last executing test programs:

2.285852894s ago: executing program 1 (id=5540):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe0001000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)

2.285721453s ago: executing program 1 (id=5541):
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff})
read$alg(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9)
ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0)
writev(r1, &(0x7f0000000400), 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

1.381473057s ago: executing program 1 (id=5574):
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
socket(0x8, 0x0, 0x8000)
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x6020400)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

1.151654129s ago: executing program 2 (id=5581):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070001000080000001"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000000f80), 0x0}, 0x20)

1.151490016s ago: executing program 2 (id=5582):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)

1.090826435s ago: executing program 2 (id=5583):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

1.030089793s ago: executing program 2 (id=5584):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x48b5, 0x4)
sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)
close(r0)

964.804565ms ago: executing program 2 (id=5585):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f88a8"}}}}, 0x48)

511.252066ms ago: executing program 1 (id=5587):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1, [@bcast, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})

511.066151ms ago: executing program 1 (id=5588):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040019"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

510.94669ms ago: executing program 1 (id=5589):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="50b115289c3b0999b3f8c3f16e", 0xd}], 0x1}, 0x48400)

231.277879ms ago: executing program 2 (id=5595):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$rds(0x15, 0x5, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x7, 0x9, [@multicast1]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'})
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0)

231.23152ms ago: executing program 0 (id=5596):
syz_emit_ethernet(0x0, 0x0, 0x0)

231.190948ms ago: executing program 0 (id=5597):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xd0, 0x0, 0x0)

161.463942ms ago: executing program 0 (id=5598):
r0 = socket(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208d}}], 0x2, 0x0)

91.57679ms ago: executing program 0 (id=5599):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)

91.40602ms ago: executing program 0 (id=5600):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8)

0s ago: executing program 0 (id=5601):
r0 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)="13", 0x1}], 0x1}, 0x2000800)

kernel console output (not intermixed with test programs):

