  217.541932][T16484] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  217.543790][T16542] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  218.078779][T16593] __nla_validate_parse: 12 callbacks suppressed
[  218.078791][T16593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4616'.
[  218.166036][T16600] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4619'.
[  218.384519][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4627'.
[  218.387687][T16617] netlink: 'syz.0.4627': attribute type 1 has an invalid length.
[  218.392469][T16617] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4627'.
[  218.398646][T16617] lo speed is unknown, defaulting to 1000
[  218.402181][T16617] lo speed is unknown, defaulting to 1000
[  218.405379][T16617] lo speed is unknown, defaulting to 1000
[  218.421511][T16617] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  218.449957][T16617] lo speed is unknown, defaulting to 1000
[  218.455207][T16617] lo speed is unknown, defaulting to 1000
[  218.460876][T16617] lo speed is unknown, defaulting to 1000
[  218.815868][T16640] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4636'.
[  218.979037][T16646] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4639'.
[  218.992996][T16646] batadv1: entered promiscuous mode
[  218.995487][T16646] batadv1: entered allmulticast mode
[  219.662482][T16664] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  220.273683][T16719] lo: entered allmulticast mode
[  220.278092][T16719] tunl0: entered allmulticast mode
[  220.286913][T16719] gre0: entered allmulticast mode
[  220.304778][T16719] erspan0: entered allmulticast mode
[  220.308185][T16719] ip_vti0: entered allmulticast mode
[  220.312112][T16719] ip6_vti0: entered allmulticast mode
[  220.314701][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4672'.
[  220.315175][T16719] sit0: entered allmulticast mode
[  220.323544][T16719] ip6tnl0: entered allmulticast mode
[  220.326754][T16719] ip6gre0: entered allmulticast mode
[  220.329667][T16719] syz_tun: entered allmulticast mode
[  220.333761][T16719] ip6gretap0: entered allmulticast mode
[  220.339659][T16719] vcan0: entered allmulticast mode
[  220.351063][T16719] dummy0: entered allmulticast mode
[  220.355065][T16719] nlmon0: entered allmulticast mode
[  220.358188][T16719] caif0: entered allmulticast mode
[  220.364245][T16719] vlan0: left promiscuous mode
[  220.366353][T16719] vlan0: entered allmulticast mode
[  220.370175][T16719] ipvlan1: entered allmulticast mode
[  220.379891][T16719] macsec0: entered allmulticast mode
[  220.389382][T16719] geneve0: entered allmulticast mode
[  220.407619][T16719] vxcan0: entered allmulticast mode
[  220.418322][T16719] vxcan1: entered allmulticast mode
[  220.423523][T16719] tipc: Resetting bearer <eth:syzkaller0>
[  220.432703][T16719] syzkaller0: left promiscuous mode
[  220.437888][T16719] ip6erspan0: entered allmulticast mode
[  220.443031][T16719] gretap1: entered allmulticast mode
[  220.448699][T16719] mac80211_hwsim hwsim8 veth1_to_bod: entered allmulticast mode
[  220.454738][T16719] bond4: entered allmulticast mode
[  220.459531][T16719] veth6: entered allmulticast mode
[  220.467334][T16719] veth7: entered allmulticast mode
[  220.474062][T16719] gre3: entered allmulticast mode
[  220.476525][T16719] syztnl1: entered allmulticast mode
[  220.478923][T16719] ieee802154 phy1 wpan1: entered allmulticast mode
[  220.483367][T16719] bridge5: entered allmulticast mode
[  220.486092][T16719] gtp0: left promiscuous mode
[  220.490326][T16719] ipvlan2: left promiscuous mode
[  220.494019][T16719] ipvlan2: entered allmulticast mode
[  220.498983][T16719] bond5: entered allmulticast mode
[  220.502450][T16719] gre4: entered allmulticast mode
[  220.506466][T16719] veth0: entered allmulticast mode
[  220.508622][T16719] veth1: entered allmulticast mode
[  220.509883][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4671'.
