last executing test programs:

1.028879935s ago: executing program 0 (id=4111):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))
pselect6(0x0, 0x0, &(0x7f0000000200)={0x1, 0x7, 0x6, 0x40000000000081, 0x5, 0x100000003, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f00000002c0)={0x77359400}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000a, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r2)
sendmsg$DEVLINK_CMD_RATE_DEL(r2, 0x0, 0x4084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000), 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x28, 0xff9, 0x1}, 0x28)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)

858.133463ms ago: executing program 1 (id=4116):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
unshare(0x2c060000)
unshare(0x24020400)
connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

738.00884ms ago: executing program 1 (id=4117):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000680)=ANY=[@ANYRES16=r1], 0x8)

661.67445ms ago: executing program 1 (id=4118):
syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0xc2, 0x0, 0x0, 0x2}}}}}}, 0x0)

600.918869ms ago: executing program 1 (id=4120):
socket(0x22, 0x800, 0x2)

600.643203ms ago: executing program 1 (id=4122):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="03000000084f"], 0x20)

531.364759ms ago: executing program 1 (id=4124):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
listen(r0, 0x8)
accept$ax25(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

301.008957ms ago: executing program 2 (id=4131):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r0=>0x0}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESHEX=r0], 0x27)

234.701384ms ago: executing program 2 (id=4132):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x20020810}, 0x0)

234.174294ms ago: executing program 2 (id=4133):
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0})
bpf$ITER_CREATE(0x21, &(0x7f00000012c0), 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000c8e54a6e230000000000000000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000)
close(r6)
socket$inet6(0xa, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227ffe0001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d9310000000f4dbdf25010000000c00060000000000020000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048890}, 0x880)

134.699067ms ago: executing program 0 (id=4134):
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000029"], 0x10}}], 0x1, 0x4000000)

60.317225ms ago: executing program 2 (id=4135):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e23}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)

60.20709ms ago: executing program 0 (id=4136):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061114c0000000000850000001d0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)

60.072531ms ago: executing program 0 (id=4137):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e7365740000280002800900010073797a3000000000080004400000000a080009400000200308000340000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0)

59.743739ms ago: executing program 2 (id=4138):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, r2, 0x10, 0xc0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)

283.443µs ago: executing program 0 (id=4139):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0xcce2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x2}, @fwd={0x1}]}, {0x0, [0x61]}}, 0x0, 0x4f}, 0x28)

76.816µs ago: executing program 2 (id=4140):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x98}}, 0x0)

