last executing test programs:

5m11.184718865s ago: executing program 1 (id=639):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000002, 0x5)

5m11.184397587s ago: executing program 2 (id=640):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff85000000b500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fcffff850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
ioctl$TUNSETIFF(r7, 0x400454ca, 0x0)
getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, &(0x7f0000000040)=0x6)

5m11.126592585s ago: executing program 1 (id=641):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa00000000000000000200", @ANYRES64], 0x70}}, 0x0)

5m11.053224074s ago: executing program 1 (id=644):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20001040}, 0x8044)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000940)={0x0, 0xffffffffffffffcc, &(0x7f0000000640)={0x0, 0x62}, 0x1, 0x0, 0x0, 0x26000081}, 0x4000014)

5m10.915629526s ago: executing program 2 (id=649):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, 0x16, 0x1, 0x0, 0xfffffffc, {0xa}, [@typed={0x4}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c085}, 0x0)

5m10.825587536s ago: executing program 2 (id=651):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x1b}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)

5m10.75477144s ago: executing program 2 (id=653):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)

5m10.754472697s ago: executing program 1 (id=654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5m10.522606876s ago: executing program 2 (id=658):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @default}, 0x1c)

5m10.521722896s ago: executing program 1 (id=659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

5m10.256944159s ago: executing program 2 (id=660):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5m10.15992036s ago: executing program 32 (id=660):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1804000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0)

5m10.120342143s ago: executing program 1 (id=662):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, 0x0)

5m10.059512134s ago: executing program 33 (id=662):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, 0x0)

832.025736ms ago: executing program 0 (id=8157):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x24, r1, 0x78967656d0a78869, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x4004000)

752.47996ms ago: executing program 0 (id=8158):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000040))

752.179625ms ago: executing program 0 (id=8159):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e24, @private=0xa010102}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f, 0x8000000000000001, 0x7})

699.545051ms ago: executing program 0 (id=8160):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x10, 0x6361, 0x1007, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x8, 0xc, {0x1, 0x18000, 0xb2, 0xe9, 0x8, 0xfffffffffffffffd}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000)

641.410275ms ago: executing program 0 (id=8162):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0a000200010078", 0x7)

641.044075ms ago: executing program 0 (id=8163):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r4, 0x0, 0x6}, 0x18)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r5, 0x0)
accept4(r5, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$tipc2(0x0, r5)

301.694697ms ago: executing program 4 (id=8169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000880), 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

296.871872ms ago: executing program 4 (id=8170):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
sendmmsg$inet(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000040)

234.481952ms ago: executing program 3 (id=8172):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r1, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0)

234.30091ms ago: executing program 4 (id=8173):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x80)

233.933782ms ago: executing program 3 (id=8174):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000740)="d4", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000b80)='\a', 0x1}], 0x1}}], 0x2, 0x4000050)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)

172.783214ms ago: executing program 4 (id=8175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008c00000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

172.456825ms ago: executing program 3 (id=8176):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x17, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x83d00, 0x0, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)

166.687461ms ago: executing program 3 (id=8177):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008090}, 0x30)

162.10533ms ago: executing program 4 (id=8178):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
listen(r0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4)

84.371519ms ago: executing program 3 (id=8179):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x24, r10, 0x301, 0x0, 0x25dfdbff, {{0x5}, {@val={0x8, 0x1, 0x7c}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000)

84.078749ms ago: executing program 4 (id=8180):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x10)

0s ago: executing program 3 (id=8181):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