[  220.520885][T16719] ip6gretap1: entered allmulticast mode
[  220.528338][T16728] openvswitch: netlink: Missing key (keys=40, expected=80)
[  220.535309][T16719] @: entered allmulticast mode
[  220.539423][T16719] gre5: entered allmulticast mode
[  220.545625][T16719] bridge6: entered allmulticast mode
[  220.550646][T16719] gre6: entered allmulticast mode
[  220.554155][T16719] vlan4: left promiscuous mode
[  220.556802][T16719] bridge7: entered allmulticast mode
[  220.561916][T16719] geneve2: entered allmulticast mode
[  220.568626][ T5848] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.581830][ T5848] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.585426][ T5848] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.593554][ T5848] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.782509][ T9044] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  220.864377][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4680'.
[  220.882186][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4680'.
[  221.329469][T16788] validate_nla: 2 callbacks suppressed
[  221.329495][T16788] netlink: 'syz.0.4697': attribute type 9 has an invalid length.
[  221.386404][T16792] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  221.606775][T16812] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  221.610344][T16812] openvswitch: netlink: Duplicate key (type 0).
[  222.784515][T16893] netlink: 'syz.2.4741': attribute type 1 has an invalid length.
[  222.787895][T16893] netlink: 'syz.2.4741': attribute type 1 has an invalid length.
[  223.126160][T16906] __nla_validate_parse: 9 callbacks suppressed
[  223.126179][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4747'.
[  223.134098][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4747'.
[  223.137703][T16906] netlink: 'syz.1.4747': attribute type 19 has an invalid length.
[  223.595171][T16927] lo speed is unknown, defaulting to 1000
[  223.812283][T16940] syzkaller1: entered promiscuous mode
[  223.814677][T16940] syzkaller1: entered allmulticast mode
[  223.857412][T16942] netlink: zone id is out of range
[  223.866822][T16942] netlink: zone id is out of range
[  223.869052][T16942] netlink: zone id is out of range
[  223.873611][T16942] netlink: zone id is out of range
[  223.875827][T16942] netlink: zone id is out of range
[  223.877941][T16942] netlink: zone id is out of range
[  224.030706][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4769'.
[  224.113366][T16960] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4770'.
[  224.125054][T16960] batadv0: entered promiscuous mode
[  224.126968][T16960] batadv0: entered allmulticast mode
[  224.241582][T16960] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4770'.
[  224.296403][T16967] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4775'.
[  224.367235][T16969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4776'.
[  224.389258][T16971] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  224.411900][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'.
[  224.415590][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4777'.
[  224.569118][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4779'.
[  225.513326][T17037] netlink: 'syz.2.4805': attribute type 1 has an invalid length.
[  225.541881][T17039] pim6reg1: entered promiscuous mode
[  225.544197][T17039] pim6reg1: entered allmulticast mode
[  227.106374][T17131] net_ratelimit: 82 callbacks suppressed
[  227.106391][T17131] veth1: mtu greater than device maximum
[  227.269842][T17148] sit0: entered promiscuous mode
[  227.278384][T17148] sit0: left allmulticast mode
[  227.369634][T17159] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.377868][T17159] syzkaller0: entered promiscuous mode
[  227.383970][T17159] tipc: Resetting bearer <eth:syzkaller0>
[  227.411964][T17159] sch_fq: defrate 257 ignored.
[  227.483631][T17170] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  227.572380][T17179] netlink: 'syz.1.4869': attribute type 26 has an invalid length.
[  227.819773][T17208] syzkaller1: entered promiscuous mode
[  227.826357][T17208] syzkaller1: entered allmulticast mode
[  228.031533][T17231] netlink: 'syz.0.4890': attribute type 1 has an invalid length.
[  228.294480][T17258] __nla_validate_parse: 5 callbacks suppressed
[  228.294498][T17258] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4901'.
[  228.560992][T17289] netlink: 'syz.0.4918': attribute type 58 has an invalid length.
[  229.339859][T17342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4943'.
[  230.043135][T17395] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4968'.
[  230.248805][T17413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4975'.
[  230.255463][T17413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4975'.
[  230.519447][T17435] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4986'.
[  230.525947][T17435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  231.228759][T17440] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.235378][T17440] syzkaller0: entered promiscuous mode
[  231.237707][T17440] syzkaller0: entered allmulticast mode
[  231.260973][T17440] tipc: Resetting bearer <eth:syzkaller0>
[  231.266076][T17439] tipc: Resetting bearer <eth:syzkaller0>
[  231.282922][T17439] tipc: Disabling bearer <eth:syzkaller0>
[  231.497677][T17466] netlink: 'syz.0.4999': attribute type 7 has an invalid length.