ngth: 249 > 9
[   56.590226][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.594200][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.598775][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.617105][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.620701][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.623955][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.628168][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.631461][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.645967][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.651711][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.655392][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.663727][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.699330][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.967868][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   57.087671][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.090058][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.092472][ T5843] bridge_slave_0: entered allmulticast mode
[   57.095572][ T5843] bridge_slave_0: entered promiscuous mode
[   57.105372][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   57.119264][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.121836][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.124250][ T5843] bridge_slave_1: entered allmulticast mode
[   57.129380][ T5843] bridge_slave_1: entered promiscuous mode
[   57.182741][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.190242][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   57.201034][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.271587][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.274458][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.277804][ T5848] bridge_slave_0: entered allmulticast mode
[   57.281305][ T5848] bridge_slave_0: entered promiscuous mode
[   57.284617][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.288892][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.291904][ T5848] bridge_slave_1: entered allmulticast mode
[   57.294643][ T5848] bridge_slave_1: entered promiscuous mode
[   57.304926][ T5843] team0: Port device team_slave_0 added
[   57.328560][ T5843] team0: Port device team_slave_1 added
[   57.364239][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.403902][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.409072][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.411481][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.422789][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.427523][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.430524][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.433643][ T5851] bridge_slave_0: entered allmulticast mode
[   57.439255][ T5851] bridge_slave_0: entered promiscuous mode
[   57.443915][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.447003][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.449752][ T5851] bridge_slave_1: entered allmulticast mode
[   57.453399][ T5851] bridge_slave_1: entered promiscuous mode
[   57.464192][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.466922][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.475871][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.510229][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.515263][ T5848] team0: Port device team_slave_0 added
[   57.520869][ T5848] team0: Port device team_slave_1 added
[   57.525457][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.582690][ T5843] hsr_slave_0: entered promiscuous mode
[   57.585638][ T5843] hsr_slave_1: entered promiscuous mode
[   57.590614][ T5851] team0: Port device team_slave_0 added
[   57.593316][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.595641][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.605012][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.611223][ T5851] team0: Port device team_slave_1 added
[   57.613994][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.617008][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.627272][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.688701][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.691406][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.701798][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.729367][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.732056][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.741846][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.759202][ T5848] hsr_slave_0: entered promiscuous mode
[   57.762689][ T5848] hsr_slave_1: entered promiscuous mode
[   57.767069][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.769572][ T5848] Cannot create hsr debugfs directory
[   57.852998][ T5851] hsr_slave_0: entered promiscuous mode
[   57.857452][ T5851] hsr_slave_1: entered promiscuous mode
[   57.860444][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   57.862889][ T5851] Cannot create hsr debugfs directory
[   58.164667][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.177218][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.191041][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.197921][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.245101][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.255245][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.265448][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.271946][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.338214][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.346056][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.351609][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.360638][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.405415][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.422013][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.443404][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   58.460375][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.462862][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.468804][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.471181][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.477509][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   58.488096][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.490767][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.517629][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.520602][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.570521][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.610036][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   58.628384][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.631522][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.648580][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.651615][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.654864][ T5854] Bluetooth: hci0: command tx timeout
[   58.727291][ T5854] Bluetooth: hci2: command tx timeout
[   58.729801][ T5854] Bluetooth: hci1: command tx timeout
[   58.830306][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.835127][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.918875][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.923856][ T5843] veth0_vlan: entered promiscuous mode
[   58.935264][ T5848] veth0_vlan: entered promiscuous mode
[   58.949791][ T5843] veth1_vlan: entered promiscuous mode
[   58.955222][ T5848] veth1_vlan: entered promiscuous mode
[   58.976053][ T5851] veth0_vlan: entered promiscuous mode
[   58.994505][ T5851] veth1_vlan: entered promiscuous mode
[   59.018130][ T5843] veth0_macvtap: entered promiscuous mode
[   59.021288][ T5848] veth0_macvtap: entered promiscuous mode
[   59.028463][ T5848] veth1_macvtap: entered promiscuous mode
[   59.038730][ T5843] veth1_macvtap: entered promiscuous mode
[   59.054299][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.060263][ T5851] veth0_macvtap: entered promiscuous mode
[   59.063937][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.074895][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.080119][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.091650][ T5715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.099108][ T5851] veth1_macvtap: entered promiscuous mode
[   59.101483][ T5715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.114750][ T5715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.135004][ T5715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.139351][ T5715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.143030][ T5715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.162848][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.167713][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.187005][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.208401][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.214588][ T5715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.218716][ T5715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.231803][ T5715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.240082][ T5715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.240355][ T3655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.247294][ T3655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.257427][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.260191][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.313272][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.313977][  T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.317398][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.319087][  T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.361284][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.367118][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.374272][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.414043][  T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.418604][  T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.728365][ T5847] Bluetooth: hci0: command tx timeout
[   60.741446][ T5975] Zero length message leads to an empty skb
[   60.806549][ T5847] Bluetooth: hci1: command tx timeout
[   60.808180][ T5854] Bluetooth: hci2: command tx timeout
[   61.072251][ T6006] netlink: 'syz.1.44': attribute type 5 has an invalid length.
[   61.352995][  T793] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   61.368382][ T6039] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET)
[   61.370699][  T793] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   61.373190][  T793] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[   61.375918][  T793] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 16/18
[   61.390653][  T793] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   61.394286][ T6042] tipc: Started in network mode
[   61.398649][ T6042] tipc: Node identity 82145bc9629c, cluster identity 4711
[   61.401783][ T6042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.404378][ T6042] syzkaller0: entered promiscuous mode
[   61.408620][ T6042] syzkaller0: entered allmulticast mode
[   61.417963][ T6042] tipc: Resetting bearer <eth:syzkaller0>
[   61.425920][ T6041] tipc: Resetting bearer <eth:syzkaller0>
[   61.463811][ T6041] tipc: Disabling bearer <eth:syzkaller0>
[   61.470230][ T6046] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   61.753893][ T6069] netlink: 'syz.2.67': attribute type 4 has an invalid length.
[   61.802361][ T6075] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   62.029267][ T6089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'.
[   62.101211][ T6093] tipc: Started in network mode
[   62.102867][ T6093] tipc: Node identity , cluster identity 4711
[   62.104827][ T6093] tipc: Failed to obtain node identity
[   62.116173][ T6093] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   62.162680][ T6097] Illegal XDP return value 4294967274 on prog  (id 21) dev syz_tun, expect packet loss!
[   62.227461][ T6103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.84'.
[   62.331254][ T6114] netlink: 80 bytes leftover after parsing attributes in process `syz.2.89'.
[   62.372050][ T6117] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.688399][ T6138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.763550][ T6143] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[   62.807699][ T5854] Bluetooth: hci0: command tx timeout
[   62.816815][ T6145] netlink: 830 bytes leftover after parsing attributes in process `syz.1.103'.
[   62.886397][ T5854] Bluetooth: hci2: command tx timeout
[   62.886695][ T5847] Bluetooth: hci1: command tx timeout
[   63.531847][ T6191] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[   63.818181][ T6207] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.130'.
[   63.822570][ T6202] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.130'.
[   64.146323][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.138'.
[   64.150214][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'.
[   64.182877][ T6227] bond1: entered promiscuous mode
[   64.185075][ T6227] bond1: entered allmulticast mode
[   64.190240][ T6227] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.310830][ T6237] tipc: Started in network mode
[   64.314411][ T6237] tipc: Node identity fa924d439155, cluster identity 4711
[   64.320059][ T6237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.373844][ T6237] syzkaller0: entered promiscuous mode
[   64.375752][ T6237] syzkaller0: entered allmulticast mode
[   64.383811][ T6237] tipc: Resetting bearer <eth:syzkaller0>
[   64.434054][ T6236] tipc: Resetting bearer <eth:syzkaller0>
[   64.888074][ T5847] Bluetooth: hci0: command tx timeout
[   64.968232][ T5847] Bluetooth: hci2: command tx timeout
[   64.977439][ T5847] Bluetooth: hci1: command tx timeout
[   65.197830][ T6236] tipc: Disabling bearer <eth:syzkaller0>
[   65.285467][ T6255] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   65.347978][ T6261] warning: `syz.1.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.488193][ T6273] netlink: 'syz.2.152': attribute type 1 has an invalid length.
[   65.490852][ T6273] netlink: 224 bytes leftover after parsing attributes in process `syz.2.152'.
[   66.215546][ T6312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.220331][ T6312] syzkaller0: entered promiscuous mode
[   66.222378][ T6312] syzkaller0: entered allmulticast mode
[   66.238956][ T6312] tipc: Resetting bearer <eth:syzkaller0>
[   66.242198][ T6311] tipc: Resetting bearer <eth:syzkaller0>
[   66.249176][ T6311] tipc: Disabling bearer <eth:syzkaller0>
[   66.564374][ T6345] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.775258][ T6345] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.859993][ T6345] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.907296][ T6364] tipc: Started in network mode
[   66.909021][ T6364] tipc: Node identity ac1414aa, cluster identity 4711
[   66.911575][ T6364] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   66.933955][ T6345] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.020694][ T5715] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.033435][ T5715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.051295][ T5715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.066613][ T5715] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.540300][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.211'.
[   67.590689][ T6424] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[   67.679961][ T6434] ipvlan2: entered promiscuous mode
[   67.713750][ T6437] sctp: [Deprecated]: syz.2.218 (pid 6437) Use of int in max_burst socket option deprecated.
[   67.713750][ T6437] Use struct sctp_assoc_value instead
[   67.838922][ T6448] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.401061][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'.
[   69.405070][ T6499] ip_vti0: Master is either lo or non-ether device
[   69.505256][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'.
[   69.561249][ T6509] hsr_slave_1 (unregistering): left promiscuous mode
[   69.944485][ T6533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.053318][ T6533] syzkaller0: entered promiscuous mode
[   70.055755][ T6533] syzkaller0: entered allmulticast mode
[   70.072683][ T6539] batadv_slave_1: entered promiscuous mode
[   70.810966][ T6533] tipc: Resetting bearer <eth:syzkaller0>
[   70.820165][ T6531] tipc: Resetting bearer <eth:syzkaller0>
[   70.827140][ T6531] tipc: Disabling bearer <eth:syzkaller0>
[   70.831126][ T6538] batadv_slave_1: left promiscuous mode
[   70.884542][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'.
[   71.025398][ T6565] syzkaller1: entered promiscuous mode
[   71.028984][ T6565] syzkaller1: entered allmulticast mode
[   71.050601][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.189633][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'.
[   71.692098][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   72.104639][ T6587] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   72.690228][ T6709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.302'.
[   72.756057][ T6711] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.768650][ T6711] bond_slave_0: entered promiscuous mode
[   72.771012][ T6711] bond_slave_1: entered promiscuous mode
[   72.776874][ T6711] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   72.781712][ T6711] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   72.794927][ T6711] bridge_slave_0: left allmulticast mode
[   72.797301][ T6711] bridge_slave_0: left promiscuous mode
[   72.800314][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.808641][ T6711] bridge_slave_1: left allmulticast mode
[   72.812517][ T6711] bridge_slave_1: left promiscuous mode
