last executing test programs:

414.339662ms ago: executing program 0 (id=4284):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1)

322.602733ms ago: executing program 0 (id=4286):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40)
shutdown(r0, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r2, 0x3d}, 0x8)

322.395308ms ago: executing program 2 (id=4287):
syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb807f04442be993894b35a336eeca6f"}}}}}}}, 0x0)

322.272835ms ago: executing program 2 (id=4288):
unshare(0x20000400)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
write(r0, 0x0, 0x0)

255.185219ms ago: executing program 0 (id=4290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xe4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

254.913614ms ago: executing program 1 (id=4291):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xffffffffffffff59, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb2, @empty, 0x400}]}, &(0x7f0000000080)=0x10)

254.689895ms ago: executing program 2 (id=4292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000190001002dbd7000fedbdf251d"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)

181.921773ms ago: executing program 1 (id=4293):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500fefffcffffff85100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)

181.59466ms ago: executing program 0 (id=4294):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0)

181.230322ms ago: executing program 2 (id=4295):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)

113.930642ms ago: executing program 0 (id=4296):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="90da00add1c4ccd9ef", 0x9}], 0x1)

113.609683ms ago: executing program 1 (id=4297):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791018000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)

113.072555ms ago: executing program 2 (id=4298):
r0 = socket(0x1d, 0x3, 0x1)
getsockname$netlink(r0, 0x0, &(0x7f0000000140))

55.318747ms ago: executing program 1 (id=4299):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10002, 0xffffffff, 0xd7c4, 0xfffffff9}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24)

54.921729ms ago: executing program 0 (id=4300):
getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000)
socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040)
ppoll(&(0x7f0000000140)=[{r2, 0x601}, {r2, 0x2304}], 0x2, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, 0x0)

54.436695ms ago: executing program 2 (id=4301):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r0}, 0x18)
r1 = socket(0x8000000010, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r2, 0x29, 0x12, 0x0, &(0x7f0000000040)=0xfffffffffffffe44)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0023000000000000000000000000000000000000ff7a5a0a951760032d3b691330579bb1031ddc58fc140882d12b78d7decdc4f17450fe885a4fd3d45b89e191d23372b1e46b9b80bcd53e59c773313f6abe576e10154589181468e1267ada3f5fa407e44b9fc8876b965d1779d0037623b225b45b70169624192b09deda1fe5b0dd43586975dd0b96fc4993997ea8c40a827222d08e482f1c50d51d7e79bb0a8dabca1139daf87a10bcb5c99f28f3a38990e5d01dc952d15dbd0bf749f384e99fd22b", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES8=r2, @ANYRES32, @ANYRES16], 0x50)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10)
syz_emit_ethernet(0x20f, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r7}, 0x10)
ppoll(&(0x7f0000000580)=[{r4}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x40)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc)

357.63µs ago: executing program 1 (id=4302):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000900000000007a3d133b35"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100)=r0, 0x5042)

0s ago: executing program 1 (id=4303):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
recvmmsg(r0, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000000, 0x0)

kernel console output (not intermixed with test programs):

 batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.814481][ T5892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.833219][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.835764][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.844925][ T5887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.854725][ T5887] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.857330][ T5887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.866209][ T5887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.957892][ T5892] hsr_slave_0: entered promiscuous mode
[   71.960541][ T5892] hsr_slave_1: entered promiscuous mode
[   71.969292][ T5886] hsr_slave_0: entered promiscuous mode
[   71.973200][ T5886] hsr_slave_1: entered promiscuous mode
[   71.976039][ T5886] debugfs: 'hsr0' already exists in 'hsr'
[   71.978223][ T5886] Cannot create hsr debugfs directory
[   71.984309][ T5887] hsr_slave_0: entered promiscuous mode
[   71.987048][ T5887] hsr_slave_1: entered promiscuous mode
[   71.989443][ T5887] debugfs: 'hsr0' already exists in 'hsr'
[   71.991683][ T5887] Cannot create hsr debugfs directory
[   72.324876][ T5887] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.335034][ T5887] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.340632][ T5887] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.358322][ T5887] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.404664][ T5892] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.420742][ T5892] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.429129][ T5892] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.436148][ T5892] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.518574][ T5886] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.534173][ T5886] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.543439][ T5886] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.558556][ T5886] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.651506][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.668830][ T5892] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.692056][ T5887] 8021q: adding VLAN 0 to HW filter on device team0
[   72.713120][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.715894][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.733696][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.736792][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.743851][ T5892] 8021q: adding VLAN 0 to HW filter on device team0
[   72.759549][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.762353][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.794409][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.796879][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.820337][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.822459][   T55] Bluetooth: hci2: command tx timeout
[   72.823200][ T5891] Bluetooth: hci0: command tx timeout
[   72.825040][ T5893] Bluetooth: hci1: command tx timeout
[   72.876932][ T5886] 8021q: adding VLAN 0 to HW filter on device team0
[   72.899753][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.902613][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.938507][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.940927][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.127627][ T5887] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.178647][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.185471][ T5892] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.212445][ T5887] veth0_vlan: entered promiscuous mode
[   73.223204][ T5887] veth1_vlan: entered promiscuous mode
[   73.292537][ T5886] veth0_vlan: entered promiscuous mode
[   73.303900][ T5887] veth0_macvtap: entered promiscuous mode
[   73.310386][ T5892] veth0_vlan: entered promiscuous mode
[   73.318216][ T5887] veth1_macvtap: entered promiscuous mode
[   73.327576][ T5886] veth1_vlan: entered promiscuous mode
[   73.335518][ T5892] veth1_vlan: entered promiscuous mode
[   73.348523][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.366433][ T5887] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.388262][ T5936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.393324][ T5936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.396642][ T5936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.400080][ T5936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.422452][ T5886] veth0_macvtap: entered promiscuous mode
[   73.437547][ T5892] veth0_macvtap: entered promiscuous mode
[   73.444779][ T5892] veth1_macvtap: entered promiscuous mode
[   73.447626][ T5886] veth1_macvtap: entered promiscuous mode
[   73.474338][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.515071][ T5892] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.520235][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.547984][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.562235][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.565540][ T5936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.571521][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.581604][ T5936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.601955][ T5936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.614980][ T5936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.632412][ T5936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.636122][ T5936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.670823][ T5936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.675000][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.681225][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.684143][ T5936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.731466][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.734725][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.772137][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.782249][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.812614][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.822287][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.847083][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.849575][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.998825][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'.
[   74.242289][ T5981] Zero length message leads to an empty skb
[   74.245821][ T5936] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.250732][ T5936] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.260894][ T5936] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.271704][ T5936] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.807819][ T6012] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   74.823019][ T6012] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   74.903201][ T5893] Bluetooth: hci1: command tx timeout
[   74.903239][ T5891] Bluetooth: hci2: command tx timeout
[   74.911353][ T5891] Bluetooth: hci0: command tx timeout
[   75.175888][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.58'.
[   75.244662][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'.
[   75.656707][ T6065] syzkaller0: entered promiscuous mode
[   75.658951][ T6065] syzkaller0: entered allmulticast mode
[   76.779565][ T6075] warning: `syz.2.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.981395][ T5891] Bluetooth: hci0: command tx timeout
[   76.982930][ T5893] Bluetooth: hci2: command tx timeout
[   76.983836][ T5891] Bluetooth: hci1: command tx timeout
[   77.240743][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   77.340764][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'.
[   77.348083][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'.
[   77.433193][ T6132] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET)
[   77.655096][ T6145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.692059][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'.
[   77.819852][ T6157] netlink: 72 bytes leftover after parsing attributes in process `syz.0.116'.
[   78.500195][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[   78.523162][ T6200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.525701][ T6200] IPv6: NLM_F_CREATE should be set when creating new route
[   78.534093][ T6200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   78.536854][ T6200] IPv6: NLM_F_CREATE should be set when creating new route
[   78.599674][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.135'.
[   78.665386][ T6210] netlink: 'syz.1.136': attribute type 4 has an invalid length.
[   78.844151][ T6216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.061308][ T5891] Bluetooth: hci2: command tx timeout
[   79.063168][   T55] Bluetooth: hci0: command tx timeout
[   79.063350][ T5891] Bluetooth: hci1: command tx timeout
[   79.355331][ T6233] netlink: 'syz.0.147': attribute type 10 has an invalid length.
[   79.370063][ T6233] 8021q: adding VLAN 0 to HW filter on device team0
[   79.379730][ T6233] bond0: (slave team0): Enslaving as an active interface with an up link
[   79.825843][ T6255] netlink: 'syz.0.157': attribute type 6 has an invalid length.
[   79.877702][ T6255] netlink: 'syz.0.157': attribute type 12 has an invalid length.
[   79.885640][ T6255] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.157'.