0s ago: executing program 0 (id=4141):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x33, 0x0, &(0x7f0000000000)=0x4a)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39052' (ED25519) to the list of known hosts.
syzkaller login: [   48.993868][ T5755] cgroup: Unknown subsys name 'net'
[   49.093619][ T5755] cgroup: Unknown subsys name 'cpuset'
[   49.097557][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.826822][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.553827][ T5837] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.895568][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.910701][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.916149][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.938073][  T942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.940744][  T942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.105192][ T5888] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.108534][ T5888] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.113041][ T5888] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.119537][ T5888] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.124872][ T5888] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.212559][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.226355][ T5212] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.230271][ T5212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.241530][ T5212] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.266637][ T5895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.270155][ T5895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.274680][ T5212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.275152][ T5895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.283059][ T5895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.286383][ T5895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.452918][ T5887] chnl_net:caif_netlink_parms(): no params data found
[   60.578242][ T5887] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.581568][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.584680][ T5887] bridge_slave_0: entered allmulticast mode
[   60.587729][ T5887] bridge_slave_0: entered promiscuous mode
[   60.595501][ T5887] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.598385][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.601962][ T5887] bridge_slave_1: entered allmulticast mode
[   60.605884][ T5887] bridge_slave_1: entered promiscuous mode
[   60.715264][ T5887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.722695][ T5887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.743685][ T5892] chnl_net:caif_netlink_parms(): no params data found
[   60.761899][ T5891] chnl_net:caif_netlink_parms(): no params data found
[   60.796216][ T5887] team0: Port device team_slave_0 added
[   60.818020][ T5887] team0: Port device team_slave_1 added
[   60.886822][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.889235][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.898360][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.911443][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.914618][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.926053][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.985119][ T5892] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.988023][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.992964][ T5892] bridge_slave_0: entered allmulticast mode
[   60.996835][ T5892] bridge_slave_0: entered promiscuous mode
[   61.028350][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.031380][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.033726][ T5892] bridge_slave_1: entered allmulticast mode
[   61.036412][ T5892] bridge_slave_1: entered promiscuous mode
[   61.039049][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.041693][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.044092][ T5891] bridge_slave_0: entered allmulticast mode
[   61.046986][ T5891] bridge_slave_0: entered promiscuous mode
[   61.050509][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.052991][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.055391][ T5891] bridge_slave_1: entered allmulticast mode
[   61.058167][ T5891] bridge_slave_1: entered promiscuous mode
[   61.090725][ T5887] hsr_slave_0: entered promiscuous mode
[   61.093888][ T5887] hsr_slave_1: entered promiscuous mode
[   61.107105][ T5892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.111687][ T5892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.126200][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.144058][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.181277][ T5892] team0: Port device team_slave_0 added
[   61.199465][ T5892] team0: Port device team_slave_1 added
[   61.228150][ T5891] team0: Port device team_slave_0 added
[   61.251449][ T5891] team0: Port device team_slave_1 added
[   61.254090][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.256436][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.267043][ T5892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.282632][ T5892] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.285376][ T5892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.294397][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.329270][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.332663][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.343888][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.369783][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.373278][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.383559][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.448442][ T5892] hsr_slave_0: entered promiscuous mode
[   61.451243][ T5892] hsr_slave_1: entered promiscuous mode
[   61.453522][ T5892] debugfs: 'hsr0' already exists in 'hsr'
[   61.455502][ T5892] Cannot create hsr debugfs directory
[   61.481587][ T5891] hsr_slave_0: entered promiscuous mode
[   61.484058][ T5891] hsr_slave_1: entered promiscuous mode
[   61.486378][ T5891] debugfs: 'hsr0' already exists in 'hsr'
[   61.488344][ T5891] Cannot create hsr debugfs directory
[   61.619441][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.645364][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.664374][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.695753][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.784655][ T5892] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.791859][ T5892] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.799451][ T5892] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.804898][ T5892] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.865414][ T5891] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.878542][ T5891] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.886419][ T5891] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.895366][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.897832][ T5891] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.948256][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[   61.969302][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.972531][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.980246][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.982971][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.019574][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.055754][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[   62.066804][ T5887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.078240][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.081268][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.100179][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.102935][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.110334][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.150626][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[   62.171664][ T5888] Bluetooth: hci0: command tx timeout
[   62.183671][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.186768][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.202838][ T5892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.207166][ T5892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.217979][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.220937][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.258747][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.332842][ T5888] Bluetooth: hci2: command tx timeout
[   62.335733][ T5887] veth0_vlan: entered promiscuous mode
[   62.341454][ T5888] Bluetooth: hci1: command tx timeout
[   62.353294][ T5887] veth1_vlan: entered promiscuous mode
[   62.377782][ T5887] veth0_macvtap: entered promiscuous mode
[   62.387201][ T5887] veth1_macvtap: entered promiscuous mode
[   62.423399][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.435383][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.440086][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.478401][ T5869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.482663][ T5869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.485796][ T5869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.498202][ T5869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.560761][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.564364][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.569296][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.601461][ T5892] veth0_vlan: entered promiscuous mode
[   62.612721][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.616296][ T5892] veth1_vlan: entered promiscuous mode
[   62.618830][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.688626][ T5891] veth0_vlan: entered promiscuous mode
[   62.697965][ T5892] veth0_macvtap: entered promiscuous mode
[   62.705643][ T5891] veth1_vlan: entered promiscuous mode
[   62.717171][ T5892] veth1_macvtap: entered promiscuous mode
[   62.743582][ T5891] veth0_macvtap: entered promiscuous mode
[   62.749014][ T5891] veth1_macvtap: entered promiscuous mode
[   62.758671][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.770068][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.787776][ T5682] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.814465][ T5682] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.817742][ T5682] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.833841][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.839813][ T5682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.863605][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.883477][ T5682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.900395][ T5869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.906411][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.927074][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.937246][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.941657][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.984829][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.988081][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.071738][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.074713][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.107353][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.110090][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.111138][ T5963] netlink: 'syz.2.33': attribute type 2 has an invalid length.
[   63.294027][ T5977] nbd: must specify an index to disconnect
[   63.439167][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'.
[   63.803790][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'.
[   63.997048][ T6035] sctp: [Deprecated]: syz.2.70 (pid 6035) Use of int in maxseg socket option.
[   63.997048][ T6035] Use struct sctp_assoc_value instead
[   64.129349][ T6044] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   64.254718][ T5888] Bluetooth: hci0: command tx timeout
[   64.308448][ T6055] geneve0: entered allmulticast mode
[   64.412011][ T5888] Bluetooth: hci1: command tx timeout
[   64.414040][ T5895] Bluetooth: hci2: command tx timeout
[   64.646682][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.656957][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'.
[   64.942078][ T6111] netlink: 'syz.0.98': attribute type 8 has an invalid length.
[   64.958200][ T5869] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   66.138157][ T6157] netlink: 'syz.1.117': attribute type 1 has an invalid length.
[   66.330997][ T5895] Bluetooth: hci0: command tx timeout
[   66.491742][ T5888] Bluetooth: hci1: command tx timeout
[   66.494321][ T5895] Bluetooth: hci2: command tx timeout
[   66.510445][ T6171] tipc: Started in network mode
[   66.512926][ T6171] tipc: Node identity e0000001, cluster identity 4711
[   66.515904][ T6171] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   66.611782][ T6175] syz.1.126 uses obsolete (PF_INET,SOCK_PACKET)
[   67.155827][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.140'.
[   67.207647][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.0.141'.
[   67.217252][ T6207] netlink: 'syz.0.141': attribute type 7 has an invalid length.
[   67.219802][ T6207] netlink: 'syz.0.141': attribute type 8 has an invalid length.
[   67.230940][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'.
[   67.245996][ T6207] ip6gretap0: entered promiscuous mode
[   67.248659][ T6207] syz_tun: entered promiscuous mode
[   67.275365][ T6207] ip6gretap0: left promiscuous mode
[   67.283239][ T6207] syz_tun: left promiscuous mode
[   67.472704][ T6221] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.567555][ T6226] netlink: 240 bytes leftover after parsing attributes in process `syz.1.151'.
[   68.005474][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'.
[   68.092866][ T6261] netlink: 96 bytes leftover after parsing attributes in process `syz.1.168'.
[   68.168575][ T6271] netlink: 'syz.2.170': attribute type 4 has an invalid length.
[   68.186371][ T6271] netlink: 'syz.2.170': attribute type 4 has an invalid length.
[   68.392056][ T6284] syzkaller1: entered promiscuous mode
[   68.394578][ T6284] syzkaller1: entered allmulticast mode
[   68.412404][ T5895] Bluetooth: hci0: command tx timeout
[   68.572565][ T5888] Bluetooth: hci1: command tx timeout
[   68.574810][ T5895] Bluetooth: hci2: command tx timeout
[   68.827329][ T6304] netlink: 164 bytes leftover after parsing attributes in process `syz.1.187'.
[   68.832966][ T6304] netlink: 164 bytes leftover after parsing attributes in process `syz.1.187'.
[   68.837806][ T6304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.187'.
[   69.219909][ T6336] netlink: 104 bytes leftover after parsing attributes in process `syz.1.203'.
[   69.385581][ T6350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.209'.
[   69.419129][ T6337] Zero length message leads to an empty skb
[   69.430598][ T6350] team0: Port device team_slave_0 removed
[   69.443597][ T6352] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   69.449169][ T6352] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   69.605531][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'.
[   70.208498][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.236'.
[   70.280552][ T6430] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   70.312937][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[   70.324993][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.243'.
[   70.373020][ T6438] netlink: 'syz.2.245': attribute type 12 has an invalid length.
[   70.377358][ T6438] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.245'.
[   71.079890][ T6487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.097592][ T6487] syzkaller0: entered promiscuous mode
[   71.099482][ T6487] syzkaller0: entered allmulticast mode
[   71.127317][ T6487] tipc: Resetting bearer <eth:syzkaller0>
[   71.157883][ T6486] tipc: Resetting bearer <eth:syzkaller0>
[   71.174644][ T6486] tipc: Disabling bearer <eth:syzkaller0>
[   71.225977][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.228271][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.402215][ T6514] tun0: tun_chr_ioctl cmd 2147767520
[   72.008134][ T6549] netlink: 'syz.0.293': attribute type 6 has an invalid length.
[   73.486202][ T6654] Bluetooth: MGMT ver 1.23
[   73.768991][ T6662] syzkaller0: entered promiscuous mode
[   73.784474][ T6662] syzkaller0: entered allmulticast mode
[   74.963350][ T6684] __nla_validate_parse: 3 callbacks suppressed
[   74.963362][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[   75.024600][ T6688] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   75.033810][ T6688] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   75.075388][ T6695] pim6reg: entered allmulticast mode
[   75.079151][ T6695] pim6reg: left allmulticast mode
[   75.523086][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.365'.
[   75.575619][ T6716] Bluetooth: MGMT ver 1.23
[   75.690683][ T6724] netlink: 96 bytes leftover after parsing attributes in process `syz.0.371'.
[   75.698658][ T6724] netlink: 80 bytes leftover after parsing attributes in process `syz.0.371'.
[   75.864574][ T6734] syzkaller1: entered promiscuous mode
[   75.867531][ T6734] syzkaller1: entered allmulticast mode
[   76.043599][ T6739] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.195606][ T6756] Driver unsupported XDP return value 0 on prog  (id 50) dev N/A, expect packet loss!
[   76.566096][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'.
[   76.577284][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.398'.
[   76.624869][ T6788] netlink: 348 bytes leftover after parsing attributes in process `syz.2.401'.
[   77.251352][ T6819] netlink: 48 bytes leftover after parsing attributes in process `syz.2.417'.
[   77.267372][ T6821] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   77.724473][ T6862] netlink: 356 bytes leftover after parsing attributes in process `syz.0.434'.
[   77.760775][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[   77.791757][ T6864] warning: `syz.0.435' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.550523][ T6977] netlink: 'syz.2.483': attribute type 4 has an invalid length.
[   79.883302][ T7008] bond0: option mode: unable to set because the bond device has slaves
[   80.141985][ T7034] syzkaller1: entered promiscuous mode
[   80.144382][ T7034] syzkaller1: entered allmulticast mode
[   80.228809][ T7046] __nla_validate_parse: 8 callbacks suppressed
[   80.228821][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'.
[   80.281130][ T7052] netlink: 'syz.1.520': attribute type 10 has an invalid length.
[   80.285165][ T7052] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   80.290304][ T7050] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82
[   80.295785][ T7054] netlink: 'syz.0.521': attribute type 1 has an invalid length.
[   80.299014][ T7054] netlink: 120 bytes leftover after parsing attributes in process `syz.0.521'.
[   80.487424][ T7074] tipc: Enabled bearer <eth:team0>, priority 0
[   80.601621][ T7087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.536'.
[   80.684012][ T7098] netlink: 'syz.2.541': attribute type 1 has an invalid length.
[   80.686605][ T7098] netlink: 228 bytes leftover after parsing attributes in process `syz.2.541'.
[   80.922920][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'.
[   80.926463][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'.
[   81.040204][ T7133] netlink: 'syz.2.558': attribute type 21 has an invalid length.
[   81.043127][ T7133] netlink: 128 bytes leftover after parsing attributes in process `syz.2.558'.
[   81.046161][ T7133] netlink: 'syz.2.558': attribute type 5 has an invalid length.
[   81.048779][ T7133] netlink: 3 bytes leftover after parsing attributes in process `syz.2.558'.
[   81.247940][ T7154] syzkaller0: entered promiscuous mode
[   81.250013][ T7154] syzkaller0: entered allmulticast mode
[   81.477597][ T7166] netlink: 'syz.1.573': attribute type 1 has an invalid length.
[   81.485782][  T971] IPVS: starting estimator thread 0...
[   81.583244][ T7169] IPVS: using max 79 ests per chain, 189600 per kthread
[   81.601943][ T5948] tipc: Node number set to 3758096385
[   81.640305][ T7178] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   81.759601][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'.
[   81.763683][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'.
[   82.011259][ T7201] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.015089][ T7201] syzkaller0: entered promiscuous mode
[   82.017618][ T7201] syzkaller0: entered allmulticast mode