[   72.814858][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.823600][ T6711] bond0: (slave bond_slave_0): Releasing backup interface
[   72.827960][ T6711] bond_slave_0: left promiscuous mode
[   72.832549][ T6711] bond0: (slave bond_slave_1): Releasing backup interface
[   72.838168][ T6711] bond_slave_1: left promiscuous mode
[   72.848606][ T6711] team0: Port device team_slave_0 removed
[   72.854784][ T6711] team0: Port device team_slave_1 removed
[   72.859231][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.862105][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.869387][ T6711] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.872537][ T6711] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.882130][ T6711] bond1: (slave macvlan2): Removing an active aggregator
[   72.885353][ T6711] bond1: (slave macvlan2): Releasing backup interface
[   72.908249][ T6722] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.919191][ T6718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.923449][ T6718] syzkaller0: entered promiscuous mode
[   72.927370][ T6718] syzkaller0: entered allmulticast mode
[   72.953625][ T6718] tipc: Resetting bearer <eth:syzkaller0>
[   72.958044][ T6717] tipc: Resetting bearer <eth:syzkaller0>
[   72.984998][ T6717] tipc: Disabling bearer <eth:syzkaller0>
[   72.989728][ T6729] netlink: 104 bytes leftover after parsing attributes in process `syz.1.309'.
[   73.001881][ T6722] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.093199][ T6722] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.129531][ T6722] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.217753][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.234443][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.253475][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.290835][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.668426][ T6782] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   73.807522][ T6801] netlink: 'syz.0.344': attribute type 7 has an invalid length.
[   73.828437][ T6803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.343'.
[   73.854613][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'.
[   73.876782][ T6811] netlink: 32 bytes leftover after parsing attributes in process `syz.2.343'.
[   73.979028][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'.
[   74.074867][ T6831] netlink: 'syz.2.352': attribute type 1 has an invalid length.
[   74.086297][ T6831] netlink: 140 bytes leftover after parsing attributes in process `syz.2.352'.
[   74.096946][ T6831] netlink: 96 bytes leftover after parsing attributes in process `syz.2.352'.
[   74.223715][ T6849] netlink: 1 bytes leftover after parsing attributes in process `syz.2.362'.
[   75.463488][ T6891] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.379'.
[   75.569025][ T6895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.572425][ T6895] syzkaller0: entered promiscuous mode
[   75.574917][ T6895] syzkaller0: entered allmulticast mode
[   75.622977][ T6895] tipc: Resetting bearer <eth:syzkaller0>
[   75.628291][ T6894] tipc: Resetting bearer <eth:syzkaller0>
[   75.651152][ T6894] tipc: Disabling bearer <eth:syzkaller0>
[   75.725274][ T6904] netlink: 'syz.1.385': attribute type 9 has an invalid length.
[   75.730800][ T6904] netlink: 'syz.1.385': attribute type 7 has an invalid length.
[   75.733834][ T6904] netlink: 'syz.1.385': attribute type 8 has an invalid length.
[   76.773941][ T6963] IPv6: addrconf: prefix option has invalid lifetime
[   77.093422][ T6984] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.188002][ T6993] raw_sendmsg: syz.1.424 forgot to set AF_INET. Fix it!
[   77.909733][ T7010] __nla_validate_parse: 2 callbacks suppressed
[   77.909773][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.432'.
[   78.207366][ T7015] sit0: entered promiscuous mode
[   78.212569][ T7015] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   78.215946][ T7015] netlink: 1 bytes leftover after parsing attributes in process `syz.2.434'.
[   78.222067][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.436'.
[   78.438933][ T7034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.441491][ T7034] syzkaller0: entered promiscuous mode
[   78.444192][ T7034] syzkaller0: entered allmulticast mode
[   78.469080][ T7033] tipc: Resetting bearer <eth:syzkaller0>
[   78.486247][ T7033] tipc: Disabling bearer <eth:syzkaller0>
[   78.782535][ T7067] netlink: 'syz.2.456': attribute type 9 has an invalid length.
[   78.785710][ T7067] netlink: 'syz.2.456': attribute type 6 has an invalid length.
[   78.824421][ T7070] netlink: 'syz.1.461': attribute type 3 has an invalid length.
[   78.991640][ T7076] sctp: [Deprecated]: syz.0.464 (pid 7076) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.991640][ T7076] Use struct sctp_sack_info instead
[   79.540099][ T7116] Unsupported ieee802154 address type: 0
[   79.544152][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'.
[   80.945250][ T7197] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   80.974490][ T7200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.982760][ T7200] syzkaller0: entered promiscuous mode
[   80.985155][ T7200] syzkaller0: entered allmulticast mode
[   81.008839][ T7200] tipc: Resetting bearer <eth:syzkaller0>
[   81.028128][ T7199] tipc: Resetting bearer <eth:syzkaller0>
[   81.041870][ T7199] tipc: Disabling bearer <eth:syzkaller0>
[   81.243227][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.527'.
[   81.301493][   T51] cfg80211: failed to load regulatory.db
[   81.319566][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[   81.372013][ T7230] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   81.848491][ T7265] netlink: 'syz.1.546': attribute type 5 has an invalid length.
[   82.008733][   T33] audit: type=1800 audit(1756231331.906:2): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.552" name="memory.events" dev="tmpfs" ino=1045 res=0 errno=0
[   82.018622][   T33] audit: type=1804 audit(1756231331.926:3): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.552" name="memory.events" dev="tmpfs" ino=1045 res=1 errno=0
[   82.251059][ T7303] bridge: RTM_NEWNEIGH with invalid state 0x4
[   82.295157][ T7307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.566'.
[   82.302536][   T51] IPVS: starting estimator thread 0...
[   82.416449][ T7308] IPVS: using max 45 ests per chain, 108000 per kthread
[   82.462014][ T7319] veth1_macvtap: left promiscuous mode
[   82.464254][ T7319] macsec0: entered promiscuous mode
[   82.682479][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'.
[   82.735402][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'.
[   83.371752][ T7361] syzkaller0: entered promiscuous mode
[   83.373832][ T7361] syzkaller0: entered allmulticast mode
[   84.159954][ T7415] netlink: 'syz.1.614': attribute type 10 has an invalid length.
[   84.184417][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'.
[   84.507442][ T7436] netlink: 'syz.1.624': attribute type 30 has an invalid length.
[   84.797993][ T7458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.002831][ T7483] netlink: 'syz.1.646': attribute type 4 has an invalid length.
[   85.015416][ T7483] netlink: 'syz.1.646': attribute type 4 has an invalid length.
[   85.325491][ T7521] syz.0.666 uses old SIOCAX25GETINFO
[   85.421911][ T7533] netlink: 'syz.1.668': attribute type 4 has an invalid length.
[   85.444260][ T7533] netlink: 'syz.1.668': attribute type 4 has an invalid length.
[   85.655732][ T7553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.680752][ T7553] tipc: Resetting bearer <eth:syzkaller0>
[   85.840265][ T7567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'.
[   85.843262][ T7567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.687'.
[   86.422273][ T7611] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.493102][ T7623] vlan2: entered promiscuous mode
[   86.495296][ T7623] bond0: entered promiscuous mode
[   86.503677][ T7623] bond_slave_0: entered promiscuous mode
[   86.507443][ T7623] bond_slave_1: entered promiscuous mode
[   86.510237][ T7623] vlan2: entered allmulticast mode
[   86.512467][ T7623] bond0: entered allmulticast mode
[   86.514886][ T7623] bond_slave_0: entered allmulticast mode
[   86.522824][ T7623] bond_slave_1: entered allmulticast mode
[   86.571082][ T7626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.578377][ T7626] syzkaller0: entered promiscuous mode
[   86.585345][ T7626] syzkaller0: entered allmulticast mode
[   86.633797][ T7626] tipc: Resetting bearer <eth:syzkaller0>
[   86.638700][ T7625] tipc: Resetting bearer <eth:syzkaller0>
[   86.661248][ T5894] tipc: Node number set to 1808223555
[   86.666283][ T7625] tipc: Disabling bearer <eth:syzkaller0>
[   86.812098][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'.
[   86.815071][ T7652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'.
[   86.848810][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'.
[   87.037998][ T7675] netlink: 'syz.1.734': attribute type 5 has an invalid length.
[   87.048831][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   88.360285][ T7726] netlink: 'syz.0.756': attribute type 1 has an invalid length.
[   88.382194][ T7726] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.394433][ T7726] bond2: (slave bridge3): making interface the new active one
[   88.397926][ T7726] bond2: (slave bridge3): Enslaving as an active interface with an up link
[   88.411443][ T7726] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   88.952587][ T7777] netlink: 'syz.0.778': attribute type 8 has an invalid length.
[   88.994572][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'.
[   89.003853][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'.
[   89.008215][ T7780] netlink: 'syz.0.779': attribute type 12 has an invalid length.
[   89.559595][ T7809] validate_nla: 1 callbacks suppressed
[   89.559624][ T7809] netlink: 'syz.2.792': attribute type 8 has an invalid length.
[   90.198242][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'.
[   90.293580][ T7837] syzkaller0: entered promiscuous mode
[   90.296180][ T7837] syzkaller0: entered allmulticast mode
[   91.161264][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'.
[   91.165096][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'.
[   91.274453][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.813'.
[   91.476291][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.822'.
[   91.580728][ T7883] netlink: 'syz.2.824': attribute type 32 has an invalid length.
[   91.661480][ T7885] team_slave_0: entered promiscuous mode
[   91.663514][ T7885] team_slave_1: entered promiscuous mode
[   91.679032][ T7885] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   91.681638][ T7885] team0: Device macvtap1 is already an upper device of the team interface
[   91.685691][ T7885] team_slave_0: left promiscuous mode
[   91.688450][ T7885] team_slave_1: left promiscuous mode
[   91.715139][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'.
[   91.732148][ T7894] IPVS: Error joining to the multicast group
[   92.017618][ T7915] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[   92.032437][ T7915] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[   92.143532][ T7915] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[   92.167184][ T7915] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.188726][ T7915] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   92.200055][ T7915] vlan3: entered allmulticast mode
[   92.202249][ T7915] veth1: entered allmulticast mode
[   92.205065][ T7915] veth1: entered promiscuous mode
[   92.208344][ T7915] veth1: left promiscuous mode
[   92.212172][ T7915] bond1: (slave vlan3): making interface the new active one
[   92.215544][ T7915] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   92.224473][ T7915] veth1: entered promiscuous mode
[   92.228317][ T7915] vlan3: entered promiscuous mode
[   92.231048][ T7915] bond1: (slave vlan3): Enslaving as an active interface with an up link
[   92.292499][ T7926] dvmrp1: entered allmulticast mode
[   92.300670][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'.
[   92.301064][ T7926] dvmrp1: left allmulticast mode
[   92.455982][ T7938] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   93.055797][ T7956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.063328][ T7956] syzkaller0: entered promiscuous mode
[   93.065860][ T7956] syzkaller0: entered allmulticast mode
[   93.088280][ T7956] tipc: Resetting bearer <eth:syzkaller0>
[   93.092181][ T7955] tipc: Resetting bearer <eth:syzkaller0>
[   93.104995][ T7955] tipc: Disabling bearer <eth:syzkaller0>
[   93.538766][   T55] block nbd0: Receive control failed (result -32)
[   93.696932][ T7979] netlink: 3 bytes leftover after parsing attributes in process `syz.2.864'.
[   93.705236][ T7979] batadv1: entered promiscuous mode
[   93.707422][ T7979] batadv1: entered allmulticast mode
[   93.769537][ T7980] netlink: 48 bytes leftover after parsing attributes in process `syz.2.864'.
[   93.937982][ T7992] trusted_key: syz.1.870 sent an empty control message without MSG_MORE.
[   94.090637][ T8002] netlink: 'syz.1.875': attribute type 1 has an invalid length.
[   94.115355][ T8002] 8021q: adding VLAN 0 to HW filter on device bond3
[   94.148058][ T8002] bond3: (slave veth5): Enslaving as an active interface with a down link
[   94.175466][ T8002] gretap1: entered promiscuous mode
[   94.181045][ T8002] bond3: (slave gretap1): making interface the new active one
[   94.185479][ T8002] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   94.202360][ T8002] macvlan3: entered promiscuous mode
[   94.204718][ T8002] macvlan3: entered allmulticast mode
[   94.208497][ T8002] bond3: entered promiscuous mode
[   94.211658][ T8002] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   94.215424][ T8002] bond3: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   94.222900][ T8002] bond3: left promiscuous mode
[   94.365689][ T8008] openvswitch: netlink: Message has 4 unknown bytes.
[   94.373734][ T8008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.513224][ T8053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.894'.
[   95.828227][    T9] IPVS: starting estimator thread 0...
[   95.877977][ T8076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.887321][ T8076] syzkaller0: entered promiscuous mode
[   95.891156][ T8076] syzkaller0: entered allmulticast mode
[   95.911028][ T8076] tipc: Resetting bearer <eth:syzkaller0>
[   95.920119][ T8075] tipc: Resetting bearer <eth:syzkaller0>
[   95.931927][ T8075] tipc: Disabling bearer <eth:syzkaller0>
[   95.936841][ T8074] IPVS: using max 78 ests per chain, 187200 per kthread
[   96.812262][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'.
[   97.493172][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.924'.
[   97.498260][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'.
[   97.502201][ T8134] netlink: 31 bytes leftover after parsing attributes in process `syz.0.924'.
[   97.506383][ T8134] netlink: 'syz.0.924': attribute type 3 has an invalid length.
[   97.509922][ T8134] netlink: 'syz.0.924': attribute type 2 has an invalid length.
[   97.513287][ T8134] netlink: 31 bytes leftover after parsing attributes in process `syz.0.924'.
[   97.517654][ T8134] netlink: 'syz.0.924': attribute type 2 has an invalid length.
[   98.025183][ T8167] nbd: must specify a size in bytes for the device
[   98.693912][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'.
[   98.697978][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'.
[   99.264039][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.954'.
[   99.269412][ T8203] openvswitch: netlink: Flow key attr not present in new flow.
[   99.703664][ T8220] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   99.709677][ T8220] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   99.714246][ T8220] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  100.257158][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810a042c00: rx timeout, send abort
[  100.261721][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810a043800: rx timeout, send abort
[  100.265315][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a042c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  100.271254][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810a043800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  101.616490][ T5867] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  101.668258][ T8302] 8021q: adding VLAN 0 to HW filter on device bond3
[  101.689338][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'.
[  101.709728][ T8302] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  101.779146][ T5874] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  101.847973][ T8313] syzkaller0: entered promiscuous mode
[  101.850195][ T8313] syzkaller0: entered allmulticast mode
[  101.906812][   T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  102.071553][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1011'.
[  102.075381][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1011'.
[  102.280804][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'.
[  102.486593][ T5867] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  102.501354][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'.
[  102.699265][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'.
[  103.039830][ T8470] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1069'.
[  103.090667][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'.
[  103.097026][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'.
[  103.110476][ T8478] netlink: 'syz.0.1073': attribute type 3 has an invalid length.