[  231.620366][T17487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5011'.
[  231.695774][ T5849] nci: nci_rx_work: unknown MT 0x1
[  231.824111][T17512] lo speed is unknown, defaulting to 1000
[  232.515224][T17525] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5025'.
[  232.604643][   T33] audit: type=1107 audit(1754399503.270:8): pid=17532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  233.168764][T17558] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5039'.
[  233.342391][T17572] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5046'.
[  233.984899][T17615] syzkaller0: entered promiscuous mode
[  233.986836][T17615] syzkaller0: entered allmulticast mode
[  234.468073][T17621] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5068'.
[  235.328194][ T5824] Bluetooth: hci2: link tx timeout
[  235.330403][ T5824] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  235.335802][ T5824] Bluetooth: hci2: link tx timeout
[  235.338335][ T5824] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  235.549536][T17652] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.249561][T17673] netlink: 'syz.2.5088': attribute type 2 has an invalid length.
[  236.416588][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5091'.
[  236.472054][T17687] tipc: Resetting bearer <eth:ipvlan1>
[  236.477564][   T24] lo speed is unknown, defaulting to 1000
[  236.526044][T17696] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5096'.
[  236.530160][T17696] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5096'.
[  236.808459][T17723] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5108'.
[  236.903723][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5109'.
[  236.938269][T17734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5112'.
[  236.938589][T17728] 8021q: adding VLAN 0 to HW filter on device bond7
[  236.996782][T17728] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  237.003574][T17728] bond7: (slave macvlan3): Enslaving as an active interface with an up link
[  237.189517][T17753] netlink: 'syz.0.5118': attribute type 1 has an invalid length.
[  237.210776][T17753] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5118'.
[  237.346236][T17765] netlink: 'syz.0.5121': attribute type 4 has an invalid length.
[  237.380099][    T9] lo speed is unknown, defaulting to 1000
[  237.382915][    T9] syz2: Port: 1 Link DOWN
[  237.398205][T17765] netlink: 'syz.0.5121': attribute type 4 has an invalid length.
[  237.404216][T17769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5124'.
[  237.421418][    T9] lo speed is unknown, defaulting to 1000
[  237.429630][    T9] syz2: Port: 1 Link ACTIVE
[  237.433887][ T5824] Bluetooth: hci2: command 0x0405 tx timeout
[  237.739684][T17796] netlink: zone id is out of range
[  237.747522][T17796] netlink: zone id is out of range
[  237.756161][T17796] netlink: zone id is out of range
[  237.764371][T17796] netlink: zone id is out of range
[  237.773345][T17796] netlink: zone id is out of range
[  237.781743][T17796] netlink: zone id is out of range
[  237.784377][T17796] netlink: zone id is out of range
[  237.786551][T17796] netlink: zone id is out of range
[  237.788692][T17796] netlink: zone id is out of range
[  237.791320][T17796] netlink: zone id is out of range
[  238.541977][   T60] block nbd0: Possible stuck request ffff888021a30000: control (read@0,4096B). Runtime 150 seconds
[  238.546875][T17852] netlink: 'syz.0.5158': attribute type 1 has an invalid length.
[  238.577208][T17852] 8021q: adding VLAN 0 to HW filter on device bond4
[  238.683567][T17862] __nla_validate_parse: 2 callbacks suppressed
[  238.683577][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5161'.
[  238.689185][T17862] netlink: 'syz.0.5161': attribute type 5 has an invalid length.
[  238.692345][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5161'.
[  238.799505][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5166'.
[  238.805149][T17872] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  239.503132][ T5210] Bluetooth: hci2: command 0x0405 tx timeout
[  239.645822][T17933] netlink: 'syz.0.5191': attribute type 6 has an invalid length.
[  239.649392][T17933] IPv6: NLM_F_CREATE should be specified when creating new route
[  239.884763][T17948] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  239.933404][T17951] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5197'.
[  240.514722][T17977] lo speed is unknown, defaulting to 1000
[  240.786528][T18003] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5220'.