[   82.043955][ T7201] tipc: Resetting bearer <eth:syzkaller0>
[   82.053320][ T7200] tipc: Resetting bearer <eth:syzkaller0>
[   82.070042][ T7200] tipc: Disabling bearer <eth:syzkaller0>
[   82.714034][ T7244] vlan0: entered promiscuous mode
[   83.219898][ T7282] IPv6: NLM_F_CREATE should be specified when creating new route
[   83.373950][ T7294] sctp: [Deprecated]: syz.1.631 (pid 7294) Use of int in max_burst socket option.
[   83.373950][ T7294] Use struct sctp_assoc_value instead
[   83.844246][ T7318] netlink: 'syz.1.642': attribute type 11 has an invalid length.
[   83.864498][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.867467][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.040584][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.067118][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.294356][ T5901] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.300980][ T5901] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.304464][ T5901] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.307903][ T5901] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.395191][ T7342] netlink: 'syz.2.653': attribute type 21 has an invalid length.
[   84.402614][ T7342] netlink: 'syz.2.653': attribute type 1 has an invalid length.
[   84.465810][ T7345] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.513890][ T7351] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.523608][ T7351] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.530055][ T7351] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   84.578714][ T7345] veth5: entered promiscuous mode
[   84.588197][ T7345] bond1: (slave veth5): Enslaving as an active interface with a down link
[   84.642106][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.646292][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.216815][ T7396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.367435][ T7405] __nla_validate_parse: 4 callbacks suppressed
[   85.367447][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'.
[   85.376602][ T7405] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   85.378971][ T7405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.446557][ T7416] openvswitch: netlink: Flow actions attr not present in new flow.
[   85.507096][ T7424] netlink: 2 bytes leftover after parsing attributes in process `syz.2.689'.
[   85.512723][ T7424] batadv_slave_1: entered promiscuous mode
[   85.518340][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.521831][ T7423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.690'.
[   85.536340][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'.
[   85.540481][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'.
[   85.649112][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[   85.720644][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'.
[   85.752407][ T7450] team1: entered promiscuous mode
[   85.754632][ T7450] team1: entered allmulticast mode
[   85.987207][ T7481] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   86.045867][ T7486] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   86.092384][ T7486] bridge_slave_0: left allmulticast mode
[   86.094892][ T7486] bridge_slave_0: left promiscuous mode
[   86.098547][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.128249][ T7486] bridge_slave_1: left allmulticast mode
[   86.130557][ T7486] bridge_slave_1: left promiscuous mode
[   86.131455][ T7493] validate_nla: 1 callbacks suppressed
[   86.131471][ T7493] netlink: 'syz.1.719': attribute type 10 has an invalid length.
[   86.200001][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.259697][ T7486] bond0: (slave bond_slave_0): Releasing backup interface
[   86.286259][ T7486] bond0: (slave bond_slave_1): Releasing backup interface
[   86.327460][ T7486] team0: Port device team_slave_0 removed
[   86.353937][ T7486] team0: Port device team_slave_1 removed
[   86.358750][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.368757][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.378416][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.397437][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.424964][ T7493] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[   86.438885][ T7493] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.509715][  T942] tipc: Resetting bearer <eth:team0>
[   86.756258][ T7516] netlink: 'syz.0.724': attribute type 83 has an invalid length.
[   86.770012][   T96] cfg80211: failed to load regulatory.db
[   86.815513][ T7503] syzkaller0: entered promiscuous mode
[   86.817813][ T7503] syzkaller0: entered allmulticast mode
[   87.653115][ T7528] tipc: Started in network mode
[   87.655179][ T7528] tipc: Node identity f6ee88ebd4a4, cluster identity 4711
[   87.658087][ T7528] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   87.696109][ T7531] tipc: Resetting bearer <eth:syzkaller0>
[   87.743458][ T7520] tipc: Resetting bearer <eth:syzkaller0>
[   88.491658][ T7520] tipc: Disabling bearer <eth:syzkaller0>
[   88.497819][ T7555] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   88.574951][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.736'.
[   88.585981][ T7563] netlink: 52 bytes leftover after parsing attributes in process `syz.0.737'.
[   88.767530][ T7582] netlink: 348 bytes leftover after parsing attributes in process `syz.2.746'.
[   88.822966][ T5901] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   88.828292][ T5901] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   88.831816][ T5901] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   88.835646][ T5901] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.634888][ T7604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.638168][ T7604] IPv6: NLM_F_CREATE should be set when creating new route
[   89.750937][ T7611] netlink: 'syz.1.759': attribute type 64 has an invalid length.
[   90.018427][ T7635] netlink: 'syz.0.769': attribute type 5 has an invalid length.
[   90.141979][ T7648] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   90.254182][ T7658] netlink: 'syz.0.781': attribute type 2 has an invalid length.
[   90.275836][ T7661] netlink: 'syz.1.782': attribute type 178 has an invalid length.
[   90.429988][ T7688] bridge0: port 3(erspan0) entered blocking state
[   90.442847][ T7688] bridge0: port 3(erspan0) entered disabled state
[   90.451605][ T7688] erspan0: entered allmulticast mode
[   90.461148][ T7688] erspan0: entered promiscuous mode
[   90.469486][ T7688] erspan0: left allmulticast mode
[   90.475901][ T7688] erspan0: left promiscuous mode
[   90.480147][ T7688] bridge0: port 3(erspan0) entered disabled state
[   90.580487][ T7706] __nla_validate_parse: 5 callbacks suppressed
[   90.580510][ T7706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.804'.
[   90.612834][ T7706] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.804'.
[   91.064827][ T7729] dummy0: entered allmulticast mode
[   91.067013][ T7728] dummy0: left allmulticast mode
[   91.426391][ T7753] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   91.430711][ T7753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.546297][ T7761] netlink: 92 bytes leftover after parsing attributes in process `syz.1.830'.
[   92.094433][ T7795] netlink: 248 bytes leftover after parsing attributes in process `syz.0.846'.
[   92.098196][ T7795] netlink: 48 bytes leftover after parsing attributes in process `syz.0.846'.
[   92.125776][ T7795] lo speed is unknown, defaulting to 1000
[   92.129471][ T7795] lo speed is unknown, defaulting to 1000
[   92.136293][ T7795] lo speed is unknown, defaulting to 1000
[   92.186882][ T7802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.292447][   T96] lo speed is unknown, defaulting to 1000
[   92.294568][ T7795] infiniband syz0: set active
[   92.296268][ T7795] infiniband syz0: added lo
[   92.319059][ T7795] RDS/IB: syz0: added
[   92.321730][ T7795] smc: adding ib device syz0 with port count 1
[   92.324235][ T7795] smc:    ib device syz0 port 1 has pnetid 
[   92.327192][   T96] lo speed is unknown, defaulting to 1000
[   92.335851][ T7795] lo speed is unknown, defaulting to 1000
[   92.516532][ T7795] lo speed is unknown, defaulting to 1000
[   92.672769][ T7795] lo speed is unknown, defaulting to 1000
[   92.876792][ T7795] syz.0.846 (7795) used greatest stack depth: 19552 bytes left
[   93.588549][ T7858] netlink: 'syz.0.874': attribute type 72 has an invalid length.
[   93.602124][ T7858] netlink: 1016 bytes leftover after parsing attributes in process `syz.0.874'.
[   93.811989][ T7872] netlink: 'syz.0.882': attribute type 1 has an invalid length.
[   93.815154][ T7872] netlink: 224 bytes leftover after parsing attributes in process `syz.0.882'.
[   93.867359][ T7876] netlink: 508 bytes leftover after parsing attributes in process `syz.0.884'.
[   94.924062][ T7900] tipc: Enabling of bearer <ib:pimreg> rejected, failed to enable media
[   95.186990][ T7923] netlink: 'syz.2.904': attribute type 7 has an invalid length.
[   95.190383][ T7923] netlink: 'syz.2.904': attribute type 8 has an invalid length.
[   95.258687][ T7925] lo speed is unknown, defaulting to 1000
[   95.523441][ T7937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.908'.
[   95.641604][ T7930] netlink: 248 bytes leftover after parsing attributes in process `syz.0.905'.
[   96.340723][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'.
[   96.779505][ T7988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.922'.
[   97.026393][ T7997] openvswitch: netlink: IP tunnel dst address not specified
[   97.409305][   T96] IPVS: starting estimator thread 0...
[   97.435324][ T8025] lo speed is unknown, defaulting to 1000
[   97.521044][ T8026] IPVS: using max 48 ests per chain, 115200 per kthread
[   97.806837][ T8057] syz.0.949 uses old SIOCAX25GETINFO
[   97.890709][ T8061] vxcan3: entered allmulticast mode
[   98.010291][ T8069] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   98.074759][ T8075] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   98.105387][ T8075] bridge_slave_0: left allmulticast mode
[   98.107412][ T8075] bridge_slave_0: left promiscuous mode
[   98.109494][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.114760][ T8075] bridge_slave_1: left allmulticast mode
[   98.116773][ T8075] bridge_slave_1: left promiscuous mode
[   98.119562][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.127691][ T8075] bond0: (slave bond_slave_0): Releasing backup interface
[   98.133036][ T8075] bond0: (slave bond_slave_1): Releasing backup interface
[   98.138868][ T8075] team0: Port device team_slave_1 removed
[   98.143763][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.146400][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.150229][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.151935][ T8080] netlink: 'syz.0.957': attribute type 10 has an invalid length.
[   98.154749][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.163692][ T8075] bond1: (slave veth5): Releasing active interface
[   98.167851][   T96] lo speed is unknown, defaulting to 1000
[   98.178405][ T8080] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   98.189161][ T8080] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   98.285309][ T8075] syzkaller0: entered promiscuous mode
[   98.287524][ T8075] syzkaller0: entered allmulticast mode
[   99.330204][ T8124] netlink: 64 bytes leftover after parsing attributes in process `syz.2.980'.
[   99.408870][ T8131] netlink: 248 bytes leftover after parsing attributes in process `syz.1.983'.
[   99.429438][ T8135] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   99.438019][ T8135] bridge_slave_0: left allmulticast mode
[   99.441492][ T8135] bridge_slave_0: left promiscuous mode
[   99.444152][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.490250][ T8137] netlink: 'syz.2.985': attribute type 10 has an invalid length.
[   99.776438][ T8135] bridge_slave_1: left allmulticast mode
[   99.780123][ T8135] bridge_slave_1: left promiscuous mode
[   99.783961][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.281857][ T8135] bond0: (slave bond_slave_0): Releasing backup interface
[  100.298804][ T8135] bond0: (slave bond_slave_1): Releasing backup interface
[  100.306241][ T8135] team0: Port device team_slave_0 removed
[  100.313551][ T8135] team0: Port device team_slave_1 removed
[  100.317496][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.326726][ T8135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.329973][ T8135] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.337686][ T8137] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  100.342481][ T8137] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.369196][ T8136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.510278][ T8169] syz_tun: entered allmulticast mode
[  100.525679][ T8169] dvmrp1: entered allmulticast mode
[  100.548516][ T8168] syz_tun: left allmulticast mode
[  100.732707][ T8192] TCP: TCP_TX_DELAY enabled
[  100.837428][ T8206] netlink: 'syz.2.1004': attribute type 7 has an invalid length.
[  100.876965][ T8210] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  101.675478][ T8237] netlink: 'syz.1.1011': attribute type 1 has an invalid length.
[  101.678987][ T8237] netlink: 'syz.1.1011': attribute type 4 has an invalid length.
[  101.683108][ T8237] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1011'.
[  101.723517][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1013'.
[  102.058343][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1027'.
[  102.086296][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1027'.
[  102.394728][ T8290] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1032'.
[  102.399132][ T8290] hsr_slave_0: left promiscuous mode
[  102.405106][ T8290] hsr_slave_1: left promiscuous mode
[  102.832096][ T8306] netlink: 'syz.1.1038': attribute type 13 has an invalid length.
[  102.834923][ T8306] netlink: 'syz.1.1038': attribute type 17 has an invalid length.
[  102.888647][ T8306] tipc: Resetting bearer <eth:team0>
[  102.900166][ T8306] tipc: Resetting bearer <eth:team0>
[  102.905443][ T8306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.935493][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.041377][ T8315] nbd2: detected capacity change from 0 to 63
[  103.048913][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.052414][   T56] block nbd2: Receive control failed (result -104)
[  103.108308][ T8304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  103.135129][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'.
[  103.619294][ T8304] syz.1.1038 (8304) used greatest stack depth: 19112 bytes left
[  103.683316][ T8339] netlink: 'syz.2.1050': attribute type 1 has an invalid length.
[  103.686310][ T8339] nbd: error processing sock list
[  103.689171][ T8339] block nbd1: shutting down sockets
[  103.895624][ T8355] lo speed is unknown, defaulting to 1000
[  104.071220][ T8364] nbd1: detected capacity change from 0 to 63
[  104.095852][ T8370] nbd: couldn't find device at index 0
[  104.138034][  T896] block nbd1: Receive control failed (result -104)
[  104.497739][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'.
[  104.512636][ T8396] macvtap1: entered promiscuous mode
[  104.517237][ T8396] bond0: entered promiscuous mode
[  104.520479][ T8396] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  104.528558][ T8396] macvtap1: entered allmulticast mode
[  104.532960][ T8396] bond0: entered allmulticast mode
[  104.535439][ T8396] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  104.543939][ T8396] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  104.562183][ T8396] bond0: left allmulticast mode
[  104.566798][ T8396] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  104.573062][ T8396] bond0: left promiscuous mode
[  104.577423][ T8396] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  105.324666][ T8461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.334773][ T8461] syzkaller0: entered promiscuous mode
[  105.337638][ T8461] syzkaller0: entered allmulticast mode
[  105.359530][ T8461] tipc: Resetting bearer <eth:syzkaller0>
[  105.364928][ T8459] tipc: Resetting bearer <eth:syzkaller0>
[  105.393575][ T8459] tipc: Disabling bearer <eth:syzkaller0>
[  105.456436][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'.
[  105.865408][ T8508] netlink: 'syz.2.1131': attribute type 29 has an invalid length.
[  105.871135][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1131'.
[  105.875100][ T8508] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  105.948125][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'.
[  106.026208][ T8517] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  106.540492][ T8572] netlink: 'syz.0.1153': attribute type 1 has an invalid length.
[  106.569976][ T8577] dummy0: entered promiscuous mode
[  106.573543][ T8577] dummy0: entered allmulticast mode
[  106.854018][ T8624] __nla_validate_parse: 1 callbacks suppressed
[  106.854030][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'.
[  107.104270][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1187'.
[  107.133942][ T8655] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1189'.
[  107.137663][ T8655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.291820][ T8676] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  107.702814][ T8704] syzkaller1: entered promiscuous mode
[  107.704893][ T8704] syzkaller1: entered allmulticast mode
[  107.998912][ T5869] bond0: (slave wlan1): link status definitely down, disabling slave
[  108.005218][ T5869] bond0: now running without any active interface!
[  108.150452][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'.
[  108.191292][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'.
[  108.209491][ T8730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1224'.
[  108.215152][ T8730] unsupported nlmsg_type 40
[  108.251077][ T8732] lo speed is unknown, defaulting to 1000
[  108.533961][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'.
[  108.537898][ T8748] netlink: 'syz.2.1231': attribute type 12 has an invalid length.
[  108.553579][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1231'.
[  108.557631][ T8748] netlink: 'syz.2.1231': attribute type 12 has an invalid length.
[  108.721424][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'.
[  108.981191][ T8786] netlink: 'syz.2.1249': attribute type 10 has an invalid length.
[  108.991706][ T8786] dummy0: left promiscuous mode
[  108.993829][ T8786] dummy0: left allmulticast mode
[  109.007719][ T8786] team0: Port device dummy0 added
[  109.015646][ T8786] netlink: 'syz.2.1249': attribute type 10 has an invalid length.
[  109.023174][ T8786] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.033811][ T8786] team0: Failed to send options change via netlink (err -105)
[  109.037487][ T8786] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  109.043761][ T8786] team0: Port device dummy0 removed
[  109.052629][ T8786] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  109.736173][ T8820] IPv6: syztnl1: Disabled Multicast RS
[  110.302552][ T8857] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  110.319707][ T8857] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  110.333987][ T8860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1282'.
[  110.408519][ T8869] netlink: 'syz.2.1288': attribute type 29 has an invalid length.
[  110.423681][ T8869] netlink: 'syz.2.1288': attribute type 29 has an invalid length.
[  110.428189][ T8869] unsupported nla_type 58
[  110.601532][ T8892] netlink: 'syz.1.1298': attribute type 3 has an invalid length.
[  110.604263][ T8892] netlink: 'syz.1.1298': attribute type 1 has an invalid length.
[  110.855246][   T33] audit: type=1800 audit(1754415112.355:2): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1296" name="memory.events" dev="tmpfs" ino=1921 res=0 errno=0
[  110.996091][ T8913] tipc: Resetting bearer <eth:team0>
[  111.407887][ T8948] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  111.421038][ T8948] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  111.447289][ T8950] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  111.496039][ T8954] syz_tun: entered promiscuous mode
[  111.499399][ T8954] batadv_slave_0: entered promiscuous mode
[  111.504676][ T8954] hsr1: entered allmulticast mode
[  111.506806][ T8954] syz_tun: entered allmulticast mode
[  111.509170][ T8954] batadv_slave_0: entered allmulticast mode
[  111.542645][    T9] IPVS: starting estimator thread 0...