[   80.106610][   T33] audit: type=1800 audit(1758809623.156:2): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.163" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=287 res=0 errno=0
[   80.338799][ T6296] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96
[   80.459343][ T6307] ieee802154 phy0 wpan0: encryption failed: -90
[   80.933404][ T6327] tipc: Started in network mode
[   80.935543][ T6327] tipc: Node identity ac14140f, cluster identity 4711
[   80.971500][ T6327] tipc: New replicast peer: 255.255.255.255
[   80.980857][ T6327] tipc: Enabled bearer <udp:syz2>, priority 10
[   81.313119][ T6348] netlink: 'syz.1.196': attribute type 11 has an invalid length.
[   81.498892][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   81.513817][ T6362] vlan2: entered promiscuous mode
[   81.521089][ T6362] bridge0: entered promiscuous mode
[   81.566243][ T6368] netlink: 'syz.1.204': attribute type 5 has an invalid length.
[   81.578620][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'.
[   81.603531][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.206'.
[   81.607119][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'.
[   81.611465][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'.
[   81.919069][ T6391] bond0: (slave team0): Releasing backup interface
[   81.932699][ T6391] bridge_slave_0: left allmulticast mode
[   81.938118][ T6391] bridge_slave_0: left promiscuous mode
[   81.941561][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.961852][ T6391] bridge_slave_1: left allmulticast mode
[   81.965290][ T6391] bridge_slave_1: left promiscuous mode
[   81.967717][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.984284][   T47] tipc: Node number set to 2886997007
[   81.992729][ T6391] bond0: (slave bond_slave_0): Releasing backup interface
[   81.998444][ T6391] bond0: (slave bond_slave_1): Releasing backup interface
[   82.006755][ T6391] team0: Failed to send options change via netlink (err -105)
[   82.010028][ T6391] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   82.014440][ T6391] team0: Port device team_slave_0 removed
[   82.023080][ T6391] team0: Failed to send options change via netlink (err -105)
[   82.033599][ T6391] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   82.037139][ T6391] team0: Port device team_slave_1 removed
[   82.039876][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.042576][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.050467][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.053387][ T6391] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.063429][ T6391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   82.069408][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'.
[   82.073757][ T6395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'.
[   82.079454][ T6393] team0: Failed to send options change via netlink (err -105)
[   82.083128][ T6395] netlink: 'syz.1.216': attribute type 1 has an invalid length.
[   82.086381][ T6393] team0: Mode changed to "activebackup"
[   82.454307][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[   82.459104][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[   82.650803][ T6412] netlink: 'syz.1.221': attribute type 7 has an invalid length.
[   82.657706][ T6412] netlink: 'syz.1.221': attribute type 8 has an invalid length.
[   85.147711][ T6488] __nla_validate_parse: 2 callbacks suppressed
[   85.147730][ T6488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'.
[   86.272220][ T6514] netlink: 'syz.0.265': attribute type 4 has an invalid length.
[   86.589253][  T795] cfg80211: failed to load regulatory.db
[   86.715316][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'.
[   87.673526][ T6590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.300'.
[   87.676190][ T6590] netlink: 3 bytes leftover after parsing attributes in process `syz.0.300'.
[   88.106957][ T6623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   88.421678][ T6625] netlink: 'syz.2.316': attribute type 1 has an invalid length.
[   88.427588][ T6625] nbd: error processing sock list
[   88.432143][ T6625] block nbd0: shutting down sockets
[   88.762434][ T6662] netlink: 'syz.0.333': attribute type 3 has an invalid length.
[   88.885306][ T6672] xt_AUDIT: Audit type out of range (valid range: 0..2)
[   88.936357][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'.
[   88.940634][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'.
[   88.944824][ T6674] netlink: 'syz.0.337': attribute type 13 has an invalid length.
[   88.948282][ T6674] netlink: 'syz.0.337': attribute type 12 has an invalid length.
[   89.152420][ T6682] netlink: 2 bytes leftover after parsing attributes in process `syz.0.341'.
[   89.302782][ T6690] netlink: 32 bytes leftover after parsing attributes in process `syz.0.345'.
[   89.504615][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'.
[   89.512439][ T6690] veth1_macvtap: left promiscuous mode
[   89.708800][ T6709] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   89.925353][ T6726] netlink: 'syz.1.361': attribute type 1 has an invalid length.
[   89.928305][ T6726] netlink: 212 bytes leftover after parsing attributes in process `syz.1.361'.
[   89.932898][ T6726] netlink: 'syz.1.361': attribute type 1 has an invalid length.
[   90.187086][ T5954] IPVS: starting estimator thread 0...
[   90.283277][ T6745] IPVS: using max 39 ests per chain, 93600 per kthread
[   90.348629][ T6755] netlink: 68 bytes leftover after parsing attributes in process `syz.2.375'.
[   90.353098][ T6755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'.
[   90.362884][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[   90.507709][ T6765] syzkaller1: entered promiscuous mode
[   90.510076][ T6765] syzkaller1: entered allmulticast mode
[   91.343123][ T6806] netlink: 'syz.1.398': attribute type 64 has an invalid length.
[   91.398648][ T6811] netlink: 'syz.0.400': attribute type 8 has an invalid length.
[   91.564390][ T6822] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[   91.617870][ T6822] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.639062][ T6822] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   91.653798][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'.
[   91.658006][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'.
[   91.660855][ T6827] netlink: 'syz.1.408': attribute type 4 has an invalid length.
[   91.676438][ T6828] gretap1: entered promiscuous mode
[   91.694953][ T6828] bond1: (slave gretap1): making interface the new active one
[   91.700023][ T6828] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   91.706588][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.410'.
[   91.710141][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.410'.
[   91.734683][ T6822] macvlan2: entered promiscuous mode
[   91.736790][ T6822] macvlan2: entered allmulticast mode
[   91.739254][ T6822] bond1: entered promiscuous mode
[   91.742174][ T6822] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   91.748062][ T6822] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   91.761814][ T6822] bond1: left promiscuous mode
[   92.073362][ T6854] openvswitch: netlink: Tunnel attr 214 out of range max 16
[   92.307498][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.429'.
[   92.576297][ T6896] sctp: [Deprecated]: syz.0.441 (pid 6896) Use of int in maxseg socket option.
[   92.576297][ T6896] Use struct sctp_assoc_value instead
[   93.154283][ T6910] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   93.168900][ T6910] macsec1: entered promiscuous mode
[   93.177874][ T6910] macsec1: entered allmulticast mode
[   93.180291][ T6910] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[   93.616587][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'.
[   93.644496][ T5901] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.644581][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'.
[   93.648079][ T5901] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.662475][ T5901] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.672788][ T5901] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.263531][ T6968] netlink: 'syz.2.469': attribute type 14 has an invalid length.
[   94.464499][ T6988] netlink: 'syz.2.478': attribute type 23 has an invalid length.
[   95.165420][ T7028] netlink: 'syz.1.497': attribute type 1 has an invalid length.
[   95.807927][ T7080] __nla_validate_parse: 7 callbacks suppressed
[   95.807946][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[   95.996028][ T7091] Bluetooth: MGMT ver 1.23
[   96.065129][ T7094] netlink: 'syz.2.529': attribute type 4 has an invalid length.
[   96.182057][ T7109] tipc: Started in network mode
[   96.183711][ T7109] tipc: Node identity 080211, cluster identity 4711
[   96.186475][ T7109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.189752][ T7109] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[   96.194660][ T7109] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[   96.208248][ T7109] tipc: Resetting bearer <eth:syzkaller0>
[   96.307250][ T7114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.537'.