[  240.955129][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5227'.
[  240.986194][T18017] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5227'.
[  241.901152][ T5210] Bluetooth: hci0: command tx timeout
[  241.995025][T18059] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5243'.
[  241.998660][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5243'.
[  242.015708][T18059] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5243'.
[  242.256578][T18087] raw_sendmsg: syz.2.5257 forgot to set AF_INET. Fix it!
[  242.424685][T18101] netlink: 'syz.1.5264': attribute type 5 has an invalid length.
[  242.438907][T18101] geneve3: entered promiscuous mode
[  242.441472][T18101] geneve3: entered allmulticast mode
[  242.445507][ T9044] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  242.449148][ T9044] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  242.456061][ T9044] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  242.459399][ T9044] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  242.656217][T18122] lo speed is unknown, defaulting to 1000
[  242.815402][T18133] syzkaller0: entered promiscuous mode
[  242.817574][T18133] syzkaller0: entered allmulticast mode
[  244.021187][T18153] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  244.101870][T18153] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  244.187561][T18153] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  244.231501][T18153] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  244.369805][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  244.395841][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  244.410372][ T5848] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  244.431343][ T5848] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  244.486272][T18190] __nla_validate_parse: 6 callbacks suppressed
[  244.486287][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5298'.
[  244.619369][T18202] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  244.814256][T18220] macsec1: entered allmulticast mode
[  244.816623][T18220] macsec0: entered allmulticast mode
[  245.041016][ T5848] syzkaller0: tun_net_xmit 76
[  245.043617][ T5848] syzkaller0: tun_net_xmit 48
[  245.061939][T18233] syzkaller0: create flow: hash 1614501368 index 1
[  245.082165][   T47] syzkaller0: tun_net_xmit 76
[  245.104713][T18232] syzkaller0: delete flow: hash 1614501368 index 1
[  245.332463][T18256] netlink: 'syz.1.5328': attribute type 1 has an invalid length.
[  245.335940][T18256] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5328'.
[  246.096246][T18249] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5325'.
[  246.195858][T18267] netlink: 'syz.0.5333': attribute type 1 has an invalid length.
[  246.229101][T18270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5335'.
[  246.245021][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5336'.
[  246.248870][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5336'.
[  246.294643][T18270] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5335'.
[  246.362311][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5339'.
[  246.987273][    C1] ==================================================================
[  246.990698][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  246.994115][    C1] Write of size 8 at addr ffff888111100030 by task syz.0.5366/18340
[  246.998286][    C1] 
[  246.999357][    C1] CPU: 1 UID: 0 PID: 18340 Comm: syz.0.5366 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  246.999374][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  246.999381][    C1] Call Trace:
[  246.999387][    C1]  <IRQ>
[  246.999393][    C1]  dump_stack_lvl+0x189/0x250
[  246.999410][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  246.999423][    C1]  ? rcu_is_watching+0x15/0xb0
[  246.999440][    C1]  ? __kasan_check_byte+0x12/0x40
[  246.999457][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.999467][    C1]  ? rcu_is_watching+0x15/0xb0
[  246.999482][    C1]  ? lock_release+0x4b/0x3e0
[  246.999498][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  246.999509][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  246.999521][    C1]  print_report+0xca/0x240
[  246.999537][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  246.999554][    C1]  kasan_report+0x118/0x150
[  246.999570][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  246.999586][    C1]  __xfrm_state_delete+0x696/0xca0
[  246.999605][    C1]  xfrm_timer_handler+0x18f/0xa00