 attributes in process `syz.4.2754'.
[  208.208264][T12513] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2761'.
[  208.211404][T12513] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2761'.
[  208.217466][T12513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2761'.
[  208.601707][ T5918] net_ratelimit: 28 callbacks suppressed
[  208.601723][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  208.628407][T12525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2765'.
[  208.711701][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  208.822176][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  208.931818][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  209.042427][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  209.151717][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  209.268033][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'.
[  209.383942][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  209.444031][T12572] macvtap1: entered promiscuous mode
[  209.446300][T12572] veth1_to_hsr: entered promiscuous mode
[  209.448433][T12572] macvtap1: entered allmulticast mode
[  209.450430][T12572] veth1_to_hsr: entered allmulticast mode
[  209.475765][T12572] macvtap2: entered promiscuous mode
[  209.478117][T12572] macvtap2: entered allmulticast mode
[  209.512257][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  209.621962][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  209.688739][T12589] vxcan1 speed is unknown, defaulting to 1000
[  209.725137][T12594] netlink: 'syz.0.2793': attribute type 5 has an invalid length.
[  209.741680][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  209.987477][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'.
[  210.079996][T12614] netlink: 'syz.3.2802': attribute type 1 has an invalid length.
[  210.853973][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'.
[  210.936235][T12671] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  210.941234][T12671] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  210.997627][T12675] netlink: 'syz.4.2828': attribute type 12 has an invalid length.
[  211.000773][T12677] netlink: 'syz.0.2829': attribute type 1 has an invalid length.
[  211.003520][T12677] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2829'.
[  211.116473][T12687] netlink: 'syz.0.2834': attribute type 21 has an invalid length.
[  211.119608][T12687] netlink: 'syz.0.2834': attribute type 22 has an invalid length.
[  211.124844][T12687] netlink: 'syz.0.2834': attribute type 23 has an invalid length.
[  211.128600][T12687] netlink: 'syz.0.2834': attribute type 25 has an invalid length.
[  211.233623][T12695] netlink: 'syz.0.2838': attribute type 4 has an invalid length.
[  211.237539][T12695] netlink: 'syz.0.2838': attribute type 4 has an invalid length.
[  212.117497][T12754] syzkaller1: tun_chr_ioctl cmd 1074025677
[  212.120071][T12754] syzkaller1: linktype set to 823
[  212.877406][T12786] tipc: Can't bind to reserved service type 2
[  213.135849][T12795] xt_time: unknown flags 0xf4
[  213.611897][   T12] net_ratelimit: 33 callbacks suppressed
[  213.611911][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  213.631804][T12806] vxcan1 speed is unknown, defaulting to 1000
[  213.774756][T12810] vxcan1 speed is unknown, defaulting to 1000
[  213.861872][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  213.979091][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  214.096060][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  214.211679][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  214.351722][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  214.521731][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  214.554415][T12863] __nla_validate_parse: 8 callbacks suppressed
[  214.554430][T12863] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2913'.
[  214.641843][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  214.751878][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  214.862402][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  215.566748][T12910] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2931'.
[  215.919623][T12932] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.932672][T12932] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  215.935146][T12932] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  215.950728][T12932] tipc: Resetting bearer <eth:syzkaller0>
[  216.645142][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2957'.
[  216.953528][   T47] tipc: Node number set to 549894661
[  217.043477][T12990] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2966'.
[  217.064597][T12990] vlan2: entered allmulticast mode
[  217.066538][T12990] gretap0: entered allmulticast mode
[  217.306862][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  218.108330][T13022] tap0: tun_chr_ioctl cmd 1074025680
[  218.119965][T13022] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  218.125647][T13022] mac80211_hwsim hwsim7 D: renamed from syzkaller0 (while UP)
[  218.130473][T13022] tipc: Disabling bearer <eth:syzkaller0>
[  218.406112][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2989'.
[  218.419623][T13046] team0: Mode changed to "broadcast"
[  218.429733][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'.
[  218.435898][T13046] vlan0: entered promiscuous mode
[  218.439210][T13046] tipc: Enabled bearer <eth:team0>, priority 0
[  218.468907][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2992'.
[  218.651783][ T5918] net_ratelimit: 33 callbacks suppressed
[  218.651801][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  218.771894][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  218.881802][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  218.991758][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  219.101698][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  219.211734][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  219.321925][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  219.430166][T13088] validate_nla: 4 callbacks suppressed
[  219.430189][T13088] netlink: 'syz.0.3007': attribute type 4 has an invalid length.
[  219.435999][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  219.452630][T13088] netlink: 'syz.0.3007': attribute type 4 has an invalid length.
[  219.513926][T13091] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  219.533203][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3008'.
[  219.542424][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  219.558243][T13091] bridge0: entered promiscuous mode
[  219.560274][T13091] bridge0: entered allmulticast mode
[  219.567433][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3009'.
[  219.571964][T13091] team0: Port device bridge0 added
[  219.573331][   T47] tipc: Node number set to 1131432395
[  219.578706][T13096] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  219.746915][T13112] netlink: 'syz.0.3015': attribute type 1 has an invalid length.
[  219.792277][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'.
[  219.828590][T13120] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3021'.
[  219.983849][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'.
[  219.987721][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'.
[  220.169584][T13156] bridge8: entered promiscuous mode
[  220.171353][T13156] bridge8: entered allmulticast mode
[  220.177765][T13156] team0: Port device bridge8 added
[  220.334255][T13172] syzkaller1: entered promiscuous mode
[  220.336306][T13172] syzkaller1: entered allmulticast mode
[  220.641783][ T5234] Bluetooth: hci1: command 0x0405 tx timeout
[  220.679162][T13200] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.693180][T13200] syzkaller0: entered promiscuous mode
[  220.695496][T13200] syzkaller0: entered allmulticast mode
[  220.704928][T13200] tipc: Resetting bearer <eth:syzkaller0>
[  220.714222][T13199] tipc: Resetting bearer <eth:syzkaller0>
[  220.730340][T13199] tipc: Disabling bearer <eth:syzkaller0>
[  220.964936][T13214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3064'.
[  221.099267][T13227] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3069'.
[  221.102344][T13227] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3069'.
[  221.108504][T13227] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  221.112369][T13227] gretap3: entered promiscuous mode
[  221.114200][T13227] gretap3: entered allmulticast mode
[  221.429625][T13244] vxcan1 speed is unknown, defaulting to 1000
[  221.666518][T13250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3078'.
[  221.789555][T13252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3079'.
[  222.012855][T13270] macvtap2: entered allmulticast mode
[  222.014534][T13270] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  222.022188][T13270] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[  222.122792][T13279] netlink: 'syz.3.3092': attribute type 3 has an invalid length.
[  222.564155][T13317] C: renamed from team_slave_0
[  222.569827][T13317] netlink: 'syz.0.3108': attribute type 2 has an invalid length.
[  222.810460][T13334] vxcan1 speed is unknown, defaulting to 1000
[  223.616220][T13377] vxcan1 speed is unknown, defaulting to 1000
[  223.712681][   T12] net_ratelimit: 36 callbacks suppressed
[  223.712698][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  223.861865][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  223.992435][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  224.001681][T13392] vxcan1 speed is unknown, defaulting to 1000
[  224.101868][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  224.212039][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  224.391651][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  225.047774][T13409] __nla_validate_parse: 3 callbacks suppressed
[  225.047785][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3148'.
[  225.087614][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  225.191811][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  225.342175][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  225.435421][T13427] vxcan1 speed is unknown, defaulting to 1000
[  225.501759][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  225.692677][T13440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3163'.
[  225.778338][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'.
[  225.785314][T13445] vlan2: entered promiscuous mode
[  225.787198][T13445] batadv0: entered promiscuous mode
[  225.829430][T13449] netlink: 'syz.3.3167': attribute type 5 has an invalid length.
[  225.947801][T13456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3170'.
[  226.042532][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3170'.
[  226.111258][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3174'.
[  226.389381][T13481] vxcan1 speed is unknown, defaulting to 1000
[  226.847627][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3192'.
[  227.287304][T13524] IPVS: persistence engine module ip_vs_pe_ not found
[  227.345935][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3201'.
[  227.805878][T13546] netlink: 'syz.4.3211': attribute type 1 has an invalid length.
[  227.839212][T13546] gretap1: entered allmulticast mode
[  227.845645][T13546] bond4: (slave gretap1): making interface the new active one
[  227.849196][T13546] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  227.907589][T13553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.911107][T13553] syzkaller0: entered promiscuous mode
[  227.915943][T13553] syzkaller0: entered allmulticast mode
[  227.933201][T13553] tipc: Resetting bearer <eth:syzkaller0>
[  227.937105][T13552] tipc: Resetting bearer <eth:syzkaller0>
[  227.946253][T13552] tipc: Disabling bearer <eth:syzkaller0>
[  228.170088][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'.
[  228.262344][T13570] vxcan1 speed is unknown, defaulting to 1000
[  228.822691][   T13] net_ratelimit: 27 callbacks suppressed
[  228.822709][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  228.941743][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  229.051747][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  229.165151][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  229.281705][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  229.411863][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  229.415727][T13616] netlink: 'syz.3.3239': attribute type 2 has an invalid length.
[  229.513607][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3240'.
[  229.642636][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  229.727190][T13634] netlink: 'syz.3.3248': attribute type 1 has an invalid length.
[  229.730026][T13634] netlink: 'syz.3.3248': attribute type 3 has an invalid length.
[  229.753166][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  229.911841][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  230.026346][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  230.117002][T13657] syzkaller0: entered promiscuous mode
[  230.119215][T13657] syzkaller0: entered allmulticast mode
[  230.158273][T13667] lo: left promiscuous mode
[  230.162550][T13669] __nla_validate_parse: 4 callbacks suppressed
[  230.162603][T13669] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3265'.
[  230.201064][T13671] netlink: 'syz.3.3266': attribute type 12 has an invalid length.
[  230.585674][T13689] netlink: 'syz.0.3274': attribute type 1 has an invalid length.
[  230.755134][T13696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.767805][T13696] syzkaller0: entered promiscuous mode
[  230.770116][T13696] syzkaller0: entered allmulticast mode
[  230.795906][T13696] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  230.818856][T13696] tipc: Resetting bearer <eth:syzkaller0>
[  230.824706][T13695] tipc: Resetting bearer <eth:syzkaller0>
[  230.842511][T13695] tipc: Disabling bearer <eth:syzkaller0>
[  230.998071][T13707] tipc: MTU too low for tipc bearer
[  231.066525][T13711] sctp: [Deprecated]: syz.0.3284 (pid 13711) Use of int in max_burst socket option deprecated.
[  231.066525][T13711] Use struct sctp_assoc_value instead
[  231.137896][T13717] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3287'.
[  231.652402][T13742] netlink: 'syz.0.3299': attribute type 1 has an invalid length.
[  231.658889][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3299'.
[  232.154634][T13778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3318'.
[  232.206168][T13786] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3321'.
[  232.328032][T13799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3328'.
[  232.333871][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'.
[  232.337459][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'.
[  232.378767][T13803] netlink: 212280 bytes leftover after parsing attributes in process `syz.0.3329'.
[  232.392934][T13806] netlink: 'syz.3.3330': attribute type 11 has an invalid length.
[  232.518638][T13814] macsec2: entered allmulticast mode
[  232.520768][T13814] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  232.882826][T13836] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3345'.
[  232.968359][T13840] netlink: 'syz.0.3347': attribute type 5 has an invalid length.
[  233.862712][   T12] net_ratelimit: 36 callbacks suppressed
[  233.862726][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  233.915005][T13932] syzkaller1: entered promiscuous mode
[  233.917396][T13932] syzkaller1: entered allmulticast mode
[  233.971704][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  234.091779][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  234.201734][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  234.331715][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  234.441726][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  234.551664][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  234.691823][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  234.801642][T13976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.831916][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  235.466639][T14029] vxcan1 speed is unknown, defaulting to 1000
[  235.758272][T14044] __nla_validate_parse: 11 callbacks suppressed
[  235.758284][T14044] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3440'.
[  235.874299][T14048] netlink: 'syz.3.3442': attribute type 46 has an invalid length.
[  236.047824][T14054] netlink: 'syz.3.3445': attribute type 23 has an invalid length.
[  236.252892][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3448'.
[  236.256492][T14061] tipc: Enabled bearer <eth:vlan0>, priority 18
[  236.306133][T14064] netlink: 'syz.0.3450': attribute type 13 has an invalid length.
[  236.342125][T14067] netlink: 'syz.0.3451': attribute type 83 has an invalid length.
[  236.366224][T14069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3452'.
[  236.453256][T14074] vxcan1 speed is unknown, defaulting to 1000
[  236.508696][T14079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3456'.
[  236.554172][T14079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3456'.
[  237.096068][T14123] netlink: 'syz.4.3475': attribute type 1 has an invalid length.
[  237.150588][T14127] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3477'.
[  237.576010][T14162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.579314][T14162] syzkaller0: entered promiscuous mode
[  237.581129][T14162] syzkaller0: entered allmulticast mode
[  237.589180][T14162] tipc: Resetting bearer <eth:syzkaller0>
[  237.593232][T14161] tipc: Resetting bearer <eth:syzkaller0>
[  237.604954][T14161] tipc: Disabling bearer <eth:syzkaller0>
[  237.944605][T14183] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  238.273981][T14208] netlink: 'syz.3.3515': attribute type 8 has an invalid length.
[  238.475701][T14226] netlink: 'syz.0.3525': attribute type 12 has an invalid length.
[  238.543707][T14232] netlink: 'syz.3.3526': attribute type 13 has an invalid length.
[  238.546878][T14232] netlink: 'syz.3.3526': attribute type 17 has an invalid length.
[  238.559484][T14232] erspan0: entered promiscuous mode