[   96.444685][ T7118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.520156][ T7118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.570204][ T7118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.618055][ T7118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.702930][ T5901] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.719951][ T5901] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.734659][ T5901] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.750512][ T5901] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.047123][ T7134] pim6reg99999999: entered allmulticast mode
[   97.141655][ T5891] Bluetooth: hci2: command tx timeout
[   97.181203][    T9] tipc: Node number set to 134353152
[   97.484016][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.2.560'.
[   97.750120][ T7184] Driver unsupported XDP return value 0 on prog  (id 86) dev N/A, expect packet loss!
[   98.480482][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880298b3800: rx timeout, send abort
[   98.626128][ T7246] veth0: entered promiscuous mode
[   98.630201][ T7246] veth0: left promiscuous mode
[   98.751149][ T7255] wireguard0: entered promiscuous mode
[   98.753838][ T7255] wireguard0: entered allmulticast mode
[   98.939180][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'.
[   98.953302][ T7272] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   98.958142][ T7272] macvtap1: entered promiscuous mode
[   98.981657][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880349c7c00: rx timeout, send abort
[   98.986752][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880298b3800: abort rx timeout. Force session deactivation
[   99.046853][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[   99.050351][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'.
[   99.062697][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'.
[   99.309132][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'.
[   99.319123][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'.
[   99.460829][ T7299] syzkaller1: entered promiscuous mode
[   99.470608][ T7299] syzkaller1: entered allmulticast mode
[   99.484968][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880349c7c00: abort rx timeout. Force session deactivation
[  100.290154][ T7327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.631'.
[  100.319296][ T7331] netlink: 'syz.1.633': attribute type 4 has an invalid length.
[  100.334544][ T7332] delete_channel: no stack
[  100.360216][ T7336] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  100.407020][ T7342] netlink: 'syz.2.638': attribute type 4 has an invalid length.
[  100.417622][ T7342] netlink: 'syz.2.638': attribute type 4 has an invalid length.
[  100.924870][ T7369] __nla_validate_parse: 1 callbacks suppressed
[  100.924891][ T7369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.649'.
[  101.122497][ T7377] sctp: [Deprecated]: syz.1.651 (pid 7377) Use of int in maxseg socket option.
[  101.122497][ T7377] Use struct sctp_assoc_value instead
[  101.732305][ T7418] gtp0: entered promiscuous mode
[  101.734509][ T7418] gtp0: entered allmulticast mode
[  101.862890][ T7425] netlink: 48 bytes leftover after parsing attributes in process `syz.2.674'.
[  101.870449][ T7429] netlink: 'syz.1.676': attribute type 1 has an invalid length.
[  101.875756][ T7429] netlink: 'syz.1.676': attribute type 2 has an invalid length.
[  101.880388][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'.
[  101.975898][ T7437] netlink: 'syz.2.680': attribute type 1 has an invalid length.
[  102.006670][ T7437] bond2: entered promiscuous mode
[  102.009228][ T7437] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.054173][ T7437] 8021q: adding VLAN 0 to HW filter on device bond3
[  102.059460][ T7437] bond2: (slave bond3): making interface the new active one
[  102.059847][ T7447] netlink: 'syz.0.684': attribute type 8 has an invalid length.
[  102.062474][ T7437] bond3: entered promiscuous mode
[  102.068735][ T7437] bond2: (slave bond3): Enslaving as an active interface with an up link
[  102.196424][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'.
[  102.277677][ T7464] netlink: 'syz.0.691': attribute type 32 has an invalid length.
[  102.326999][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[  102.468807][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'.
[  102.504991][ T7479] siw: device registration error -23
[  102.831444][ T7500] netlink: 'syz.0.709': attribute type 12 has an invalid length.
[  103.237255][ T7526] netlink: 788 bytes leftover after parsing attributes in process `syz.2.721'.
[  103.327548][ T7531] ip6tnl2: entered promiscuous mode
[  104.068678][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.739'.
[  104.168885][ T7573] tipc: Started in network mode
[  104.170902][ T7573] tipc: Node identity b264653fdde3, cluster identity 4711
[  104.184107][ T7573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.188003][ T7573] syzkaller0: entered promiscuous mode
[  104.200460][ T7573] syzkaller0: entered allmulticast mode
[  104.217399][ T7573] netlink: 2 bytes leftover after parsing attributes in process `syz.1.742'.
[  104.235803][ T7573] tipc: Resetting bearer <eth:syzkaller0>
[  104.241495][ T7572] tipc: Resetting bearer <eth:syzkaller0>
[  104.256594][ T7572] tipc: Disabling bearer <eth:syzkaller0>
[  104.350705][ T7586] lo: entered promiscuous mode
[  104.353017][ T7586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.412640][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'.
[  104.506480][ T7596] vxcan0: tx drop: invalid sa for name 0x0000000000000002
[  104.526341][ T7598] gtp0: entered promiscuous mode
[  104.528004][ T7598] gtp0: entered allmulticast mode
[  104.792890][ T7608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  104.970127][ T7629] netlink: 'syz.0.765': attribute type 1 has an invalid length.
[  105.987399][ T7688] netlink: 'syz.0.791': attribute type 1 has an invalid length.
[  106.133627][ T7702] lo: left promiscuous mode
[  106.163842][ T7702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.245001][ T7709] __nla_validate_parse: 1 callbacks suppressed
[  106.245020][ T7709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.801'.
[  106.702592][ T7735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.813'.
[  106.874285][ T7745] netlink: 'syz.2.818': attribute type 1 has an invalid length.
[  106.896236][ T7745] bond4: entered promiscuous mode
[  106.898614][ T7745] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.072512][ T7752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.075414][ T7752] IPv6: NLM_F_CREATE should be set when creating new route
[  107.078362][ T7752] IPv6: NLM_F_CREATE should be set when creating new route
[  107.089222][ T7745] 8021q: adding VLAN 0 to HW filter on device bond4
[  107.097011][ T7745] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  107.107166][ T7752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.110177][ T7745] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  107.133386][ T7745] bond4: (slave wireguard0): making interface the new active one
[  107.136731][ T7745] wireguard0: entered promiscuous mode
[  107.146072][ T7745] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  107.170461][ T7752] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  107.199434][ T7752] bond4: (slave wireguard1): Enslaving as a backup interface with an up link
[  107.232865][ T7755] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  107.239388][ T7755] netlink: 'syz.1.820': attribute type 2 has an invalid length.
[  107.251894][ T7755] netlink: 'syz.1.820': attribute type 1 has an invalid length.
[  107.254727][ T7755] netlink: 'syz.1.820': attribute type 2 has an invalid length.
[  108.000357][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.848'.
[  108.168662][ T7830] netlink: 3 bytes leftover after parsing attributes in process `syz.0.855'.
[  108.173564][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'.
[  108.177023][ T7830] netlink: 3 bytes leftover after parsing attributes in process `syz.0.855'.
[  108.180519][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'.
[  108.186026][ T7830] netlink: 3 bytes leftover after parsing attributes in process `syz.0.855'.
[  108.316273][ T7841] syz_tun: entered allmulticast mode
[  108.718906][ T7878] netlink: 'syz.0.878': attribute type 1 has an invalid length.
[  108.729243][ T7878] netlink: 168 bytes leftover after parsing attributes in process `syz.0.878'.
[  108.840607][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'.
[  108.925487][ T7888] syz.0.882: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  108.932502][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.0.882 Not tainted syzkaller #0 PREEMPT(full) 
[  108.932521][ T7888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.932530][ T7888] Call Trace:
[  108.932544][ T7888]  <TASK>
[  108.932552][ T7888]  dump_stack_lvl+0x189/0x250
[  108.932575][ T7888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.932588][ T7888]  ? __pfx__printk+0x10/0x10
[  108.932638][ T7888]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  108.932654][ T7888]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  108.932669][ T7888]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  108.932685][ T7888]  warn_alloc+0x214/0x310
[  108.932707][ T7888]  ? stack_depot_save_flags+0x40/0x860
[  108.932727][ T7888]  ? __pfx_warn_alloc+0x10/0x10
[  108.932749][ T7888]  ? kasan_save_track+0x4f/0x80