[  246.999622][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  246.999636][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  246.999652][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.999668][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  246.999681][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  246.999695][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  246.999710][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  246.999724][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  246.999747][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  246.999762][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  246.999780][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  246.999792][    C1]  handle_softirqs+0x286/0x870
[  246.999808][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  246.999823][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  246.999841][    C1]  __irq_exit_rcu+0xca/0x1f0
[  246.999855][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  246.999872][    C1]  irq_exit_rcu+0x9/0x30
[  246.999888][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  246.999903][    C1]  </IRQ>
[  246.999907][    C1]  <TASK>
[  246.999912][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  246.999927][    C1] RIP: 0010:lock_release+0x20/0x3e0
[  246.999970][    C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 f0 7e fc 10 <48> 89 44 24 28 0f 1f 44 00 00 65 8b 05 f3 7e fc 10 83 f8 08 0f 83
[  246.999980][    C1] RSP: 0018:ffffc90001e0f130 EFLAGS: 00000286
[  246.999993][    C1] RAX: c76298e91b8dd100 RBX: ffffffff903ce101 RCX: c76298e91b8dd100
[  247.000001][    C1] RDX: ffffc90001e0f201 RSI: ffffffff8172cd05 RDI: ffffffff8e13c4e0
[  247.000009][    C1] RBP: dffffc0000000000 R08: ffffc90001e0f5e0 R09: 0000000000000000
[  247.000018][    C1] R10: ffffc90001e0f2b8 R11: fffff520003c1e59 R12: ffffc90001e0f5f0
[  247.000027][    C1] R13: ffffffff8172cd05 R14: ffffffff8e13c4e0 R15: ffffffff8172cd05
[  247.000035][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.000049][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.000062][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.000075][    C1]  ? deref_stack_reg+0x19f/0x230
[  247.000087][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.000104][    C1]  unwind_next_frame+0x19a9/0x2390
[  247.000117][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.000127][    C1]  ? kasan_save_track+0x3e/0x80
[  247.000143][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  247.000157][    C1]  arch_stack_walk+0x11c/0x150
[  247.000171][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  247.000187][    C1]  stack_trace_save+0x9c/0xe0
[  247.000199][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  247.000212][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  247.000229][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  247.000246][    C1]  kasan_save_track+0x3e/0x80
[  247.000259][    C1]  ? kasan_save_track+0x3e/0x80
[  247.000290][    C1]  __kasan_slab_alloc+0x6c/0x80
[  247.000306][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  247.000323][    C1]  ? mas_alloc_nodes+0x2e9/0x8e0
[  247.000340][    C1]  mas_alloc_nodes+0x2e9/0x8e0
[  247.000356][    C1]  mas_preallocate+0x3ad/0x6f0
[  247.000371][    C1]  ? __pfx_mas_preallocate+0x10/0x10
[  247.000388][    C1]  ? __mas_set_range+0x12f/0x3c0
[  247.000405][    C1]  __split_vma+0x2fa/0xa00
[  247.000422][    C1]  ? __pfx___split_vma+0x10/0x10
[  247.000438][    C1]  ? can_vma_merge_right+0x1af/0x720
[  247.000454][    C1]  vma_modify+0x12c3/0x1970
[  247.000472][    C1]  vma_modify_flags+0x1e8/0x230
[  247.000486][    C1]  ? __pfx_vma_modify_flags+0x10/0x10
[  247.000502][    C1]  ? __vm_enough_memory+0x11b/0x380
[  247.000517][    C1]  mprotect_fixup+0x400/0x9b0
[  247.000532][    C1]  ? __pfx_mprotect_fixup+0x10/0x10
[  247.000546][    C1]  do_mprotect_pkey+0x8cd/0xce0
[  247.000561][    C1]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  247.000579][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  247.000596][    C1]  __x64_sys_mprotect+0x80/0x90
[  247.000607][    C1]  do_syscall_64+0xfa/0x3b0
[  247.000622][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.000636][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.000647][    C1]  ? exc_page_fault+0x9f/0xf0
[  247.000660][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.000671][    C1] RIP: 0033:0x7f63d678ec27
[  247.000681][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.000691][    C1] RSP: 002b:00007ffd0ba1f098 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[  247.000703][    C1] RAX: ffffffffffffffda RBX: 00007f63d75306c0 RCX: 00007f63d678ec27