[  103.360201][ T8504] sctp: [Deprecated]: syz.2.1084 (pid 8504) Use of struct sctp_assoc_value in delayed_ack socket option.
[  103.360201][ T8504] Use struct sctp_sack_info instead
[  103.388132][ T5874] vlan3: left promiscuous mode
[  103.466718][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'.
[  103.491647][ T8521] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  104.208761][ T8572] netlink: 'syz.0.1112': attribute type 6 has an invalid length.
[  104.448753][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.451566][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.571359][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.581765][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.713593][ T8577] macsec0: left promiscuous mode
[  104.729538][ T8577] bond1: left promiscuous mode
[  104.731294][ T8577] bond1: left allmulticast mode
[  104.778049][ T5874] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.828198][ T5874] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.831905][ T5874] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.839037][ T5874] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.892724][ T8596] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  105.402285][ T8642] netlink: 'syz.1.1136': attribute type 9 has an invalid length.
[  105.600145][ T8652] netlink: 'syz.1.1142': attribute type 21 has an invalid length.
[  106.855646][ T8723] __nla_validate_parse: 16 callbacks suppressed
[  106.855659][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'.
[  107.138918][ T8737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.144714][ T8737] syzkaller0: entered promiscuous mode
[  107.152672][ T8737] syzkaller0: entered allmulticast mode
[  107.272915][ T8737] tipc: Resetting bearer <eth:syzkaller0>
[  107.295440][ T8736] tipc: Resetting bearer <eth:syzkaller0>
[  107.317286][ T8736] tipc: Disabling bearer <eth:syzkaller0>
[  107.716872][ T8791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1205'.
[  107.822184][ T8789] netlink: 'syz.1.1204': attribute type 13 has an invalid length.
[  107.824830][ T8789] netlink: 'syz.1.1204': attribute type 17 has an invalid length.
[  107.845313][ T8789] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  108.064740][ T8827] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1220'.
[  108.069383][ T8827] netlink: 245 bytes leftover after parsing attributes in process `syz.0.1220'.
[  108.718419][ T8882] atomic_op ffff888125dfa998 conn xmit_atomic 0000000000000000
[  108.810829][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1247'.
[  108.843712][ T8890] netlink: 'syz.2.1248': attribute type 22 has an invalid length.
[  108.846687][ T8890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'.
[  108.849775][ T8890] bond0: option ad_select: unable to set because the bond device is up
[  108.868064][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  109.105792][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'.
[  109.387990][ T8905] netlink: 'syz.0.1253': attribute type 1 has an invalid length.
[  109.398489][ T8905] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1253'.
[  109.402511][ T8905] NCSI netlink: No device for ifindex 813332851
[  109.440742][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1256'.
[  109.444506][ T8909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.476033][ T8912] sctp: [Deprecated]: syz.0.1257 (pid 8912) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.476033][ T8912] Use struct sctp_sack_info instead
[  109.682898][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'.
[  109.687494][ T8932] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  111.191881][ T8992] infiniband syz2: set down
[  111.195108][ T8992] infiniband syz2: added batadv_slave_1
[  111.227982][ T8992] RDS/IB: syz2: added
[  111.230418][ T8992] smc: adding ib device syz2 with port count 1
[  111.233608][ T8992] smc:    ib device syz2 port 1 has pnetid 
[  111.651314][ T9035] netlink: 'syz.2.1310': attribute type 21 has an invalid length.
[  111.654412][ T9035] netlink: 'syz.2.1310': attribute type 5 has an invalid length.
[  111.706422][ T9041] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  111.922335][ T9049] __nla_validate_parse: 4 callbacks suppressed
[  111.922345][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1316'.
[  112.410859][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'.
[  112.413831][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'.
[  112.416958][ T9080] netlink: 'syz.1.1326': attribute type 18 has an invalid length.
[  112.432613][ T9082] Bluetooth: MGMT ver 1.23
[  112.877496][ T9116] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  112.899477][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'.
[  112.907626][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1344'.
[  112.954819][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1348'.
[  113.064277][ T9141] netlink: 'syz.2.1354': attribute type 1 has an invalid length.
[  113.081490][ T9146] netlink: 'syz.1.1355': attribute type 12 has an invalid length.
[  113.084210][ T9146] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.1355'.
[  113.188313][ T9163] netlink: 164548 bytes leftover after parsing attributes in process `syz.0.1363'.
[  113.265463][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'.
[  113.288430][ T9174] netlink: 'syz.1.1369': attribute type 2 has an invalid length.
[  113.291259][ T9176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1370'.
[  113.638520][ T9215] netlink: 'syz.0.1388': attribute type 3 has an invalid length.
[  113.896785][ T9207] netlink: 'syz.1.1384': attribute type 1 has an invalid length.
[  113.899909][ T9207] netlink: 'syz.1.1384': attribute type 1 has an invalid length.
[  113.999421][ T9234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.002418][ T9234] syzkaller0: entered promiscuous mode
[  114.004746][ T9234] syzkaller0: entered allmulticast mode
[  114.032022][ T9234] tipc: Resetting bearer <eth:syzkaller0>
[  114.036408][ T9233] tipc: Resetting bearer <eth:syzkaller0>
[  114.054215][ T9233] tipc: Disabling bearer <eth:syzkaller0>
[  114.224617][ T9250] pim6reg1: entered promiscuous mode
[  114.238030][ T9250] pim6reg1: entered allmulticast mode
[  114.531398][ T9259] netlink: 'syz.2.1406': attribute type 13 has an invalid length.
[  115.808678][ T9297] openvswitch: netlink: IP tunnel dst address not specified
[  116.095720][ T9320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  116.253999][ T9344] macvtap1: entered promiscuous mode
[  116.255998][ T9344] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  116.262437][ T9344] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  116.313943][ T9349] tipc: Can't bind to reserved service type 2
[  116.435923][ T9363] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  117.213467][ T9411] __nla_validate_parse: 6 callbacks suppressed
[  117.213478][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'.
[  117.500447][ T9444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.503880][ T9444] syzkaller0: entered promiscuous mode
[  117.506189][ T9444] syzkaller0: entered allmulticast mode
[  117.519085][ T9444] tipc: Resetting bearer <eth:syzkaller0>
[  117.522263][ T9443] tipc: Resetting bearer <eth:syzkaller0>
[  117.531004][ T9443] tipc: Disabling bearer <eth:syzkaller0>
[  117.543091][ T9448] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1489'.
[  117.666002][ T9458] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  118.775241][ T9479] sock: sock_timestamping_bind_phc: sock not bind to device
[  118.983328][ T9488] netlink: 'syz.1.1504': attribute type 1 has an invalid length.
[  120.057565][ T9512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1515'.
[  120.387644][ T9555] netlink: 'syz.0.1535': attribute type 2 has an invalid length.
[  120.405986][ T9555] : entered promiscuous mode
[  120.522462][ T9566] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  120.851541][ T9593] netlink: 'syz.2.1552': attribute type 3 has an invalid length.
[  121.490671][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'.
[  122.001663][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1568'.
[  122.406322][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  122.716446][ T9649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'.
[  122.748148][ T9649] bridge_slave_1: left allmulticast mode
[  122.751055][ T9649] bridge_slave_1: left promiscuous mode
[  122.753304][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.764461][ T9649] bridge_slave_0: left allmulticast mode
[  122.766855][ T9649] bridge_slave_0: left promiscuous mode
[  122.776332][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.880745][ T9652] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  123.222438][ T9677] batadv2: entered promiscuous mode
[  123.905493][   T33] audit: type=1800 audit(1756231373.806:4): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1592" name=CB dev="tmpfs" ino=2709 res=0 errno=0
[  123.925564][ T9709] netlink: 'syz.0.1594': attribute type 13 has an invalid length.
[  123.936191][ T9709] netlink: 'syz.0.1594': attribute type 17 has an invalid length.
[  123.938751][ T9709] netlink: 'syz.0.1594': attribute type 27 has an invalid length.
[  124.446370][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1624'.
[  124.650663][ T9793] syzkaller1: entered promiscuous mode
[  124.656605][ T9793] syzkaller1: entered allmulticast mode
[  124.753721][ T9801] netlink: 'syz.1.1637': attribute type 4 has an invalid length.
[  124.760320][ T9801] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1637'.
[  124.839084][ T9806] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  125.411599][  T793] IPVS: starting estimator thread 0...
[  125.453743][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'.
[  125.513027][ T9865] macsec2: entered promiscuous mode
[  125.514901][ T9865] dummy0: entered promiscuous mode
[  125.520027][ T9855] IPVS: using max 79 ests per chain, 189600 per kthread
[  125.522602][ T9865] macsec2: entered allmulticast mode
[  125.524392][ T9865] dummy0: entered allmulticast mode
[  125.530664][ T9865] dummy0: left allmulticast mode
[  125.533628][ T9865] dummy0: left promiscuous mode
[  125.876260][ T9898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.884175][ T9902] syzkaller0: Caught tx_queue_len zero misconfig
[  125.892519][ T9898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.163103][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1691'.
[  126.244278][ T9932] netlink: 'syz.1.1694': attribute type 21 has an invalid length.
[  126.247301][ T9930] _Z`Ԁ@S!: entered promiscuous mode
[  126.343608][ T9941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1696'.
[  126.692375][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'.
[  126.817379][ T9985] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.820787][ T9985] syzkaller0: entered promiscuous mode
[  126.822532][ T9985] syzkaller0: entered allmulticast mode
[  126.881719][ T9985] tipc: Resetting bearer <eth:syzkaller0>
[  126.888504][ T9984] tipc: Resetting bearer <eth:syzkaller0>
[  126.896261][ T9984] tipc: Disabling bearer <eth:syzkaller0>
[  127.080559][T10008] netlink: 'syz.1.1726': attribute type 3 has an invalid length.
[  127.085747][T10008] netlink: 'syz.1.1726': attribute type 1 has an invalid length.
[  127.089701][T10008] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1726'.
[  127.321895][T10037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1740'.
[  127.324969][T10037] bridge_slave_1: left allmulticast mode
[  127.328336][T10037] bridge_slave_1: left promiscuous mode
[  127.330878][T10037] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.335396][T10037] bridge_slave_0: left allmulticast mode
[  127.339358][T10037] bridge_slave_0: left promiscuous mode
[  127.341821][T10037] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.527422][ T5847] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  127.527980][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout
[  127.963818][T10060] ieee802154 phy1 wpan1: encryption failed: -22
[  128.102528][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'.
[  128.245542][T10080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.251855][T10080] syzkaller0: entered promiscuous mode
[  128.253953][T10080] syzkaller0: entered allmulticast mode
[  128.274973][T10080] tipc: Resetting bearer <eth:syzkaller0>
[  128.285855][T10079] tipc: Resetting bearer <eth:syzkaller0>
[  128.309270][T10079] tipc: Disabling bearer <eth:syzkaller0>
[  128.526993][T10119] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1778'.
[  128.740693][T10145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.743255][T10145] syzkaller0: entered promiscuous mode
[  128.745147][T10145] syzkaller0: entered allmulticast mode
[  128.750109][T10145] tipc: Resetting bearer <eth:syzkaller0>
[  128.752023][T10145] syzkaller0: tun_net_xmit 90
[  128.764535][T10144] tipc: Resetting bearer <eth:syzkaller0>
[  128.774303][T10144] tipc: Disabling bearer <eth:syzkaller0>
[  128.828267][T10153] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.831365][T10153] syzkaller0: entered promiscuous mode
[  128.833502][T10153] syzkaller0: entered allmulticast mode
[  128.850531][T10153] tipc: Resetting bearer <eth:syzkaller0>
[  128.853870][T10152] tipc: Resetting bearer <eth:syzkaller0>
[  128.871396][T10152] tipc: Disabling bearer <eth:syzkaller0>
[  129.061960][T10172] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1803'.
[  129.427895][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1820'.
[  129.430848][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1820'.
[  129.433770][T10216] netlink: 'syz.1.1820': attribute type 3 has an invalid length.
[  129.559481][T10231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1826'.
[  129.575676][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'.
[  129.590766][T10232] veth0: entered promiscuous mode
[  129.594361][T10232] veth0: left promiscuous mode
[  129.612563][T10237] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1828'.
[  129.690958][T10243] Unsupported ieee802154 address type: 0
[  130.072086][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1852'.
[  130.075786][T10286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1852'.
[  130.167679][T10301] netlink: 'syz.2.1858': attribute type 21 has an invalid length.
[  130.173506][T10301] netlink: 'syz.2.1858': attribute type 5 has an invalid length.
[  130.186174][T10301] netlink: 'syz.2.1858': attribute type 6 has an invalid length.
[  130.460107][T10339] syz_tun: entered allmulticast mode
[  130.469047][T10338] syz_tun: left allmulticast mode
[  130.499660][T10342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.503029][T10342] syzkaller0: entered promiscuous mode
[  130.505469][T10342] syzkaller0: entered allmulticast mode
[  130.538667][T10342] tipc: Resetting bearer <eth:syzkaller0>
[  130.543697][T10340] tipc: Resetting bearer <eth:syzkaller0>
[  130.569381][T10340] tipc: Disabling bearer <eth:syzkaller0>
[  131.022568][T10389] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond
[  131.304658][T10399] gretap0: entered promiscuous mode
[  131.313437][T10399] gretap0: left promiscuous mode
[  131.768549][T10438] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  131.786321][T10438] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  131.790743][T10438] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  131.951024][T10460] netlink: 'syz.2.1929': attribute type 15 has an invalid length.
[  131.984391][T10464] netlink: 'syz.2.1930': attribute type 1 has an invalid length.
[  131.988500][T10463] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  132.332468][T10513] netlink: 'syz.2.1953': attribute type 10 has an invalid length.
[  132.335651][T10513] dummy0: entered promiscuous mode
[  132.338833][T10513] dummy0: entered allmulticast mode
[  132.342007][T10513] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  132.353724][T10513] lo: Caught tx_queue_len zero misconfig
[  132.471216][T10529] syzkaller1: entered promiscuous mode
[  132.473295][T10529] syzkaller1: entered allmulticast mode
[  132.497935][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.372692][T10548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.435219][T10552] netlink: 'syz.1.1972': attribute type 21 has an invalid length.
[  133.443594][T10552] __nla_validate_parse: 12 callbacks suppressed
[  133.443609][T10552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1972'.
[  133.549540][T10561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1976'.
[  133.561189][ T8117] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.564098][ T8117] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.574551][ T8117] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.578264][ T8117] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.142547][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2009'.
[  134.787354][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.392939][T10748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'.
[  135.714613][T10767] syz_tun: entered promiscuous mode
[  135.717771][T10767] batadv_slave_0: entered promiscuous mode
[  135.721057][T10767] hsr1: entered allmulticast mode
[  135.723182][T10767] syz_tun: entered allmulticast mode
[  135.725261][T10767] batadv_slave_0: entered allmulticast mode
[  135.885661][T10779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.922320][ T5847] Bluetooth: hci2: link tx timeout
[  135.924718][ T5847] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  135.931204][ T5847] Bluetooth: hci2: link tx timeout