[  108.932765][ T7888]  ? xskq_create+0x56/0x170
[  108.932783][ T7888]  ? xsk_init_queue+0xb0/0x110
[  108.932800][ T7888]  ? xsk_setsockopt+0x4dc/0x8d0
[  108.932819][ T7888]  ? do_sock_setsockopt+0x17c/0x1b0
[  108.932835][ T7888]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  108.932850][ T7888]  ? do_syscall_64+0xfa/0x3b0
[  108.932861][ T7888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.932880][ T7888]  __vmalloc_node_range_noprof+0x125/0x12f0
[  108.932917][ T7888]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  108.932936][ T7888]  ? __kasan_kmalloc+0x93/0xb0
[  108.932953][ T7888]  vmalloc_user_noprof+0xad/0xf0
[  108.932966][ T7888]  ? xskq_create+0xbf/0x170
[  108.932982][ T7888]  xskq_create+0xbf/0x170
[  108.932998][ T7888]  xsk_init_queue+0xb0/0x110
[  108.933014][ T7888]  xsk_setsockopt+0x4dc/0x8d0
[  108.933032][ T7888]  ? __pfx_xsk_setsockopt+0x10/0x10
[  108.933049][ T7888]  ? __pfx_aa_sk_perm+0x10/0x10
[  108.933071][ T7888]  ? aa_sock_opt_perm+0xff/0x1b0
[  108.933086][ T7888]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  108.933101][ T7888]  ? __pfx_xsk_setsockopt+0x10/0x10
[  108.933122][ T7888]  do_sock_setsockopt+0x17c/0x1b0
[  108.933145][ T7888]  __x64_sys_setsockopt+0x13f/0x1b0
[  108.933159][ T7888]  do_syscall_64+0xfa/0x3b0
[  108.933168][ T7888]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.933181][ T7888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.933188][ T7888]  ? exc_page_fault+0x9f/0xf0
[  108.933200][ T7888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.933208][ T7888] RIP: 0033:0x7f5dbbd8ec29
[  108.933217][ T7888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.933224][ T7888] RSP: 002b:00007f5dbcb86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  108.933237][ T7888] RAX: ffffffffffffffda RBX: 00007f5dbbfd5fa0 RCX: 00007f5dbbd8ec29
[  108.933246][ T7888] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  108.933254][ T7888] RBP: 00007f5dbbe11e41 R08: 0000000000000004 R09: 0000000000000000
[  108.933264][ T7888] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.933274][ T7888] R13: 00007f5dbbfd6038 R14: 00007f5dbbfd5fa0 R15: 00007ffdbd474c38
[  108.933296][ T7888]  </TASK>
[  108.933304][ T7888] Mem-Info:
[  109.052473][ T7888] active_anon:5687 inactive_anon:0 isolated_anon:0
[  109.052473][ T7888]  active_file:1360 inactive_file:38265 isolated_file:0
[  109.052473][ T7888]  unevictable:1768 dirty:381 writeback:0
[  109.052473][ T7888]  slab_reclaimable:9914 slab_unreclaimable:53893
[  109.052473][ T7888]  mapped:18246 shmem:2438 pagetables:979
[  109.052473][ T7888]  sec_pagetables:0 bounce:0
[  109.052473][ T7888]  kernel_misc_reclaimable:0
[  109.052473][ T7888]  free:306757 free_pcp:12601 free_cma:0
[  109.073114][ T7888] Node 0 active_anon:13132kB inactive_anon:0kB active_file:3764kB inactive_file:139044kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28832kB dirty:980kB writeback:0kB shmem:4828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8388kB pagetables:1948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  109.085663][ T7888] Node 1 active_anon:9480kB inactive_anon:0kB active_file:1676kB inactive_file:14016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44152kB dirty:544kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3524kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  109.097885][ T7888] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  109.109178][ T7888] lowmem_reserve[]: 0 814 814 814 814
[  109.111522][ T7888] Node 0 DMA32 free:317104kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13132kB inactive_anon:0kB active_file:3764kB inactive_file:139044kB unevictable:3536kB writepending:980kB present:1556484kB managed:833640kB mlocked:0kB bounce:0kB free_pcp:22740kB local_pcp:8404kB free_cma:0kB
[  109.124900][ T7888] lowmem_reserve[]: 0 0 0 0 0
[  109.127388][ T7888] Node 1 DMA32 free:458492kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  109.139107][ T7888] lowmem_reserve[]: 0 0 854 854 854
[  109.141476][ T7888] Node 1 Normal free:435532kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9548kB inactive_anon:0kB active_file:1676kB inactive_file:14016kB unevictable:3536kB writepending:544kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:27700kB local_pcp:22196kB free_cma:0kB
[  109.154331][ T7888] lowmem_reserve[]: 0 0 0 0 0
[  109.156445][ T7888] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  109.163511][ T7888] Node 0 DMA32: 1066*4kB (UM) 415*8kB (UME) 289*16kB (UME) 143*32kB (UME) 140*64kB (UM) 30*128kB (UM) 7*256kB (U) 0*512kB 1*1024kB (U) 3*2048kB (UM) 68*4096kB (M) = 317072kB
[  109.170632][ T7888] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  109.177559][ T7888] Node 1 Normal: 9*4kB (UME) 357*8kB (UM) 240*16kB (UE) 245*32kB (UE) 68*64kB (UM) 21*128kB (UME) 4*256kB (U) 4*512kB (UM) 5*1024kB (UM) 2*2048kB (M) 98*4096kB (M) = 435308kB
[  109.184768][ T7888] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  109.188690][ T7888] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  109.192603][ T7888] 42063 total pagecache pages
[  109.194664][ T7888] 0 pages in swap cache
[  109.196488][ T7888] Free swap  = 124996kB
[  109.198324][ T7888] Total swap = 124996kB
[  109.200100][ T7888] 786301 pages RAM
[  109.201781][ T7888] 0 pages HighMem/MovableOnly
[  109.203744][ T7888] 240659 pages reserved
[  109.205552][ T7888] 0 pages cma reserved
[  109.557741][ T7920] ip6tnl1: entered promiscuous mode
[  109.559994][ T7920] ip6tnl1: entered allmulticast mode
[  109.564872][ T7920] team0: Device ip6tnl1 is of different type
[  109.996305][ T7941] syzkaller1: entered promiscuous mode
[  109.998072][ T7941] syzkaller1: entered allmulticast mode
[  110.374759][ T7972] netlink: 'syz.0.918': attribute type 6 has an invalid length.
[  111.395034][ T8046] __nla_validate_parse: 13 callbacks suppressed
[  111.395051][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.952'.
[  111.395143][ T8045] netlink: 'syz.2.953': attribute type 29 has an invalid length.
[  111.453379][ T8045] netlink: 'syz.2.953': attribute type 29 has an invalid length.
[  111.465110][ T8045] netlink: 500 bytes leftover after parsing attributes in process `syz.2.953'.
[  111.468997][ T8045] unsupported nla_type 58
[  111.930902][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.960'.
[  112.385988][ T8097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'.
[  112.413747][ T8097] netlink: 'syz.0.975': attribute type 1 has an invalid length.
[  112.753959][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.982'.
[  112.772198][ T8118] netlink: 'syz.0.984': attribute type 2 has an invalid length.
[  112.926008][ T8134] netlink: 52 bytes leftover after parsing attributes in process `syz.2.992'.
[  112.929677][ T8134] netlink: 52 bytes leftover after parsing attributes in process `syz.2.992'.
[  112.933789][ T8134] netlink: 52 bytes leftover after parsing attributes in process `syz.2.992'.
[  113.132432][ T8149] netlink: 'syz.0.998': attribute type 2 has an invalid length.
[  113.170876][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.175117][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.190787][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'.
[  113.424249][ T8146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.451472][ T8146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.704278][ T8146] gretap1: left promiscuous mode
[  113.712966][ T8146] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  113.715807][ T8146] macsec1: left promiscuous mode
[  113.717737][ T8146] macsec1: left allmulticast mode
[  113.731778][ T8146] macvtap1: left promiscuous mode
[  113.739558][ T8146] gtp0: left promiscuous mode
[  113.742822][ T8146] gtp0: left allmulticast mode
[  113.749506][ T8146] bond2: left promiscuous mode
[  113.752356][ T8146] bond3: left promiscuous mode
[  113.760884][ T8146] bond4: left promiscuous mode
[  113.763800][ T8146] wireguard0: left promiscuous mode
[  113.782572][ T8152] hsr_slave_0: left promiscuous mode
[  113.786075][ T8152] hsr_slave_1: left promiscuous mode
[  113.807518][ T5936] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.812055][ T5936] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.815592][ T5936] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.819902][ T5936] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.825622][ T5936] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.828680][ T5936] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.832576][ T8146] syz.2.994 (8146) used greatest stack depth: 18656 bytes left
[  113.836683][ T5936] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.839612][ T5936] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.138800][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'.
[  115.413060][ T8245] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  115.612032][  T795] IPVS: starting estimator thread 0...
[  115.691295][ T8262] netlink: zone id is out of range
[  115.693163][ T8262] netlink: zone id is out of range
[  115.695767][ T8262] netlink: get zone limit has 8 unknown bytes
[  115.701188][ T8256] IPVS: using max 63 ests per chain, 151200 per kthread
[  115.808981][ T8271] netlink: 'syz.1.1048': attribute type 29 has an invalid length.