[  247.000711][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f63d7511000
[  247.000718][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  247.000726][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd0ba1f1f0
[  247.000733][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  247.000746][    C1]  </TASK>
[  247.000750][    C1] 
[  247.234350][    C1] Allocated by task 16509:
[  247.236257][    C1]  kasan_save_track+0x3e/0x80
[  247.238270][    C1]  __kasan_slab_alloc+0x6c/0x80
[  247.240378][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  247.242725][    C1]  xfrm_state_alloc+0x24/0x2f0
[  247.244798][    C1]  __find_acq_core+0x8a7/0x1c00
[  247.246903][    C1]  xfrm_find_acq+0x78/0xa0
[  247.248807][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  247.250968][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  247.253045][    C1]  netlink_rcv_skb+0x208/0x470
[  247.255073][    C1]  xfrm_netlink_rcv+0x79/0x90
[  247.257061][    C1]  netlink_unicast+0x82f/0x9e0
[  247.259151][    C1]  netlink_sendmsg+0x805/0xb30
[  247.261208][    C1]  __sock_sendmsg+0x21c/0x270
[  247.263231][    C1]  ____sys_sendmsg+0x505/0x830
[  247.265217][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  247.267147][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  247.269242][    C1]  do_syscall_64+0xfa/0x3b0
[  247.271142][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.273538][    C1] 
[  247.274556][    C1] Freed by task 971:
[  247.276180][    C1]  kasan_save_track+0x3e/0x80
[  247.278170][    C1]  kasan_save_free_info+0x46/0x50
[  247.280299][    C1]  __kasan_slab_free+0x62/0x70
[  247.282378][    C1]  kmem_cache_free+0x18f/0x400
[  247.284472][    C1]  xfrm_state_gc_task+0x518/0x6a0
[  247.286657][    C1]  process_scheduled_works+0xae1/0x17b0
[  247.289062][    C1]  worker_thread+0x8a0/0xda0
[  247.291049][    C1]  kthread+0x711/0x8a0
[  247.292798][    C1]  ret_from_fork+0x3fc/0x770
[  247.294772][    C1]  ret_from_fork_asm+0x1a/0x30
[  247.296770][    C1] 
[  247.297812][    C1] The buggy address belongs to the object at ffff888111100000
[  247.297812][    C1]  which belongs to the cache xfrm_state of size 928
[  247.303530][    C1] The buggy address is located 48 bytes inside of
[  247.303530][    C1]  freed 928-byte region [ffff888111100000, ffff8881111003a0)
[  247.309152][    C1] 
[  247.310209][    C1] The buggy address belongs to the physical page:
[  247.312929][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111102400 pfn:0x111100
[  247.317174][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  247.320736][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  247.323973][    C1] page_type: f5(slab)
[  247.325687][    C1] raw: 057ff00000000040 ffff888104f36280 dead000000000122 0000000000000000
[  247.329359][    C1] raw: ffff888111102400 00000000800e000b 00000000f5000000 0000000000000000
[  247.332994][    C1] head: 057ff00000000040 ffff888104f36280 dead000000000122 0000000000000000
[  247.336655][    C1] head: ffff888111102400 00000000800e000b 00000000f5000000 0000000000000000
[  247.340315][    C1] head: 057ff00000000002 ffffea0004444001 00000000ffffffff 00000000ffffffff
[  247.343874][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  247.347446][    C1] page dumped because: kasan: bad access detected
[  247.350139][    C1] page_owner tracks the page as allocated
[  247.352520][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6895, tgid 6894 (syz.0.446), ts 68586924998, free_ts 53839210668
[  247.360433][    C1]  post_alloc_hook+0x240/0x2a0
[  247.362485][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  247.364808][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  247.367306][    C1]  alloc_pages_mpol+0x232/0x4a0
[  247.369417][    C1]  allocate_slab+0x8a/0x3b0
[  247.371269][    C1]  ___slab_alloc+0xbfc/0x1480
[  247.373254][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  247.375606][    C1]  xfrm_state_alloc+0x24/0x2f0
[  247.377710][    C1]  xfrm_state_find+0x37d4/0x5400
[  247.379787][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  247.382411][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  247.384689][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  247.386758][    C1]  __ip4_datagram_connect+0x9a5/0x1270
[  247.389113][    C1]  __ip6_datagram_connect+0x9f0/0x1150
[  247.391452][    C1]  ip6_datagram_connect_v6_only+0x63/0xa0
[  247.393907][    C1]  __sys_connect+0x316/0x440
[  247.395922][    C1] page last free pid 5827 tgid 5827 stack trace:
[  247.398023][    C1]  __free_frozen_pages+0xc71/0xe70