[  135.932900][ T5847] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  135.954324][T10779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.013842][T10779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.058036][T10779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.205451][ T8117] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.225315][ T8117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.242585][ T8117] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.255521][ T8117] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.566307][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  136.566942][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  137.130588][T10858] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2107'.
[  137.138718][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'.
[  137.362301][T10862] batadv1: entered allmulticast mode
[  137.367145][T10862] 8021q: adding VLAN 0 to HW filter on device batadv1
[  137.503978][T10879] openvswitch: netlink: Missing key (keys=40, expected=80)
[  137.578674][T10885] netlink: 'syz.1.2121': attribute type 1 has an invalid length.
[  137.623566][T10885] 8021q: adding VLAN 0 to HW filter on device bond4
[  137.654979][T10885] 8021q: adding VLAN 0 to HW filter on device bond4
[  137.657941][T10885] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  137.663155][T10885] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  137.710530][T10893] veth7: entered promiscuous mode
[  137.714825][T10893] bond4: (slave veth7): Enslaving as an active interface with a down link
[  137.736022][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.739398][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.923992][T10909] batadv0: entered promiscuous mode
[  137.936471][T10909] vlan4: entered promiscuous mode
[  138.006640][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  138.112764][T10930] vlan0: entered promiscuous mode
[  138.121523][T10930] team0: Port device vlan0 added
[  138.344688][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2153'.
[  138.384546][T10959] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2155'.
[  138.454843][T10969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.692035][T10996] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2173'.
[  138.995975][T11012] wg1 speed is unknown, defaulting to 1000
[  138.998300][T11012] wg1 speed is unknown, defaulting to 1000
[  139.000955][T11012] wg1 speed is unknown, defaulting to 1000
[  139.012248][T11012] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  139.029227][T11012] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  139.073381][T11012] wg1 speed is unknown, defaulting to 1000
[  139.078456][T11012] wg1 speed is unknown, defaulting to 1000
[  139.081910][T11012] wg1 speed is unknown, defaulting to 1000
[  139.597570][T11066] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2203'.
[  139.743059][T11074] netlink: 'syz.1.2207': attribute type 4 has an invalid length.
[  139.746546][T11074] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.2207'.
[  139.929528][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'.
[  140.013290][T11094] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2216'.
[  140.087090][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  140.160638][T11106] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2220'.
[  140.899821][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'.
[  140.903784][T11128] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  141.037644][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'.
[  141.128117][T11140] tipc: Cannot configure node identity twice
[  141.130192][T11140] tipc: Cannot configure node identity twice
[  141.150185][T11144] netlink: 'syz.2.2235': attribute type 10 has an invalid length.
[  141.156484][T11144] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  141.159501][T11144] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  141.180929][T11144] syzkaller0: left promiscuous mode
[  141.183133][T11144] syzkaller0: left allmulticast mode
[  141.271772][T11156] pim6reg: entered allmulticast mode
[  141.277771][T11156] pim6reg: left allmulticast mode
[  141.439341][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'.
[  141.449983][T11169] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  141.453927][T11169] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.555898][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2250'.
[  141.560135][T11181] netlink: 'syz.1.2250': attribute type 14 has an invalid length.
[  141.562917][T11181] netlink: 'syz.1.2250': attribute type 11 has an invalid length.
[  141.664386][T11187] netlink: 'syz.1.2253': attribute type 1 has an invalid length.
[  141.710584][T11189] pim6reg99999999: entered allmulticast mode
[  142.158651][T11209] bridge: RTM_NEWNEIGH with invalid ether address
[  142.435142][T11224] netlink: 'syz.2.2271': attribute type 10 has an invalid length.
[  142.443246][T11224] dummy0: left allmulticast mode
[  142.446966][T11224] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  142.727359][ T5875] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  142.731678][ T5875] bond0: now running without any active interface!
[  143.565760][T11264] Bluetooth: MGMT ver 1.23
[  144.677045][T11316] __nla_validate_parse: 5 callbacks suppressed
[  144.677054][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2313'.
[  144.682250][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2313'.
[  144.766059][T11323] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  145.195062][T11361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2333'.
[  145.230439][T11365] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.266546][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.270000][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.283588][T11371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.555609][T11400] netlink: 'syz.1.2348': attribute type 8 has an invalid length.
[  145.607228][ T5235] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  145.607702][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  145.678259][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2352'.
[  145.687359][T11410] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  145.692450][T11410] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2352'.
[  145.834488][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'.
[  145.893030][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'.
[  145.984607][T11434] netlink: 'syz.1.2365': attribute type 1 has an invalid length.
[  146.187279][T11451] nbd1: detected capacity change from 0 to 549764202496
[  146.197667][   T55] block nbd1: Receive control failed (result -32)
[  146.437704][T11466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.441292][T11466] syzkaller0: entered promiscuous mode
[  146.443701][T11466] syzkaller0: entered allmulticast mode
[  146.477711][T11466] tipc: Resetting bearer <eth:syzkaller0>
[  146.490573][T11465] tipc: Resetting bearer <eth:syzkaller0>
[  146.508810][T11465] tipc: Disabling bearer <eth:syzkaller0>
[  146.621119][T11475] geneve2: entered promiscuous mode
[  146.637096][T11475] geneve2: entered allmulticast mode
[  146.640938][ T5715] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 32963 - 0
[  146.644761][ T5715] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 48661 - 0
[  146.650040][ T5715] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 32963 - 0
[  146.654415][ T5715] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 48661 - 0
[  146.660426][ T5715] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 32963 - 0
[  146.676393][ T5715] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 48661 - 0
[  146.691179][ T5715] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 32963 - 0
[  146.694831][ T5715] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 48661 - 0
[  146.827042][T11490] netlink: 'syz.0.2388': attribute type 2 has an invalid length.
[  146.953496][T11501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.023370][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'.
[  147.404927][T11551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2412'.
[  147.644353][T11569] ieee802154 phy1 wpan1: encryption failed: -90
[  147.816293][T11585] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  147.835605][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2425'.
[  147.896614][T11581] wg1 speed is unknown, defaulting to 1000
[  148.497491][T11639] tunl0: Caught tx_queue_len zero misconfig
[  149.417804][T11663] netlink: 'syz.1.2461': attribute type 1 has an invalid length.
[  149.523581][T11675] syzkaller0: entered promiscuous mode
[  149.525477][T11675] syzkaller0: entered allmulticast mode
[  150.583305][T11716] netlink: 'syz.0.2486': attribute type 1 has an invalid length.
[  150.619633][T11716] 8021q: adding VLAN 0 to HW filter on device bond5
[  150.638427][T11716] bond5: (slave geneve3): making interface the new active one
[  150.642528][T11716] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  150.680602][T11722] ip6tnl0: Caught tx_queue_len zero misconfig
[  151.145245][T11759] __nla_validate_parse: 4 callbacks suppressed
[  151.145259][T11759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2505'.
[  151.794658][T11808] tap0: tun_chr_ioctl cmd 1074025677
[  151.797426][T11808] tap0: linktype set to 776
[  151.920084][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2530'.
[  151.928924][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'.
[  151.932331][T11816] netlink: 'syz.0.2530': attribute type 11 has an invalid length.
[  152.074803][T11827] : entered promiscuous mode
[  152.121700][T11833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2536'.
[  152.124855][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2536'.
[  152.248710][T11844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2542'.
[  152.524829][T11852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.782274][T11863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2550'.
[  153.094333][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2559'.
[  153.099243][T11885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2559'.
[  153.492688][T11897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2565'.
[  153.698754][T11907] netlink: 'syz.0.2570': attribute type 3 has an invalid length.
[  153.717898][T11871] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  153.721543][T11871] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  153.739762][T11871] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  153.746694][T11871] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  153.772419][T11871] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  153.774957][T11871] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  154.269850][T11935] tipc: Enabled bearer <eth:vlan0>, priority 18
[  156.886212][T12104] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  156.888522][T12104] __nla_validate_parse: 5 callbacks suppressed
[  156.888529][T12104] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2642'.
[  156.952695][T12114] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  156.955816][T12114] syzkaller0: entered promiscuous mode
[  156.961289][T12114] syzkaller0: entered allmulticast mode
[  157.034292][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'.
[  157.039936][T12128] netlink: 'syz.2.2653': attribute type 12 has an invalid length.
[  157.048867][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.048919][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2653'.
[  157.051579][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.058318][T12128] netlink: 'syz.2.2653': attribute type 12 has an invalid length.
[  157.062879][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.066672][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.272376][T12160] netlink: 'syz.0.2668': attribute type 21 has an invalid length.
[  157.553242][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'.
[  157.733970][T12206] netlink: 47 bytes leftover after parsing attributes in process `syz.2.2689'.
[  158.005676][T12238] netlink: 'syz.2.2703': attribute type 1 has an invalid length.
[  158.009677][T12238] netlink: 'syz.2.2703': attribute type 1 has an invalid length.
[  158.012469][T12238] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2703'.
[  158.269264][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'.
[  158.462897][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2713'.
[  159.116394][T12284] sctp: [Deprecated]: syz.1.2723 (pid 12284) Use of int in max_burst socket option.
[  159.116394][T12284] Use struct sctp_assoc_value instead
[  159.315517][T12291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2726'.
[  159.418203][T12299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2730'.
[  159.934682][T12342] tap0: tun_chr_ioctl cmd 2147767521
[  159.958647][T12346] netlink: 'syz.2.2751': attribute type 1 has an invalid length.
[  160.225482][T12380] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.818480][T12447] netlink: 'syz.1.2798': attribute type 10 has an invalid length.
[  160.825681][T12447] team0: Port device geneve0 added
[  161.492867][T12462] netlink: 'syz.2.2804': attribute type 1 has an invalid length.
[  161.690991][T12473] netlink: 'syz.2.2809': attribute type 4 has an invalid length.
[  162.002104][T12505] netlink: 'syz.1.2824': attribute type 21 has an invalid length.
[  162.005185][T12505] __nla_validate_parse: 8 callbacks suppressed
[  162.005197][T12505] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2824'.
[  162.011845][T12505] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2824'.
[  162.077896][T12515] validate_nla: 2 callbacks suppressed
[  162.077907][T12515] netlink: 'syz.2.2829': attribute type 12 has an invalid length.
[  162.489368][T12551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.492640][T12551] syzkaller0: entered promiscuous mode
[  162.494644][T12551] syzkaller0: entered allmulticast mode
[  162.506513][T12551] tipc: Resetting bearer <eth:syzkaller0>
[  162.509299][T12550] tipc: Resetting bearer <eth:syzkaller0>
[  162.517308][T12550] tipc: Disabling bearer <eth:syzkaller0>
[  162.962197][T12564] siw: device registration error -23
[  162.983595][T12564] smc: removing ib device syz2
[  163.482963][T12570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.822583][T12604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.825269][T12604] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  163.829220][T12604] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  163.832435][T12604] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  163.836648][T12604] tipc: Resetting bearer <eth:syzkaller0>
[  163.951182][T12624] sctp: [Deprecated]: syz.2.2870 (pid 12624) Use of int in maxseg socket option.
[  163.951182][T12624] Use struct sctp_assoc_value instead
[  164.005475][T12630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2876'.
[  164.041260][T12633] netlink: 'syz.0.2877': attribute type 6 has an invalid length.
[  164.090358][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2881'.
[  164.122794][T12644] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2883'.
[  164.221559][T12656] netlink: 'syz.1.2887': attribute type 10 has an invalid length.
[  164.279654][T12657] netlink: 'syz.1.2887': attribute type 10 has an invalid length.
[  164.846303][   T24] tipc: Node number set to 2886997162
[  165.013153][T12656] team0: Port device dummy0 added
[  165.020665][T12657] team0: Port device dummy0 removed
[  166.282019][T12714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2912'.
[  166.350469][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2914'.
[  166.410989][T12722] netlink: 'syz.2.2916': attribute type 4 has an invalid length.
[  166.414435][T12722] netlink: 'syz.2.2916': attribute type 4 has an invalid length.
[  166.441623][T12726] sit0: entered promiscuous mode
[  166.443763][T12726] netlink: 'syz.0.2918': attribute type 1 has an invalid length.
[  166.447129][T12726] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2918'.
[  166.640260][T12745] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2927'.
[  166.665946][T12745] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.682860][T12745] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  166.982492][T12777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.071523][T12783] netlink: 'syz.0.2945': attribute type 10 has an invalid length.
[  167.078816][T12783] 8021q: adding VLAN 0 to HW filter on device team0
[  167.082034][T12783] bond0: (slave team0): Enslaving as an active interface with an up link
[  167.770308][T12814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2958'.
[  168.705950][T12840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.882742][T12849] vxcan2: entered promiscuous mode
[  169.735749][T12851] delete_channel: no stack
[  169.778995][T12897] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2989'.
[  170.100310][T12917] team0: Port device geneve0 removed
[  170.116504][T12917] bond3: (slave veth5): Releasing active interface
[  170.118625][T12917] bond3: (slave veth5): the permanent HWaddr of slave - aa:9d:c1:7d:eb:de - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  170.141159][T12917] bond3: (slave gretap1): Releasing active interface
[  170.151278][T12917] bond4: (slave veth7): Releasing active interface
[  170.178757][T12918] vxcan2: entered promiscuous mode
[  170.232912][T12925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3002'.
[  170.455106][T12945] netlink: 'syz.1.3011': attribute type 21 has an invalid length.
[  170.462724][T12945] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3011'.
[  170.465800][T12945] netlink: 'syz.1.3011': attribute type 5 has an invalid length.