[  116.045773][ T8289] netlink: 'syz.0.1059': attribute type 1 has an invalid length.
[  116.091491][ T8289] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  116.099506][ T8289] bond1: (slave vxcan5): Error -95 calling set_mac_address
[  116.804747][ T8347] __nla_validate_parse: 3 callbacks suppressed
[  116.804766][ T8347] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1086'.
[  116.818439][ T8347] wg1 speed is unknown, defaulting to 1000
[  116.820933][ T8347] wg1 speed is unknown, defaulting to 1000
[  116.825877][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'.
[  116.832759][ T8347] wg1 speed is unknown, defaulting to 1000
[  116.863453][ T8347] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  116.910277][ T8347] wg1 speed is unknown, defaulting to 1000
[  116.915286][ T8347] wg1 speed is unknown, defaulting to 1000
[  116.921143][ T8347] wg1 speed is unknown, defaulting to 1000
[  117.270659][ T8384] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  117.630477][ T8414] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  118.183954][ T8455] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1134'.
[  118.737455][ T8489] netlink: 'syz.2.1149': attribute type 1 has an invalid length.
[  118.766831][ T8489] 8021q: adding VLAN 0 to HW filter on device bond5
[  119.010110][ T8489] bond5: (slave geneve2): making interface the new active one
[  119.023406][ T8489] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  119.230473][ T8492] bond5: entered promiscuous mode
[  119.233010][ T8492] geneve2: entered promiscuous mode
[  119.282065][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.294727][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.332495][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.335994][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.667266][ T8574] vlan0: entered promiscuous mode
[  120.675180][ T8539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  120.940640][ T8592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1175'.
[  120.953463][ T8592] bond0: entered promiscuous mode
[  120.955525][ T8592] bond_slave_0: entered promiscuous mode
[  120.971620][ T8592] bond_slave_1: entered promiscuous mode
[  120.976588][ T8592] bond0: left promiscuous mode
[  120.978581][ T8592] bond_slave_0: left promiscuous mode
[  120.982030][ T8592] bond_slave_1: left promiscuous mode
[  121.922952][ T8633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1191'.
[  121.926768][ T8633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1191'.
[  121.930291][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'.
[  122.056012][ T8644] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.167665][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'.
[  122.263396][ T8662] pim6reg1: entered promiscuous mode
[  122.265130][ T8662] pim6reg1: entered allmulticast mode
[  122.307906][ T8662] wg1 speed is unknown, defaulting to 1000
[  122.366951][ T8671] bridge_slave_0: invalid flags given to default FDB implementation
[  122.436015][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1209'.
[  122.449812][ T8675] ip6gretap0: entered promiscuous mode
[  122.456413][ T8675] macvtap1: entered promiscuous mode
[  122.458660][ T8675] macvtap1: entered allmulticast mode
[  122.460835][ T8675] ip6gretap0: entered allmulticast mode
[  122.550361][ T8675] macvtap1: left promiscuous mode
[  122.558833][ T8675] macvtap1: left allmulticast mode
[  122.566192][ T8675] ip6gretap0: left allmulticast mode
[  122.796960][ T8701] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.018027][ T8717] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  123.024600][ T8717] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  123.042083][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'.
[  123.188338][ T8725] vcan0: tx drop: invalid sa for name 0x0000000000001000
[  123.475118][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.478701][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.682316][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.705136][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.030403][ T5936] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.037719][ T5936] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.043363][ T5936] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.047514][ T5936] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.053142][ T5936] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.057254][ T5936] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.067449][ T5936] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.081136][ T5936] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.215832][ T8750] netlink: 'syz.0.1237': attribute type 10 has an invalid length.
[  124.243902][ T8750] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  124.254335][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'.
[  124.290036][ T8750] bond0: (slave bridge0): Releasing backup interface
[  125.059042][ T8803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1262'.
[  125.185419][ T8819] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1269'.
[  125.218539][ T8821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.222353][ T8821] syzkaller0: entered promiscuous mode
[  125.224552][ T8821] syzkaller0: entered allmulticast mode
[  125.272701][ T8821] tipc: Resetting bearer <eth:syzkaller0>
[  125.278482][ T8820] tipc: Resetting bearer <eth:syzkaller0>
[  125.300319][ T8820] tipc: Disabling bearer <eth:syzkaller0>
[  125.310455][ T8827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'.
[  125.317863][ T8827] netlink: 'syz.0.1273': attribute type 32 has an invalid length.
[  125.324925][ T8827] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  125.383080][ T8831] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.464477][ T8839] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  126.278196][ T8888] netlink: 'syz.0.1302': attribute type 15 has an invalid length.
[  127.796663][ T8952] netlink: 'syz.0.1328': attribute type 21 has an invalid length.
[  127.800882][ T8952] __nla_validate_parse: 3 callbacks suppressed
[  127.800896][ T8952] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1328'.
[  128.177023][ T8986] netlink: 'syz.0.1340': attribute type 10 has an invalid length.
[  128.187199][ T8986] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  128.385489][ T9002] wg1 speed is unknown, defaulting to 1000
[  128.436056][ T9007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1353'.
[  128.566184][ T9016] veth1_virt_wifi: entered promiscuous mode
[  128.568486][ T9016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1356'.
[  128.572840][ T9016] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  128.665044][ T9024] netlink: 'syz.2.1361': attribute type 1 has an invalid length.
[  128.667479][ T9024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1361'.
[  128.846303][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1363'.
[  128.934086][ T9038] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  129.113992][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'.
[  129.300741][ T9075] delete_channel: no stack
[  129.480267][ T9093] netlink: 'syz.2.1391': attribute type 4 has an invalid length.
[  129.718172][ T9107] hsr0: entered promiscuous mode
[  129.722075][ T9106] hsr0: left promiscuous mode
[  129.748609][ T5936] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  130.557172][ T9142] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  130.560037][ T9142] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  130.681381][ T9147] tun0: tun_chr_ioctl cmd 2148045848
[  130.687455][ T9147] tun0: tun_chr_ioctl cmd 21731
[  131.008319][ T9179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1425'.
[  131.130827][ T9190] netlink: 'syz.2.1433': attribute type 1 has an invalid length.
[  131.192792][ T9190] bond6: entered promiscuous mode
[  131.194870][ T9190] bond6: entered allmulticast mode
[  131.199986][ T9190] 8021q: adding VLAN 0 to HW filter on device bond6
[  131.247284][ T9190] 8021q: adding VLAN 0 to HW filter on device bond7
[  131.261312][ T9190] bond7: entered promiscuous mode
[  131.263583][ T9190] bond7: entered allmulticast mode
[  131.266180][ T9190] bond6: (slave bond7): Enslaving as a backup interface with a down link
[  131.269540][ T9200] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  131.537099][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'.
[  131.813327][ T9249] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  132.667408][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  133.070225][ T9314] wg1 speed is unknown, defaulting to 1000
[  133.869635][ T9354] netlink: 'syz.2.1499': attribute type 1 has an invalid length.
[  133.878383][ T9357] nicvf0: entered promiscuous mode
[  133.917572][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[  133.921324][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[  133.924761][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[  133.949051][ T9361] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  133.960655][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[  133.980934][ T9364] bridge2: entered allmulticast mode
[  133.986089][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  133.987064][ T9354] 8021q: adding VLAN 0 to HW filter on device bond8