[  247.399919][    C1]  __slab_free+0x326/0x400
[  247.401770][    C1]  qlist_free_all+0x97/0x140
[  247.403761][    C1]  kasan_quarantine_reduce+0x148/0x160
[  247.406022][    C1]  __kasan_slab_alloc+0x22/0x80
[  247.408082][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  247.410295][    C1]  getname_kernel+0x5a/0x2f0
[  247.412183][    C1]  kern_path+0x1d/0x50
[  247.413843][    C1]  tomoyo_mount_permission+0x776/0x970
[  247.416136][    C1]  security_sb_mount+0xec/0x350
[  247.418253][    C1]  path_mount+0xbc/0xfe0
[  247.420102][    C1]  __se_sys_mount+0x317/0x410
[  247.422141][    C1]  do_syscall_64+0xfa/0x3b0
[  247.424135][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.426608][    C1] 
[  247.427657][    C1] Memory state around the buggy address:
[  247.430060][    C1]  ffff8881110fff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  247.433498][    C1]  ffff8881110fff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  247.436961][    C1] >ffff888111100000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.440338][    C1]                                      ^
[  247.442735][    C1]  ffff888111100080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.446173][    C1]  ffff888111100100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  247.449611][    C1] ==================================================================
[  247.453610][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  247.456694][    C1] CPU: 1 UID: 0 PID: 18340 Comm: syz.0.5366 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  247.461675][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.465992][    C1] Call Trace:
[  247.467473][    C1]  <IRQ>
[  247.468731][    C1]  dump_stack_lvl+0x99/0x250
[  247.470683][    C1]  ? __asan_memcpy+0x40/0x70
[  247.472667][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.474863][    C1]  ? __pfx__printk+0x10/0x10
[  247.476837][    C1]  panic+0x2db/0x790
[  247.478521][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.480740][    C1]  ? __pfx_panic+0x10/0x10
[  247.482686][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  247.485145][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  247.487640][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.490353][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  247.492634][    C1]  check_panic_on_warn+0x89/0xb0
[  247.494784][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  247.497088][    C1]  end_report+0x78/0x160
[  247.498901][    C1]  kasan_report+0x129/0x150
[  247.500878][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  247.503163][    C1]  __xfrm_state_delete+0x696/0xca0
[  247.505393][    C1]  xfrm_timer_handler+0x18f/0xa00
[  247.507640][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  247.510043][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  247.512577][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.514814][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  247.517372][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.520051][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  247.522367][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  247.524725][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  247.526963][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  247.529371][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  247.531865][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  247.534041][    C1]  handle_softirqs+0x286/0x870
[  247.536048][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  247.538081][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  247.540348][    C1]  __irq_exit_rcu+0xca/0x1f0
[  247.542362][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  247.544598][    C1]  irq_exit_rcu+0x9/0x30
[  247.546449][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  247.548846][    C1]  </IRQ>
[  247.550105][    C1]  <TASK>
[  247.551166][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  247.553075][    C1] RIP: 0010:lock_release+0x20/0x3e0
[  247.554774][    C1] Code: 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 f0 7e fc 10 <48> 89 44 24 28 0f 1f 44 00 00 65 8b 05 f3 7e fc 10 83 f8 08 0f 83
[  247.561243][    C1] RSP: 0018:ffffc90001e0f130 EFLAGS: 00000286
[  247.563553][    C1] RAX: c76298e91b8dd100 RBX: ffffffff903ce101 RCX: c76298e91b8dd100
[  247.566049][    C1] RDX: ffffc90001e0f201 RSI: ffffffff8172cd05 RDI: ffffffff8e13c4e0
[  247.568559][    C1] RBP: dffffc0000000000 R08: ffffc90001e0f5e0 R09: 0000000000000000
[  247.571506][    C1] R10: ffffc90001e0f2b8 R11: fffff520003c1e59 R12: ffffc90001e0f5f0