[  111.641008][ T8959] IPVS: using max 53 ests per chain, 127200 per kthread
[  111.849528][ T8988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.876777][ T8997] __nla_validate_parse: 4 callbacks suppressed
[  111.876788][ T8997] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1339'.
[  111.891533][ T8996] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  111.962074][ T8988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.042806][ T8988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.130230][ T8988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.230598][ T5901] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.247624][ T5901] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.262973][ T5869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.275748][ T5869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.369681][ T9093] sctp: [Deprecated]: syz.1.1370 (pid 9093) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.369681][ T9093] Use struct sctp_sack_info instead
[  113.424649][ T9095] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.635569][ T9120] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1381'.
[  113.712773][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'.
[  113.716712][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1385'.
[  113.813786][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'.
[  113.817037][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'.
[  113.945231][ T9146] validate_nla: 1 callbacks suppressed
[  113.945249][ T9146] netlink: 'syz.1.1395': attribute type 21 has an invalid length.
[  113.951769][ T9146] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1395'.
[  114.056140][ T9156] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1398'.
[  114.060170][ T9156] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1398'.
[  114.067439][ T9156] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1398'.
[  114.198732][ T9167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.202529][ T9167] syzkaller0: entered promiscuous mode
[  114.204426][ T9167] syzkaller0: entered allmulticast mode
[  114.210127][ T9170] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  114.222861][ T9167] tipc: Resetting bearer <eth:syzkaller0>
[  114.225508][ T9166] tipc: Resetting bearer <eth:syzkaller0>
[  114.233824][ T9166] tipc: Disabling bearer <eth:syzkaller0>
[  115.683477][ T9229] tipc: Resetting bearer <eth:team0>
[  115.704172][ T9229] bond0: (slave wlan1): Releasing backup interface
[  115.784368][ T9229] tipc: Resetting bearer <eth:team0>
[  117.761810][ T9363] block nbd3: server does not support multiple connections per device.
[  117.765718][ T9363] block nbd3: shutting down sockets
[  117.902976][ T9380] netlink: 'syz.2.1497': attribute type 21 has an invalid length.
[  117.906080][ T9380] __nla_validate_parse: 11 callbacks suppressed
[  117.906088][ T9380] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1497'.
[  117.972357][ T9390] netlink: 'syz.1.1503': attribute type 10 has an invalid length.
[  117.976090][ T9390] macvlan0: entered promiscuous mode
[  118.058320][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'.
[  118.061712][ T9397] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1507'.
[  118.232461][ T9423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'.
[  118.419662][ T9440] sctp: [Deprecated]: syz.1.1525 (pid 9440) Use of int in maxseg socket option.
[  118.419662][ T9440] Use struct sctp_assoc_value instead
[  118.602959][ T5869] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.607163][ T5869] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.611587][ T5869] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.614716][ T5869] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.443952][ T9502] netlink: 'syz.1.1554': attribute type 1 has an invalid length.
[  119.447366][ T9502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.535765][ T9511] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1558'.
[  119.538799][ T9511] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1558'.
[  119.884107][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'.
[  119.887506][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'.
[  119.892412][ T9531] netlink: 'syz.1.1566': attribute type 20 has an invalid length.
[  120.028598][ T9539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1570'.
[  120.096315][ T9545] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  120.328821][ T9557] netlink: 'syz.0.1576': attribute type 3 has an invalid length.
[  120.333818][ T9557] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1576'.
[  120.423873][ T9561] netlink: 'syz.0.1578': attribute type 10 has an invalid length.
[  120.442434][ T9561] team0: Device ipvlan1 failed to register rx_handler
[  120.526075][ T9569] netlink: zone id is out of range
[  120.667091][ T9583] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.818264][ T9595] batadv1: entered promiscuous mode
[  121.323574][ T9634] nbd3: detected capacity change from 0 to 127
[  121.329462][   T56] block nbd3: Receive control failed (result -104)
[  121.645521][ T9672] netlink: 'syz.0.1630': attribute type 1 has an invalid length.
[  121.727590][ T9682] netlink: 'syz.2.1634': attribute type 1 has an invalid length.
[  121.743013][ T9682] netlink: 'syz.2.1634': attribute type 2 has an invalid length.
[  121.789599][ T9690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  121.841438][ T9701] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  121.883093][ T9706] netlink: 'syz.2.1644': attribute type 3 has an invalid length.
[  121.885763][ T9706] netlink: 'syz.2.1644': attribute type 1 has an invalid length.
[  122.171043][ T9736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.174047][ T9736] syzkaller0: entered promiscuous mode
[  122.176141][ T9736] syzkaller0: entered allmulticast mode
[  122.194404][ T9736] tipc: Resetting bearer <eth:syzkaller0>
[  122.198235][ T9735] tipc: Resetting bearer <eth:syzkaller0>
[  122.209640][ T9735] tipc: Disabling bearer <eth:syzkaller0>
[  122.389034][ T9746] rdma_rxe: rxe_newlink: failed to add lo
[  122.671202][ T9770] bridge_slave_0: invalid flags given to default FDB implementation
[  122.743734][ T9766] netlink: 'syz.2.1673': attribute type 4 has an invalid length.
[  123.713219][ T9857] __nla_validate_parse: 13 callbacks suppressed
[  123.713236][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'.
[  124.344589][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'.
[  124.472277][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1738'.
[  124.505896][ T9913] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1739'.
[  124.522461][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'.
[  124.638695][ T9918] IPv6: Can't replace route, no match found
[  124.672259][ T9903] batadv_slave_0 (unregistering): left promiscuous mode
[  124.719491][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1742'.
[  124.983575][ T9940] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1752'.
[  125.186682][ T9965] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1762'.
[  125.458292][ T9979] tipc: Resetting bearer <eth:team0>
[  125.582238][ T9979] macvlan0: left promiscuous mode
[  125.639304][ T5682] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.651002][ T5682] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.655189][ T5682] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.675276][ T5682] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.043199][T10010] sctp: [Deprecated]: syz.1.1780 (pid 10010) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.043199][T10010] Use struct sctp_sack_info instead
[  126.171388][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1782'.
[  126.330289][T10023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.336478][T10023] syzkaller0: entered promiscuous mode
[  126.338907][T10023] syzkaller0: entered allmulticast mode
[  126.374830][T10027] netlink: 'syz.0.1787': attribute type 1 has an invalid length.
[  126.385465][T10023] tipc: Resetting bearer <eth:syzkaller0>
[  126.394923][T10022] tipc: Resetting bearer <eth:syzkaller0>
[  126.414519][T10022] tipc: Disabling bearer <eth:syzkaller0>
[  127.228524][T10077] syzkaller1: entered promiscuous mode
[  127.232391][T10077] syzkaller1: entered allmulticast mode
[  127.714503][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1818'.
[  128.273971][T10133] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  128.323922][T10141] netlink: 'syz.0.1840': attribute type 15 has an invalid length.
[  128.327160][T10141] netlink: 'syz.0.1840': attribute type 15 has an invalid length.
[  128.616060][T10168] netlink: 'syz.1.1853': attribute type 13 has an invalid length.
[  128.775893][T10185] __nla_validate_parse: 9 callbacks suppressed
[  128.775910][T10185] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1859'.
[  129.098644][T10209] netlink: 'syz.2.1872': attribute type 4 has an invalid length.
[  129.108744][T10209] netlink: 'syz.2.1872': attribute type 4 has an invalid length.
[  129.181665][T10214] netlink: 212264 bytes leftover after parsing attributes in process `syz.2.1874'.
[  129.222075][T10199] netlink: 'syz.1.1868': attribute type 13 has an invalid length.
[  129.295366][T10220] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1877'.
[  129.576077][T10246] netlink: zone id is out of range
[  129.807920][T10261] netlink: 'syz.0.1895': attribute type 4 has an invalid length.
[  129.822618][   T10] lo speed is unknown, defaulting to 1000
[  129.826301][   T10] syz0: Port: 1 Link DOWN
[  129.827550][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'.
[  129.836384][   T10] lo speed is unknown, defaulting to 1000
[  129.872981][T10267] netlink: 786 bytes leftover after parsing attributes in process `syz.0.1898'.
[  130.473792][T10327] bond0: (slave gretap0): Opening slave failed
[  130.516934][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'.
[  130.520103][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'.
[  130.572083][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'.
[  130.575952][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'.
[  130.680035][T10350] netlink: 'syz.1.1920': attribute type 29 has an invalid length.
[  130.705857][T10350] netlink: 'syz.1.1920': attribute type 29 has an invalid length.
[  130.717132][T10350] netlink: 508 bytes leftover after parsing attributes in process `syz.1.1920'.
[  130.851336][T10367] Bluetooth: MGMT ver 1.23
[  131.321472][T10423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.325132][T10423] syzkaller0: entered promiscuous mode
[  131.327736][T10423] syzkaller0: entered allmulticast mode
[  131.372926][T10423] tipc: Resetting bearer <eth:syzkaller0>
[  131.378295][T10422] tipc: Resetting bearer <eth:syzkaller0>
[  131.392076][T10422] tipc: Disabling bearer <eth:syzkaller0>
[  131.650015][T10448] sctp: [Deprecated]: syz.1.1953 (pid 10448) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.650015][T10448] Use struct sctp_sack_info instead
[  132.044928][T10412] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  132.196776][T10495] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  132.653630][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.656273][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.789227][   T33] audit: type=1800 audit(1754415134.285:3): pid=10539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1983" name="@" dev="tmpfs" ino=3542 res=0 errno=0
[  133.296032][   T61] block nbd2: Possible stuck request ffff888022830000: control (read@0,1024B). Runtime 30 seconds
[  133.302118][   T61] block nbd2: Possible stuck request ffff888022830200: control (read@1024,1024B). Runtime 30 seconds
[  133.307555][   T61] block nbd2: Possible stuck request ffff888022830400: control (read@2048,1024B). Runtime 30 seconds
[  133.319272][   T61] block nbd2: Possible stuck request ffff888022830600: control (read@3072,1024B). Runtime 30 seconds
[  133.746173][T10602] rdma_rxe: rxe_newlink: failed to add lo
[  133.816429][T10602] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.819911][T10602] 8021q: adding VLAN 0 to HW filter on device team0
[  133.823076][T10602] tipc: Resetting bearer <eth:team0>
[  133.825094][T10602] tipc: Resetting bearer <eth:team0>
[  133.828125][T10602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.837110][T10611] openvswitch: netlink: Message has 1 unknown bytes.
[  133.837164][T10608] __nla_validate_parse: 3 callbacks suppressed
[  133.837175][T10608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2014'.
[  133.839946][T10611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.033851][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2024'.
[  134.120538][T10634] lo speed is unknown, defaulting to 1000
[  134.577516][   T25] block nbd1: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 30 seconds
[  134.582263][   T25] block nbd1: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 30 seconds
[  134.586689][   T25] block nbd1: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 30 seconds
[  134.593335][   T25] block nbd1: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 30 seconds
[  134.619594][T10637] validate_nla: 1 callbacks suppressed
[  134.619609][T10637] netlink: 'syz.2.2027': attribute type 1 has an invalid length.
[  135.200183][T10675] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.456507][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'.
[  135.461173][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'.
[  135.616317][T10702] netlink: 'syz.2.2055': attribute type 1 has an invalid length.
[  135.619104][T10702] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2055'.
[  135.624609][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'.
[  135.763671][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'.
[  135.828262][T10718] syzkaller1: entered promiscuous mode
[  135.830599][T10718] syzkaller1: entered allmulticast mode
[  136.527261][T10780] IPVS: length: 100 != 8
[  136.587004][T10784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2094'.
[  136.774958][T10794] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2099'.
[  136.967604][T10804] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2104'.
[  137.099680][T10812] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.161958][T10812] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.217517][T10812] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.272439][T10812] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  137.346268][ T5901] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.359352][ T5901] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.373093][ T5901] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.383605][ T5901] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.076712][T10830] sch_tbf: burst 3298 is lower than device lo mtu (11337746) !
[  138.889403][T10904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2148'.
[  138.893915][T10904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.340160][T10919] syzkaller0: entered promiscuous mode
[  139.343676][T10919] syzkaller0: entered allmulticast mode
[  140.407572][T10956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.418316][T10956] syzkaller0: entered promiscuous mode
[  140.420207][T10956] syzkaller0: entered allmulticast mode
[  140.446330][T10956] tipc: Resetting bearer <eth:syzkaller0>
[  140.455594][T10955] tipc: Resetting bearer <eth:syzkaller0>
[  140.473726][T10955] tipc: Disabling bearer <eth:syzkaller0>
[  140.477219][T10962] netlink: 'syz.1.2173': attribute type 1 has an invalid length.
[  140.565312][T10973] netlink: 'syz.0.2177': attribute type 3 has an invalid length.
[  140.568015][T10973] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2177'.
[  140.589550][T10971] lo speed is unknown, defaulting to 1000
[  140.759702][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2183'.
[  140.763641][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2183'.
[  140.816715][T10993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2183'.
[  140.819456][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'.
[  140.820678][T10993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2183'.
[  140.834139][T10993] bond0: entered promiscuous mode
[  140.835986][T10993] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  140.840399][T10993] batadv_slave_1: entered promiscuous mode
[  140.966134][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'.
[  140.988788][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'.
[  141.004703][T11004] netlink: 'syz.0.2192': attribute type 30 has an invalid length.
[  141.094526][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'.
[  141.097753][T11004] netlink: 'syz.0.2192': attribute type 30 has an invalid length.
[  141.258285][T11029] netlink: 'syz.1.2204': attribute type 3 has an invalid length.
[  141.268980][T11029] netlink: 'syz.1.2204': attribute type 1 has an invalid length.
[  141.336034][T11035] netlink: 'syz.0.2207': attribute type 10 has an invalid length.
[  141.359205][T11035] team0: Device veth0_vlan failed to register rx_handler
[  141.660672][T11064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  142.615571][T11134] lo speed is unknown, defaulting to 1000
[  142.726492][T11140] netlink: 'syz.1.2252': attribute type 1 has an invalid length.
[  142.779961][T11140] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  142.805061][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  142.805528][T11140] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.943300][ T5901] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  142.978943][T11145] netlink: 'syz.0.2253': attribute type 1 has an invalid length.
[  143.003145][T11140] veth5: entered promiscuous mode
[  143.006676][T11140] bond1: (slave veth5): Enslaving as a backup interface with a down link
[  143.016561][T11143] tipc: Resetting bearer <eth:team0>
[  143.192103][T11143] bond1: (slave ip6gretap1): Removing an active aggregator
[  143.197517][T11143] bond1: (slave ip6gretap1): Releasing active interface
[  143.204762][T11143] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ca:a6:43:2c:c0:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  143.217779][T11143] bond1: (slave veth5): Releasing backup interface
[  143.231094][T11147] v: renamed from dummy0 (while UP)
[  143.655773][T11193] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  143.831456][T11204] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.836988][T11204] bond0: (slave rose0): Enslaving as an active interface with an up link
[  144.500089][T11228] __nla_validate_parse: 2 callbacks suppressed
[  144.500107][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'.
[  144.505900][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'.
[  144.556505][T11232] netlink: 'syz.1.2280': attribute type 1 has an invalid length.
[  144.569953][T11232] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2280'.
[  144.574992][T11232] NCSI netlink: No device for ifindex 0
[  144.602936][T11236] nbd: nbd1 already in use
[  144.670518][T11242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.676546][T11242] syzkaller0: entered promiscuous mode
[  144.679165][T11242] syzkaller0: entered allmulticast mode
[  144.705180][T11242] tipc: Resetting bearer <eth:syzkaller0>
[  144.713061][T11241] tipc: Resetting bearer <eth:syzkaller0>
[  144.752847][T11241] tipc: Disabling bearer <eth:syzkaller0>
[  144.893298][T11259] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2292'.
[  145.041455][ T5682] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  145.134476][T11280] tipc: Started in network mode
[  145.136867][T11280] tipc: Node identity 00000000000000000000ffffac141422, cluster identity 4711
[  145.140341][T11280] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  145.242796][T11296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2303'.
[  145.746134][T11330] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2323'.
[  146.390258][T11341] validate_nla: 3 callbacks suppressed
[  146.390271][T11341] netlink: 'syz.2.2328': attribute type 2 has an invalid length.
[  146.413999][T11341] `: entered promiscuous mode
[  146.534471][T11346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2330'.
[  146.537787][T11346] netlink: 'syz.2.2330': attribute type 1 has an invalid length.
[  146.554851][T11347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.557982][T11347] syzkaller0: entered promiscuous mode
[  146.560047][T11347] syzkaller0: entered allmulticast mode