[  134.046325][ T9354] veth9: entered promiscuous mode
[  134.069367][ T9354] bridge_slave_0: left allmulticast mode
[  134.072086][ T9354] bridge_slave_0: left promiscuous mode
[  134.074395][ T9354] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.079266][ T9354] bridge_slave_1: left allmulticast mode
[  134.082215][ T9354] bridge_slave_1: left promiscuous mode
[  134.084606][ T9354] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.090876][ T9354] bond0: (slave bond_slave_0): Releasing backup interface
[  134.098196][ T9354] bond0: (slave bond_slave_1): Releasing backup interface
[  134.101710][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  134.114873][ T9354] team0: Port device team_slave_0 removed
[  134.119562][ T9354] team0: Port device team_slave_1 removed
[  134.122362][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.126586][ T9354] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.132742][ T9354] bond1: (slave gretap1): Releasing active interface
[  134.137741][ T9354] bond2: (slave bond3): Releasing backup interface
[  134.144002][ T9354] bond4: (slave wireguard0): Releasing backup interface
[  134.146667][ T9354] bond4: (slave wireguard1): making interface the new active one
[  134.153030][ T9354] bond4: (slave wireguard1): Releasing backup interface
[  134.159327][ T9354] bond5: (slave geneve2): Releasing active interface
[  134.163259][ T9354] geneve2: left promiscuous mode
[  134.170856][ T9354] bond6: (slave bond7): Releasing backup interface
[  134.175993][ T9354] bond7: left promiscuous mode
[  134.178543][ T9354] bond7: left allmulticast mode
[  134.188155][ T9354] bond8: (slave ip6gretap1): Removing an active aggregator
[  134.194504][ T9354] bond8: (slave ip6gretap1): Releasing backup interface
[  134.208718][ T5901] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.214296][ T5901] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.220517][ T5901] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.225156][ T5901] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.303844][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1511'.
[  134.396559][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1514'.
[  134.709525][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1527'.
[  134.715270][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'.
[  134.748791][ T9424] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1528'.
[  134.789608][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1531'.
[  135.001475][ T9446] netlink: 'syz.1.1540': attribute type 4 has an invalid length.
[  135.622886][ T9475] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  136.447823][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'.
[  136.451605][ T9537] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1582'.
[  136.464206][ T9534] veth1_virt_wifi: left promiscuous mode
[  136.474214][ T9534] wireguard0: left promiscuous mode
[  136.476399][ T9534] wireguard0: left allmulticast mode
[  136.488843][ T9534] nicvf0: left promiscuous mode
[  136.496576][ T9534] bridge2: left allmulticast mode
[  136.498859][ T5901] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  136.515526][ T5901] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  136.519185][ T5901] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  136.523467][ T5901] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  136.694135][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1591'.
[  136.702304][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1591'.
[  137.364741][ T9613] netlink: 'syz.2.1613': attribute type 10 has an invalid length.
[  137.375474][ T9613] team0: Port device geneve0 added
[  137.378571][ T5901] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.382397][ T5901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.385680][ T5901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.388901][ T5901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.537994][ T9620] netlink: 'syz.1.1616': attribute type 21 has an invalid length.
[  137.640564][ T9627] tc_dump_action: action bad kind
[  138.327178][ T9641] netlink: 'syz.0.1626': attribute type 10 has an invalid length.
[  138.869877][ T9651] team0: No ports can be present during mode change
[  139.167444][ T9676] netlink: 'syz.0.1642': attribute type 1 has an invalid length.
[  139.366378][ T9691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.369656][ T9691] syzkaller0: entered promiscuous mode
[  139.371913][ T9691] syzkaller0: entered allmulticast mode
[  139.421672][ T9691] tipc: Resetting bearer <eth:syzkaller0>
[  139.437373][ T9690] tipc: Resetting bearer <eth:syzkaller0>
[  139.447541][ T9690] tipc: Disabling bearer <eth:syzkaller0>
[  139.578266][ T9700] netlink: 'syz.1.1652': attribute type 1 has an invalid length.
[  139.581147][ T9700] __nla_validate_parse: 15 callbacks suppressed
[  139.581156][ T9700] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1652'.
[  139.984064][ T9722] netlink: 'syz.1.1661': attribute type 1 has an invalid length.
[  140.072921][ T9720] gretap1: entered allmulticast mode
[  140.077773][ T9720] bond1: (slave gretap1): making interface the new active one
[  140.082420][ T9720] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  140.638426][ T9758] tipc: Cannot configure node identity twice
[  140.772729][ T9762] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1674'.
[  140.776257][ T9762] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1674'.
[  140.780410][ T9762] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1674'.
[  140.785118][ T9762] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1674'.
[  140.932735][ T9774] IPv6: sit2: Disabled Multicast RS
[  140.935829][ T9774] sit2: entered allmulticast mode
[  141.093358][ T9786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1687'.
[  141.097350][ T9786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1687'.
[  141.430592][ T9808] netlink: 'syz.1.1695': attribute type 1 has an invalid length.
[  141.591365][ T9819] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.594634][ T9819] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  141.596941][ T9819] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  141.725955][ T9827] netlink: 'syz.1.1702': attribute type 1 has an invalid length.
[  141.966422][ T9850] netlink: 'syz.1.1709': attribute type 13 has an invalid length.
[  141.969505][ T9850] netlink: 'syz.1.1709': attribute type 17 has an invalid length.
[  142.110917][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.117152][ T9850] 8021q: adding VLAN 0 to HW filter on device team0
[  142.124077][ T9850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.136747][ T9841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.274399][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'.
[  143.487463][ T9884] netlink: 'syz.0.1723': attribute type 1 has an invalid length.
[  143.501321][ T9884] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1723'.
[  143.539619][ T9887] netlink: 'syz.1.1726': attribute type 3 has an invalid length.
[  143.694758][  T795] IPVS: starting estimator thread 0...
[  143.769091][ T9910] syzkaller1: entered promiscuous mode
[  143.772255][ T9910] syzkaller1: entered allmulticast mode
[  143.792577][ T9904] IPVS: using max 63 ests per chain, 151200 per kthread
[  143.943538][ T9922] can: request_module (can-proto-0) failed.
[  144.366269][ T9941] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1751'.
[  144.649542][ T9952] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1755'.
[  144.678644][ T9954] netlink: 'syz.1.1756': attribute type 30 has an invalid length.
[  144.686615][ T9954] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  144.689739][ T9954] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  144.870352][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1764'.
[  144.920151][ T9972] batman_adv: batadv0: Adding interface: dummy0
[  144.925444][ T9972] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem.
[  144.942866][ T9972] batman_adv: batadv0: Interface activated: dummy0
[  144.959948][ T9972] batadv0: mtu less than device minimum
[  144.963720][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  144.969030][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  144.974336][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  144.979466][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  144.984636][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  144.989686][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  144.994904][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  145.000156][ T9972] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  145.123419][ T9991] syzkaller1: tun_chr_ioctl cmd 2147767520
[  145.309963][T10005] netlink: 'syz.2.1779': attribute type 1 has an invalid length.
[  145.605127][T10018] syzkaller1: entered promiscuous mode
[  145.607519][T10018] syzkaller1: entered allmulticast mode
[  145.676129][T10022] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1786'.
[  145.792138][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'.
[  145.903928][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1790'.
[  145.985016][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'.