[  238.604934][T14232] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.610430][T14232] 8021q: adding VLAN 0 to HW filter on device team0
[  238.616638][T14232] tipc: Resetting bearer <eth:team0>
[  238.648046][T14237] vxcan1 speed is unknown, defaulting to 1000
[  238.712134][T14232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3526'.
[  238.725410][T14232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.796422][T14232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.920436][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'.
[  238.995003][   T13] net_ratelimit: 37 callbacks suppressed
[  238.995016][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  239.103868][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  239.222630][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  239.332147][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  239.451896][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  239.561833][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  239.671715][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  239.781803][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  239.873384][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3539'.
[  239.901734][   T12] bond2: (slave macvlan2): failed to get link speed/duplex
[  240.012075][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  240.141895][T14278] xt_socket: unknown flags 0x50
[  240.196775][T14282] pim6reg1: entered promiscuous mode
[  240.198973][T14282] pim6reg1: entered allmulticast mode
[  240.245389][T14286] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3550'.
[  241.502989][T14357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.576577][T14360] __nla_validate_parse: 1 callbacks suppressed
[  241.576588][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'.
[  241.640076][T14370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'.
[  241.757358][T14382] delete_channel: no stack
[  241.757855][T14384] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3595'.
[  242.446439][T14401] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3602'.
[  242.608727][T14409] vxcan1 speed is unknown, defaulting to 1000
[  242.760437][T14415] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3608'.
[  242.885725][T14422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'.
[  242.889396][T14422] netlink: 'syz.3.3610': attribute type 30 has an invalid length.
[  242.922001][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'.
[  243.197609][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3619'.
[  243.418221][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3630'.
[  243.633426][T14484] netlink: 'syz.3.3640': attribute type 1 has an invalid length.
[  243.636651][T14484] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3640'.
[  244.021751][ T5873] net_ratelimit: 35 callbacks suppressed
[  244.021766][ T5873] bond2: (slave macvlan2): failed to get link speed/duplex
[  244.131749][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  244.499341][T14510] team0: Port device bridge0 removed
[  244.635788][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  244.762513][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  244.865716][T14529] netlink: 'syz.3.3655': attribute type 3 has an invalid length.
[  244.874632][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  244.981801][   T13] bond2: (slave macvlan2): failed to get link speed/duplex
[  245.095586][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  245.201711][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  245.318850][T14559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  245.321672][T14559] IPv6: NLM_F_CREATE should be set when creating new route
[  245.327196][T14559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  245.330039][T14559] IPv6: NLM_F_CREATE should be set when creating new route
[  245.333122][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  245.450200][ T5918] bond2: (slave macvlan2): failed to get link speed/duplex
[  245.578320][T14571] tap0: tun_chr_ioctl cmd 1074812118
[  245.935251][T14603] netlink: 'syz.4.3689': attribute type 1 has an invalid length.
[  246.102542][T14613] vxcan1 speed is unknown, defaulting to 1000
[  246.605157][T14640] __nla_validate_parse: 8 callbacks suppressed
[  246.605172][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3706'.
[  246.948158][T14665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3716'.
[  246.952176][T14665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3716'.
[  246.955715][T14665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3716'.
[  246.959116][T14665] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3716'.
[  247.160810][T14675] batadv_slave_0: entered promiscuous mode
[  247.303689][T14684] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.311076][T14684] 8021q: adding VLAN 0 to HW filter on device team0
[  247.334502][ T5873] bond2: (slave macvlan2): link status definitely down, disabling slave
[  247.387765][T14690] ip6tnl3: entered promiscuous mode
[  248.573350][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'.
[  248.906883][T14764] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3761'.
[  248.910329][T14764] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3761'.
[  249.000904][T14772] netlink: 308 bytes leftover after parsing attributes in process `syz.3.3766'.
[  249.005401][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3766'.
[  249.231894][   T33] audit: type=1800 audit(1758537546.185:7): pid=14793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3772" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6713 res=0 errno=0
[  249.355807][T14798] nbd1: detected capacity change from 0 to 127
[  249.361063][   T56] block nbd1: Receive control failed (result -32)
[  249.420786][T14811] netlink: 'syz.3.3781': attribute type 14 has an invalid length.
[  249.425424][T14811] netlink: 'syz.3.3781': attribute type 11 has an invalid length.
[  249.515373][T14814] vxcan1 speed is unknown, defaulting to 1000
[  249.668771][T14820] vxcan1 speed is unknown, defaulting to 1000
[  249.839669][T14839] netlink: 'syz.3.3791': attribute type 1 has an invalid length.
[  250.069027][T14852] netlink: 'syz.3.3797': attribute type 21 has an invalid length.
[  250.689627][T14888] netlink: 'syz.0.3812': attribute type 32 has an invalid length.
[  250.796634][T14894] xt_policy: neither incoming nor outgoing policy selected
[  251.068113][T14910] syzkaller0: entered promiscuous mode
[  251.069877][T14910] syzkaller0: entered allmulticast mode
[  251.079371][T14908] netlink: 'syz.0.3822': attribute type 12 has an invalid length.
[  252.541621][T14916] __nla_validate_parse: 6 callbacks suppressed
[  252.541637][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3825'.
[  252.547685][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3825'.
[  252.753984][T14940] net_ratelimit: 17 callbacks suppressed
[  252.753996][T14940] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  252.820514][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'.
[  252.826736][T14947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3835'.
[  252.905548][T14950] delete_channel: no stack
[  253.265367][T14983] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3853'.
[  254.339466][T15019] netlink: 'syz.4.3869': attribute type 1 has an invalid length.
[  254.342102][T15019] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3869'.
[  254.392892][T15024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  254.491931][T15035] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  254.509909][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'.
[  254.614302][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3880'.
[  254.883955][T15072] netlink: 'syz.4.3892': attribute type 4 has an invalid length.
[  255.044162][T15089] netlink: 'syz.0.3901': attribute type 3 has an invalid length.
[  255.131834][T15096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3904'.
[  255.158954][T15096] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3904'.
[  255.246007][T15104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  255.295613][T15106] syzkaller0: entered promiscuous mode
[  255.297444][T15106] syzkaller0: entered allmulticast mode
[  257.004841][T15141] bridge5: entered promiscuous mode
[  257.007038][T15141] bridge5: entered allmulticast mode
[  257.194464][T15156] team1: entered promiscuous mode
[  257.196557][T15156] team1: entered allmulticast mode
[  257.374372][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  257.667771][T15194] vxcan1 speed is unknown, defaulting to 1000
[  258.608361][T15221] __nla_validate_parse: 1 callbacks suppressed
[  258.608377][T15221] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3956'.
[  258.656347][T15226] netlink: 676 bytes leftover after parsing attributes in process `syz.0.3958'.
[  258.659971][T15226] netlink: 676 bytes leftover after parsing attributes in process `syz.0.3958'.
[  258.749241][T15230] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3960'.
[  258.800618][T15236] netlink: 'syz.3.3963': attribute type 1 has an invalid length.
[  258.871157][T15242] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3966'.
[  258.978411][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3966'.
[  259.005901][T15246] syzkaller1: entered promiscuous mode
[  259.011294][T15246] syzkaller1: entered allmulticast mode
[  259.051459][T15242] vxcan1 speed is unknown, defaulting to 1000
[  259.402035][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3982'.
[  259.431110][T15281] netlink: 'syz.3.3984': attribute type 1 has an invalid length.
[  259.497012][T15289] netlink: 'syz.4.3987': attribute type 2 has an invalid length.
[  259.500076][T15289] netlink: 'syz.4.3987': attribute type 1 has an invalid length.
[  259.500540][T15288] syzkaller1: entered promiscuous mode
[  259.503478][T15289] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3987'.
[  259.505155][T15288] syzkaller1: entered allmulticast mode
[  259.554843][T15291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.558232][T15291] syzkaller0: entered promiscuous mode
[  259.560433][T15291] syzkaller0: entered allmulticast mode
[  259.579237][T15291] tipc: Resetting bearer <eth:syzkaller0>
[  259.583515][T15290] tipc: Resetting bearer <eth:syzkaller0>
[  259.596830][T15290] tipc: Disabling bearer <eth:syzkaller0>
[  259.621425][T15293] Bluetooth: MGMT ver 1.23
[  259.775022][T15307] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  260.390307][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4015'.
[  260.422567][T15348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4015'.
[  260.544612][T15352] netlink: 'syz.4.4017': attribute type 1 has an invalid length.
[  260.586781][T15352] bond5: (slave geneve2): making interface the new active one
[  260.589769][T15352] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  260.593423][ T5863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  260.597065][ T5863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  260.601995][ T5863] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  260.604982][ T5863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  260.892501][ T6036] tipc: Node number set to 2129273218
[  260.998530][T15367] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  261.582393][   T33] audit: type=1800 audit(1758537558.535:8): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4032" name="cgroup.controllers" dev="tmpfs" ino=5609 res=0 errno=0
[  261.671814][ T5234] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  261.675849][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  262.257916][T15419] netlink: 'syz.0.4046': attribute type 1 has an invalid length.
[  262.522656][T15438] netlink: 'syz.4.4054': attribute type 1 has an invalid length.
[  263.459715][T15460] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  263.637503][T15467] netlink: 'syz.0.4067': attribute type 21 has an invalid length.
[  263.662869][T15462] tipc: Resetting bearer <eth:team0>
[  263.682664][T15462] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  263.703720][T15467] __nla_validate_parse: 2 callbacks suppressed
[  263.703740][T15467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4067'.
[  263.709820][T15467] netlink: 'syz.0.4067': attribute type 1 has an invalid length.
[  263.940415][T15478] netlink: 'syz.0.4072': attribute type 83 has an invalid length.
[  264.282621][T15492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.383545][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4081'.
[  264.387065][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'.
[  264.390686][T15497] netlink: 'syz.3.4081': attribute type 5 has an invalid length.
[  264.399124][T15497] netlink: 'syz.3.4081': attribute type 6 has an invalid length.
[  264.736155][T15525] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  264.764370][T15528] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  265.564878][T15559] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  265.806516][T15568] vxcan1 speed is unknown, defaulting to 1000
[  265.991828][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  266.187019][T15586] erspan0: left promiscuous mode
[  266.320622][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'.
[  266.538010][T15598] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4125'.
[  266.740959][T15606] netlink: 'syz.4.4128': attribute type 3 has an invalid length.
[  266.751429][T15606] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4128'.
[  267.073779][T15635] sctp: [Deprecated]: syz.4.4142 (pid 15635) Use of int in max_burst socket option deprecated.
[  267.073779][T15635] Use struct sctp_assoc_value instead
[  267.120395][T15641] netlink: 'syz.3.4145': attribute type 10 has an invalid length.
[  267.124314][T15641] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  267.234483][ T5873] syzkaller0: tun_net_xmit 76
[  267.236481][ T5873] syzkaller0: tun_net_xmit 48
[  267.245726][T15647] syzkaller0: tun_net_xmit 76
[  267.249794][T15647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  267.254187][T15646] tipc: Resetting bearer <eth:syzkaller0>
[  268.448180][T15646] tipc: Disabling bearer <eth:syzkaller0>
[  268.607774][T15668] syzkaller0: entered promiscuous mode
[  268.609601][T15668] syzkaller0: entered allmulticast mode
[  269.975759][T15676] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  270.037930][T15695] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  270.040827][T15695] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len
[  270.132314][T15705] sctp: [Deprecated]: syz.4.4166 (pid 15705) Use of int in maxseg socket option.
[  270.132314][T15705] Use struct sctp_assoc_value instead
[  270.214329][T15716] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  270.279467][T15721] netlink: 'syz.3.4174': attribute type 12 has an invalid length.
[  270.282760][T15721] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.4174'.
[  270.521465][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4189'.
[  270.533271][T15755] bond0: entered promiscuous mode
[  270.536031][T15755] bond0: left promiscuous mode
[  271.016947][T15790] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  271.063421][T15792] tipc: New replicast peer: 172.20.20.187
[  271.066427][T15792] tipc: Enabled bearer <udp:syz2>, priority 10
[  271.125867][T15796] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4208'.
[  271.129320][T15796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4208'.
[  271.257778][T15805] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4212'.
[  271.304621][T15807] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4213'.
[  271.627972][T15826] sctp: [Deprecated]: syz.4.4222 (pid 15826) Use of int in maxseg socket option.
[  271.627972][T15826] Use struct sctp_assoc_value instead
[  271.659226][T15828] netlink: 'syz.4.4223': attribute type 30 has an invalid length.
[  271.740000][T15833] syz.4.4225: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  271.745111][T15833] CPU: 0 UID: 0 PID: 15833 Comm: syz.4.4225 Not tainted syzkaller #0 PREEMPT(full) 
[  271.745124][T15833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.745131][T15833] Call Trace:
[  271.745136][T15833]  <TASK>
[  271.745141][T15833]  dump_stack_lvl+0x189/0x250
[  271.745164][T15833]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.745174][T15833]  ? __pfx__printk+0x10/0x10
[  271.745209][T15833]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.745222][T15833]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.745232][T15833]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  271.745242][T15833]  warn_alloc+0x214/0x310
[  271.745257][T15833]  ? stack_depot_save_flags+0x40/0x860
[  271.745270][T15833]  ? __pfx_warn_alloc+0x10/0x10
[  271.745283][T15833]  ? kasan_save_track+0x4f/0x80
[  271.745294][T15833]  ? xskq_create+0x56/0x170
[  271.745301][T15833]  ? xsk_init_queue+0xb0/0x110
[  271.745308][T15833]  ? xsk_setsockopt+0x4dc/0x8d0
[  271.745319][T15833]  ? do_sock_setsockopt+0x17c/0x1b0
[  271.745329][T15833]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  271.745339][T15833]  ? do_syscall_64+0xfa/0x3b0
[  271.745347][T15833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.745358][T15833]  __vmalloc_node_range_noprof+0x125/0x12f0
[  271.745384][T15833]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  271.745396][T15833]  ? xskq_create+0x56/0x170
[  271.745404][T15833]  ? __kasan_kmalloc+0x93/0xb0
[  271.745416][T15833]  vmalloc_user_noprof+0xad/0xf0
[  271.745427][T15833]  ? xskq_create+0xbf/0x170
[  271.745434][T15833]  xskq_create+0xbf/0x170
[  271.745443][T15833]  xsk_init_queue+0xb0/0x110
[  271.745452][T15833]  xsk_setsockopt+0x4dc/0x8d0
[  271.745467][T15833]  ? __pfx_xsk_setsockopt+0x10/0x10
[  271.745478][T15833]  ? __pfx_aa_sk_perm+0x10/0x10
[  271.745492][T15833]  ? aa_sock_opt_perm+0xff/0x1b0
[  271.745500][T15833]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  271.745519][T15833]  ? __pfx_xsk_setsockopt+0x10/0x10
[  271.745532][T15833]  do_sock_setsockopt+0x17c/0x1b0
[  271.745545][T15833]  __x64_sys_setsockopt+0x13f/0x1b0
[  271.745557][T15833]  do_syscall_64+0xfa/0x3b0