[  170.469622][T12945] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3011'.
[  171.271229][T13020] mac80211_hwsim hwsim3 ": renamed from wlan0
[  171.300861][T13022] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3044'.
[  171.383035][T13028] openvswitch: netlink: VXLAN extension 2 out of range max 1
[  171.519549][T13039] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.523712][T13039] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  171.934693][T13085] netlink: 'syz.1.3074': attribute type 16 has an invalid length.
[  171.942956][T13085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3074'.
[  171.951525][T13088] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3076'.
[  172.151883][T13113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3086'.
[  172.340948][T13131] pim6reg9: entered allmulticast mode
[  172.483506][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'.
[  172.830926][T13180] __nla_validate_parse: 1 callbacks suppressed
[  172.830936][T13180] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3117'.
[  172.837791][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3117'.
[  172.947114][T13194] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.3123'.
[  172.980094][T13196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'.
[  173.422074][T13249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.558360][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'.
[  173.799762][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'.
[  173.828599][T13295] team1: entered promiscuous mode
[  173.830659][T13295] team1: entered allmulticast mode
[  173.835346][T13295] 8021q: adding VLAN 0 to HW filter on device team1
[  173.956663][T13305] netlink: 'syz.2.3173': attribute type 2 has an invalid length.
[  174.164990][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'.
[  174.170550][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3183'.
[  174.174390][T13335] netlink: 'syz.1.3183': attribute type 32 has an invalid length.
[  174.364862][T13357] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  174.701014][T13399] IPv6: NLM_F_CREATE should be specified when creating new route
[  174.750535][T13406] netlink: 'syz.0.3216': attribute type 1 has an invalid length.
[  174.753663][T13406] netlink: 'syz.0.3216': attribute type 3 has an invalid length.
[  174.757286][T13406] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3216'.
[  174.958936][T13424] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3225'.
[  174.963526][T13424] gretap0: entered promiscuous mode
[  175.071574][T13432] "syz.0.3229" (13432) uses obsolete ecb(arc4) skcipher
[  175.342867][T13444] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.347561][T13444] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.400995][T13444] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.404919][T13444] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.453512][T13444] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.457808][T13444] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.492816][T13444] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.498959][T13444] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.573672][ T8117] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.578468][ T8117] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.589951][ T8117] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.593186][ T8117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.616001][ T5875] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.619842][ T5875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.635559][ T5875] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.646377][ T5875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.894135][T13483] TC_ACT_REPEAT abuse ?
[  175.895725][T13483] TC_ACT_REPEAT abuse ?
[  175.897938][T13483] TC_ACT_REPEAT abuse ?
[  175.901241][T13482] TC_ACT_REPEAT abuse ?
[  175.903023][T13482] TC_ACT_REPEAT abuse ?
[  176.006716][    C1] TC_ACT_REPEAT abuse ?
[  176.009290][    C1] TC_ACT_REPEAT abuse ?
[  176.012476][ T5874] TC_ACT_REPEAT abuse ?
[  176.014792][ T5874] TC_ACT_REPEAT abuse ?
[  177.804471][T13579] veth1_macvtap: left promiscuous mode
[  177.923021][T13595] team0: Caught tx_queue_len zero misconfig
[  178.055974][T13602] __nla_validate_parse: 8 callbacks suppressed
[  178.055985][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'.
[  179.033984][T13626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3314'.
[  179.077549][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'.
[  179.158848][T13636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3318'.
[  179.670749][T13676] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  179.706995][T13678] netlink: 'syz.1.3335': attribute type 1 has an invalid length.
[  179.732739][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3336'.
[  179.742302][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'.
[  179.899607][T13700] netlink: 700 bytes leftover after parsing attributes in process `syz.0.3346'.
[  180.096643][T13720] netlink: 'syz.1.3356': attribute type 1 has an invalid length.
[  180.100073][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3356'.
[  180.464112][T13768] netlink: 'syz.1.3379': attribute type 27 has an invalid length.
[  180.466454][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'.
[  180.788820][T13809] debugfs: 'hsr1' already exists in 'hsr'
[  180.791207][T13809] Cannot create hsr debugfs directory
[  180.793597][T13809] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  180.799654][T13809] hsr1: entered allmulticast mode
[  180.803901][T13809] batadv0: entered allmulticast mode
[  180.809140][T13809] 8021q: adding VLAN 0 to HW filter on device hsr1
[  181.045693][T13836] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3412'.
[  181.216030][T13862] vti0: entered promiscuous mode
[  181.221862][T13862] vti0: entered allmulticast mode
[  181.398033][T13885] net_ratelimit: 4 callbacks suppressed
[  181.398043][T13885] veth1: mtu greater than device maximum
[  181.510073][   T55] block nbd3: Receive control failed (result -107)
[  181.546309][T13893] nbd3: detected capacity change from 0 to 32
[  181.764217][T13926] tipc: Trying to set illegal importance in message
[  181.812386][T13928] bond6: entered promiscuous mode
[  181.838442][T13933] netlink: 'syz.0.3454': attribute type 1 has an invalid length.
[  181.841168][T13933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.972085][T13944] tipc: Resetting bearer <eth:vlan0>
[  182.320735][T13962] netlink: 'syz.2.3466': attribute type 3 has an invalid length.
[  182.324138][T13962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  182.483060][T13972] netlink: 'syz.2.3471': attribute type 1 has an invalid length.
[  182.487685][T13972] netlink: 'syz.2.3471': attribute type 2 has an invalid length.
[  182.719665][T13991] netlink: 'syz.2.3479': attribute type 10 has an invalid length.
[  182.722830][T13991] bond0: (slave wlan1): Opening slave failed
[  182.986016][T14010] netlink: 'syz.0.3487': attribute type 1 has an invalid length.
[  182.990010][T14010] netlink: 'syz.0.3487': attribute type 3 has an invalid length.
[  183.033585][T14015] syzkaller1: entered promiscuous mode
[  183.035946][T14015] syzkaller1: entered allmulticast mode
[  183.710355][T14055] gretap0: left promiscuous mode
[  183.715969][T14055] sit0: left promiscuous mode
[  183.738009][T14055] dummy0: left promiscuous mode
[  183.741138][T14055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.257916][T14088] nbd: couldn't find a device at index 2
[  184.333754][ T5715] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.338041][ T5715] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.341766][ T5715] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.345439][ T5715] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.804062][T14096] validate_nla: 1 callbacks suppressed
[  184.804077][T14096] netlink: 'syz.1.3524': attribute type 3 has an invalid length.
[  184.856896][T14098] sctp: [Deprecated]: syz.1.3525 (pid 14098) Use of int in maxseg socket option.
[  184.856896][T14098] Use struct sctp_assoc_value instead
[  185.135591][T14109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.223699][T14116] netlink: 'syz.2.3533': attribute type 1 has an invalid length.
[  185.227644][T14116] __nla_validate_parse: 11 callbacks suppressed
[  185.227660][T14116] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3533'.
[  185.233805][T14116] netlink: 'syz.2.3533': attribute type 1 has an invalid length.
[  185.239342][T14116] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3533'.
[  185.439437][T14134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3541'.
[  185.442673][T14134] unsupported nlmsg_type 40
[  185.690042][T14144] netlink: 'syz.2.3544': attribute type 83 has an invalid length.
[  185.845658][T14154] netlink: 'syz.1.3548': attribute type 1 has an invalid length.
[  186.599583][T14174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.721112][T14178] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3556'.
[  187.350817][T14209] IPVS: Scheduler module ip_vs_sip not found
[  187.483360][T14217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3571'.
[  188.363771][T14239] gtp0: entered promiscuous mode
[  188.370961][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'.
[  188.812953][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3598'.
[  189.242571][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3610'.
[  189.980834][T14360] netlink: 'syz.0.3630': attribute type 12 has an invalid length.
[  190.604907][T14392] netlink: 'syz.1.3644': attribute type 21 has an invalid length.
[  190.609686][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3644'.
[  190.740512][T14394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3645'.
[  191.229371][T14446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3669'.
[  191.232938][T14446] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3669'.
[  191.249469][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3663'.
[  191.521725][T14459] netlink: 'syz.0.3675': attribute type 13 has an invalid length.
[  191.524948][T14459] netlink: 'syz.0.3675': attribute type 17 has an invalid length.
[  191.533111][T14459] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  192.205576][T14512] netlink: 'syz.0.3699': attribute type 2 has an invalid length.
[  193.324533][T14592] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3733'.
[  193.358915][T14596] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3735'.
[  193.518871][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'.
[  193.717807][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3751'.
[  193.929733][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.828092][T14720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3785'.
[  194.916084][T14733] netlink: 'syz.1.3789': attribute type 10 has an invalid length.
[  195.844693][T14832] __nla_validate_parse: 2 callbacks suppressed
[  195.844707][T14832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'.
[  196.009655][T14854] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3844'.
[  197.135404][T14964] netlink: 'syz.2.3891': attribute type 1 has an invalid length.
[  197.209995][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'.
[  197.242251][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3897'.
[  197.262020][T14976] veth1: entered promiscuous mode
[  197.264739][T14976] bridge5: entered promiscuous mode
[  197.269443][T14976] debugfs: 'hsr1' already exists in 'hsr'
[  197.274172][T14976] Cannot create hsr debugfs directory
[  197.277254][T14976] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network
[  197.282004][T14976] hsr1: entered promiscuous mode
[  197.364294][T14988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3903'.
[  198.365374][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'.
[  198.659471][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3935'.
[  198.683650][T15061] team0: Port device team_slave_0 removed
[  198.861519][T15079] netlink: 'syz.2.3943': attribute type 3 has an invalid length.
[  198.913529][T15088] nbd: nbd0 already in use
[  198.915140][T15088] block nbd0: NBD_DISCONNECT
[  198.916928][T15088] block nbd0: Send disconnect failed -32
[  198.918902][T15088] block nbd0: shutting down sockets
[  198.959287][T15092] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  198.962788][T15092] tipc: Enabled bearer <udp:syz0>, priority 26
[  199.024916][T15102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3954'.
[  199.230528][T15134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'.
[  199.261547][T15137] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3970'.
[  199.359697][T15150] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  199.369806][T15150] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  199.417817][T15156] netlink: 'syz.0.3979': attribute type 6 has an invalid length.
[  199.445667][T15158] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  199.449305][T15158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.209012][T15168] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.353606][T15282] netlink: 'syz.0.4031': attribute type 4 has an invalid length.
[  201.362465][T15282] __nla_validate_parse: 2 callbacks suppressed
[  201.362474][T15282] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4031'.
[  201.381904][T15282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  201.561135][T15317] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4044'.
[  201.570393][T15315] netlink: 'syz.1.4043': attribute type 12 has an invalid length.
[  201.573783][T15315] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4043'.
[  201.615847][T15324] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4047'.
[  202.033735][T15351] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.274558][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4071'.
[  202.290806][T15374] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.299798][T15374] bond0: (slave rose0): Enslaving as an active interface with an up link
[  202.455002][T15381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.515176][T15386] netlink: 'syz.1.4076': attribute type 1 has an invalid length.
[  202.521916][T15386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4076'.
[  202.534741][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4078'.
[  202.538582][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4078'.
[  202.542062][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4078'.
[  202.545005][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4078'.
[  202.892610][T15424] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  204.075041][T15481] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  204.810889][T15426] Set syz1 is full, maxelem 65536 reached
[  205.025004][T15541] netlink: 'syz.0.4150': attribute type 1 has an invalid length.
[  205.761624][T15594] sctp: [Deprecated]: syz.1.4175 (pid 15594) Use of int in maxseg socket option.
[  205.761624][T15594] Use struct sctp_assoc_value instead
[  206.557336][T15673] __nla_validate_parse: 6 callbacks suppressed
[  206.557346][T15673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4214'.
[  206.996050][T15686] dummy0: entered promiscuous mode
[  207.004265][T15685] dummy0: left promiscuous mode
[  207.096041][T15693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4224'.
[  207.287619][T15711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4232'.
[  207.701720][ T5875] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.716226][ T5875] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 32963 - 0
[  207.719420][ T5875] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 48661 - 0
[  207.722434][ T5875] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.725418][ T5875] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 32963 - 0
[  207.728928][ T5875] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 48661 - 0
[  207.731950][ T5875] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.735289][ T5875] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 32963 - 0
[  207.738430][ T5875] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 48661 - 0
[  207.741638][ T5875] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  207.744664][ T5875] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 32963 - 0
[  207.747841][ T5875] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 48661 - 0
[  209.498136][T15799] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.501854][T15799] syzkaller0: left promiscuous mode
[  209.504394][T15799] syzkaller0: left allmulticast mode
[  209.724626][   T33] audit: type=1800 audit(1756231459.626:5): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4275" name="memory.events" dev="tmpfs" ino=7289 res=0 errno=0
[  210.051076][T15841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4290'.
[  210.471317][T15864] dvmrp8: entered allmulticast mode
[  210.474676][T15863] dvmrp8: left allmulticast mode
[  211.179933][T15900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.973163][T15930] ieee802154 phy1 wpan1: encryption failed: -22
[  212.218367][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4338'.
[  212.721722][T15965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4346'.
[  212.822484][T15903] Set syz1 is full, maxelem 65536 reached
[  214.160546][T16019] bond0: Caught tx_queue_len zero misconfig
[  214.282976][T16037] bpq0: entered promiscuous mode
[  214.440238][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4387'.
[  214.791627][T16080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  216.521126][T16111] netlink: 'syz.0.4408': attribute type 12 has an invalid length.