[  247.574844][    C1] R13: ffffffff8172cd05 R14: ffffffff8e13c4e0 R15: ffffffff8172cd05
[  247.578209][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.580377][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.582554][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.584754][    C1]  ? deref_stack_reg+0x19f/0x230
[  247.586867][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.588998][    C1]  unwind_next_frame+0x19a9/0x2390
[  247.591157][    C1]  ? unwind_next_frame+0xa5/0x2390
[  247.593291][    C1]  ? kasan_save_track+0x3e/0x80
[  247.595296][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  247.597840][    C1]  arch_stack_walk+0x11c/0x150
[  247.599839][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  247.601968][    C1]  stack_trace_save+0x9c/0xe0
[  247.603986][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  247.606282][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  247.608567][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  247.610801][    C1]  kasan_save_track+0x3e/0x80
[  247.612836][    C1]  ? kasan_save_track+0x3e/0x80
[  247.614965][    C1]  __kasan_slab_alloc+0x6c/0x80
[  247.617060][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  247.619303][    C1]  ? mas_alloc_nodes+0x2e9/0x8e0
[  247.621392][    C1]  mas_alloc_nodes+0x2e9/0x8e0
[  247.623449][    C1]  mas_preallocate+0x3ad/0x6f0
[  247.625491][    C1]  ? __pfx_mas_preallocate+0x10/0x10
[  247.627745][    C1]  ? __mas_set_range+0x12f/0x3c0
[  247.629869][    C1]  __split_vma+0x2fa/0xa00
[  247.631712][    C1]  ? __pfx___split_vma+0x10/0x10
[  247.633779][    C1]  ? can_vma_merge_right+0x1af/0x720
[  247.636044][    C1]  vma_modify+0x12c3/0x1970
[  247.637993][    C1]  vma_modify_flags+0x1e8/0x230
[  247.640042][    C1]  ? __pfx_vma_modify_flags+0x10/0x10
[  247.642370][    C1]  ? __vm_enough_memory+0x11b/0x380
[  247.644609][    C1]  mprotect_fixup+0x400/0x9b0
[  247.646643][    C1]  ? __pfx_mprotect_fixup+0x10/0x10
[  247.648806][    C1]  do_mprotect_pkey+0x8cd/0xce0
[  247.650776][    C1]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  247.653096][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  247.655284][    C1]  __x64_sys_mprotect+0x80/0x90
[  247.657322][    C1]  do_syscall_64+0xfa/0x3b0
[  247.659315][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.661539][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.664147][    C1]  ? exc_page_fault+0x9f/0xf0
[  247.666076][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.668418][    C1] RIP: 0033:0x7f63d678ec27
[  247.670226][    C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.678388][    C1] RSP: 002b:00007ffd0ba1f098 EFLAGS: 00000206 ORIG_RAX: 000000000000000a
[  247.681834][    C1] RAX: ffffffffffffffda RBX: 00007f63d75306c0 RCX: 00007f63d678ec27
[  247.685183][    C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f63d7511000
[  247.688494][    C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000
[  247.691732][    C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd0ba1f1f0
[  247.695143][    C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000
[  247.698524][    C1]  </TASK>
[  247.700566][    C1] Kernel Offset: disabled
[  247.702391][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:11:57  Registers:
info registers vcpu 0

CPU#0
RAX=b2abd78fe7516200 RBX=ffffffff81969b18 RCX=b2abd78fe7516200 RDX=0000000000000001
RSI=ffffffff8d979309 RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fd4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558cef6808 CR3=000000010e586000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3fdd187498 00007f3fdd187470 XMM03=00007f3fdd1874a8 00007f3fdd1874a0
XMM04=00007f3fddced100 00007f3fdd187460 XMM05=00007f3fdd187478 00007f3fdd1874c0
XMM06=00007f3fdd1874b8 00007f3fdd1874b0 XMM07=00007f3fdd1874a8 00007f3fdd1874a0
XMM08=0000000000000000 00007f3fdd012eab XMM09=0000000000000000 00007f3fdd012f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888106cf0237 R9 =1ffff11020d9e046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95922 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558cef6500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003ff6 CR3=00000000264f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=2896d83f076333cb ff610ab8cc34fec5 XMM03=befa2c706cacf410 954e39d7f545ee23
XMM04=fdca35104ce13600 11dbfcdac8559c8a XMM05=0000000b95482200 00000000008a40aa
XMM06=b3c1c837048ac3bd d7480a4e0d083c0a XMM07=5885a27935dbfacb 58a3f6fefdca3510
XMM08=4ce1360011dbfcda c8559c8abefa2c70 XMM09=0000000000000000 00007f63d6812f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