[  146.579221][T11347] tipc: Resetting bearer <eth:syzkaller0>
[  146.587379][T11345] tipc: Resetting bearer <eth:syzkaller0>
[  146.607978][T11345] tipc: Disabling bearer <eth:syzkaller0>
[  147.349427][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2345'.
[  147.364276][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2344'.
[  147.611762][T11393] syzkaller0: entered promiscuous mode
[  147.615312][T11393] syzkaller0: entered allmulticast mode
[  147.651848][T11393] netlink: 'syz.0.2349': attribute type 11 has an invalid length.
[  148.324868][T11425] tipc: Resetting bearer <eth:team0>
[  148.445197][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'.
[  148.602385][T11453] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  148.672457][ T5895] Bluetooth: hci2: link tx timeout
[  148.675089][ T5895] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  148.678985][ T5895] Bluetooth: hci2: link tx timeout
[  148.681369][ T5895] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  148.955011][T11481] netlink: 'syz.1.2390': attribute type 7 has an invalid length.
[  149.606429][T11518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.612182][T11518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.616563][T11518] hsr0: entered promiscuous mode
[  149.618793][T11518] hsr0: entered allmulticast mode
[  149.622288][T11518] hsr_slave_0: entered allmulticast mode
[  149.624925][T11518] hsr_slave_1: entered allmulticast mode
[  149.822503][T11520] __nla_validate_parse: 5 callbacks suppressed
[  149.822518][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2408'.
[  149.839423][T11533] veth7: entered promiscuous mode
[  149.845270][T11533] bond0: (slave veth7): Enslaving as an active interface with a down link
[  149.869200][T11520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  149.875979][T11520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.898571][T11538] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2415'.
[  149.905572][T11538] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2415'.
[  150.730963][ T5895] Bluetooth: hci2: command 0x0406 tx timeout
[  150.838559][ T5891] cgroup: fork rejected by pids controller in /syz1
[  150.850696][T11574] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2432'.
[  151.035604][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2435'.
[  151.079611][T11583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2437'.
[  151.083177][T11583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2437'.
[  151.086292][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2437'.
[  151.215652][T11587] lo speed is unknown, defaulting to 1000
[  151.258576][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.264213][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.267915][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.274720][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.279037][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  151.854065][   T61] block nbd3: Possible stuck request ffff888022890000: control (read@0,1024B). Runtime 30 seconds
[  151.858047][   T61] block nbd3: Possible stuck request ffff888022890200: control (read@1024,1024B). Runtime 30 seconds
[  151.863347][   T61] block nbd3: Possible stuck request ffff888022890400: control (read@2048,1024B). Runtime 30 seconds
[  151.868005][   T61] block nbd3: Possible stuck request ffff888022890600: control (read@3072,1024B). Runtime 30 seconds
[  151.902515][ T5682] bond0 (unregistering): Released all slaves
[  151.972523][ T5682] bond1 (unregistering): Released all slaves
[  152.003760][T11591] lo speed is unknown, defaulting to 1000
[  152.095575][ T5682] tipc: Disabling bearer <eth:team0>
[  152.117315][ T5682] tipc: Left network mode
[  152.149395][ T5682] IPVS: stopping backup sync thread 9170 ...
[  152.289956][T11616] bridge0: entered promiscuous mode
[  152.293613][T11616] bridge0: port 1(macvlan2) entered blocking state
[  152.296414][T11616] bridge0: port 1(macvlan2) entered disabled state
[  152.299244][T11616] macvlan2: entered allmulticast mode
[  152.311387][T11616] bridge0: entered allmulticast mode
[  152.318004][T11616] macvlan2: left allmulticast mode
[  152.320507][T11616] bridge0: left allmulticast mode
[  152.324356][T11616] bridge0: left promiscuous mode
[  152.593147][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'.
[  152.697343][T11627] macvlan2: entered promiscuous mode
[  152.699539][T11627] macvlan2: entered allmulticast mode
[  152.703961][T11627] bond2: (slave macvlan2): Opening slave failed
[  152.813594][ T5895] Bluetooth: hci2: command 0x0406 tx timeout
[  152.925115][T11636] IPVS: Scheduler module ip_vs_sip not found
[  153.298459][T11591] chnl_net:caif_netlink_parms(): no params data found
[  153.371270][ T5888] Bluetooth: hci1: command tx timeout
[  153.383363][T11591] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.385795][T11591] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.388197][T11591] bridge_slave_0: entered allmulticast mode
[  153.391256][T11591] bridge_slave_0: entered promiscuous mode
[  153.396491][T11591] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.398944][T11591] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.401688][T11591] bridge_slave_1: entered allmulticast mode
[  153.406078][T11591] bridge_slave_1: entered promiscuous mode
[  153.457509][T11591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.465846][T11591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.522771][T11591] team0: Port device team_slave_0 added
[  153.525993][T11591] team0: Port device team_slave_1 added
[  153.566567][T11591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.568941][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.600802][T11591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.611313][T11591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.613775][T11591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.642797][T11591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.703600][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2458'.
[  153.766277][T11591] hsr_slave_0: entered promiscuous mode
[  153.766952][ T5682] IPVS: stop unused estimator thread 0...
[  153.778355][T11591] hsr_slave_1: entered promiscuous mode
[  153.786448][T11591] debugfs: 'hsr0' already exists in 'hsr'
[  153.788441][T11591] Cannot create hsr debugfs directory
[  154.023995][T11682] IPVS: Scheduler module ip_vs_sip not found
[  154.176212][T11700] netlink: 'syz.2.2468': attribute type 1 has an invalid length.
[  154.183589][T11695] netlink: 'syz.0.2469': attribute type 12 has an invalid length.
[  154.198446][T11700] 8021q: adding VLAN 0 to HW filter on device bond1
[  154.252039][T11700] gretap1: entered promiscuous mode
[  154.256677][T11700] bond1: (slave gretap1): making interface the new active one
[  154.260285][T11700] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  154.987265][T11591] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  155.030212][T11591] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  155.056897][T11591] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  155.088280][T11591] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  155.253208][T11591] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.276187][T11591] 8021q: adding VLAN 0 to HW filter on device team0
[  155.290166][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.293233][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.299774][T11764] __nla_validate_parse: 4 callbacks suppressed
[  155.299787][T11764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2480'.
[  155.317139][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.320224][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.452085][ T5888] Bluetooth: hci1: command tx timeout
[  155.547876][T11782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.558305][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.562521][T11782] syzkaller0: entered promiscuous mode
[  155.564997][T11782] syzkaller0: entered allmulticast mode
[  155.602696][T11591] veth0_vlan: entered promiscuous mode
[  155.608417][T11782] tipc: Resetting bearer <eth:syzkaller0>
[  155.612790][T11591] veth1_vlan: entered promiscuous mode
[  155.615683][T11779] tipc: Resetting bearer <eth:syzkaller0>
[  155.635894][T11779] tipc: Disabling bearer <eth:syzkaller0>
[  155.654398][T11591] veth0_macvtap: entered promiscuous mode
[  155.658867][T11591] veth1_macvtap: entered promiscuous mode
[  155.669733][T11591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  155.685422][T11591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  155.703950][ T5682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.707944][ T5682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.733976][ T5682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.737040][ T5682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.788758][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.794552][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.816542][  T942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.819327][  T942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.853366][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  155.970219][T11813] netlink: 'syz.1.2493': attribute type 1 has an invalid length.
[  155.977939][T11813] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2493'.
[  156.073658][T11827] netlink: 'syz.2.2503': attribute type 3 has an invalid length.
[  156.141449][T11833] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  156.379193][T11851] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2513'.
[  156.382773][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'.
[  156.549750][T11859] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2517'.
[  156.555905][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2517'.
[  157.012158][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'.
[  157.164721][T11878] tipc: MTU too low for tipc bearer
[  157.167182][T11879] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  157.173801][T11879] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  157.326827][T11895] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  157.333282][T11895] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  157.532586][ T5888] Bluetooth: hci1: command tx timeout
[  157.574912][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'.
[  157.585427][T11916] bond_slave_1: entered promiscuous mode
[  157.587826][T11916] bond_slave_1: entered allmulticast mode
[  157.708427][T11931] netlink: 'syz.1.2547': attribute type 1 has an invalid length.
[  157.716115][T11931] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2547'.
[  157.866608][ T5818] IPVS: starting estimator thread 0...
[  157.971722][T11944] IPVS: using max 79 ests per chain, 189600 per kthread
[  158.024769][T11961] netlink: 'syz.1.2561': attribute type 1 has an invalid length.
[  158.084103][T11961] veth3: entered promiscuous mode
[  158.152490][T11972] syzkaller0: entered promiscuous mode
[  158.158168][T11972] syzkaller0: entered allmulticast mode
[  158.457691][T12002] netlink: 'syz.1.2580': attribute type 3 has an invalid length.
[  158.462158][T12002] netlink: 'syz.1.2580': attribute type 3 has an invalid length.
[  158.504238][T12005] netlink: 'syz.1.2581': attribute type 4 has an invalid length.
[  159.082149][T12024] IPVS: stopping backup sync thread 12025 ...
[  159.086512][T12025] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  159.138116][T12027] netlink: 'syz.2.2590': attribute type 1 has an invalid length.
[  159.611056][ T5888] Bluetooth: hci1: command tx timeout
[  160.229218][T12077] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode
[  160.255100][T12077] bridge_slave_0: left allmulticast mode
[  160.257721][T12077] bridge_slave_0: left promiscuous mode
[  160.260317][T12077] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.267015][T12077] bridge_slave_1: left allmulticast mode
[  160.269512][T12077] bridge_slave_1: left promiscuous mode
[  160.273893][T12077] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.286042][T12077] bond0: (slave bond_slave_0): Releasing backup interface
[  160.290730][T12077] bond0: (slave bond_slave_1): Releasing backup interface
[  160.305273][T12077] team0: Port device team_slave_0 removed
[  160.313582][T12077] team0: Port device team_slave_1 removed
[  160.316729][T12077] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.319796][T12077] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.324359][T12077] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.327355][T12077] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.387941][T12077] netlink: 'syz.1.2614': attribute type 10 has an invalid length.
[  160.390638][T12077] mac80211_hwsim hwsim16 wlan1: left allmulticast mode
[  160.399328][T12077] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.405841][T12077] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  160.422078][T12077] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  160.426261][T12077] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.430641][T12082] __nla_validate_parse: 4 callbacks suppressed
[  160.430656][T12082] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2616'.
[  160.436274][T12082] netlink: 'syz.0.2616': attribute type 1 has an invalid length.
[  160.669001][T12096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.577950][T12162] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  161.689336][T12168] netlink: 'syz.2.2657': attribute type 4 has an invalid length.
[  161.984443][T12196] netlink: 'syz.1.2668': attribute type 6 has an invalid length.
[  162.059169][T12199] syzkaller1: entered promiscuous mode
[  162.061940][T12199] syzkaller1: entered allmulticast mode
[  162.540376][T12232] sock: sock_timestamping_bind_phc: sock not bind to device
[  162.625270][T12239] gretap1: entered promiscuous mode
[  162.627220][T12239] gretap1: entered allmulticast mode
[  163.128853][T12273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.298138][T12295] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2713'.
[  163.301751][T12295] netlink: 'syz.1.2713': attribute type 1 has an invalid length.
[  163.381847][   T61] block nbd2: Possible stuck request ffff888022830000: control (read@0,1024B). Runtime 60 seconds
[  163.386479][   T61] block nbd2: Possible stuck request ffff888022830200: control (read@1024,1024B). Runtime 60 seconds
[  163.391726][   T61] block nbd2: Possible stuck request ffff888022830400: control (read@2048,1024B). Runtime 60 seconds
[  163.400362][   T61] block nbd2: Possible stuck request ffff888022830600: control (read@3072,1024B). Runtime 60 seconds
[  163.653822][T12338] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2734'.
[  163.671155][T12338] netem: unknown loss type 0
[  163.673628][T12338] netem: change failed
[  163.676198][T12342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2736'.
[  163.754615][T12350] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2740'.
[  163.764758][T12350] vlan3: entered allmulticast mode
[  163.767733][T12350] gretap0: entered allmulticast mode
[  163.985201][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2748'.
[  164.060983][ T5271] udevd[5271]: worker [5858] /devices/virtual/block/nbd2 is taking a long time
[  164.526661][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'.
[  164.659168][   T25] block nbd1: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 60 seconds
[  164.663733][   T25] block nbd1: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 60 seconds
[  164.668018][   T25] block nbd1: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 60 seconds
[  164.674495][   T25] block nbd1: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 60 seconds
[  164.675067][T12406] netlink: 'syz.1.2766': attribute type 1 has an invalid length.
[  164.822422][T12408] nbd4: detected capacity change from 0 to 127
[  164.828472][ T8369] block nbd4: Receive control failed (result -104)
[  165.049700][ T5901] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  165.292230][T12464] syzkaller1: entered promiscuous mode
[  165.294254][T12464] syzkaller1: entered allmulticast mode
[  167.034712][T12536] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  167.037835][T12542] netlink: 'syz.1.2825': attribute type 4 has an invalid length.
[  167.233007][ T5901] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.236994][ T5901] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.247214][ T5901] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.257281][ T5901] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.321001][T12579] block nbd5: server does not support multiple connections per device.
[  168.325149][T12579] block nbd5: shutting down sockets
[  168.376568][T12583] netlink: 'syz.1.2844': attribute type 8 has an invalid length.
[  168.406207][T12585] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  168.783441][T12604] netlink: 'syz.2.2853': attribute type 83 has an invalid length.
[  168.981745][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2860'.
[  170.584304][T12691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.641097][T12691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.852213][T12695] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2894'.
[  170.885728][T12695] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  171.291997][T12725] IPv6: sit1: Disabled Multicast RS
[  171.519987][T12747] lo speed is unknown, defaulting to 1000
[  171.733795][T12764] lo speed is unknown, defaulting to 1000
[  171.949212][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2926'.
[  171.997743][T12784] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2926'.
[  172.006331][T12784] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2926'.
[  172.080270][T12786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  172.353433][T12807] ieee802154 phy0 wpan0: encryption failed: -22
[  172.664378][T12834] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2949'.
[  172.753876][T12847] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  172.823417][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2959'.
[  172.833178][T12853] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2959'.
[  173.099996][T12881] lo speed is unknown, defaulting to 1000
[  173.847006][T12890] lo speed is unknown, defaulting to 1000
[  174.206726][T12916] netlink: 404 bytes leftover after parsing attributes in process `syz.0.2983'.
[  174.210794][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2983'.
[  174.235302][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2983'.
[  174.239416][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2983'.
[  174.278363][T12920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2985'.
[  174.337722][T12927] netlink: 'syz.1.2989': attribute type 9 has an invalid length.
[  174.342339][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'.
[  174.376138][T12928] trusted_key: syz.0.2988 sent an empty control message without MSG_MORE.
[  174.391994][T12927] macvlan2: entered promiscuous mode
[  174.394656][T12927] hsr0: entered promiscuous mode
[  174.397082][T12927] macvlan2: entered allmulticast mode
[  174.399739][T12927] hsr0: entered allmulticast mode
[  174.403028][T12927] hsr_slave_0: entered allmulticast mode
[  174.405529][T12927] hsr_slave_1: entered allmulticast mode
[  174.469364][T12934] netlink: 'syz.1.2992': attribute type 11 has an invalid length.
[  174.836974][T12969] openvswitch: netlink: IP tunnel dst address not specified
[  175.051449][T12987] netlink: 'syz.2.3016': attribute type 2 has an invalid length.
[  175.167283][T12997] bridge3: entered promiscuous mode
[  175.170622][T12997] bridge3: entered allmulticast mode
[  175.194028][T12997] team0: Port device bridge3 added
[  175.325180][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'.
[  175.329620][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'.
[  175.978563][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3048'.
[  176.229595][T13090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.232389][T13090] syzkaller0: entered promiscuous mode
[  176.234244][T13090] syzkaller0: entered allmulticast mode
[  176.247107][T13090] tipc: Resetting bearer <eth:syzkaller0>
[  176.253705][T13089] tipc: Resetting bearer <eth:syzkaller0>
[  176.271831][T13089] tipc: Disabling bearer <eth:syzkaller0>
[  176.393830][T13099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  176.477253][T13107] netlink: 'syz.2.3069': attribute type 1 has an invalid length.