[  271.745566][T15833]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.745574][T15833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.745581][T15833]  ? exc_page_fault+0x9f/0xf0
[  271.745590][T15833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.745597][T15833] RIP: 0033:0x7f657cb8ec29
[  271.745606][T15833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.745613][T15833] RSP: 002b:00007f657d9fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  271.745622][T15833] RAX: ffffffffffffffda RBX: 00007f657cdd5fa0 RCX: 00007f657cb8ec29
[  271.745629][T15833] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  271.745633][T15833] RBP: 00007f657cc11e41 R08: 0000000000000004 R09: 0000000000000000
[  271.745638][T15833] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.745643][T15833] R13: 00007f657cdd6038 R14: 00007f657cdd5fa0 R15: 00007fff65584f18
[  271.745667][T15833]  </TASK>
[  271.745696][T15833] Mem-Info:
[  271.844601][T15833] active_anon:4386 inactive_anon:0 isolated_anon:0
[  271.844601][T15833]  active_file:1514 inactive_file:38334 isolated_file:0
[  271.844601][T15833]  unevictable:1768 dirty:280 writeback:0
[  271.844601][T15833]  slab_reclaimable:10818 slab_unreclaimable:81916
[  271.844601][T15833]  mapped:17990 shmem:2464 pagetables:1150
[  271.844601][T15833]  sec_pagetables:0 bounce:0
[  271.844601][T15833]  kernel_misc_reclaimable:0
[  271.844601][T15833]  free:261730 free_pcp:21931 free_cma:0
[  271.860336][T15833] Node 0 active_anon:10424kB inactive_anon:0kB active_file:4468kB inactive_file:50492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32152kB dirty:844kB writeback:0kB shmem:4944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7824kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  271.872443][T15833] Node 1 active_anon:7120kB inactive_anon:0kB active_file:1588kB inactive_file:102844kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39808kB dirty:276kB writeback:0kB shmem:4912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5328kB pagetables:2004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  271.882572][T15833] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  271.892543][T15833] lowmem_reserve[]: 0 811 811 811 811
[  271.894289][T15833] Node 0 DMA32 free:360516kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10424kB inactive_anon:0kB active_file:4468kB inactive_file:50492kB unevictable:3536kB writepending:844kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:31548kB local_pcp:15004kB free_cma:0kB
[  271.904383][T15833] lowmem_reserve[]: 0 0 0 0 0
[  271.906087][T15833] Node 1 DMA32 free:449868kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:8540kB local_pcp:480kB free_cma:0kB
[  271.915970][T15833] lowmem_reserve[]: 0 0 854 854 854
[  271.917865][T15833] Node 1 Normal free:221176kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7072kB inactive_anon:0kB active_file:1588kB inactive_file:102844kB unevictable:3536kB writepending:276kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47760kB local_pcp:21976kB free_cma:0kB
[  271.929614][T15833] lowmem_reserve[]: 0 0 0 0 0
[  271.931213][T15833] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  271.935255][T15833] Node 0 DMA32: 811*4kB (UME) 458*8kB (UME) 201*16kB (UME) 382*32kB (UME) 187*64kB (UME) 218*128kB (UM) 171*256kB (UME) 151*512kB (UM) 123*1024kB (UME) 9*2048kB (UM) 8*4096kB (UM) = 360460kB
[  271.941880][T15833] Node 1 DMA32: 43*4kB (UM) 46*8kB (UM) 45*16kB (UM) 51*32kB (UM) 44*64kB (UM) 42*128kB (UM) 44*256kB (UM) 45*512kB (UM) 39*1024kB (UM) 2*2048kB (UM) 88*4096kB (M) = 449868kB
[  271.948453][T15833] Node 1 Normal: 2*4kB (ME) 360*8kB (UME) 79*16kB (UME) 46*32kB (UME) 98*64kB (UME) 81*128kB (U) 59*256kB (U) 67*512kB (UME) 58*1024kB (UM) 4*2048kB (ME) 20*4096kB (UM) = 221176kB
[  271.954664][T15833] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  271.957801][T15833] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  271.961452][T15833] 42298 total pagecache pages
[  271.963474][T15833] 0 pages in swap cache
[  271.965005][T15833] Free swap  = 124996kB
[  271.966332][T15833] Total swap = 124996kB
[  271.967630][T15833] 786301 pages RAM
[  271.968794][T15833] 0 pages HighMem/MovableOnly
[  271.970621][T15833] 241356 pages reserved
[  271.972428][T15833] 0 pages cma reserved
[  272.043212][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4227'.
[  272.046430][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'.
[  272.190354][T15851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  272.207364][T15852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  272.223996][T15851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  272.873923][T15895] netlink: 'syz.3.4249': attribute type 10 has an invalid length.
[  272.975974][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4255'.
[  273.037145][T15913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.055836][T15911] batadv_slave_0: left promiscuous mode
[  273.057987][T15911] vlan0: left promiscuous mode
[  273.059926][T15911] veth5: left promiscuous mode
[  273.067168][T15911] ip6tnl3: left promiscuous mode
[  273.068893][T15911] bridge5: left promiscuous mode
[  273.373757][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4266'.
[  273.549389][T15949] netlink: 'syz.0.4275': attribute type 9 has an invalid length.
[  273.927496][T15964] vxcan1 speed is unknown, defaulting to 1000
[  274.070714][T15973] netlink: 'syz.3.4285': attribute type 25 has an invalid length.
[  274.593221][T15998] vlan2: entered allmulticast mode
[  274.595205][T15998] dummy0: entered allmulticast mode
[  275.067667][T16022] vxcan1 speed is unknown, defaulting to 1000
[  276.099964][T16044] x_tables: ip_tables: udp match: only valid for protocol 17
[  276.132275][T16049] __nla_validate_parse: 1 callbacks suppressed
[  276.132286][T16049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4317'.
[  276.149801][T16049] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4317'.
[  276.175183][T16053] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4319'.
[  276.353185][T16067] netlink: 'syz.3.4327': attribute type 142 has an invalid length.
[  276.396157][T16074] netlink: 'syz.0.4329': attribute type 1 has an invalid length.
[  276.526941][T16088] sctp: [Deprecated]: syz.3.4335 (pid 16088) Use of int in maxseg socket option.
[  276.526941][T16088] Use struct sctp_assoc_value instead
[  276.589012][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4337'.
[  276.627114][T16099] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4340'.
[  276.630868][T16099] IPVS: Unknown mcast interface: vetN1_macvtap
[  276.855876][T16115] dvmrp8: entered allmulticast mode
[  276.877650][T16115] vxcan1 speed is unknown, defaulting to 1000
[  277.050612][T16125] netlink: 'syz.3.4352': attribute type 1 has an invalid length.
[  277.053906][T16125] netlink: 'syz.3.4352': attribute type 2 has an invalid length.
[  277.057228][T16125] netlink: 'syz.3.4352': attribute type 1 has an invalid length.
[  277.059687][T16125] netlink: 'syz.3.4352': attribute type 2 has an invalid length.
[  277.356275][T16143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.525548][T16160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4369'.
[  277.795986][T16182] netlink: 'syz.4.4379': attribute type 11 has an invalid length.
[  278.129334][T16141] delete_channel: no stack
[  278.349756][T16222] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4397'.
[  278.433786][T16231] netlink: 'syz.0.4401': attribute type 1 has an invalid length.
[  278.466257][T16231] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  278.473740][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  278.474307][T16231] 8021q: adding VLAN 0 to HW filter on device bond4
[  278.565172][T16231] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  278.569684][T16231] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface
[  278.574894][T16231] bond4 (unregistering): Released all slaves
[  278.659222][T16240] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  278.662092][ T5885] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  278.871104][T16260] dvmrp0: left allmulticast mode
[  278.991812][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4418'.
[  279.151052][T16278] netlink: 'syz.4.4423': attribute type 4 has an invalid length.
[  279.257161][T16281] vxcan1 speed is unknown, defaulting to 1000
[  279.291768][ T5885] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  279.566617][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'.
[  279.600883][T16302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4433'.
[  280.528064][T16372] veth0_to_bridge: entered promiscuous mode
[  280.530941][T16371] veth0_to_bridge: left promiscuous mode
[  280.789966][T16388] netlink: 'syz.4.4471': attribute type 1 has an invalid length.
[  281.094610][T16414] syzkaller1: entered promiscuous mode
[  281.096828][T16414] syzkaller1: entered allmulticast mode
[  281.256387][T16422] __nla_validate_parse: 2 callbacks suppressed
[  281.256398][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4484'.
[  281.393664][T16427] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  281.694231][T16437] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4491'.
[  282.218379][T16468] vxcan1 speed is unknown, defaulting to 1000
[  282.266812][ T5892] Bluetooth: hci1: link tx timeout
[  282.269310][ T5892] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  282.273238][ T5234] Bluetooth: hci1: link tx timeout
[  282.275094][ T5234] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  282.302068][ T5234] Bluetooth: hci1: link tx timeout
[  282.304131][ T5234] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  282.307073][ T5234] Bluetooth: hci1: link tx timeout
[  282.309829][ T5234] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  282.790148][T16508] openvswitch: netlink: Missing key (keys=40, expected=80)
[  282.990849][T16522] netlink: 'syz.4.4529': attribute type 2 has an invalid length.
[  283.830068][T16568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4548'.
[  283.910082][T16573] netlink: 'syz.0.4550': attribute type 1 has an invalid length.
[  283.917687][T16573] netlink: 'syz.0.4550': attribute type 4 has an invalid length.
[  283.920972][T16573] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4550'.
[  284.064084][T16585] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4555'.
[  284.219998][T16600] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4563'.
[  284.239209][T16602] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4564'.
[  284.313161][ T5234] Bluetooth: hci1: command 0x0405 tx timeout
[  284.363680][T16610] IPVS: sed: FWM 3 0x00000003 - no destination available
[  284.451021][T16613] veth0_to_bond: entered allmulticast mode
[  284.714017][T16633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4578'.
[  284.717707][T16633] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4578'.
[  284.763766][T16635] pim6reg: entered allmulticast mode
[  285.216922][T16645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4584'.
[  285.255507][T16647] netlink: 'syz.0.4585': attribute type 1 has an invalid length.
[  285.830967][T16668] nbd: must specify a size in bytes for the device
[  286.005645][T16685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.092988][T16685] tipc: Resetting bearer <ib:ip6gre0>
[  286.143181][T16685] veth0_to_bridge: left promiscuous mode
[  286.170838][T16685] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  286.233515][T16685] veth1_to_hsr: left allmulticast mode
[  286.235890][T16685] veth1_to_hsr: left promiscuous mode
[  286.238508][T16685] macvtap1: left promiscuous mode
[  286.240636][T16685] macvtap1: left allmulticast mode
[  286.245115][T16685] gretap1: left allmulticast mode
[  286.256842][ T5863] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.260379][ T5863] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  286.266631][ T5863] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.270091][ T5863] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  286.283172][ T5863] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.292564][ T5863] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  286.296742][ T5863] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  286.299696][ T5863] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  286.349771][T16713] __nla_validate_parse: 2 callbacks suppressed
[  286.349787][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4615'.
[  286.657224][T16721] netlink: 'syz.3.4620': attribute type 4 has an invalid length.
[  286.859364][T16749] netlink: 'syz.0.4630': attribute type 11 has an invalid length.
[  287.180414][T16772] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4641'.
[  287.299391][T16778] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4643'.
[  287.962908][T16824] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700)
[  287.978762][T16824] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  287.982934][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4672'.
[  287.986370][T16837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4672'.
[  288.177942][T16851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.209291][T16851] syzkaller0: entered promiscuous mode
[  288.211056][T16851] syzkaller0: entered allmulticast mode
[  288.215889][T16851] tipc: Resetting bearer <eth:syzkaller0>
[  288.232968][T16850] tipc: Resetting bearer <eth:syzkaller0>
[  288.340074][T16853] IPVS: persistence engine module ip_vs_pe_ not found
[  288.534339][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4683'.
[  288.597931][T16862] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4684'.
[  289.742953][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4687'.
[  289.987576][T16850] tipc: Disabling bearer <eth:syzkaller0>
[  290.100147][T16877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4689'.
[  290.339702][T16880] vxcan1 speed is unknown, defaulting to 1000
[  291.747802][T16959] netlink: 'syz.4.4726': attribute type 21 has an invalid length.
[  291.750877][T16959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4726'.
[  291.846974][T16962] vxcan1 speed is unknown, defaulting to 1000
[  292.121160][T16977] tap0: tun_chr_ioctl cmd 1074025677
[  292.131867][T16977] tap0: linktype set to 776
[  292.301025][ T5863] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  292.309356][ T5863] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  292.313711][ T5863] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  292.316977][ T5863] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  292.442832][T16996] syzkaller1: entered promiscuous mode
[  292.457794][T16996] syzkaller1: entered allmulticast mode
[  292.677780][T17013] netlink: 'syz.4.4749': attribute type 2 has an invalid length.
[  292.680740][T17013] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4749'.
[  292.689085][T17013] nbd: must specify a device to reconfigure
[  292.912804][T17036] netlink: 'syz.0.4759': attribute type 1 has an invalid length.
[  292.915783][T17036] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.4759'.
[  293.066128][T17052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4767'.
[  293.233604][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4774'.
[  293.433561][T17085] netlink: 'syz.3.4782': attribute type 1 has an invalid length.
[  293.436417][T17085] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4782'.
[  293.861108][T17114] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4795'.
[  294.044131][T17124] batadv_slave_1: entered promiscuous mode
[  294.047370][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4799'.
[  294.067809][T17124] batadv_slave_1 (unregistering): left promiscuous mode
[  294.231321][T17138] netlink: 788 bytes leftover after parsing attributes in process `syz.0.4806'.
[  294.316404][T17145] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  294.479893][T17153] syzkaller1: entered promiscuous mode
[  294.484026][T17153] syzkaller1: entered allmulticast mode
[  294.622529][T17156] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4813'.
[  294.625599][T17156] 0X: renamed from caif0
[  294.630615][T17156] 0X: entered allmulticast mode
[  294.633158][T17156] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  295.478918][T17206] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  295.504331][T17206] vxcan1 speed is unknown, defaulting to 1000
[  295.844566][ T5234] Bluetooth: hci1: command 0x0405 tx timeout
[  295.910048][T17233] netlink: 'syz.4.4851': attribute type 1 has an invalid length.
[  295.953057][T17235] netlink: 'syz.3.4850': attribute type 11 has an invalid length.
[  296.304878][T17261] nftables ruleset with unbound chain
[  296.346966][T17265] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  297.054896][T17316] __nla_validate_parse: 6 callbacks suppressed
[  297.054914][T17316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4872'.
[  297.100697][T17319] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  297.103038][T17320] netlink: zone id is out of range
[  297.197852][T17326] syzkaller1: entered promiscuous mode
[  297.199518][T17326] syzkaller1: entered allmulticast mode
[  297.314708][T17332] vxcan1 speed is unknown, defaulting to 1000
[  297.360898][T17338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4882'.
[  297.365521][T17338] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4882'.
[  297.931962][T17358] nbd4: detected capacity change from 0 to 63
[  297.935702][T17356] block nbd4: NBD_DISCONNECT
[  297.940627][T17356] block nbd4: Disconnected due to user request.
[  297.950486][T17356] block nbd4: shutting down sockets
[  298.126421][T17358] bond7: entered promiscuous mode
[  298.128165][T17358] bond7: entered allmulticast mode
[  298.133106][T17358] 8021q: adding VLAN 0 to HW filter on device bond7
[  298.671852][T17377] tap0: tun_chr_ioctl cmd 1074025681
[  298.758370][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4898'.
[  298.942347][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4907'.
[  298.945065][T17401] netlink: 'syz.3.4907': attribute type 30 has an invalid length.
[  298.954021][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  298.954026][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4907'.