[  216.524213][T16111] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4408'.
[  216.638844][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'.
[  216.645732][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4415'.
[  216.649235][T16125] netlink: 'syz.0.4415': attribute type 18 has an invalid length.
[  216.652647][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'.
[  216.655557][T16125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4415'.
[  216.659989][T16125] netlink: 'syz.0.4415': attribute type 18 has an invalid length.
[  216.758063][T16136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.760737][T16136] IPv6: NLM_F_CREATE should be set when creating new route
[  216.763176][T16136] IPv6: NLM_F_CREATE should be set when creating new route
[  216.765781][T16136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.842441][T16144] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  216.845210][T16144] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  217.028046][T16162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4431'.
[  217.031144][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4431'.
[  217.090089][T16168] ipvlan0: entered promiscuous mode
[  217.851842][T16211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4455'.
[  218.167184][T16225] bond5: entered promiscuous mode
[  218.174734][T16225] 8021q: adding VLAN 0 to HW filter on device bond5
[  218.243915][T16232] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4462'.
[  218.780211][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4475'.
[  218.784295][T16264] ip_vti0: Master is either lo or non-ether device
[  219.340939][T16312] netlink: 'syz.1.4491': attribute type 7 has an invalid length.
[  219.344437][T16312] netlink: 'syz.1.4491': attribute type 8 has an invalid length.
[  219.419766][T16316] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.585014][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4500'.
[  219.589077][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4500'.
[  220.604468][T16358] 8021q: adding VLAN 0 to HW filter on device batadv2
[  220.608865][T16358] team0: Failed to send options change via netlink (err -105)
[  220.612033][T16358] team0: Port device batadv2 added
[  220.681481][T16364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4513'.
[  220.976076][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4528'.
[  221.068178][T16401] netlink: 'syz.0.4533': attribute type 10 has an invalid length.
[  221.076423][T16401] wlan1: mtu less than device minimum
[  221.078702][T16401] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  221.163424][T16416] tipc: Cannot configure node identity twice
[  221.479473][T16439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4551'.
[  222.043524][T16471] netlink: 'syz.2.4564': attribute type 3 has an invalid length.
[  222.048798][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4564'.
[  222.299582][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4576'.
[  222.993869][T16538] netlink: 'syz.1.4593': attribute type 1 has an invalid length.
[  223.000788][T16538] __nla_validate_parse: 1 callbacks suppressed
[  223.000802][T16538] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4593'.
[  223.008493][T16538] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4593'.
[  223.104325][T16542] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  223.153461][T16548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  223.265366][T16554] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  223.272706][T16554] syzkaller0: entered promiscuous mode
[  223.275089][T16554] syzkaller0: entered allmulticast mode
[  223.321400][T16556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4601'.
[  223.371203][T16558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4602'.
[  223.374862][T16558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4602'.
[  223.848909][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4618'.
[  223.858926][T16595] macvtap1: entered promiscuous mode
[  223.861133][T16595] bond0: entered promiscuous mode
[  223.863319][T16595] bond_slave_0: entered promiscuous mode
[  223.865905][T16595] bond_slave_1: entered promiscuous mode
[  223.868555][T16595] team0: entered promiscuous mode
[  223.870919][T16595] team_slave_1: entered promiscuous mode
[  223.873826][T16595] macvtap1: entered allmulticast mode
[  223.876391][T16595] bond0: entered allmulticast mode
[  223.878661][T16595] bond_slave_0: entered allmulticast mode
[  223.881270][T16595] bond_slave_1: entered allmulticast mode
[  223.883874][T16595] team0: entered allmulticast mode
[  223.886905][T16595] team_slave_1: entered allmulticast mode
[  223.889865][T16595] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  224.137300][T16605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.140736][T16605] syzkaller0: entered promiscuous mode
[  224.143240][T16605] syzkaller0: entered allmulticast mode
[  224.162728][T16605] tipc: Resetting bearer <eth:syzkaller0>
[  224.170436][T16604] tipc: Resetting bearer <eth:syzkaller0>
[  224.187835][T16604] tipc: Disabling bearer <eth:syzkaller0>
[  224.615863][T16637] netlink: 'syz.2.4637': attribute type 7 has an invalid length.
[  224.619495][T16637] netlink: 'syz.2.4637': attribute type 8 has an invalid length.
[  224.661533][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'.
[  225.063962][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4657'.
[  225.262281][T16696] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  225.264899][T16696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.201532][T16774] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4703'.
[  226.232548][T16778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4705'.
[  226.342110][T16794] netlink: 'syz.0.4713': attribute type 20 has an invalid length.
[  226.502146][T16818] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.655072][T16831] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.764517][T16839] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  227.005451][T16863] netlink: 'syz.1.4747': attribute type 20 has an invalid length.
[  227.008398][T16863] netlink: 'syz.1.4747': attribute type 21 has an invalid length.
[  227.333424][T16898] netlink: 'syz.1.4764': attribute type 21 has an invalid length.
[  227.656695][T16932] Unsupported ieee802154 address type: 0
[  227.948317][T16963] netlink: 'syz.1.4790': attribute type 9 has an invalid length.
[  227.956217][T16963] netlink: 'syz.1.4790': attribute type 6 has an invalid length.
[  228.180190][T16977] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.377495][T16990] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  229.248500][T17051] __nla_validate_parse: 9 callbacks suppressed
[  229.248515][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4833'.
[  229.255328][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4833'.
[  229.474114][T17071] netlink: 'syz.1.4841': attribute type 10 has an invalid length.
[  229.482690][T17071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4841'.
[  229.489679][T17071] dummy0: entered promiscuous mode
[  229.491830][T17071] dummy0: entered allmulticast mode
[  229.500800][T17071] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  229.611142][T17080] netlink: 'syz.1.4845': attribute type 10 has an invalid length.
[  229.619608][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4846'.
[  229.803649][T17101] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.813380][T17101] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  229.913109][T17115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4860'.
[  229.929228][T17115] netlink: 23932 bytes leftover after parsing attributes in process `syz.0.4860'.
[  229.960176][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4864'.
[  229.988101][T17121] netlink: 'syz.1.4865': attribute type 39 has an invalid length.
[  230.112650][   T33] audit: type=1800 audit(1756231480.016:6): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4874" name="memory.events" dev="tmpfs" ino=8445 res=0 errno=0
[  230.135956][   T33] audit: type=1804 audit(1756231480.016:7): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4874" name="memory.events" dev="tmpfs" ino=8445 res=1 errno=0
[  230.411212][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4892'.
[  230.448784][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4895'.
[  230.537476][T17194] syzkaller0: entered promiscuous mode
[  230.539416][T17194] syzkaller0: entered allmulticast mode
[  232.585777][T17245] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4920'.
[  232.594984][T17245] 0X: renamed from caif0
[  232.750708][T17245] 0X: entered allmulticast mode
[  232.753037][T17245] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  232.874716][T17264] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  233.504412][T17322] sctp: [Deprecated]: syz.1.4957 (pid 17322) Use of int in max_burst socket option deprecated.
[  233.504412][T17322] Use struct sctp_assoc_value instead
[  233.686957][T17338] netlink: 'syz.2.4965': attribute type 6 has an invalid length.
[  233.695760][T17340] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  233.732349][T17344] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.162684][T17393] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  234.386289][T17420] __nla_validate_parse: 6 callbacks suppressed
[  234.386305][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5001'.
[  234.443676][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5001'.
[  234.612138][T17446] vlan3: entered promiscuous mode
[  234.613916][T17446] bond0: entered promiscuous mode
[  234.615690][T17446] vlan3: entered allmulticast mode
[  234.623109][T17446] bond0: entered allmulticast mode
[  234.702209][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'.
[  234.806216][T17460] syzkaller0: left promiscuous mode
[  234.808411][T17460] syzkaller0: left allmulticast mode
[  234.888265][T17467] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.899568][T17467] syzkaller0: entered promiscuous mode
[  234.901823][T17467] syzkaller0: entered allmulticast mode
[  235.030155][T17481] netlink: 'syz.2.5028': attribute type 5 has an invalid length.
[  235.361307][T17510] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5040'.
[  235.752725][T17539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5052'.
[  236.124448][T17577] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5070'.
[  236.128702][T17577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5070'.
[  236.211073][T17582] netlink: 'syz.1.5072': attribute type 1 has an invalid length.
[  236.233107][T17582] 8021q: adding VLAN 0 to HW filter on device bond6
[  236.251050][T17582] bond6: (slave bridge6): making interface the new active one
[  236.255358][T17582] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  236.268724][T17582] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  236.911646][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'.
[  236.915467][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5091'.
[  236.923797][T17625] netlink: 'syz.0.5091': attribute type 12 has an invalid length.
[  236.924805][T17627] netlink: 'syz.2.5092': attribute type 8 has an invalid length.
[  236.927389][T17625] netlink: 'syz.0.5091': attribute type 14 has an invalid length.
[  237.278279][T17665] netlink: 'syz.2.5111': attribute type 10 has an invalid length.
[  237.281533][T17665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5111'.
[  237.291239][T17665] team0: Port device geneve0 added
[  237.729819][T17703] netlink: 'syz.0.5127': attribute type 7 has an invalid length.
[  238.321771][T17729] netlink: 'syz.0.5137': attribute type 1 has an invalid length.
[  239.792716][T17772] pimreg: entered allmulticast mode
[  239.795215][T17772] pimreg: left allmulticast mode
[  239.848391][T17782] __nla_validate_parse: 2 callbacks suppressed
[  239.848402][T17782] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5159'.
[  240.014293][T17792] netlink: 'syz.0.5164': attribute type 2 has an invalid length.
[  240.030997][T17792] k*]: entered promiscuous mode
[  240.035099][T17796] bond6: (slave bridge6): Releasing active interface
[  240.059763][T17792] sit0: left promiscuous mode
[  240.069967][T17792] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.074210][T17792] 8021q: adding VLAN 0 to HW filter on device team0
[  240.079057][T17792] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  240.107945][T17798] tun0: tun_chr_ioctl cmd 1074025675
[  240.110120][T17798] tun0: persist enabled
[  240.112704][T17798] tun0: tun_chr_ioctl cmd 1074025675
[  240.114951][T17798] tun0: persist enabled
[  240.127507][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  240.155702][T17796] ieee802154 phy1 wpan1: encryption failed: -22
[  240.181479][T17796] team0: Mode changed to "loadbalance"
[  240.440293][T17817] netlink: del zone limit has 4 unknown bytes
[  240.556979][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  240.763447][T17834] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5179'.
[  240.814420][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  240.877722][T17841] lo speed is unknown, defaulting to 1000
[  240.880321][T17841] lo speed is unknown, defaulting to 1000
[  240.883379][T17841] lo speed is unknown, defaulting to 1000
[  240.923710][T17841] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  240.967715][T17841] lo speed is unknown, defaulting to 1000
[  240.971842][T17841] lo speed is unknown, defaulting to 1000
[  240.975677][T17841] lo speed is unknown, defaulting to 1000
[  241.081788][T17850] syz_tun: entered allmulticast mode
[  241.091747][T17850] dvmrp1: entered allmulticast mode
[  241.096032][T17849] syz_tun: left allmulticast mode
[  241.858203][ T5715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.861885][ T5715] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  241.974558][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5215'.
[  242.453589][T17957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5234'.
[  242.497917][T17958] lo speed is unknown, defaulting to 1000
[  242.537642][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5236'.
[  242.646389][ T5908] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  242.699341][T17972] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.703059][T17972] syzkaller0: entered promiscuous mode
[  242.705092][T17972] syzkaller0: entered allmulticast mode
[  242.717800][T17972] tipc: Resetting bearer <eth:syzkaller0>
[  242.721739][T17970] tipc: Resetting bearer <eth:syzkaller0>
[  242.732265][T17970] tipc: Disabling bearer <eth:syzkaller0>
[  242.833269][T17978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.841792][ T5894] lo speed is unknown, defaulting to 1000
[  242.947311][T17984] syzkaller0: left promiscuous mode
[  242.949415][T17984] syzkaller0: left allmulticast mode
[  243.776292][T18058] lo speed is unknown, defaulting to 1000
[  243.804566][   T33] audit: type=1800 audit(1756231493.706:8): pid=18057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5279" name="memory.events" dev="tmpfs" ino=9062 res=0 errno=0
[  244.317604][T18097] netlink: 'syz.2.5298': attribute type 13 has an invalid length.
[  244.511607][T18097] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.522398][T18097] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.592639][T18097] tipc: Resetting bearer <eth:syzkaller0>
[  244.679392][ T5715] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.682153][ T5715] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.692293][ T5715] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.694983][ T5715] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.703628][ T5715] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.707672][ T5715] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.710777][ T5715] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  244.713564][ T5715] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.797452][T18126] geneve4: entered promiscuous mode
[  245.094087][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5320'.
[  245.111266][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5320'.
[  245.114982][ T8117] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  245.123239][ T8117] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  245.127648][ T8117] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  245.134361][ T8117] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  245.245378][T18156] bond0: left allmulticast mode
[  245.247659][T18156] bond_slave_0: left allmulticast mode
[  245.249769][T18156] bond_slave_1: left allmulticast mode
[  245.251993][T18156] team0: left allmulticast mode
[  245.253931][T18156] team_slave_1: left allmulticast mode
[  245.256675][T18156] bond0: left promiscuous mode
[  245.258277][T18156] bond_slave_0: left promiscuous mode
[  245.260096][T18156] bond_slave_1: left promiscuous mode
[  245.262146][T18156] team0: left promiscuous mode
[  245.263859][T18156] team_slave_1: left promiscuous mode
[  245.280260][T18110] lo speed is unknown, defaulting to 1000
[  245.285115][T18110] syz1: Port: 1 Link DOWN
[  245.466708][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5330'.
[  245.469693][T18173] openvswitch: netlink: Flow key attr not present in new flow.
[  245.511213][T18181] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5334'.
[  245.595072][T18195] tun1: tun_chr_ioctl cmd 2148553947
[  246.650143][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5362'.
[  246.665623][T18248] macvtap0: entered promiscuous mode
[  246.670301][T18248] erspan0: entered promiscuous mode