[  176.496203][T13107] bond2: entered promiscuous mode
[  176.498597][T13107] 8021q: adding VLAN 0 to HW filter on device bond2
[  176.516932][T13107] bond2: (slave bridge3): making interface the new active one
[  176.520293][T13107] bridge3: entered promiscuous mode
[  176.524320][T13107] bond2: (slave bridge3): Enslaving as an active interface with an up link
[  176.604119][T13120] netlink: 'syz.2.3075': attribute type 1 has an invalid length.
[  177.245881][T13170] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  177.249817][T13170] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  177.397761][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'.
[  177.430442][T13178] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  177.906198][T13209] netlink: 'syz.2.3117': attribute type 10 has an invalid length.
[  177.909072][T13209] dummy0: entered promiscuous mode
[  177.911361][T13209] dummy0: entered allmulticast mode
[  177.914158][T13209] bond0: (slave dummy0): Releasing backup interface
[  177.924915][T13209] bridge0: port 1(dummy0) entered blocking state
[  177.927717][T13209] bridge0: port 1(dummy0) entered disabled state
[  178.914301][T13259] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  179.492020][   T33] audit: type=1800 audit(1754415180.995:4): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3139" name="memory.events" dev="tmpfs" ino=5538 res=0 errno=0
[  179.638654][T13302] __nla_validate_parse: 2 callbacks suppressed
[  179.638669][T13302] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3140'.
[  180.059762][T13327] netlink: 'syz.1.3152': attribute type 8 has an invalid length.
[  181.313273][T13363] netlink: 'syz.1.3167': attribute type 1 has an invalid length.
[  181.315950][T13363] netlink: 'syz.1.3167': attribute type 1 has an invalid length.
[  181.318750][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3167'.
[  181.330691][T13363] block nbd5: shutting down sockets
[  181.446492][T13375] netlink: 'syz.0.3173': attribute type 1 has an invalid length.
[  181.695024][T13393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.700160][T13393] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.731955][T13395] lo speed is unknown, defaulting to 1000
[  181.802334][T13393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.807026][T13393] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.891791][T13393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.896465][T13393] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.941131][   T61] block nbd3: Possible stuck request ffff888022890000: control (read@0,1024B). Runtime 60 seconds
[  181.946096][   T61] block nbd3: Possible stuck request ffff888022890200: control (read@1024,1024B). Runtime 60 seconds
[  181.951292][   T61] block nbd3: Possible stuck request ffff888022890400: control (read@2048,1024B). Runtime 60 seconds
[  181.956007][   T61] block nbd3: Possible stuck request ffff888022890600: control (read@3072,1024B). Runtime 60 seconds
[  181.976848][T13393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.983690][T13393] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.105960][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'.
[  182.156884][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.160536][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.222663][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.225541][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.228471][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.232976][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.283011][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.287708][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.783328][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3204'.
[  182.962020][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'.
[  183.242614][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.245992][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.617930][T13496] netlink: 'syz.1.3229': attribute type 9 has an invalid length.
[  183.620689][T13496] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3229'.
[  184.383027][T13568] netlink: 'syz.2.3257': attribute type 20 has an invalid length.
[  184.476338][T13572] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  184.514698][T13577] netlink: 'syz.2.3260': attribute type 1 has an invalid length.
[  184.517878][T13577] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3260'.
[  184.606981][T13582] netlink: 'syz.2.3262': attribute type 1 has an invalid length.
[  184.610018][T13582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3262'.
[  185.632319][T13606] Unsupported ieee802154 address type: 0
[  185.681538][T13608] netlink: 'syz.0.3270': attribute type 10 has an invalid length.
[  185.691770][T13608] 8021q: adding VLAN 0 to HW filter on device team0
[  185.696080][T13608] team0: entered promiscuous mode
[  185.698326][T13608] bond0: (slave team0): Enslaving as an active interface with an up link
[  185.706656][T13607] delete_channel: no stack
[  186.180139][T13642] netlink: 'syz.1.3286': attribute type 1 has an invalid length.
[  186.183305][T13642] netlink: 'syz.1.3286': attribute type 1 has an invalid length.
[  186.229630][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'.
[  186.280174][T13650] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  186.526131][T13683] bond0: (slave wlan1): Releasing backup interface
[  186.758613][T13703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3315'.
[  186.766923][T13705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3316'.
[  186.818981][T13711] netlink: 'syz.0.3319': attribute type 1 has an invalid length.
[  186.823919][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'.
[  186.828051][T13711] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3319'.
[  186.887292][T13713] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.893927][T13713] syzkaller0: entered promiscuous mode
[  186.895950][T13713] syzkaller0: entered allmulticast mode
[  186.910466][T13713] tipc: Resetting bearer <eth:syzkaller0>
[  186.918738][T13712] tipc: Resetting bearer <eth:syzkaller0>
[  186.932561][T13712] tipc: Disabling bearer <eth:syzkaller0>
[  187.068034][T13727] netlink: 'syz.0.3326': attribute type 1 has an invalid length.
[  187.093374][T13727] netlink: 'syz.0.3326': attribute type 1 has an invalid length.
[  187.188885][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3334'.
[  187.194390][T13742] netlink: 'syz.2.3334': attribute type 20 has an invalid length.
[  187.198094][T13742] netlink: 'syz.2.3334': attribute type 21 has an invalid length.
[  187.625782][T13791] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3355'.
[  188.395041][T13815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.474647][T13823] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  188.798041][T13834] netlink: 'syz.1.3374': attribute type 1 has an invalid length.
[  189.344740][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3383'.
[  189.618132][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3388'.
[  189.648581][T13862] batadv_slave_1 (unregistering): left promiscuous mode
[  189.794850][T13871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3392'.
[  189.805538][T13871] macvtap1: entered promiscuous mode
[  189.807771][T13871] v: entered promiscuous mode
[  189.810097][T13871] macvtap1: entered allmulticast mode
[  189.813530][T13871] v: entered allmulticast mode
[  191.507191][T13953] tipc: Enabled bearer <eth:gre0>, priority 10
[  191.590731][T13959] nbd: couldn't find a device at index 0
[  191.635870][T13961] GUP no longer grows the stack in syz.1.3430 (13961): 200000006000-20000000a000 (200000005000)
[  191.643212][T13961] CPU: 1 UID: 0 PID: 13961 Comm: syz.1.3430 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  191.643230][T13961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.643237][T13961] Call Trace:
[  191.643243][T13961]  <TASK>
[  191.643247][T13961]  dump_stack_lvl+0x189/0x250
[  191.643268][T13961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.643281][T13961]  ? __pfx__printk+0x10/0x10
[  191.643293][T13961]  ? find_vma+0xe7/0x160
[  191.643319][T13961]  __get_user_pages+0x2a60/0x30b0
[  191.643360][T13961]  ? __pfx___get_user_pages+0x10/0x10
[  191.643404][T13961]  ? __gup_longterm_locked+0xbf7/0x15b0
[  191.643419][T13961]  ? down_read_killable+0x1d1/0x350
[  191.643430][T13961]  ? try_get_folio+0x633/0x660
[  191.643450][T13961]  __gup_longterm_locked+0xd66/0x15b0
[  191.643471][T13961]  ? try_grab_folio_fast+0x1be/0x4f0
[  191.643501][T13961]  ? gup_fast_fallback+0x1afc/0x2260
[  191.643520][T13961]  gup_fast_fallback+0x1cd4/0x2260
[  191.643561][T13961]  ? __pfx_gup_fast_fallback+0x10/0x10
[  191.643575][T13961]  ? __mutex_lock+0x335/0x1340
[  191.643598][T13961]  ? is_valid_gup_args+0x11f/0x200
[  191.643616][T13961]  ? get_user_pages_fast+0x4d/0xb0
[  191.643633][T13961]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  191.643655][T13961]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  191.643666][T13961]  ? wait_for_space+0x24d/0x2d0
[  191.643686][T13961]  iov_iter_get_pages2+0x5e/0xa0
[  191.643705][T13961]  __se_sys_vmsplice+0x548/0x10d0
[  191.643730][T13961]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  191.643747][T13961]  ? __pfx_futex_wait+0x10/0x10
[  191.643773][T13961]  ? __lock_acquire+0xab9/0xd20
[  191.643813][T13961]  ? do_pipe2+0xf7/0x170
[  191.643832][T13961]  ? do_syscall_64+0xbe/0x3b0
[  191.643852][T13961]  do_syscall_64+0xfa/0x3b0
[  191.643868][T13961]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.643883][T13961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.643894][T13961]  ? exc_page_fault+0x9f/0xf0
[  191.643911][T13961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.643922][T13961] RIP: 0033:0x7fcf4cb8eb69
[  191.643934][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  191.643943][T13961] RSP: 002b:00007fcf4dac3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  191.643957][T13961] RAX: ffffffffffffffda RBX: 00007fcf4cdb5fa0 RCX: 00007fcf4cb8eb69
[  191.643965][T13961] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  191.643972][T13961] RBP: 00007fcf4cc11df1 R08: 0000000000000000 R09: 0000000000000000
[  191.643979][T13961] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  191.643986][T13961] R13: 0000000000000000 R14: 00007fcf4cdb5fa0 R15: 00007ffc05ba2228
[  191.644006][T13961]  </TASK>
[  191.866924][T13970] netlink: 'syz.2.3434': attribute type 8 has an invalid length.
[  192.308314][T14005] __nla_validate_parse: 1 callbacks suppressed
[  192.308323][T14005] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3450'.
[  192.464090][T14026] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  192.558168][T14033] syzkaller0: entered promiscuous mode
[  192.562130][T14033] syzkaller0: entered allmulticast mode
[  192.621120][ T5949] tipc: Node number set to 575310059
[  193.455469][   T61] block nbd2: Possible stuck request ffff888022830000: control (read@0,1024B). Runtime 90 seconds
[  193.459155][   T61] block nbd2: Possible stuck request ffff888022830200: control (read@1024,1024B). Runtime 90 seconds
[  193.463698][   T61] block nbd2: Possible stuck request ffff888022830400: control (read@2048,1024B). Runtime 90 seconds
[  193.468497][   T61] block nbd2: Possible stuck request ffff888022830600: control (read@3072,1024B). Runtime 90 seconds
[  193.576626][ T5271] udevd[5271]: worker [5863] /devices/virtual/block/nbd1 is taking a long time
[  193.579617][ T5271] udevd[5271]: worker [9028] /devices/virtual/block/nbd3 is taking a long time
[  193.618954][T14051] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  193.814627][T14069] netlink: 'syz.2.3479': attribute type 10 has an invalid length.
[  194.060497][T14101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.093386][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.591060][T14123] lo speed is unknown, defaulting to 1000
[  194.733428][   T25] block nbd1: Possible stuck request ffff888022808000: control (read@0,1024B). Runtime 90 seconds
[  194.738202][   T25] block nbd1: Possible stuck request ffff888022808200: control (read@1024,1024B). Runtime 90 seconds
[  194.742940][   T25] block nbd1: Possible stuck request ffff888022808400: control (read@2048,1024B). Runtime 90 seconds
[  194.747417][   T25] block nbd1: Possible stuck request ffff888022808600: control (read@3072,1024B). Runtime 90 seconds
[  195.054587][T14147] tap0: tun_chr_ioctl cmd 1074025677
[  195.056476][T14147] tap0: linktype set to 769
[  195.117506][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3513'.
[  195.143097][T14153] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3514'.
[  195.146822][T14153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3514'.
[  195.235563][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3521'.
[  195.241999][T14165] ieee802154 phy0 wpan0: encryption failed: -22
[  195.308179][T14169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.311888][T14169] syzkaller0: entered promiscuous mode
[  195.314085][T14169] syzkaller0: entered allmulticast mode
[  195.335154][T14169] tipc: Resetting bearer <eth:syzkaller0>
[  195.337936][T14169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.346582][T14168] tipc: Resetting bearer <eth:syzkaller0>
[  195.356824][T14168] tipc: Disabling bearer <eth:syzkaller0>
[  195.372202][   T25] block nbd4: Possible stuck request ffff888022908000: control (read@0,1024B). Runtime 30 seconds
[  195.376716][   T25] block nbd4: Possible stuck request ffff888022908200: control (read@1024,1024B). Runtime 30 seconds
[  195.383371][   T25] block nbd4: Possible stuck request ffff888022908400: control (read@2048,1024B). Runtime 30 seconds
[  195.389403][   T25] block nbd4: Possible stuck request ffff888022908600: control (read@3072,1024B). Runtime 30 seconds
[  195.555948][T14201] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3536'.
[  195.798878][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3549'.
[  195.838113][T14234] IPVS: length: 148 != 24
[  195.886404][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3554'.
[  196.051588][T14244] block nbd5: shutting down sockets
[  196.128311][T14253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.132858][T14252] tipc: Resetting bearer <eth:syzkaller0>
[  196.963113][T14252] tipc: Disabling bearer <eth:syzkaller0>
[  197.182441][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3570'.
[  197.213400][T14275] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3570'.
[  197.251656][T14281] netlink: 'syz.1.3573': attribute type 303 has an invalid length.
[  197.326288][T14291] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  197.398556][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3583'.
[  197.574990][T14321] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3593'.
[  197.820696][T14352] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3606'.
[  197.985520][T14367] netlink: 'syz.0.3613': attribute type 16 has an invalid length.
[  197.989030][T14367] netlink: 'syz.0.3613': attribute type 1 has an invalid length.
[  197.994170][T14367] netlink: 'syz.0.3613': attribute type 2 has an invalid length.
[  198.081215][T14369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3614'.
[  198.387993][T14394] macsec1: entered promiscuous mode
[  198.390378][T14394] macvlan1: entered promiscuous mode
[  198.393069][T14394] macsec1: entered allmulticast mode
[  198.395382][T14394] macvlan1: entered allmulticast mode
[  198.397848][T14394] veth1_vlan: entered allmulticast mode
[  198.403055][T14394] macvlan1: left allmulticast mode
[  198.405394][T14394] veth1_vlan: left allmulticast mode
[  198.407722][T14394] macvlan1: left promiscuous mode
[  198.994842][T14434] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3645'.
[  199.010291][T14430] syzkaller0: entered promiscuous mode
[  199.014087][T14430] syzkaller0: entered allmulticast mode
[  200.388538][T14474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3662'.
[  200.491351][T14487] openvswitch: netlink: Missing valid actions attribute.
[  200.494201][T14487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.546186][T14497] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  200.567349][T14500] netlink: 'syz.0.3675': attribute type 1 has an invalid length.
[  200.758341][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3683'.
[  200.780620][T14521] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3685'.
[  200.796415][T14523] netlink: 'syz.0.3686': attribute type 1 has an invalid length.
[  200.800146][T14523] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3686'.
[  201.249559][T14547] lo speed is unknown, defaulting to 1000
[  201.648600][T14547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3697'.
[  201.654448][T14547] netlink: 'syz.0.3697': attribute type 13 has an invalid length.
[  201.666216][T14547] netlink: 'syz.0.3697': attribute type 17 has an invalid length.
[  201.676717][T14547] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  201.867965][T14575] bridge0: port 1(dummy0) entered disabled state
[  202.137971][T14597] netlink: 'syz.0.3712': attribute type 1 has an invalid length.
[  202.167145][T14601] netlink: 'syz.0.3715': attribute type 5 has an invalid length.
[  202.545829][ T5682] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  203.208434][T14662] syzkaller0: entered promiscuous mode
[  203.210749][T14662] syzkaller0: entered allmulticast mode
[  203.423256][T14670] validate_nla: 1 callbacks suppressed
[  203.423273][T14670] netlink: 'syz.0.3746': attribute type 3 has an invalid length.
[  203.445922][T14672] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  203.448943][T14672] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  203.500568][T14678] __nla_validate_parse: 4 callbacks suppressed
[  203.500579][T14678] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3750'.
[  203.508864][T14678] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3750'.
[  203.512505][T14678] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3750'.
[  204.112219][T14738] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  204.120354][T14740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.307621][T14756] gtp0: entered promiscuous mode
[  204.309865][T14756] gtp0: entered allmulticast mode
[  204.347012][T14753] lo speed is unknown, defaulting to 1000
[  205.746445][T14826] openvswitch: netlink: IPv4 tun info is not correct
[  206.037611][T14850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3816'.
[  206.651103][T14847] netlink: 'syz.0.3816': attribute type 1 has an invalid length.
[  206.654623][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3816'.
[  206.696171][T14853] netem: change failed
[  207.049901][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3831'.
[  207.334564][T14903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3840'.
[  207.349515][T14905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3841'.
[  207.402874][T14905] bond3: entered promiscuous mode
[  207.405207][T14905] bond3: entered allmulticast mode
[  207.408069][T14905] 8021q: adding VLAN 0 to HW filter on device bond3
[  207.470283][T14914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3844'.
[  207.492238][T14915] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  207.616152][T14931] sctp: [Deprecated]: syz.0.3853 (pid 14931) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.616152][T14931] Use struct sctp_sack_info instead
[  207.624519][T14931] sctp: [Deprecated]: syz.0.3853 (pid 14931) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.624519][T14931] Use struct sctp_sack_info instead
[  208.025146][T14970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3869'.
[  208.083075][T14972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.128564][T14974] batman_adv: batadv0: Adding interface: gretap3
[  208.133286][T14974] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.144775][T14974] batman_adv: batadv0: Interface activated: gretap3
[  208.519323][T14999] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.524059][T14999] syzkaller0: entered promiscuous mode
[  208.526472][T14999] syzkaller0: entered allmulticast mode
[  208.533738][T14999] tipc: Resetting bearer <eth:syzkaller0>
[  208.536891][T14998] tipc: Resetting bearer <eth:syzkaller0>
[  208.547783][T14998] tipc: Disabling bearer <eth:syzkaller0>
[  208.822943][T15010] __nla_validate_parse: 1 callbacks suppressed