[  298.954084][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.961664][T17401] netlink: 'syz.3.4907': attribute type 30 has an invalid length.
[  298.965741][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.972683][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.158817][T17423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4918'.
[  299.237074][T17423] vxcan1 speed is unknown, defaulting to 1000
[  299.317031][T17442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4925'.
[  299.406630][T17450] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4928'.
[  299.546070][T17462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4934'.
[  299.763651][T17480] netlink: 'syz.0.4941': attribute type 29 has an invalid length.
[  300.430786][T17536] vxcan1 speed is unknown, defaulting to 1000
[  300.705628][T17538] ip6gretap0: entered promiscuous mode
[  300.713469][T17538] bridge0: port 1(syz_tun) entered blocking state
[  300.716150][T17538] bridge0: port 1(syz_tun) entered forwarding state
[  300.736571][T17538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  301.093561][T17554] team0: Device ipvlan2 failed to enter team mode
[  301.096396][T17554] team0: Device ipvlan2 failed to enter team mode
[  301.991085][T17605] tipc: Invalid UDP bearer configuration
[  301.991157][T17605] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  302.054316][T17609] bond0: (slave rose0): Enslaving as an active interface with an up link
[  302.397442][T17637] __nla_validate_parse: 8 callbacks suppressed
[  302.397501][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5014'.
[  302.564822][T17642] netlink: 'syz.3.5018': attribute type 1 has an invalid length.
[  302.567880][T17642] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5018'.
[  302.736110][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5022'.
[  303.345432][T17673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5027'.
[  304.021966][T17709] IPVS: sed: FWM 3 0x00000003 - no destination available
[  304.125116][T17717] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  304.153572][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5044'.
[  304.581104][T17738] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  304.587487][T17738] syzkaller0: entered promiscuous mode
[  304.589691][T17738] syzkaller0: entered allmulticast mode
[  304.611189][T17738] tipc: Resetting bearer <eth:syzkaller0>
[  304.616249][T17737] tipc: Resetting bearer <eth:syzkaller0>
[  304.632340][T17737] tipc: Disabling bearer <eth:syzkaller0>
[  304.736125][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5061'.
[  304.849592][T17756] sctp: [Deprecated]: syz.0.5064 (pid 17756) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.849592][T17756] Use struct sctp_sack_info instead
[  304.901943][T17765] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.5068'.
[  305.149247][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5079'.
[  305.178450][ T9513] smc: removing ib device syz2
[  305.636208][T17807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5087'.
[  305.639972][T17807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5087'.
[  305.770380][T17811] netlink: 'syz.0.5089': attribute type 29 has an invalid length.
[  305.775295][T17811] netlink: 'syz.0.5089': attribute type 29 has an invalid length.
[  305.913337][T17817] syzkaller1: entered promiscuous mode
[  305.917900][T17817] syzkaller1: entered allmulticast mode
[  306.159753][T17831] netlink: 'syz.4.5099': attribute type 8 has an invalid length.
[  306.524503][T17862] netlink: 'syz.4.5113': attribute type 1 has an invalid length.
[  306.580693][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.584659][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.700320][T17869] netlink: 'syz.0.5117': attribute type 9 has an invalid length.
[  306.724820][T17871] tipc: Failed to remove unknown binding: 66,1,1/2129273218:611663565/611663567
[  306.735000][T17871] tipc: Failed to remove unknown binding: 66,1,1/2129273218:611663565/611663567
[  306.738941][T17871] tipc: Failed to remove unknown binding: 66,1,1/2129273218:611663565/611663567
[  306.810495][T17881] openvswitch: netlink: Duplicate or invalid key (type 0).
[  306.815288][T17881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.086075][T17904] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  307.114963][T17905] syzkaller1: entered promiscuous mode
[  307.117177][T17905] syzkaller1: entered allmulticast mode
[  307.417462][T17936] netlink: 'syz.3.5149': attribute type 3 has an invalid length.
[  307.566073][T17944] __nla_validate_parse: 8 callbacks suppressed
[  307.566085][T17944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5152'.
[  307.634232][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5160'.
[  307.637308][T17959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5160'.
[  307.838340][T17980] netlink: 'syz.0.5171': attribute type 16 has an invalid length.
[  307.841236][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'.
[  307.887730][T17985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5172'.
[  308.101300][T18002] syzkaller1: entered promiscuous mode
[  308.106826][T18002] syzkaller1: entered allmulticast mode
[  308.258925][T18010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.264062][T18010] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  308.266842][T18009] netlink: 'syz.3.5184': attribute type 83 has an invalid length.
[  308.267773][T18010] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  308.275617][T18010] tipc: Resetting bearer <eth:syzkaller0>
[  308.283436][T18010] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  308.383631][T18016] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5188'.
[  308.410647][T18018] : entered promiscuous mode
[  308.592129][T18034] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5196'.
[  308.606201][T18034] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  308.609626][T18034] openvswitch: netlink: Message has 1 unknown bytes.
[  309.203554][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5215'.
[  309.738791][ T5863] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  310.976419][T18170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5254'.
[  310.991686][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5254'.
[  311.123277][T18182] openvswitch: netlink: IPv4 tun info is not correct
[  311.749426][T18243] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  311.763158][T18243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.772202][T18234] netlink: 'syz.0.5283': attribute type 10 has an invalid length.
[  312.110534][T18269] syzkaller0: entered allmulticast mode
[  312.138810][T18266] syzkaller0 (unregistering): left allmulticast mode
[  312.614862][T18301] __nla_validate_parse: 9 callbacks suppressed
[  312.614878][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5309'.
[  312.622384][T18301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.702419][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5313'.
[  312.849897][T18319] 0X: left allmulticast mode
[  312.855760][T18319] veth0_to_bond: left allmulticast mode
[  312.865536][T18319] bridge2: left allmulticast mode
[  312.869272][T18319] macsec2: left allmulticast mode
[  312.872782][T18319] bridge5: left allmulticast mode
[  312.895648][ T5863] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.902651][ T5863] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.918011][T18323] vlan2: entered allmulticast mode
[  312.920138][T18323] batadv0: entered allmulticast mode
[  312.923576][ T5863] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.929287][ T5863] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  312.967936][T18326] batadv0: entered promiscuous mode
[  312.970205][T18326] batadv0: entered allmulticast mode
[  312.979136][T18327] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  313.251439][T18349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5332'.
[  313.335313][T18355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.540527][T18373] netlink: 'syz.0.5344': attribute type 7 has an invalid length.
[  313.548674][T18373] netlink: 'syz.0.5344': attribute type 8 has an invalid length.
[  313.572648][T18375] netlink: 'syz.4.5345': attribute type 1 has an invalid length.
[  313.576350][T18375] netlink: 'syz.4.5345': attribute type 1 has an invalid length.
[  313.590524][T18377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  313.603554][T18377] syzkaller0: entered promiscuous mode
[  313.605770][T18377] syzkaller0: entered allmulticast mode
[  313.623805][T18377] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  313.659057][T18377] tipc: Resetting bearer <eth:syzkaller0>
[  313.672444][T18376] tipc: Resetting bearer <eth:syzkaller0>
[  313.696630][T18376] tipc: Disabling bearer <eth:syzkaller0>
[  315.081644][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5390'.
[  315.085063][T18476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5390'.
[  315.167988][T18487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5396'.
[  315.256026][T18497] tipc: Resetting bearer <eth:syzkaller0>
[  315.582498][T18522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.653894][T18528] netlink: 'syz.3.5413': attribute type 1 has an invalid length.
[  315.656498][T18528] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5413'.
[  315.701133][T18536] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.901073][T18551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5422'.
[  315.904189][T18551] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5422'.
[  315.907618][T18551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5422'.
[  316.622017][T18587] syzkaller1: entered promiscuous mode
[  316.624373][T18587] syzkaller1: entered allmulticast mode
[  316.887981][T18603] vlan3: entered promiscuous mode
[  316.890646][T18603] macvtap0: entered promiscuous mode
[  317.239741][T18622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.581163][T18649] netlink: 'syz.4.5468': attribute type 29 has an invalid length.
[  317.586407][T18649] netlink: 'syz.4.5468': attribute type 29 has an invalid length.
[  317.627373][T18651] __nla_validate_parse: 6 callbacks suppressed
[  317.627390][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5469'.
[  317.677412][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5470'.
[  317.808222][T18656] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5471'.
[  317.811908][T18656] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5471'.
[  317.831761][ T5234] Bluetooth: hci1: command 0x0405 tx timeout
[  317.848151][T18612] Bluetooth: hci0: Opcode 0x080f failed: -4
[  317.890278][T18662] netlink: 'syz.4.5474': attribute type 30 has an invalid length.
[  317.895806][T18662] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  317.899700][T18662] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  318.110175][T18676] netlink: 'syz.4.5480': attribute type 10 has an invalid length.
[  318.113870][T18676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5480'.
[  318.118034][T18676] dummy0: entered promiscuous mode
[  318.124277][T18676] bridge0: port 1(dummy0) entered blocking state
[  318.127369][T18676] bridge0: port 1(dummy0) entered disabled state
[  318.130468][T18676] dummy0: entered allmulticast mode
[  318.636943][T18716] netlink: 'syz.4.5499': attribute type 1 has an invalid length.
[  318.639372][T18716] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5499'.
[  319.443651][T18741] netlink: 'syz.3.5511': attribute type 21 has an invalid length.
[  319.446847][T18741] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5511'.
[  319.667245][T18741] netlink: 'syz.3.5511': attribute type 5 has an invalid length.
[  319.669958][T18741] netlink: 'syz.3.5511': attribute type 6 has an invalid length.
[  319.674965][T18741] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5511'.
[  319.836993][T18757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5518'.
[  320.033328][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5527'.
[  320.036823][T18774] netlink: 'syz.4.5527': attribute type 21 has an invalid length.
[  320.098831][T18777] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.102974][T18777] 8021q: adding VLAN 0 to HW filter on device team0
[  320.105906][T18777] tipc: Resetting bearer <eth:team0>
[  320.108383][T18777] tipc: Resetting bearer <eth:team0>
[  320.117804][T18777] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  320.376377][T18804] syzkaller1: entered promiscuous mode
[  320.378430][T18804] syzkaller1: entered allmulticast mode
[  320.533399][T18814] syzkaller1: entered promiscuous mode
[  320.535860][T18814] syzkaller1: entered allmulticast mode
[  321.688883][T18874] ..0: renamed from hsr0
[  321.693800][T18874] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  321.697770][T18874] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  321.702058][T18874] ..0: entered allmulticast mode
[  321.704147][T18874] hsr_slave_0: entered allmulticast mode
[  321.706375][T18874] hsr_slave_1: entered allmulticast mode
[  321.709974][T18874] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  322.024147][T18880] netlink: 'syz.0.5569': attribute type 13 has an invalid length.
[  322.139307][T18886] vcan0: tx drop: invalid da for name 0x0000000000000003
[  322.584351][T18915] delete_channel: no stack
[  322.790341][T18923] __nla_validate_parse: 7 callbacks suppressed
[  322.790353][T18923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5587'.
[  322.827796][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5587'.
[  322.831407][T18923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5587'.
[  322.835049][T18923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5587'.
[  322.837940][T18923] netlink: 540 bytes leftover after parsing attributes in process `syz.4.5587'.
[  322.842541][T18923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5587'.
[  322.877307][T18927] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5588'.
[  322.880160][T18927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5588'.
[  323.284174][T18957] validate_nla: 1 callbacks suppressed
[  323.284189][T18957] netlink: 'syz.0.5599': attribute type 1 has an invalid length.
[  324.212718][T19038] dvmrp8: entered allmulticast mode
[  324.215610][T19037] dvmrp8: left allmulticast mode
[  324.431752][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5647'.
[  324.437489][T19060] netlink: 'syz.4.5647': attribute type 4 has an invalid length.
[  324.514807][T19066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5650'.
[  324.858080][T19099] netlink: 'syz.0.5666': attribute type 2 has an invalid length.
[  324.860930][T19099] netlink: 'syz.0.5666': attribute type 1 has an invalid length.
[  325.036655][T19114] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  325.176809][T19125] openvswitch: netlink: IP tunnel TTL not specified.
[  325.184617][T19128] netlink: 'syz.3.5681': attribute type 2 has an invalid length.
[  325.249377][T19135] netlink: 'syz.4.5683': attribute type 6 has an invalid length.
[  325.461461][T19143] netlink: 'syz.4.5687': attribute type 1 has an invalid length.
[  326.447120][T19231] netlink: 'syz.4.5729': attribute type 1 has an invalid length.
[  327.276340][T19278] ip_vti0: entered allmulticast mode
[  327.294133][T19278] dvmrp8: entered allmulticast mode
[  327.510216][T19286] netlink: 'syz.4.5752': attribute type 12 has an invalid length.
[  327.698774][T19296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.739756][T19298] netlink: 'syz.4.5758': attribute type 3 has an invalid length.
[  328.098891][T19277] ip_vti0: left allmulticast mode
[  328.101003][T19277] dvmrp8: left allmulticast mode
[  328.415734][T19308] bridge0: entered promiscuous mode
[  328.640736][T19326] __nla_validate_parse: 9 callbacks suppressed
[  328.640752][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5769'.
[  328.670175][T19330] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5771'.
[  328.678296][T19330] netlink: 'syz.0.5771': attribute type 1 has an invalid length.
[  328.723150][T19330] 8021q: adding VLAN 0 to HW filter on device bond4
[  328.755842][T19330] bond4: (slave gretap5): making interface the new active one
[  328.761091][T19330] bond4: (slave gretap5): Enslaving as an active interface with an up link
[  329.918028][T19378] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5791'.
[  330.155387][T19395] netlink: 'syz.4.5799': attribute type 7 has an invalid length.
[  330.168638][T19395] netlink: 'syz.4.5799': attribute type 8 has an invalid length.
[  330.178072][T19395] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5799'.
[  330.233766][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5802'.
[  330.404595][T19417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5808'.
[  330.423519][T19419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5807'.
[  330.538259][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5813'.
[  330.774875][T19439] vlan0: entered promiscuous mode
[  331.296347][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5846'.
[  331.301963][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5846'.
[  331.730365][T19535] netlink: 'syz.4.5862': attribute type 20 has an invalid length.
[  331.776345][T19537] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  332.043590][T19551] netlink: 'syz.4.5867': attribute type 4 has an invalid length.
[  332.047381][T19551] netlink: 'syz.4.5867': attribute type 4 has an invalid length.
[  332.333561][T19575] netlink: 'syz.4.5879': attribute type 1 has an invalid length.
[  332.547649][T19604] netlink: 'syz.0.5894': attribute type 6 has an invalid length.
[  333.053098][T19653] netlink: 'syz.4.5917': attribute type 10 has an invalid length.
[  333.102364][T19657] netlink: 'syz.0.5918': attribute type 1 has an invalid length.
[  333.109856][T19657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.748435][T19721] __nla_validate_parse: 7 callbacks suppressed
[  333.748446][T19721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5950'.
[  334.424801][T19753] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  334.473986][T19757] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5967'.