[  246.672340][T18248] macvtap0: entered allmulticast mode
[  246.674357][T18248] erspan0: entered allmulticast mode
[  246.681117][T18248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5362'.
[  246.685463][T18248] erspan0: left allmulticast mode
[  246.687949][T18248] erspan0: left promiscuous mode
[  246.758902][T18256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5365'.
[  246.829136][T18259] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5365'.
[  247.095202][ T8117] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.099738][ T8117] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.103041][ T8117] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.106753][ T8117] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  247.639280][T18288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5378'.
[  247.877600][T18319] netlink: 'syz.1.5394': attribute type 21 has an invalid length.
[  247.883239][T18319] ipvlan3: entered promiscuous mode
[  247.885842][T18319] bridge0: port 1(ipvlan3) entered blocking state
[  247.888973][T18319] bridge0: port 1(ipvlan3) entered disabled state
[  247.891763][T18319] ipvlan3: entered allmulticast mode
[  247.893678][T18319] gretap0: entered allmulticast mode
[  247.897735][T18319] ipvlan3: left allmulticast mode
[  247.899427][T18319] gretap0: left allmulticast mode
[  248.015804][T18336] syzkaller0: entered promiscuous mode
[  248.027186][T18336] syzkaller0: entered allmulticast mode
[  248.093990][T18341] macvlan1: entered promiscuous mode
[  248.096585][T18341] ipvlan0: entered promiscuous mode
[  248.098884][T18341] ipvlan0: left promiscuous mode
[  248.100911][T18341] macvlan1: left promiscuous mode
[  248.281371][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5411'.
[  248.285517][T18359] netlink: 'syz.2.5411': attribute type 3 has an invalid length.
[  248.459374][T18384] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  248.463944][T18383] IPVS: stopping backup sync thread 18384 ...
[  248.531104][T18385] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.535739][T18385] 8021q: adding VLAN 0 to HW filter on device team0
[  248.541713][T18385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  249.458098][T18409] lo speed is unknown, defaulting to 1000
[  250.204811][T18463] __nla_validate_parse: 5 callbacks suppressed
[  250.204821][T18463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5456'.
[  250.242942][T18463] netlink: 'syz.2.5456': attribute type 10 has an invalid length.
[  250.252308][T18463] erspan1: entered promiscuous mode
[  250.254308][T18463] erspan1: entered allmulticast mode
[  250.259476][T18463] bond0: (slave erspan1): Enslaving as an active interface with an up link
[  250.412811][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5462'.
[  251.242378][T18542] tun0: tun_chr_ioctl cmd 2147767520
[  252.280763][T18624] netlink: 'syz.2.5528': attribute type 3 has an invalid length.
[  252.283493][T18624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5528'.
[  252.443760][T18634] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5533'.
[  252.586327][T18649] lo speed is unknown, defaulting to 1000
[  252.669631][T18649] netlink: 'syz.2.5539': attribute type 13 has an invalid length.
[  252.672186][T18649] netlink: 'syz.2.5539': attribute type 17 has an invalid length.
[  252.680330][T18649] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  253.036014][T18682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5554'.
[  253.235064][T18703] lo speed is unknown, defaulting to 1000
[  253.511417][T18733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5576'.
[  253.518279][T18733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5576'.
[  253.521336][T18733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5576'.
[  253.525673][T18733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5576'.
[  253.529836][T18733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5576'.
[  253.860494][T18749] lo speed is unknown, defaulting to 1000
[  253.978143][T18754] syzkaller1: entered promiscuous mode
[  253.980392][T18754] syzkaller1: entered allmulticast mode
[  254.363250][T18760] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.795866][T18790] lo speed is unknown, defaulting to 1000
[  254.939487][T18798] ==================================================================
[  254.942487][T18798] BUG: KASAN: slab-out-of-bounds in xfrm_alloc_spi+0x570/0xf30
[  254.945156][T18798] Read of size 4 at addr ffff8880353efb44 by task syz.0.5602/18798
[  254.948908][T18798] 
[  254.949911][T18798] CPU: 1 UID: 0 PID: 18798 Comm: syz.0.5602 Not tainted syzkaller #0 PREEMPT(full) 
[  254.949927][T18798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.949935][T18798] Call Trace:
[  254.949943][T18798]  <TASK>
[  254.949949][T18798]  dump_stack_lvl+0x189/0x250
[  254.949970][T18798]  ? __kasan_check_byte+0x12/0x40
[  254.949989][T18798]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.950005][T18798]  ? lock_release+0x4b/0x3e0
[  254.950024][T18798]  ? __virt_addr_valid+0x4a5/0x5c0
[  254.950042][T18798]  print_report+0xca/0x240
[  254.950056][T18798]  ? xfrm_alloc_spi+0x570/0xf30
[  254.950069][T18798]  kasan_report+0x118/0x150
[  254.950086][T18798]  ? xfrm_alloc_spi+0x570/0xf30
[  254.950100][T18798]  xfrm_alloc_spi+0x570/0xf30
[  254.950115][T18798]  ? xfrm_alloc_spi+0x2a0/0xf30
[  254.950130][T18798]  ? __local_bh_enable_ip+0x63/0x1c0
[  254.950146][T18798]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  254.950159][T18798]  ? xfrm_find_acq+0x87/0xa0
[  254.950175][T18798]  pfkey_getspi+0x7a8/0xee0
[  254.950196][T18798]  pfkey_sendmsg+0xbfe/0x1090
[  254.950218][T18798]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  254.950243][T18798]  ? aa_sock_msg_perm+0xf1/0x1d0
[  254.950262][T18798]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.950275][T18798]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  254.950293][T18798]  __sock_sendmsg+0x21c/0x270
[  254.950309][T18798]  ____sys_sendmsg+0x505/0x830
[  254.950323][T18798]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.950337][T18798]  ? import_iovec+0x74/0xa0
[  254.950359][T18798]  ___sys_sendmsg+0x21f/0x2a0
[  254.950371][T18798]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.950395][T18798]  ? __fget_files+0x2a/0x420
[  254.950413][T18798]  ? __fget_files+0x3a0/0x420
[  254.950433][T18798]  __x64_sys_sendmsg+0x19b/0x260
[  254.950446][T18798]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  254.950461][T18798]  ? rcu_is_watching+0x15/0xb0
[  254.950475][T18798]  ? do_syscall_64+0xbe/0x3b0
[  254.950494][T18798]  do_syscall_64+0xfa/0x3b0
[  254.950511][T18798]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.950527][T18798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.950538][T18798]  ? exc_page_fault+0x9f/0xf0
[  254.950554][T18798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.950566][T18798] RIP: 0033:0x7f7b8078ebe9
[  254.950579][T18798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.950588][T18798] RSP: 002b:00007f7b815b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.950601][T18798] RAX: ffffffffffffffda RBX: 00007f7b809b5fa0 RCX: 00007f7b8078ebe9
[  254.950611][T18798] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  254.950619][T18798] RBP: 00007f7b80811e19 R08: 0000000000000000 R09: 0000000000000000
[  254.950626][T18798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.950635][T18798] R13: 00007f7b809b6038 R14: 00007f7b809b5fa0 R15: 00007ffe88bf27b8
[  254.950650][T18798]  </TASK>
[  254.950654][T18798] 
[  255.066215][T18798] Allocated by task 8117:
[  255.067973][T18798]  kasan_save_track+0x3e/0x80
[  255.069876][T18798]  __kasan_slab_alloc+0x6c/0x80
[  255.071859][T18798]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  255.074224][T18798]  kmalloc_reserve+0xbd/0x290
[  255.076134][T18798]  __alloc_skb+0x142/0x2d0
[  255.077946][T18798]  __ipv6_ifa_notify+0x1e8/0xac0
[  255.079950][T18798]  addrconf_dad_completed+0x180/0xd60
[  255.082160][T18798]  addrconf_dad_work+0xc36/0x14b0
[  255.084241][T18798]  process_scheduled_works+0xae1/0x17b0
[  255.086453][T18798]  worker_thread+0x8a0/0xda0
[  255.088395][T18798]  kthread+0x711/0x8a0
[  255.090008][T18798]  ret_from_fork+0x3fc/0x770
[  255.091842][T18798]  ret_from_fork_asm+0x1a/0x30
[  255.093836][T18798] 
[  255.094834][T18798] Freed by task 8117:
[  255.096472][T18798]  kasan_save_track+0x3e/0x80
[  255.098421][T18798]  kasan_save_free_info+0x46/0x50
[  255.100474][T18798]  __kasan_slab_free+0x5b/0x80
[  255.102409][T18798]  kmem_cache_free+0x18f/0x400
[  255.104450][T18798]  skb_release_data+0x62d/0x7c0
[  255.106431][T18798]  consume_skb+0x9e/0xf0
[  255.108164][T18798]  netlink_broadcast_filtered+0x1188/0x12c0
[  255.110597][T18798]  nlmsg_notify+0xf0/0x1a0
[  255.112434][T18798]  __ipv6_ifa_notify+0x236/0xac0
[  255.114470][T18798]  addrconf_dad_completed+0x180/0xd60
[  255.116712][T18798]  addrconf_dad_work+0xc36/0x14b0
[  255.118771][T18798]  process_scheduled_works+0xae1/0x17b0
[  255.121045][T18798]  worker_thread+0x8a0/0xda0
[  255.122972][T18798]  kthread+0x711/0x8a0
[  255.124644][T18798]  ret_from_fork+0x3fc/0x770
[  255.126489][T18798]  ret_from_fork_asm+0x1a/0x30
[  255.128491][T18798] 
[  255.129488][T18798] The buggy address belongs to the object at ffff8880353ef800
[  255.129488][T18798]  which belongs to the cache skbuff_small_head of size 704
[  255.135269][T18798] The buggy address is located 132 bytes to the right of
[  255.135269][T18798]  allocated 704-byte region [ffff8880353ef800, ffff8880353efac0)
[  255.141077][T18798] 
[  255.142077][T18798] The buggy address belongs to the physical page:
[  255.144725][T18798] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x353ec
[  255.148230][T18798] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  255.151619][T18798] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  255.154591][T18798] page_type: f5(slab)
[  255.156213][T18798] raw: 00fff00000000040 ffff88801cecfc80 ffffea00010ae400 dead000000000004
[  255.159541][T18798] raw: 0000000000000000 0000000000120012 00000000f5000000 0000000000000000
[  255.163056][T18798] head: 00fff00000000040 ffff88801cecfc80 ffffea00010ae400 dead000000000004
[  255.166537][T18798] head: 0000000000000000 0000000000120012 00000000f5000000 0000000000000000
[  255.169964][T18798] head: 00fff00000000002 ffffea0000d4fb01 00000000ffffffff 00000000ffffffff
[  255.173441][T18798] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  255.176861][T18798] page dumped because: kasan: bad access detected
[  255.179521][T18798] page_owner tracks the page as allocated
[  255.181800][T18798] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5817, tgid 5817 (sshd), ts 245146881854, free_ts 243616562253
[  255.189867][T18798]  post_alloc_hook+0x240/0x2a0
[  255.191890][T18798]  get_page_from_freelist+0x21e4/0x22c0
[  255.194172][T18798]  __alloc_frozen_pages_noprof+0x181/0x370
[  255.196485][T18798]  alloc_pages_mpol+0x232/0x4a0
[  255.198451][T18798]  allocate_slab+0x8a/0x370
[  255.200153][T18798]  ___slab_alloc+0xbeb/0x1410
[  255.201744][T18798]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[  255.203850][T18798]  kmalloc_reserve+0xbd/0x290
[  255.205685][T18798]  __alloc_skb+0x142/0x2d0
[  255.207507][T18798]  __tcp_send_ack+0xaf/0x620
[  255.209334][T18798]  tcp_recvmsg_locked+0x2d7f/0x3660
[  255.211493][T18798]  tcp_recvmsg+0x216/0x810
[  255.213283][T18798]  inet_recvmsg+0x147/0x250
[  255.215089][T18798]  sock_recvmsg+0x1a8/0x270
[  255.216828][T18798]  sock_read_iter+0x231/0x2f0
[  255.218633][T18798]  vfs_read+0x55a/0xa30
[  255.220184][T18798] page last free pid 36 tgid 36 stack trace:
[  255.222276][T18798]  __free_frozen_pages+0xbc4/0xd30
[  255.224187][T18798]  vfree+0x25a/0x400
[  255.225552][T18798]  htab_map_free+0x7b2/0x980
[  255.227178][T18798]  bpf_map_free_deferred+0x113/0x140
[  255.228975][T18798]  process_scheduled_works+0xae1/0x17b0
[  255.230865][T18798]  worker_thread+0x8a0/0xda0
[  255.232418][T18798]  kthread+0x711/0x8a0
[  255.233848][T18798]  ret_from_fork+0x3fc/0x770
[  255.235381][T18798]  ret_from_fork_asm+0x1a/0x30
[  255.236942][T18798] 
[  255.237734][T18798] Memory state around the buggy address:
[  255.239508][T18798]  ffff8880353efa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.242169][T18798]  ffff8880353efa80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  255.245266][T18798] >ffff8880353efb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  255.248169][T18798]                                            ^
[  255.250284][T18798]  ffff8880353efb80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.253273][T18798]  ffff8880353efc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.256171][T18798] ==================================================================
[  255.259405][T18798] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  255.261762][T18798] CPU: 1 UID: 0 PID: 18798 Comm: syz.0.5602 Not tainted syzkaller #0 PREEMPT(full) 
[  255.264933][T18798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.268253][T18798] Call Trace:
[  255.269449][T18798]  <TASK>
[  255.270477][T18798]  dump_stack_lvl+0x99/0x250
[  255.272218][T18798]  ? __asan_memcpy+0x40/0x70
[  255.273807][T18798]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.275514][T18798]  ? __pfx__printk+0x10/0x10
[  255.277030][T18798]  vpanic+0x281/0x750
[  255.278469][T18798]  ? __pfx_vpanic+0x10/0x10
[  255.280269][T18798]  ? irqentry_exit+0x74/0x90
[  255.282024][T18798]  panic+0xb9/0xc0
[  255.283448][T18798]  ? __pfx_panic+0x10/0x10
[  255.285094][T18798]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  255.287357][T18798]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  255.289468][T18798]  ? xfrm_alloc_spi+0x570/0xf30
[  255.291335][T18798]  check_panic_on_warn+0x89/0xb0
[  255.293171][T18798]  ? xfrm_alloc_spi+0x570/0xf30
[  255.294785][T18798]  end_report+0x78/0x160
[  255.296164][T18798]  kasan_report+0x129/0x150
[  255.297655][T18798]  ? xfrm_alloc_spi+0x570/0xf30
[  255.299609][T18798]  xfrm_alloc_spi+0x570/0xf30
[  255.301357][T18798]  ? xfrm_alloc_spi+0x2a0/0xf30
[  255.303111][T18798]  ? __local_bh_enable_ip+0x63/0x1c0
[  255.304999][T18798]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  255.306677][T18798]  ? xfrm_find_acq+0x87/0xa0
[  255.308316][T18798]  pfkey_getspi+0x7a8/0xee0
[  255.310031][T18798]  pfkey_sendmsg+0xbfe/0x1090
[  255.311798][T18798]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  255.313725][T18798]  ? aa_sock_msg_perm+0xf1/0x1d0
[  255.315462][T18798]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  255.317239][T18798]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  255.319102][T18798]  __sock_sendmsg+0x21c/0x270
[  255.320836][T18798]  ____sys_sendmsg+0x505/0x830
[  255.322517][T18798]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.324393][T18798]  ? import_iovec+0x74/0xa0
[  255.325966][T18798]  ___sys_sendmsg+0x21f/0x2a0
[  255.327612][T18798]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.329419][T18798]  ? __fget_files+0x2a/0x420
[  255.330998][T18798]  ? __fget_files+0x3a0/0x420
[  255.332773][T18798]  __x64_sys_sendmsg+0x19b/0x260
[  255.334591][T18798]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  255.336642][T18798]  ? rcu_is_watching+0x15/0xb0
[  255.338500][T18798]  ? do_syscall_64+0xbe/0x3b0
[  255.340236][T18798]  do_syscall_64+0xfa/0x3b0
[  255.341974][T18798]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.343817][T18798]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.345939][T18798]  ? exc_page_fault+0x9f/0xf0
[  255.347676][T18798]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.349782][T18798] RIP: 0033:0x7f7b8078ebe9
[  255.351326][T18798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.358188][T18798] RSP: 002b:00007f7b815b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.361072][T18798] RAX: ffffffffffffffda RBX: 00007f7b809b5fa0 RCX: 00007f7b8078ebe9
[  255.364125][T18798] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  255.367063][T18798] RBP: 00007f7b80811e19 R08: 0000000000000000 R09: 0000000000000000
[  255.370022][T18798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.373004][T18798] R13: 00007f7b809b6038 R14: 00007f7b809b5fa0 R15: 00007ffe88bf27b8
[  255.375842][T18798]  </TASK>
[  255.377549][T18798] Kernel Offset: disabled
[  255.378975][T18798] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:05:04  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44deb RBX=1ffff11026cc7f61 RCX=ffff888030d89cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900035ef7e0 RSP=ffffc900035ef660
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44dd3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7b809b7dac CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff546e12e53
XMM06=0000000000000000 00007ff546e12e4d XMM07=0000000000000000 00007ff546e12e61
XMM08=0000000000000000 00007ff546e12ee7 XMM09=0000000000000000 00007ff546e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001135 RDI=0000000000001136 RBP=00000000000003f8 RSP=ffffc9000470eeb0
R8 =ffff888107808237 R9 =1ffff11020f01046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af990c R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7b815b46c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000012d0c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff816847e6 ffffffff8167991b
XMM02=00007ff546f87498 ffffffff8167991b XMM03=00007ff546f874a8 00007ff546f874a0
XMM04=00007ff547aed100 00007ff546f87460 XMM05=00007ff546f87478 00007ff546f874c0
XMM06=00007ff546f874b8 00007ff546f874b0 XMM07=00007ff546f874a8 00007ff546f874a0
XMM08=0000000000000000 00007ff546e12ee7 XMM09=0000000000000000 00007ff546e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