[  208.822960][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3888'.
[  209.185611][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'.
[  209.219699][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  210.081219][T15066] bond0: (slave wlan1): Releasing backup interface
[  210.088403][T15066] batman_adv: batadv0: Interface deactivated: gretap3
[  210.093917][T15066] batman_adv: batadv0: Removing interface: gretap3
[  210.122934][T15066] team0: Mode changed to "loadbalance"
[  210.151323][T15070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3915'.
[  210.369983][T15085] lo speed is unknown, defaulting to 1000
[  210.372809][T15085] lo speed is unknown, defaulting to 1000
[  210.376577][T15085] lo speed is unknown, defaulting to 1000
[  210.385329][T15085] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  210.398085][T15085] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  210.425739][T15085] lo speed is unknown, defaulting to 1000
[  210.430093][T15085] lo speed is unknown, defaulting to 1000
[  210.434818][T15085] lo speed is unknown, defaulting to 1000
[  210.798387][T15114] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3935'.
[  210.802687][T15114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3935'.
[  211.157438][T15134] netlink: 'syz.1.3945': attribute type 2 has an invalid length.
[  211.161055][T15134] netlink: 'syz.1.3945': attribute type 1 has an invalid length.
[  211.167626][T15134] netlink: 'syz.1.3945': attribute type 1 has an invalid length.
[  211.434883][T15152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3953'.
[  211.440253][T15152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3953'.
[  211.446152][T15152] netlink: 'syz.0.3953': attribute type 4 has an invalid length.
[  211.492932][T15151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3953'.
[  211.689617][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'.
[  211.995881][T15194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3970'.
[  212.021997][   T61] block nbd3: Possible stuck request ffff888022890000: control (read@0,1024B). Runtime 90 seconds
[  212.025608][   T61] block nbd3: Possible stuck request ffff888022890200: control (read@1024,1024B). Runtime 90 seconds
[  212.028889][T15194] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  212.029192][   T61] block nbd3: Possible stuck request ffff888022890400: control (read@2048,1024B). Runtime 90 seconds
[  212.037915][   T61] block nbd3: Possible stuck request ffff888022890600: control (read@3072,1024B). Runtime 90 seconds
[  212.098538][T15198] geneve2: entered promiscuous mode
[  212.144274][T15202] lo speed is unknown, defaulting to 1000
[  212.243068][T15202] lo speed is unknown, defaulting to 1000
[  212.625786][T15218] ieee802154 phy0 wpan0: encryption failed: -22
[  212.629102][T15218] ieee802154 phy0 wpan0: encryption failed: -22
[  213.368543][T15262] tipc: Started in network mode
[  213.370623][T15262] tipc: Node identity 76b15616c328, cluster identity 4711
[  213.379329][T15262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.384745][T15262] syzkaller0: entered promiscuous mode
[  213.386997][T15262] syzkaller0: entered allmulticast mode
[  213.406034][T15262] tipc: Resetting bearer <eth:syzkaller0>
[  213.410658][T15261] tipc: Resetting bearer <eth:syzkaller0>
[  213.427722][T15261] tipc: Disabling bearer <eth:syzkaller0>
[  213.934653][T15274] __nla_validate_parse: 1 callbacks suppressed
[  213.934669][T15274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4004'.
[  214.153234][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4009'.
[  214.372573][T15299] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4012'.
[  214.584496][T15321] netlink: 'syz.1.4017': attribute type 13 has an invalid length.
[  214.588172][T15321] gretap0: refused to change device tx_queue_len
[  214.590419][T15321] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  214.829975][T15349] lo speed is unknown, defaulting to 1000
[  214.926842][T15363] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  214.939507][T15363] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  215.118449][T15349] lo speed is unknown, defaulting to 1000
[  215.338554][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'.
[  215.346236][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'.
[  215.620115][T15431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4051'.
[  215.663379][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'.
[  215.835733][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4060'.
[  215.886607][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4065'.
[  215.890443][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4065'.
[  216.364139][T15527] wireguard0: entered promiscuous mode
[  216.366217][T15527] wireguard0: entered allmulticast mode
[  216.398483][T15534] netlink: 'syz.2.4098': attribute type 1 has an invalid length.
[  216.416623][T15534] 8021q: adding VLAN 0 to HW filter on device bond4
[  216.449268][T15534] bond4: (slave bridge5): making interface the new active one
[  216.454487][T15534] bond4: (slave bridge5): Enslaving as an active interface with an up link
[  216.506868][T15534] macvlan2: entered promiscuous mode
[  216.508965][T15534] macvlan2: entered allmulticast mode
[  216.530410][T15534] bond4: entered promiscuous mode
[  216.532871][T15534] bridge5: entered promiscuous mode
[  216.535811][T15534] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  216.538945][T15534] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  216.547069][T15534] bond4: left promiscuous mode
[  216.549398][T15534] bridge5: left promiscuous mode
[  216.656389][T15549] netlink: 'syz.0.4104': attribute type 10 has an invalid length.
[  216.665168][T15549] team0: Device v failed to register rx_handler
[  216.670565][T15549] netlink: 'syz.0.4104': attribute type 10 has an invalid length.
[  216.730588][T15557] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  217.291957][T15598] ip6gre1: entered allmulticast mode
[  217.824265][T15637] ==================================================================
[  217.827061][T15637] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  217.829856][T15637] Read of size 2 at addr ffff888023675c42 by task syz.2.4142/15637
[  217.833716][T15637] 
[  217.834582][T15637] CPU: 1 UID: 0 PID: 15637 Comm: syz.2.4142 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  217.834594][T15637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.834600][T15637] Call Trace:
[  217.834605][T15637]  <TASK>
[  217.834610][T15637]  dump_stack_lvl+0x189/0x250
[  217.834623][T15637]  ? __kasan_check_byte+0x12/0x40
[  217.834638][T15637]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.834646][T15637]  ? lock_release+0x4b/0x3e0
[  217.834660][T15637]  ? __virt_addr_valid+0x4a5/0x5c0
[  217.834670][T15637]  print_report+0xca/0x240
[  217.834682][T15637]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  217.834690][T15637]  kasan_report+0x118/0x150
[  217.834703][T15637]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  217.834712][T15637]  __xfrm_state_lookup+0x6ad/0x8d0
[  217.834721][T15637]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  217.834729][T15637]  ? xfrm_state_lookup+0x45/0x1e0
[  217.834737][T15637]  xfrm_state_lookup+0x11e/0x1e0
[  217.834746][T15637]  xfrm_user_state_lookup+0x231/0x370
[  217.834757][T15637]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  217.834767][T15637]  ? apparmor_capable+0x137/0x1b0
[  217.834776][T15637]  xfrm_get_sa+0x93/0x290
[  217.834785][T15637]  ? __nla_parse+0x40/0x60
[  217.834794][T15637]  xfrm_user_rcv_msg+0x7a3/0xab0
[  217.834804][T15637]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  217.834818][T15637]  ? __pfx___mutex_trylock_common+0x10/0x10
[  217.834825][T15637]  ? rcu_is_watching+0x15/0xb0
[  217.834837][T15637]  ? trace_contention_end+0x39/0x120
[  217.834844][T15637]  ? __mutex_lock+0x335/0x1340
[  217.834858][T15637]  netlink_rcv_skb+0x208/0x470
[  217.834869][T15637]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  217.834878][T15637]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  217.834891][T15637]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.834901][T15637]  ? netlink_deliver_tap+0x2e/0x1b0
[  217.834911][T15637]  xfrm_netlink_rcv+0x79/0x90
[  217.834919][T15637]  netlink_unicast+0x82f/0x9e0
[  217.834931][T15637]  ? __pfx_netlink_unicast+0x10/0x10
[  217.834940][T15637]  ? netlink_sendmsg+0x642/0xb30
[  217.834950][T15637]  ? skb_put+0x11b/0x210
[  217.834957][T15637]  netlink_sendmsg+0x805/0xb30
[  217.834970][T15637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.834980][T15637]  ? aa_sock_msg_perm+0x94/0x160
[  217.834990][T15637]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  217.834998][T15637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  217.835009][T15637]  __sock_sendmsg+0x21c/0x270
[  217.835019][T15637]  ____sys_sendmsg+0x505/0x830
[  217.835027][T15637]  ? __pfx_____sys_sendmsg+0x10/0x10
[  217.835036][T15637]  ? import_iovec+0x74/0xa0
[  217.835046][T15637]  ___sys_sendmsg+0x21f/0x2a0
[  217.835054][T15637]  ? __pfx____sys_sendmsg+0x10/0x10
[  217.835067][T15637]  ? __fget_files+0x2a/0x420
[  217.835075][T15637]  ? __fget_files+0x3a0/0x420
[  217.835083][T15637]  __x64_sys_sendmsg+0x19b/0x260
[  217.835090][T15637]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  217.835100][T15637]  ? rcu_is_watching+0x15/0xb0
[  217.835111][T15637]  ? trace_sys_enter+0x25/0x100
[  217.835122][T15637]  do_syscall_64+0xfa/0x3b0
[  217.835132][T15637]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.835142][T15637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.835150][T15637]  ? exc_page_fault+0x9f/0xf0
[  217.835160][T15637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.835167][T15637] RIP: 0033:0x7fc803b8eb69
[  217.835201][T15637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.835210][T15637] RSP: 002b:00007fc80496e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  217.835221][T15637] RAX: ffffffffffffffda RBX: 00007fc803db5fa0 RCX: 00007fc803b8eb69
[  217.835227][T15637] RDX: 00000000200040c0 RSI: 00002000000014c0 RDI: 0000000000000003
[  217.835234][T15637] RBP: 00007fc803c11df1 R08: 0000000000000000 R09: 0000000000000000
[  217.835239][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.835245][T15637] R13: 0000000000000000 R14: 00007fc803db5fa0 R15: 00007ffe6cb0e078
[  217.835255][T15637]  </TASK>
[  217.835258][T15637] 
[  217.966296][T15637] Allocated by task 11271:
[  217.967798][T15637]  kasan_save_track+0x3e/0x80
[  217.969482][T15637]  __kasan_slab_alloc+0x6c/0x80
[  217.971148][T15637]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  217.972971][T15637]  xfrm_state_alloc+0x24/0x2f0
[  217.974631][T15637]  __find_acq_core+0x8a7/0x1c00
[  217.976318][T15637]  xfrm_find_acq+0x78/0xa0
[  217.977833][T15637]  xfrm_alloc_userspi+0x6b3/0xc90
[  217.979555][T15637]  xfrm_user_rcv_msg+0x7a3/0xab0
[  217.981300][T15637]  netlink_rcv_skb+0x208/0x470
[  217.982931][T15637]  xfrm_netlink_rcv+0x79/0x90
[  217.984608][T15637]  netlink_unicast+0x82f/0x9e0
[  217.986345][T15637]  netlink_sendmsg+0x805/0xb30
[  217.987958][T15637]  __sock_sendmsg+0x21c/0x270
[  217.989707][T15637]  ____sys_sendmsg+0x505/0x830
[  217.991336][T15637]  ___sys_sendmsg+0x21f/0x2a0
[  217.992961][T15637]  __x64_sys_sendmsg+0x19b/0x260
[  217.994681][T15637]  do_syscall_64+0xfa/0x3b0
[  217.996274][T15637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.998243][T15637] 
[  217.999054][T15637] Freed by task 5948:
[  218.000379][T15637]  kasan_save_track+0x3e/0x80
[  218.001970][T15637]  kasan_save_free_info+0x46/0x50
[  218.003721][T15637]  __kasan_slab_free+0x62/0x70
[  218.005316][T15637]  kmem_cache_free+0x18f/0x400
[  218.006888][T15637]  xfrm_state_gc_task+0x518/0x6a0
[  218.008695][T15637]  process_scheduled_works+0xae1/0x17b0
[  218.010605][T15637]  worker_thread+0x8a0/0xda0
[  218.012579][T15637]  kthread+0x711/0x8a0
[  218.014293][T15637]  ret_from_fork+0x3fc/0x770
[  218.015879][T15637]  ret_from_fork_asm+0x1a/0x30
[  218.017699][T15637] 
[  218.018738][T15637] The buggy address belongs to the object at ffff888023675b00
[  218.018738][T15637]  which belongs to the cache xfrm_state of size 928
[  218.023763][T15637] The buggy address is located 322 bytes inside of
[  218.023763][T15637]  freed 928-byte region [ffff888023675b00, ffff888023675ea0)
[  218.029102][T15637] 
[  218.030157][T15637] The buggy address belongs to the physical page:
[  218.032876][T15637] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888023676880 pfn:0x23674
[  218.036943][T15637] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  218.040290][T15637] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  218.043197][T15637] page_type: f5(slab)
[  218.044638][T15637] raw: 00fff00000000040 ffff8881054ff8c0 dead000000000122 0000000000000000
[  218.048376][T15637] raw: ffff888023676880 00000000800e0008 00000000f5000000 0000000000000000
[  218.052078][T15637] head: 00fff00000000040 ffff8881054ff8c0 dead000000000122 0000000000000000
[  218.055674][T15637] head: ffff888023676880 00000000800e0008 00000000f5000000 0000000000000000
[  218.058611][T15637] head: 00fff00000000002 ffffea00008d9d01 00000000ffffffff 00000000ffffffff
[  218.061995][T15637] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  218.065389][T15637] page dumped because: kasan: bad access detected
[  218.067989][T15637] page_owner tracks the page as allocated
[  218.070368][T15637] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6002, tgid 6001 (syz.0.55), ts 63565779531, free_ts 63520261765
[  218.078206][T15637]  post_alloc_hook+0x240/0x2a0
[  218.080580][T15637]  get_page_from_freelist+0x21e4/0x22c0
[  218.083079][T15637]  __alloc_frozen_pages_noprof+0x181/0x370
[  218.085645][T15637]  alloc_pages_mpol+0x232/0x4a0
[  218.087789][T15637]  allocate_slab+0x8a/0x3b0
[  218.089898][T15637]  ___slab_alloc+0xbfc/0x1480
[  218.091918][T15637]  kmem_cache_alloc_noprof+0x283/0x3c0
[  218.094283][T15637]  xfrm_state_alloc+0x24/0x2f0
[  218.096455][T15637]  xfrm_add_acquire+0xf7/0xb20
[  218.098507][T15637]  xfrm_user_rcv_msg+0x7a3/0xab0
[  218.100714][T15637]  netlink_rcv_skb+0x208/0x470
[  218.102968][T15637]  xfrm_netlink_rcv+0x79/0x90
[  218.105072][T15637]  netlink_unicast+0x82f/0x9e0
[  218.106818][T15637]  netlink_sendmsg+0x805/0xb30
[  218.108894][T15637]  __sock_sendmsg+0x21c/0x270
[  218.110630][T15637]  ____sys_sendmsg+0x505/0x830
[  218.112443][T15637] page last free pid 5999 tgid 5999 stack trace:
[  218.114610][T15637]  __free_frozen_pages+0xc71/0xe70
[  218.116818][T15637]  __slab_free+0x326/0x400
[  218.118692][T15637]  qlist_free_all+0x97/0x140
[  218.120654][T15637]  kasan_quarantine_reduce+0x148/0x160
[  218.122938][T15637]  __kasan_slab_alloc+0x22/0x80
[  218.124924][T15637]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  218.127235][T15637]  getname_flags+0xb8/0x540
[  218.129275][T15637]  vfs_fstatat+0x43/0x170
[  218.131208][T15637]  __x64_sys_newfstatat+0x116/0x190
[  218.133580][T15637]  do_syscall_64+0xfa/0x3b0
[  218.135637][T15637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.138211][T15637] 
[  218.139332][T15637] Memory state around the buggy address:
[  218.141875][T15637]  ffff888023675b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.145533][T15637]  ffff888023675b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.149104][T15637] >ffff888023675c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.152738][T15637]                                            ^
[  218.155428][T15637]  ffff888023675c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.158884][T15637]  ffff888023675d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  218.162321][T15637] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  218.192049][T15637] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  218.195277][T15637] CPU: 1 UID: 0 PID: 15637 Comm: syz.2.4142 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  218.200719][T15637] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.205097][T15637] Call Trace:
[  218.206597][T15637]  <TASK>
[  218.207953][T15637]  dump_stack_lvl+0x99/0x250
[  218.210016][T15637]  ? __asan_memcpy+0x40/0x70
[  218.212070][T15637]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.214401][T15637]  ? __pfx__printk+0x10/0x10
[  218.216461][T15637]  panic+0x2db/0x790
[  218.218211][T15637]  ? __pfx_panic+0x10/0x10
[  218.219906][T15637]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  218.221971][T15637]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  218.224140][T15637]  ? print_memory_metadata+0x314/0x400
[  218.226319][T15637]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  218.228277][T15637]  check_panic_on_warn+0x89/0xb0
[  218.230215][T15637]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  218.232106][T15637]  end_report+0x78/0x160
[  218.233874][T15637]  kasan_report+0x129/0x150
[  218.235896][T15637]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  218.238279][T15637]  __xfrm_state_lookup+0x6ad/0x8d0
[  218.240555][T15637]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  218.243117][T15637]  ? xfrm_state_lookup+0x45/0x1e0
[  218.245405][T15637]  xfrm_state_lookup+0x11e/0x1e0
[  218.247577][T15637]  xfrm_user_state_lookup+0x231/0x370
[  218.249994][T15637]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  218.252670][T15637]  ? apparmor_capable+0x137/0x1b0
[  218.254858][T15637]  xfrm_get_sa+0x93/0x290
[  218.256782][T15637]  ? __nla_parse+0x40/0x60
[  218.258771][T15637]  xfrm_user_rcv_msg+0x7a3/0xab0
[  218.261000][T15637]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  218.263437][T15637]  ? __pfx___mutex_trylock_common+0x10/0x10
[  218.265996][T15637]  ? rcu_is_watching+0x15/0xb0
[  218.268105][T15637]  ? trace_contention_end+0x39/0x120
[  218.270628][T15637]  ? __mutex_lock+0x335/0x1340
[  218.272770][T15637]  netlink_rcv_skb+0x208/0x470
[  218.274893][T15637]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  218.277344][T15637]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  218.279624][T15637]  ? netlink_deliver_tap+0x2e/0x1b0
[  218.281895][T15637]  ? netlink_deliver_tap+0x2e/0x1b0
[  218.284102][T15637]  xfrm_netlink_rcv+0x79/0x90
[  218.286130][T15637]  netlink_unicast+0x82f/0x9e0
[  218.288240][T15637]  ? __pfx_netlink_unicast+0x10/0x10
[  218.290508][T15637]  ? netlink_sendmsg+0x642/0xb30
[  218.292685][T15637]  ? skb_put+0x11b/0x210
[  218.294542][T15637]  netlink_sendmsg+0x805/0xb30
[  218.296570][T15637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.298822][T15637]  ? aa_sock_msg_perm+0x94/0x160
[  218.300892][T15637]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  218.303102][T15637]  ? __pfx_netlink_sendmsg+0x10/0x10
[  218.305389][T15637]  __sock_sendmsg+0x21c/0x270
[  218.307417][T15637]  ____sys_sendmsg+0x505/0x830
[  218.309608][T15637]  ? __pfx_____sys_sendmsg+0x10/0x10
[  218.311958][T15637]  ? import_iovec+0x74/0xa0
[  218.314053][T15637]  ___sys_sendmsg+0x21f/0x2a0
[  218.316149][T15637]  ? __pfx____sys_sendmsg+0x10/0x10
[  218.318520][T15637]  ? __fget_files+0x2a/0x420
[  218.320564][T15637]  ? __fget_files+0x3a0/0x420
[  218.322643][T15637]  __x64_sys_sendmsg+0x19b/0x260
[  218.324763][T15637]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  218.327240][T15637]  ? rcu_is_watching+0x15/0xb0
[  218.329361][T15637]  ? trace_sys_enter+0x25/0x100
[  218.331475][T15637]  do_syscall_64+0xfa/0x3b0
[  218.333520][T15637]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.335856][T15637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.338564][T15637]  ? exc_page_fault+0x9f/0xf0
[  218.340774][T15637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.343343][T15637] RIP: 0033:0x7fc803b8eb69
[  218.345130][T15637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.353092][T15637] RSP: 002b:00007fc80496e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  218.356141][T15637] RAX: ffffffffffffffda RBX: 00007fc803db5fa0 RCX: 00007fc803b8eb69
[  218.358783][T15637] RDX: 00000000200040c0 RSI: 00002000000014c0 RDI: 0000000000000003
[  218.361547][T15637] RBP: 00007fc803c11df1 R08: 0000000000000000 R09: 0000000000000000
[  218.364344][T15637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.367417][T15637] R13: 0000000000000000 R14: 00007fc803db5fa0 R15: 00007ffe6cb0e078
[  218.370290][T15637]  </TASK>
[  218.372410][T15637] Kernel Offset: disabled
[  218.374377][T15637] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:33:39  Registers:
info registers vcpu 0