[  334.477957][T19757] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  334.542584][T19761] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  334.613689][T19768] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  335.061563][T19783] pimreg: tun_chr_ioctl cmd 1074025677
[  335.063580][T19783] pimreg: linktype set to 780
[  335.068012][T19783] pimreg: tun_chr_ioctl cmd 35111
[  335.337459][T19803] validate_nla: 1 callbacks suppressed
[  335.337473][T19803] netlink: 'syz.3.5988': attribute type 1 has an invalid length.
[  335.345125][T19803] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5988'.
[  335.573903][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5998'.
[  335.578592][T19826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5999'.
[  335.668233][T19834] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6003'.
[  335.686978][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6004'.
[  335.799020][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6010'.
[  335.868038][T19854] netlink: 'syz.0.6013': attribute type 5 has an invalid length.
[  335.947962][T19858] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  335.950915][T19858] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  335.959594][T19858] tipc: Resetting bearer <eth:syzkaller0>
[  335.976137][T19858] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.303791][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6029'.
[  336.386041][T19894] netlink: 'syz.0.6033': attribute type 1 has an invalid length.
[  336.389422][T19894] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.6033'.
[  336.566375][T19910] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  336.591233][T19913] netlink: 'syz.0.6041': attribute type 10 has an invalid length.
[  337.353141][T19985] netlink: 'syz.0.6074': attribute type 1 has an invalid length.
[  337.356083][T19985] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.848611][T20033] netlink: 'syz.4.6096': attribute type 83 has an invalid length.
[  338.070465][T20056] vlan3: entered promiscuous mode
[  338.072355][T20056] macvtap0: entered promiscuous mode
[  338.186705][T20066] netlink: 'syz.4.6111': attribute type 2 has an invalid length.
[  338.518540][T20096] netlink: 'syz.0.6126': attribute type 6 has an invalid length.
[  338.525327][T20096] netlink: 'syz.0.6126': attribute type 6 has an invalid length.
[  338.779382][T20131] __nla_validate_parse: 9 callbacks suppressed
[  338.779395][T20131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6143'.
[  338.834681][T20136] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6143'.
[  338.993563][T20148] bridge0: port 1(syz_tun) entered disabled state
[  339.003934][T20148] syz_tun: refused to change device tx_queue_len
[  339.006848][T20148] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  339.026089][T20149] tipc: Resetting bearer <eth:syzkaller0>
[  339.689170][T20178] IPVS: Error connecting to the multicast addr
[  339.695476][T20180] netlink: 'syz.3.6163': attribute type 1 has an invalid length.
[  339.762076][T20188] tipc: Resetting bearer <eth:team0>
[  339.764165][T20188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  339.779142][T20188] team0: Mode changed to "activebackup"
[  339.781411][T20190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6168'.
[  339.936432][T20204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6175'.
[  339.944918][T20204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6175'.
[  339.949929][T20204] netlink: 34 bytes leftover after parsing attributes in process `syz.4.6175'.
[  340.202575][T20220] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  340.210062][T20220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6181'.
[  340.215603][T20220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6181'.
[  340.390286][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6186'.
[  340.395180][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6186'.
[  340.401081][T20231] netlink: 'syz.0.6186': attribute type 4 has an invalid length.
[  340.554539][T20252] veth1_to_team: entered promiscuous mode
[  340.556964][T20252] bond0: entered promiscuous mode
[  340.558614][T20252] gretap1: entered promiscuous mode
[  340.560905][T20252] bond0: left promiscuous mode
[  340.565129][T20252] gretap1: left promiscuous mode
[  340.571393][T20252] veth1_to_team: left promiscuous mode
[  340.621102][T20259] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  340.642233][ T2382] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  340.802381][T20275] netlink: 'syz.0.6207': attribute type 1 has an invalid length.
[  340.907079][T20285] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  340.910228][T20285] openvswitch: netlink: Duplicate key (type 0).
[  341.433379][ T2382] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  341.449383][T20334] netlink: 'syz.0.6234': attribute type 58 has an invalid length.
[  341.570748][T20348] netlink: 'syz.3.6240': attribute type 2 has an invalid length.
[  341.611343][T20348] : entered promiscuous mode
[  341.620785][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  341.631667][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  341.635144][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  341.638418][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  341.894030][T20367] netlink: 'syz.3.6249': attribute type 1 has an invalid length.
[  343.210010][T20432] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  343.213253][T20432] tipc: Enabled bearer <udp:syz0>, priority 6
[  344.149570][   T33] audit: type=1804 audit(1758537641.095:9): pid=20502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6311" name="/newroot/1886/cgroup.controllers" dev="tmpfs" ino=9517 res=1 errno=0
[  344.156798][   T33] audit: type=1800 audit(1758537641.095:10): pid=20502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6311" name="cgroup.controllers" dev="tmpfs" ino=9517 res=0 errno=0
[  344.272857][T20506] __nla_validate_parse: 15 callbacks suppressed
[  344.272871][T20506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6313'.
[  344.421210][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6316'.
[  344.436709][T20520] ..0: left allmulticast mode
[  344.438255][T20520] hsr_slave_0: left allmulticast mode
[  344.440052][T20520] hsr_slave_1: left allmulticast mode
[  344.444811][T20520] vlan0: left promiscuous mode
[  344.448157][T20520] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  344.455803][T20520] bond7: left promiscuous mode
[  344.457635][T20520] bond7: left allmulticast mode
[  344.500671][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6316'.
[  344.929057][T20558] geneve0: entered promiscuous mode
[  345.355158][T20587] netlink: 'syz.4.6347': attribute type 3 has an invalid length.
[  345.358938][T20587] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6347'.
[  345.569886][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6354'.
[  345.687479][T20611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6358'.
[  346.216450][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6380'.
[  346.220079][T20659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6380'.
[  346.557628][T20684] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6392'.
[  347.013309][T20699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.170235][T20711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6404'.
[  348.768239][T20787] netlink: 'syz.0.6439': attribute type 1 has an invalid length.
[  348.790391][T20787] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.823886][T20787] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.826859][T20787] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  348.834085][T20787] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  348.881303][T20789] veth9: entered promiscuous mode
[  348.888805][T20789] bond5: (slave veth9): Enslaving as an active interface with a down link
[  348.935704][ T3337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.938227][ T3337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.793272][T20820] batadv0: entered allmulticast mode
[  349.797297][T20820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.987195][T20863] __nla_validate_parse: 4 callbacks suppressed
[  350.987209][T20863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6473'.
[  351.003714][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6473'.
[  351.008335][T20863] netlink: 'syz.4.6473': attribute type 1 has an invalid length.
[  351.011916][T20863] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6473'.
[  351.153178][T20872] netlink: 'syz.4.6478': attribute type 1 has an invalid length.
[  351.158478][T20872] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.6478'.
[  351.170110][T20872] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6478'.
[  351.230163][T20876] netlink: 'syz.4.6480': attribute type 1 has an invalid length.
[  351.233275][T20876] netlink: 'syz.4.6480': attribute type 2 has an invalid length.
[  351.627056][T20896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.570861][T20918] bridge14: the hash_elasticity option has been deprecated and is always 16
[  352.582342][T20918] bridge14: entered allmulticast mode
[  352.617698][T20833] Set syz1 is full, maxelem 65536 reached
[  353.014099][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6519'.
[  353.016994][T20960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6519'.
[  353.019905][T20960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6519'.
[  353.023196][T20960] netlink: 540 bytes leftover after parsing attributes in process `syz.3.6519'.
[  353.055420][T20963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6520'.
[  353.093264][T20963] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  353.097709][T20963] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  353.149424][T20970] macvlan3: entered promiscuous mode
[  353.151927][T20970] macvlan3: entered allmulticast mode
[  353.154532][T20970] bond4: (slave macvlan3): Error -98 calling set_mac_address
[  353.192246][ T5234] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  353.195213][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[  353.671743][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  354.394250][T21031] netlink: 'syz.4.6552': attribute type 15 has an invalid length.
[  355.470063][T21064] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  355.482670][T21066] netlink: 'syz.0.6568': attribute type 21 has an invalid length.
[  356.358257][T21115] __nla_validate_parse: 5 callbacks suppressed
[  356.358267][T21115] netlink: 596 bytes leftover after parsing attributes in process `syz.3.6590'.
[  356.407759][T21121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6592'.
[  356.411339][T21121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6592'.
[  356.513878][T21127] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6594'.
[  356.787183][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6604'.
[  356.934325][T21155] netlink: zone id is out of range
[  356.936393][T21155] netlink: zone id is out of range
[  356.938416][T21155] netlink: zone id is out of range
[  356.940397][T21155] netlink: zone id is out of range
[  356.946229][T21155] netlink: zone id is out of range
[  356.948235][T21155] netlink: zone id is out of range
[  356.950622][T21155] netlink: zone id is out of range
[  356.957572][T21155] netlink: zone id is out of range
[  357.118349][T21165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6611'.
[  357.123840][T21165] sch_fq: defrate 0 ignored.
[  357.353055][T21190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6622'.
[  357.357875][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6622'.
[  357.361310][T21190] vlan0: entered promiscuous mode
[  357.366069][T21190] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  357.401309][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6621'.
[  357.501471][T21200] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6626'.
[  357.579583][T21206] netlink: 'syz.4.6629': attribute type 1 has an invalid length.
[  358.617356][T21291] net_ratelimit: 16 callbacks suppressed
[  358.617373][T21291] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.078306][T21310] tipc: Resetting bearer <eth:team0>
[  359.104046][T21310] A link change request failed with some changes committed already. Interface veth5 may have been left with an inconsistent configuration, please check.
[  359.112362][ T2382] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  359.134827][T21310] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  359.283500][ T2382] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  360.210329][T21352] veth11: entered promiscuous mode
[  360.502325][T21357] veth0: entered promiscuous mode
[  360.716755][T21353] veth0: left promiscuous mode
[  360.955468][T21377] netlink: 'syz.3.6706': attribute type 1 has an invalid length.
[  361.108756][T21391] netlink: 'syz.0.6712': attribute type 15 has an invalid length.
[  361.251416][T21404] netlink: 'syz.3.6717': attribute type 19 has an invalid length.
[  361.423975][T21421] mac80211_hwsim hwsim6 ;: renamed from wlan0 (while UP)
[  361.515754][T21428] __nla_validate_parse: 10 callbacks suppressed
[  361.515772][T21428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6726'.
[  361.576137][T21434] netlink: 'syz.3.6728': attribute type 21 has an invalid length.
[  361.582048][T21434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6728'.
[  361.905514][T21458] netlink: 300 bytes leftover after parsing attributes in process `syz.3.6735'.
[  362.265219][T21486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6745'.
[  362.866701][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6751'.
[  362.888447][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6751'.
[  363.679839][T21533] syzkaller1: entered promiscuous mode
[  363.685534][T21533] syzkaller1: entered allmulticast mode
[  363.837996][T21543] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6770'.
[  363.968800][T21551] netlink: 'syz.3.6774': attribute type 1 has an invalid length.
[  364.003049][T21551] 8021q: adding VLAN 0 to HW filter on device bond6
[  364.060193][T21551] bond6: (slave geneve3): making interface the new active one
[  364.065297][T21551] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  364.077308][T21556] ip6gretap1: entered promiscuous mode
[  364.080268][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.085179][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.094213][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.130932][T21558] syzkaller1: entered promiscuous mode
[  364.133535][T21558] syzkaller1: entered allmulticast mode
[  364.136651][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.158943][T21560] sctp: [Deprecated]: syz.3.6779 (pid 21560) Use of struct sctp_assoc_value in delayed_ack socket option.
[  364.158943][T21560] Use struct sctp_sack_info instead
[  364.200372][T21565] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  364.409740][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6789'.
[  364.463152][T21584] tipc: Resetting bearer <eth:team0>
[  364.589227][T21591] netlink: 'syz.4.6793': attribute type 39 has an invalid length.
[  364.850289][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6800'.
[  364.882534][T21605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6797'.
[  365.274663][T21652] netlink: 'syz.3.6821': attribute type 4 has an invalid length.
[  365.306420][T21652] netlink: 'syz.3.6821': attribute type 4 has an invalid length.
[  365.655736][T21687] bond2: (slave macvlan2): Releasing backup interface
[  365.667484][T21687] bond0 (unregistering): Released all slaves
[  366.429191][T21709] netlink: 'syz.4.6847': attribute type 3 has an invalid length.
[  366.692601][T21736] __nla_validate_parse: 9 callbacks suppressed
[  366.692617][T21736] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6861'.
[  366.698886][T21736] nbd: illegal input index 65508
[  366.737554][T21742] netlink: 'syz.4.6863': attribute type 21 has an invalid length.
[  366.740711][T21742] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6863'.
[  366.823107][T21748] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  367.115812][T21769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6875'.
[  367.154724][T21777] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6878'.
[  367.157634][T21777] netdevsim netdevsim4 netdevsim2: entered allmulticast mode
[  367.160201][T21777] A link change request failed with some changes committed already. Interface netdevsim2 may have been left with an inconsistent configuration, please check.
[  367.243615][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6880'.
[  367.246825][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6880'.
[  367.365285][T21792] dvmrp0: entered allmulticast mode
[  367.546188][T21809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6894'.
[  367.759030][T21826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.808493][T21831] netlink: 'syz.4.6904': attribute type 3 has an invalid length.
[  367.813554][T21831] netlink: 'syz.4.6904': attribute type 3 has an invalid length.
[  367.816223][T21831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6904'.
[  367.870272][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6909'.
[  367.962130][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6913'.
[  368.217773][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  369.254866][T21911] 8021q: adding VLAN 0 to HW filter on device bond7
[  369.259866][T21911] bond0: (slave bond7): Enslaving as an active interface with an up link
[  369.411205][T21922] netlink: 'syz.3.6946': attribute type 16 has an invalid length.
[  369.603388][T21941] netlink: 'syz.3.6953': attribute type 39 has an invalid length.
[  370.227321][T21977] netlink: 'syz.4.6969': attribute type 10 has an invalid length.
[  370.265439][T21977] netlink: 'syz.4.6969': attribute type 10 has an invalid length.
[  371.408057][T22064] vti1: entered promiscuous mode
[  371.610193][T22074] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.645274][T22074] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  371.653595][T22074] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  371.658268][T22074] tipc: Resetting bearer <eth:syzkaller0>
[  371.668895][T22074] tipc: Resetting bearer <eth:syzkaller0>
[  372.515593][T22127] __nla_validate_parse: 8 callbacks suppressed
[  372.515609][T22127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7032'.
[  372.784428][T22154] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7041'.
[  373.198623][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7053'.
[  373.341320][T22195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7061'.
[  373.359861][T22196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7060'.
[  373.387350][T22198] netlink: 'syz.3.7062': attribute type 9 has an invalid length.
[  373.390372][T22198] netlink: 147436 bytes leftover after parsing attributes in process `syz.3.7062'.
[  373.549408][T22216] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  373.624480][T22222] netlink: 'syz.3.7074': attribute type 21 has an invalid length.
[  373.627571][T22222] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7074'.
[  373.631037][T22222] netlink: 'syz.3.7074': attribute type 4 has an invalid length.
[  373.635550][T22222] netlink: 'syz.3.7074': attribute type 5 has an invalid length.
[  373.638876][T22222] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7074'.
[  375.001110][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7109'.
[  375.006949][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7109'.
[  375.105443][T22303] IPv6: Can't replace route, no match found
[  375.298450][T22321] netlink: 'syz.4.7121': attribute type 5 has an invalid length.
[  375.345695][T22325] netem: incorrect gi model size
[  375.363280][T22325] netem: change failed
[  376.087953][T22354] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.136835][T22354] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.197619][T22354] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.247770][T22354] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.348434][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.351852][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.365180][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.375330][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.670388][T22413] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  377.326682][T22473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.536962][T22481] netlink: 'syz.4.7190': attribute type 303 has an invalid length.
[  377.542183][T22481] __nla_validate_parse: 7 callbacks suppressed
[  377.542199][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7190'.
[  377.548884][T22481] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  377.553408][T22481] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  378.704718][T22540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7217'.
[  378.904397][T22556] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  379.277908][T22582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7236'.
[  379.466869][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7241'.
[  379.563231][T22597] tap0: tun_chr_ioctl cmd 1074025676
[  379.565220][T22597] tap0: owner set to 0
[  380.042436][T22625] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7253'.
[  380.046058][T22625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7253'.
[  380.067539][T22625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7253'.
[  380.367009][T22653] netlink: 'syz.0.7265': attribute type 8 has an invalid length.
[  380.369302][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7265'.
[  380.392917][T22653] bond0: entered promiscuous mode
[  380.394466][T22653] gretap1: entered promiscuous mode
[  380.397240][T22653] bond0: left promiscuous mode
[  380.398697][T22653] gretap1: left promiscuous mode
[  380.571325][T22669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7273'.
[  380.865019][T22695] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7285'.
[  380.997701][T22708] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.089835][T22714] tc_dump_action: action bad kind
[  381.204744][T22728] xt_limit: Overflow, try lower: 271964/0
[  381.255419][T22730] batadv_slave_1: entered promiscuous mode
[  381.260206][T22729] batadv_slave_1: left promiscuous mode
[  381.422518][T22750] netlink: 'syz.0.7311': attribute type 10 has an invalid length.
[  381.429128][T22750] team0: Port device dummy0 added
[  381.433553][T22750] netlink: 'syz.0.7311': attribute type 10 has an invalid length.
[  381.440588][T22750] team0: Port device dummy0 removed
[  381.565676][T22766] veth1_to_bond: entered allmulticast mode
[  381.606110][T22766] veth1_to_bond (unregistering): left allmulticast mode
[  381.807744][T22782] netlink: 'syz.0.7323': attribute type 6 has an invalid length.
[  381.998196][T22795] netlink: 'syz.0.7330': attribute type 15 has an invalid length.
[  382.010854][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.010980][T22795] netlink: 'syz.0.7330': attribute type 15 has an invalid length.
[  382.017394][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.020776][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.024866][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.797925][T22832] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  382.809718][T22834] __nla_validate_parse: 8 callbacks suppressed
[  382.809736][T22834] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7348'.
[  383.334887][T22871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7364'.
[  383.360699][T22875] netlink: 'syz.4.7366': attribute type 1 has an invalid length.
[  383.374475][T22873] netlink: 'syz.3.7367': attribute type 4 has an invalid length.
[  383.393285][T22871] netlink: 'syz.0.7364': attribute type 2 has an invalid length.
[  383.450022][T22877] batadv1: entered promiscuous mode
[  383.457334][T22877] batadv1: entered allmulticast mode
[  383.603079][T22894] IPVS: Scheduler module ip_vs_sip not found
[  383.836344][   T33] audit: type=1107 audit(1758537680.785:11): pid=22912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  384.006284][T22929] syzkaller1: entered promiscuous mode
[  384.008565][T22929] syzkaller1: entered allmulticast mode
[  384.202271][T22941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.394747][T22959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7406'.
[  385.444846][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  385.450523][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  385.524583][T23041] xt_l2tp: v2 sid > 0xffff: 1114112
[  387.235791][T23115] sctp: [Deprecated]: syz.3.7472 (pid 23115) Use of int in maxseg socket option.
[  387.235791][T23115] Use struct sctp_assoc_value instead
[  387.306870][T23119] batadv_slave_0: entered promiscuous mode
[  387.559520][T23144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7486'.
[  387.633739][T23142] IPVS: Scheduler module ip_vs_sip not found
[  388.047619][T23192] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  388.158209][T23205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  388.160699][T23205] IPv6: NLM_F_CREATE should be set when creating new route
[  388.163209][T23205] IPv6: NLM_F_CREATE should be set when creating new route
[  388.166800][T23205] IPv6: NLM_F_CREATE should be set when creating new route
[  388.171831][T23205] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  388.204300][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7513'.
[  388.366761][T23217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7515'.
[  388.666174][T23236] netlink: 'syz.0.7522': attribute type 10 has an invalid length.
[  388.669411][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7522'.
[  388.673246][T23236] syz_tun: left allmulticast mode
[  388.675164][T23236] syz_tun: left promiscuous mode
[  388.677226][T23236] bridge0: port 1(syz_tun) entered disabled state
[  388.759245][T23238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7523'.
[  388.771082][T23239] tipc: Resetting bearer <eth:syzkaller0>
[  388.816454][T23240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7523'.
[  388.821450][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  388.837063][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  388.842952][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  388.848603][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  389.537795][T23291] !: renamed from dummy0
[  389.844618][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7545'.
[  390.288774][T23328] netlink: 'syz.4.7560': attribute type 10 has an invalid length.
[  390.303658][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7561'.
[  390.477500][T23343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7566'.
[  391.175922][T23370] tipc: Failed to remove unknown binding: 66,1,1/549894661:3394283984/3394283986
[  391.184906][T23370] tipc: Failed to remove unknown binding: 66,1,1/549894661:3394283984/3394283986
[  391.325247][T23386] netlink: 'syz.0.7585': attribute type 1 has an invalid length.
[  391.383255][T23392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7586'.
[  391.829400][T23429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.071955][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  392.225790][T23457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7617'.
[  392.364689][T23464] netlink: 'syz.4.7619': attribute type 9 has an invalid length.
[  392.404381][T23466] netlink: 'syz.3.7620': attribute type 1 has an invalid length.
[  392.707108][  T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  392.709600][  T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  392.742026][T23482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  392.796661][T23493] netlink: 'syz.3.7632': attribute type 1 has an invalid length.
[  392.824013][T23493] 8021q: adding VLAN 0 to HW filter on device bond8
[  392.866891][T23493] bond8: (slave veth13): Enslaving as an active interface with a down link
[  392.900280][T23493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.903471][T23493] bond8: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  393.327003][T23542] netlink: 'syz.3.7656': attribute type 13 has an invalid length.
[  393.329693][T23542] __nla_validate_parse: 2 callbacks suppressed
[  393.329702][T23542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7656'.
[  393.336324][T23542] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  393.823285][T23574] netlink: 'syz.4.7671': attribute type 4 has an invalid length.
[  393.829717][T23574] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7671'.
[  393.857989][T23577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7672'.
[  393.866164][T23577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7672'.
[  394.116851][T23588] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7674'.
[  394.231366][T23596] netlink: 596 bytes leftover after parsing attributes in process `syz.4.7678'.
[  394.294268][T23603] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7681'.
[  394.508902][T23630] 8021q: adding VLAN 0 to HW filter on device bond9
[  394.522036][T23630] gretap2: entered promiscuous mode
[  394.529472][T23630] bond9: (slave gretap2): Enslaving as an active interface with an up link
[  394.550304][T23630] macvlan3: entered promiscuous mode
[  394.554341][T23630] macvlan3: entered allmulticast mode
[  394.557709][T23630] bond9: entered promiscuous mode
[  394.560574][T23630] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  394.565187][T23630] bond9: left promiscuous mode
[  394.593434][T23639] netlink: 'syz.4.7699': attribute type 42 has an invalid length.
[  394.855269][T23674] netlink: 'syz.4.7714': attribute type 4 has an invalid length.
[  395.216192][T23705] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7726'.
[  395.529124][T23722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7734'.
[  395.539742][T23722] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  395.822834][T23750] openvswitch: netlink: EtherType 50a is less than min 600
[  395.896183][T23760] openvswitch: netlink: Flow actions attr not present in new flow.
[  395.996639][T23767] netlink: 'syz.4.7753': attribute type 9 has an invalid length.
[  396.373850][T23794] tipc: Resetting bearer <eth:team0>
[  396.377014][T23794] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  396.394032][T23794] team0: Unable to change to the same mode the team is in
[  396.899804][T23830] syzkaller1: entered promiscuous mode
[  396.903693][T23830] syzkaller1: entered allmulticast mode
[  397.021853][T23832] block nbd2: server does not support multiple connections per device.
[  397.025646][T23832] block nbd2: shutting down sockets
[  397.078943][T23836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7785'.
[  397.082884][T23838] netlink: 'syz.3.7786': attribute type 2 has an invalid length.
[  397.090249][T23838] : entered promiscuous mode
[  397.455124][T23863] tc_dump_action: action bad kind
[  398.292635][T23916] !: entered promiscuous mode
[  398.298155][T23916] !: left promiscuous mode
[  398.441596][T23926] openvswitch: netlink: Flow actions attr not present in new flow.
[  398.900079][T23972] netlink: 'syz.0.7842': attribute type 23 has an invalid length.
[  399.382222][T23997] nbd: must specify at least one socket
[  399.564502][T24001] netlink: 'syz.3.7857': attribute type 1 has an invalid length.
[  399.567704][T24001] netlink: 'syz.3.7857': attribute type 1 has an invalid length.
[  399.757310][T24009] tipc: Enabled bearer <udp:syz2>, priority 6
[  400.237518][T24025] __nla_validate_parse: 3 callbacks suppressed
[  400.237534][T24025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7865'.
[  400.646629][T24035] netdevsim netdevsim4 : renamed from netdevsim0
[  400.723132][T24037] netlink: 'syz.4.7873': attribute type 1 has an invalid length.
[  400.726131][T24037] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7873'.
[  401.089147][T24051] IPVS: Error connecting to the multicast addr
[  401.787218][T24078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7893'.
[  402.025784][T24092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7900'.
[  402.765493][T24128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7911'.
[  402.957510][T24140] netlink: 'syz.3.7917': attribute type 1 has an invalid length.
[  403.004024][T24140] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  403.008838][T24140] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  403.013367][T24140] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  403.040716][T24145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7917'.
[  403.317669][T24163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.479607][T24176] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.7934'.
[  403.830174][T24213] bond0: (slave bond0): Device is not bonding slave
[  403.832768][T24213] bond0: option active_slave: invalid value (bond0)
[  403.846273][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7953'.
[  403.861980][T24218] netlink: 'syz.0.7954': attribute type 64 has an invalid length.
[  403.910818][T24222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7956'.
[  404.167823][T24241] syzkaller0: entered promiscuous mode
[  404.170100][T24241] syzkaller0: entered allmulticast mode
[  404.282655][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.348477][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.358070][T24248] syzkaller1: entered promiscuous mode
[  404.366312][T24248] syzkaller1: entered allmulticast mode
[  404.413974][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.465022][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.592596][   T12] bridge_slave_1: left allmulticast mode
[  404.594770][   T12] bridge_slave_1: left promiscuous mode
[  404.597000][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.605656][   T12] bridge_slave_0: left allmulticast mode
[  404.607875][   T12] bridge_slave_0: left promiscuous mode
[  404.609770][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.617923][   T12] bond1: left allmulticast mode
[  404.620158][   T12] bridge1: port 1(bond1) entered disabled state
[  405.027739][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.031777][   T12] bond_slave_0: left promiscuous mode
[  405.034090][   T12] bond_slave_0: left allmulticast mode
[  405.038847][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.043187][   T12] bond_slave_1: left promiscuous mode
[  405.045481][   T12] bond_slave_1: left allmulticast mode
[  405.049194][   T12] bond0 (unregistering): Released all slaves
[  405.141377][   T12] bond1 (unregistering): Released all slaves
[  405.236909][T24282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7983'.
[  405.320522][T24286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7985'.
[  405.379047][T24288] bridge8: entered promiscuous mode
[  405.413099][   T12] hsr_slave_0: left promiscuous mode
[  405.416236][   T12] hsr_slave_1: left promiscuous mode
[  405.419809][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.424380][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.432622][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  405.437640][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  405.476728][   T12] veth1_macvtap: left promiscuous mode
[  405.479014][   T12] veth0_macvtap: left promiscuous mode
[  405.481306][   T12] veth1_vlan: left promiscuous mode
[  405.485246][   T12] veth0_vlan: left promiscuous mode
[  405.505812][T24296] netlink: 'syz.4.7990': attribute type 11 has an invalid length.
[  405.519244][T24296] netlink: 'syz.4.7990': attribute type 4 has an invalid length.
[  405.526587][T24296] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7990'.
[  406.097495][   T12] team0 (unregistering): Port device team_slave_1 removed
[  406.140628][   T12] team0 (unregistering): Port device team_slave_0 removed
[  406.709795][T24302] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7989'.
[  406.911380][T24316] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7999'.
[  407.071224][T24334] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  407.117287][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  407.259858][T24342] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  407.965430][T24353] netlink: 'syz.0.8010': attribute type 10 has an invalid length.