CPU#0
RAX=34f0aa163c7a1400 RBX=ffffffff81969b18 RCX=34f0aa163c7a1400 RDX=0000000000000001
RSI=ffffffff8d979100 RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07af0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe8a34f000 CR3=000000004107a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688e56 ffffffff8166585a
XMM02=00007fcf4cd87498 ffffffff8166585a XMM03=00007fcf4cd874a8 00007fcf4cd874a0
XMM04=00007fcf4d8ed100 00007fcf4cd87460 XMM05=00007fcf4cd87478 00007fcf4cd874c0
XMM06=00007fcf4cd874b8 00007fcf4cd874b0 XMM07=00007fcf4cd874a8 00007fcf4cd874a0
XMM08=03e4af403f01ab88 89616f4e8304abf4 XMM09=0000000000000000 00007fcf4cc12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000fcf RDI=0000000000000fd0 RBP=00000000000003f8 RSP=ffffc900025be9f0
R8 =ffff8880215f0237 R9 =1ffff110042be046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95935 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc80496e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000001c0 CR3=000000010f084000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc803d87498 00007fc803d87470 XMM03=00007fc803d874a8 00007fc803d874a0
XMM04=00007fc8048ed100 00007fc803d87460 XMM05=00007fc803d87478 00007fc803d874c0
XMM06=00007fc803d874b8 00007fc803d874b0 XMM07=00007fc803d874a8 00007fc803d874a0
XMM08=0000000000000000 00007fc803c12eab XMM09=0000000000000000 00007fc803c12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