[  407.969484][T24353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8010'.
[  407.974569][T24353] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  408.059120][T24362] netlink: 'syz.3.8014': attribute type 10 has an invalid length.
[  408.061701][T24362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8014'.
[  408.066567][T24362] team0: Port device geneve0 added
[  408.128699][T24370] netlink: 'syz.0.8016': attribute type 3 has an invalid length.
[  408.214398][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8020'.
[  408.283091][T24383] tipc: Resetting bearer <eth:team0>
[  408.287777][T24387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8024'.
[  408.385196][T24388] geneve4: entered promiscuous mode
[  408.387027][T24388] geneve4: entered allmulticast mode
[  408.389800][ T5873] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.393476][ T5873] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  408.396067][ T5873] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.398845][ T5873] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  408.401440][ T5873] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.404421][ T5873] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  408.407304][ T5873] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  408.410620][ T5873] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  408.606238][T24413] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.8033'.
[  408.675217][T24403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8030'.
[  409.145973][T24445] syz.4.8047 uses old SIOCAX25GETINFO
[  409.417047][T24460] netlink: 'syz.3.8054': attribute type 3 has an invalid length.
[  409.731977][T24480] veth13: entered promiscuous mode
[  410.066753][T24498] netlink: 'syz.0.8069': attribute type 1 has an invalid length.
[  410.107466][T24498] bond7: (slave bridge18): making interface the new active one
[  410.110447][T24498] bond7: (slave bridge18): Enslaving as an active interface with an up link
[  410.384769][T24525] __nla_validate_parse: 7 callbacks suppressed
[  410.384785][T24525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8082'.
[  410.430546][T24529] netlink: 'syz.0.8084': attribute type 1 has an invalid length.
[  410.436325][T24529] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8084'.
[  410.681348][T24545] 8021q: adding VLAN 0 to HW filter on device bond8
[  410.684781][T24545] bridge0: port 2(bond8) entered blocking state
[  410.687900][T24545] bridge0: port 2(bond8) entered disabled state
[  410.690082][T24545] bond8: entered allmulticast mode
[  410.693354][T24545] bond8: entered promiscuous mode
[  411.247050][T24588] pimreg: entered allmulticast mode
[  411.295700][T24592] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8111'.
[  411.953228][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8131'.
[  412.213703][T24661] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8141'.
[  412.419546][T24672] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  412.423966][T24672] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8146'.
[  412.516595][T24672] bond0 (unregistering): (slave bond7): Releasing backup interface
[  412.520622][T24672] bond0 (unregistering): Released all slaves
[  412.561270][T24676] xt_bpf: check failed: parse error
[  412.612491][T24678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8149'.
[  413.052239][T24701] netem: change failed
[  413.121086][T24704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8161'.
[  413.132584][T24704] macvtap2: entered promiscuous mode
[  413.134797][T24704] veth0: entered promiscuous mode
[  413.137021][T24704] macvtap2: entered allmulticast mode
[  413.139231][T24704] veth0: entered allmulticast mode
[  413.150153][T24704] veth0: left allmulticast mode
[  413.152717][T24704] veth0: left promiscuous mode
[  413.264014][T24707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  413.785084][T24745] ==================================================================
[  413.788295][T24745] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  413.791508][T24745] Read of size 2 at addr ffff88811e9d1342 by task syz.4.8180/24745
[  413.795191][T24745] 
[  413.796413][T24745] CPU: 0 UID: 0 PID: 24745 Comm: syz.4.8180 Not tainted syzkaller #0 PREEMPT(full) 
[  413.796434][T24745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  413.796445][T24745] Call Trace:
[  413.796452][T24745]  <TASK>
[  413.796460][T24745]  dump_stack_lvl+0x189/0x250
[  413.796483][T24745]  ? __kasan_check_byte+0x12/0x40
[  413.796504][T24745]  ? __pfx_dump_stack_lvl+0x10/0x10
[  413.796520][T24745]  ? lock_release+0x4b/0x3e0
[  413.796549][T24745]  ? __virt_addr_valid+0x4a5/0x5c0
[  413.796571][T24745]  print_report+0xca/0x240
[  413.796584][T24745]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  413.796603][T24745]  kasan_report+0x118/0x150
[  413.796653][T24745]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  413.796676][T24745]  __xfrm_state_lookup+0x6ad/0x8d0
[  413.796700][T24745]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  413.796720][T24745]  xfrm_state_add+0x27d/0xc40
[  413.796743][T24745]  pfkey_add+0x1edd/0x2e00
[  413.796768][T24745]  ? __pfx_pfkey_add+0x10/0x10
[  413.796785][T24745]  ? kmem_cache_free+0x18f/0x400
[  413.796808][T24745]  pfkey_sendmsg+0xbfe/0x1090
[  413.796824][T24745]  ? trace_sched_exit_tp+0x36/0x110
[  413.796845][T24745]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  413.796872][T24745]  ? aa_sock_msg_perm+0xf1/0x1d0
[  413.796886][T24745]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  413.796902][T24745]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  413.796921][T24745]  __sock_sendmsg+0x21c/0x270
[  413.796935][T24745]  ____sys_sendmsg+0x505/0x830
[  413.796955][T24745]  ? __pfx_____sys_sendmsg+0x10/0x10
[  413.796976][T24745]  ? import_iovec+0x74/0xa0
[  413.796993][T24745]  ___sys_sendmsg+0x21f/0x2a0
[  413.797009][T24745]  ? __pfx____sys_sendmsg+0x10/0x10
[  413.797038][T24745]  ? __fget_files+0x2a/0x420
[  413.797050][T24745]  ? __fget_files+0x3a0/0x420
[  413.797065][T24745]  __x64_sys_sendmsg+0x19b/0x260
[  413.797082][T24745]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  413.797105][T24745]  ? rcu_is_watching+0x15/0xb0
[  413.797120][T24745]  ? trace_sys_enter+0x25/0x100
[  413.797141][T24745]  do_syscall_64+0xfa/0x3b0
[  413.797156][T24745]  ? lockdep_hardirqs_on+0x9c/0x150
[  413.797170][T24745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.797181][T24745]  ? exc_page_fault+0x9f/0xf0
[  413.797193][T24745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.797206][T24745] RIP: 0033:0x7f657cb8ec29
[  413.797219][T24745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.797232][T24745] RSP: 002b:00007f657d9fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.797247][T24745] RAX: ffffffffffffffda RBX: 00007f657cdd5fa0 RCX: 00007f657cb8ec29
[  413.797258][T24745] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003
[  413.797267][T24745] RBP: 00007f657cc11e41 R08: 0000000000000000 R09: 0000000000000000
[  413.797276][T24745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  413.797283][T24745] R13: 00007f657cdd6038 R14: 00007f657cdd5fa0 R15: 00007fff65584f18
[  413.797297][T24745]  </TASK>
[  413.797301][T24745] 
[  413.907706][T24745] Allocated by task 22016:
[  413.909474][T24745]  kasan_save_track+0x3e/0x80
[  413.911361][T24745]  __kasan_slab_alloc+0x6c/0x80
[  413.913319][T24745]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  413.915463][T24745]  xfrm_state_alloc+0x24/0x2f0
[  413.917347][T24745]  xfrm_state_find+0x37d4/0x5400
[  413.919332][T24745]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  413.921829][T24745]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  413.923928][T24745]  xfrm_lookup_route+0x3c/0x1c0
[  413.925911][T24745]  udp_sendmsg+0x142e/0x2170
[  413.927747][T24745]  __sock_sendmsg+0x19c/0x270
[  413.929596][T24745]  ____sys_sendmsg+0x52d/0x830
[  413.931522][T24745]  ___sys_sendmsg+0x21f/0x2a0
[  413.933421][T24745]  __sys_sendmmsg+0x227/0x430
[  413.935309][T24745]  __x64_sys_sendmmsg+0xa0/0xc0
[  413.937249][T24745]  do_syscall_64+0xfa/0x3b0
[  413.939064][T24745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.941432][T24745] 
[  413.942415][T24745] Freed by task 2382:
[  413.944042][T24745]  kasan_save_track+0x3e/0x80
[  413.945955][T24745]  kasan_save_free_info+0x46/0x50
[  413.947935][T24745]  __kasan_slab_free+0x5b/0x80
[  413.949867][T24745]  kmem_cache_free+0x18f/0x400
[  413.951793][T24745]  xfrm_state_gc_task+0x52d/0x6b0
[  413.953791][T24745]  process_scheduled_works+0xae1/0x17b0
[  413.955986][T24745]  worker_thread+0x8a0/0xda0
[  413.957772][T24745]  kthread+0x711/0x8a0
[  413.959349][T24745]  ret_from_fork+0x439/0x7d0
[  413.961166][T24745]  ret_from_fork_asm+0x1a/0x30
[  413.963002][T24745] 
[  413.963952][T24745] The buggy address belongs to the object at ffff88811e9d1200
[  413.963952][T24745]  which belongs to the cache xfrm_state of size 928
[  413.969251][T24745] The buggy address is located 322 bytes inside of
[  413.969251][T24745]  freed 928-byte region [ffff88811e9d1200, ffff88811e9d15a0)
[  413.974583][T24745] 
[  413.975548][T24745] The buggy address belongs to the physical page:
[  413.978132][T24745] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811e9d0000 pfn:0x11e9d0
[  413.982124][T24745] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  413.985464][T24745] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  413.988623][T24745] page_type: f5(slab)
[  413.990212][T24745] raw: 057ff00000000040 ffff88801af02640 ffffea0001088f00 0000000000000003
[  413.993580][T24745] raw: ffff88811e9d0000 00000000000e0001 00000000f5000000 0000000000000000
[  413.996923][T24745] head: 057ff00000000040 ffff88801af02640 ffffea0001088f00 0000000000000003
[  414.000336][T24745] head: ffff88811e9d0000 00000000000e0001 00000000f5000000 0000000000000000
[  414.003762][T24745] head: 057ff00000000002 ffffea00047a7401 00000000ffffffff 00000000ffffffff
[  414.007173][T24745] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  414.010453][T24745] page dumped because: kasan: bad access detected
[  414.013006][T24745] page_owner tracks the page as allocated
[  414.015261][T24745] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 16894, tgid 16875 (syz.0.4690), ts 290836204670, free_ts 290674002461
[  414.022984][T24745]  post_alloc_hook+0x240/0x2a0
[  414.024910][T24745]  get_page_from_freelist+0x21e4/0x22c0
[  414.027109][T24745]  __alloc_frozen_pages_noprof+0x181/0x370
[  414.029386][T24745]  alloc_pages_mpol+0x232/0x4a0
[  414.031345][T24745]  allocate_slab+0x8a/0x370
[  414.033184][T24745]  ___slab_alloc+0xbeb/0x1420
[  414.035043][T24745]  kmem_cache_alloc_noprof+0x283/0x3c0
[  414.037184][T24745]  xfrm_state_alloc+0x24/0x2f0
[  414.039226][T24745]  xfrm_state_find+0x37d4/0x5400
[  414.041213][T24745]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  414.043672][T24745]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  414.045819][T24745]  xfrm_lookup_route+0x3c/0x1c0
[  414.047768][T24745]  udp_sendmsg+0x142e/0x2170
[  414.049573][T24745]  __sock_sendmsg+0x19c/0x270
[  414.051427][T24745]  ____sys_sendmsg+0x52d/0x830
[  414.053362][T24745]  ___sys_sendmsg+0x21f/0x2a0
[  414.055241][T24745] page last free pid 16907 tgid 16907 stack trace:
[  414.057820][T24745]  __free_frozen_pages+0xbc4/0xd30
[  414.059874][T24745]  __put_partials+0x156/0x1a0
[  414.061785][T24745]  put_cpu_partial+0x17c/0x250
[  414.063542][T24745]  __slab_free+0x2d5/0x3c0
[  414.065120][T24745]  qlist_free_all+0x97/0x140
[  414.066983][T24745]  kasan_quarantine_reduce+0x148/0x160
[  414.069118][T24745]  __kasan_slab_alloc+0x22/0x80
[  414.071022][T24745]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  414.073181][T24745]  jbd2__journal_start+0x146/0x5b0
[  414.075130][T24745]  __ext4_journal_start_sb+0x227/0x5c0
[  414.077230][T24745]  ext4_dirty_inode+0x93/0x110
[  414.079078][T24745]  __mark_inode_dirty+0x2ec/0xe10
[  414.081089][T24745]  file_update_time+0x40c/0x490
[  414.083083][T24745]  ext4_page_mkwrite+0x20e/0x1190
[  414.085064][T24745]  do_page_mkwrite+0x14d/0x310
[  414.087007][T24745]  __handle_mm_fault+0x1916/0x5440
[  414.089019][T24745] 
[  414.089974][T24745] Memory state around the buggy address:
[  414.092186][T24745]  ffff88811e9d1200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  414.095275][T24745]  ffff88811e9d1280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  414.098360][T24745] >ffff88811e9d1300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  414.101390][T24745]                                            ^
[  414.103779][T24745]  ffff88811e9d1380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  414.106950][T24745]  ffff88811e9d1400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  414.110000][T24745] ==================================================================
[  414.113267][T24745] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  414.116091][T24745] CPU: 0 UID: 0 PID: 24745 Comm: syz.4.8180 Not tainted syzkaller #0 PREEMPT(full) 
[  414.119699][T24745] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  414.123657][T24745] Call Trace:
[  414.125003][T24745]  <TASK>
[  414.126193][T24745]  dump_stack_lvl+0x99/0x250
[  414.128055][T24745]  ? __asan_memcpy+0x40/0x70
[  414.129915][T24745]  ? __pfx_dump_stack_lvl+0x10/0x10
[  414.131879][T24745]  ? __pfx__printk+0x10/0x10
[  414.133719][T24745]  vpanic+0x281/0x750
[  414.135262][T24745]  ? __pfx_vpanic+0x10/0x10
[  414.137098][T24745]  ? irqentry_exit+0x74/0x90
[  414.138894][T24745]  panic+0xb9/0xc0
[  414.140378][T24745]  ? __pfx_panic+0x10/0x10
[  414.142109][T24745]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  414.144368][T24745]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  414.146666][T24745]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  414.148450][T24745]  check_panic_on_warn+0x89/0xb0
[  414.150148][T24745]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  414.152244][T24745]  end_report+0x78/0x160
[  414.153969][T24745]  kasan_report+0x129/0x150
[  414.155801][T24745]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  414.157718][T24745]  __xfrm_state_lookup+0x6ad/0x8d0
[  414.159750][T24745]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  414.161997][T24745]  xfrm_state_add+0x27d/0xc40
[  414.163891][T24745]  pfkey_add+0x1edd/0x2e00
[  414.165660][T24745]  ? __pfx_pfkey_add+0x10/0x10
[  414.167555][T24745]  ? kmem_cache_free+0x18f/0x400
[  414.169537][T24745]  pfkey_sendmsg+0xbfe/0x1090
[  414.171386][T24745]  ? trace_sched_exit_tp+0x36/0x110
[  414.173438][T24745]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  414.175491][T24745]  ? aa_sock_msg_perm+0xf1/0x1d0
[  414.177466][T24745]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  414.179622][T24745]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  414.181689][T24745]  __sock_sendmsg+0x21c/0x270
[  414.183561][T24745]  ____sys_sendmsg+0x505/0x830
[  414.185525][T24745]  ? __pfx_____sys_sendmsg+0x10/0x10
[  414.187658][T24745]  ? import_iovec+0x74/0xa0
[  414.189484][T24745]  ___sys_sendmsg+0x21f/0x2a0
[  414.191469][T24745]  ? __pfx____sys_sendmsg+0x10/0x10
[  414.193600][T24745]  ? __fget_files+0x2a/0x420
[  414.195442][T24745]  ? __fget_files+0x3a0/0x420
[  414.197243][T24745]  __x64_sys_sendmsg+0x19b/0x260
[  414.199234][T24745]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  414.201453][T24745]  ? rcu_is_watching+0x15/0xb0
[  414.203375][T24745]  ? trace_sys_enter+0x25/0x100
[  414.205313][T24745]  do_syscall_64+0xfa/0x3b0
[  414.207151][T24745]  ? lockdep_hardirqs_on+0x9c/0x150
[  414.209225][T24745]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.211503][T24745]  ? exc_page_fault+0x9f/0xf0
[  414.213372][T24745]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.215714][T24745] RIP: 0033:0x7f657cb8ec29
[  414.217482][T24745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  414.225071][T24745] RSP: 002b:00007f657d9fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  414.228313][T24745] RAX: ffffffffffffffda RBX: 00007f657cdd5fa0 RCX: 00007f657cb8ec29
[  414.231342][T24745] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003
[  414.234360][T24745] RBP: 00007f657cc11e41 R08: 0000000000000000 R09: 0000000000000000
[  414.237450][T24745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.240511][T24745] R13: 00007f657cdd6038 R14: 00007f657cdd5fa0 R15: 00007fff65584f18
[  414.243566][T24745]  </TASK>
[  414.245434][T24745] Kernel Offset: disabled
[  414.247077][T24745] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:41:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000287e RDI=000000000000287f RBP=00000000000003f8 RSP=ffffc9000330ed90
R8 =ffff888107bf0237 R9 =1ffff11020f7e046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b02915 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f657d9fc6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc6a3d7dac CR3=00000001124f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcc6a3a7498 00007fcc6a3a7470 XMM03=00007fcc6a3a74a8 00007fcc6a3a74a0
XMM04=00007fcc6af0d100 00007fcc6a3a7460 XMM05=00007fcc6a3a7478 00007fcc6a3a74c0
XMM06=00007fcc6a3a74b8 00007fcc6a3a74b0 XMM07=00007fcc6a3a74a8 00007fcc6a3a74a0
XMM08=0000000000000000 00007fcc6a212f0f XMM09=0000000000000000 00007fcc6a212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b43a2b50a6e48d00 RBX=ffffffff819683f8 RCX=b43a2b50a6e48d00 RDX=0000000000000001
RSI=ffffffff8d9ba1da RDI=ffffffff8be33f00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38f30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7b03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e287f65000 CR3=00000001124f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=55acfd9b6e3ed0a9 38955b3d007787c5
XMM02=00007f657cda7498 ffffffff81688a1f XMM03=00007f657cda74a8 00007f657cda74a0
XMM04=00007f657d90d100 00007f657cda7460 XMM05=00007f657cda7478 00007f657cda74c0
XMM06=00007f657cda74b8 00007f657cda74b0 XMM07=00007f657cda74a8 00007f657cda74a0
XMM08=0000000000000000 00007f657cc12f0f XMM09=0000000000000000 00007f657cc12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