[  146.175645][T10046] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1795'.
[  146.409602][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'.
[  146.416287][T10067] batadv1: entered promiscuous mode
[  146.552414][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'.
[  146.555495][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'.
[  146.869140][T10090] vlan2: entered promiscuous mode
[  146.871390][T10090] macvtap0: entered promiscuous mode
[  148.188388][T10169] net_ratelimit: 12 callbacks suppressed
[  148.188425][T10169] openvswitch: netlink: Key 6 has unexpected len 8 expected 2
[  149.527298][T10209] netlink: 'syz.1.1855': attribute type 1 has an invalid length.
[  149.735494][T10225] __nla_validate_parse: 6 callbacks suppressed
[  149.735512][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'.
[  149.749201][ T5936] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.753117][T10225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'.
[  149.759714][ T5936] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.769392][ T5936] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.773764][ T5936] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.901704][T10237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'.
[  150.296048][T10262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.304096][T10260] tipc: Resetting bearer <eth:syzkaller0>
[  150.362346][T10269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  151.421574][  T795] tipc: Node number set to 1871144255
[  151.679097][T10260] tipc: Disabling bearer <eth:syzkaller0>
[  151.684346][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'.
[  151.804526][T10294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1896'.
[  151.878077][T10300] pim6reg: entered allmulticast mode
[  151.890348][T10304] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1899'.
[  151.995957][T10312] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  152.019908][T10316] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1905'.
[  152.028570][T10312] bridge_slave_0: left allmulticast mode
[  152.030811][T10312] bridge_slave_0: left promiscuous mode
[  152.051585][T10312] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.058836][T10312] bridge_slave_1: left allmulticast mode
[  152.065976][T10312] bridge_slave_1: left promiscuous mode
[  152.068609][T10312] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.116319][T10312] bond0: (slave bond_slave_0): Releasing backup interface
[  152.122595][T10312] bond0: (slave bond_slave_1): Releasing backup interface
[  152.127469][T10312] team0: Port device team_slave_0 removed
[  152.130588][T10312] team0: Port device team_slave_1 removed
[  152.136352][T10312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.139584][T10312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.146597][T10312] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  152.211226][T10312] netlink: 'syz.1.1904': attribute type 10 has an invalid length.
[  152.220500][T10312] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  152.258597][T10312] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.272580][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'.
[  152.272624][T10312] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  152.329364][T10321] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  152.345701][T10321] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  152.584235][T10340] syzkaller0: entered promiscuous mode
[  152.586071][T10340] syzkaller0: entered allmulticast mode
[  152.904571][T10350] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1919'.
[  152.998424][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1921'.
[  154.066037][T10354] gretap1: left allmulticast mode
[  154.086330][T10356] geneve2: entered promiscuous mode
[  154.088483][T10356] geneve2: entered allmulticast mode
[  154.099712][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.113658][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.117230][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.133767][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.141228][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.147780][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.165218][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  154.168852][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.179097][T10368] gretap0: entered promiscuous mode
[  154.183706][T10368] vlan2: entered promiscuous mode
[  154.209067][T10370] netlink: 'syz.1.1927': attribute type 15 has an invalid length.
[  154.331032][T10372] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.338430][T10372] 8021q: adding VLAN 0 to HW filter on device team0
[  154.361908][T10372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.435234][T10379] netlink: 'syz.0.1929': attribute type 13 has an invalid length.
[  154.901422][ T5891] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  154.901478][   T55] Bluetooth: hci0: command 0x0c1a tx timeout
[  155.153694][T10428] __nla_validate_parse: 1 callbacks suppressed
[  155.153711][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'.
[  155.167408][T10428] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  155.330025][T10415] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.341161][T10415] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  155.414395][T10447] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  156.413707][T10509] netlink: 'syz.1.1986': attribute type 9 has an invalid length.
[  156.416254][T10509] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1986'.
[  156.468663][T10511] pimreg: entered allmulticast mode
[  156.560484][T10519] netlink: 'syz.1.1991': attribute type 1 has an invalid length.
[  156.563954][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'.
[  156.752995][T10537] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1999'.
[  156.756730][T10537] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1999'.
[  156.760289][T10537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1999'.
[  156.906114][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2007'.
[  157.141174][ T5936] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.143771][ T5936] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.146894][ T5936] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.161170][ T5936] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  157.572945][T10606] netlink: 308 bytes leftover after parsing attributes in process `syz.2.2031'.
[  157.575781][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'.
[  157.592123][T10606] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  158.227529][T10647] syzkaller1: entered allmulticast mode
[  158.973057][T10662] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.055152][T10662] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.140762][T10662] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.218942][T10662] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.369014][ T5936] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.382908][ T5936] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.396215][ T5901] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.421332][ T5901] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.595026][T10704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2067'.
[  159.962583][T10723] ip6gre1: entered allmulticast mode
[  160.000161][T10725] sctp: [Deprecated]: syz.1.2076 (pid 10725) Use of int in maxseg socket option.
[  160.000161][T10725] Use struct sctp_assoc_value instead
[  160.031227][ T5891] Bluetooth: hci2: command 0x0405 tx timeout
[  160.499135][T10731] __nla_validate_parse: 1 callbacks suppressed
[  160.499154][T10731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2078'.
[  161.109788][T10751] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2085'.
[  161.116702][T10751] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2085'.
[  161.119918][T10751] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2085'.
[  162.726657][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'.
[  162.937230][T10848] netlink: 'syz.2.2129': attribute type 4 has an invalid length.
[  163.085472][T10863] xt_socket: unknown flags 0xd0
[  163.169012][T10868] netlink: 'syz.1.2139': attribute type 21 has an invalid length.
[  163.171946][T10868] IPv6: NLM_F_CREATE should be specified when creating new route
[  163.175389][T10868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.178256][T10868] IPv6: NLM_F_CREATE should be set when creating new route
[  163.181162][T10868] IPv6: NLM_F_CREATE should be set when creating new route
[  163.184114][T10868] IPv6: NLM_F_CREATE should be set when creating new route
[  164.119082][T10898] netdevsim netdevsim2: loading /lib/firmware// failed with error -22
[  164.123088][T10898] netdevsim netdevsim2: Direct firmware load for / failed with error -22
[  164.126361][T10898] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  164.563045][T10915] netlink: 'syz.1.2155': attribute type 64 has an invalid length.
[  164.696616][T10928] netlink: 'syz.0.2162': attribute type 17 has an invalid length.
[  165.177152][T10966] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2178'.
[  165.189654][T10966] batadv1: entered promiscuous mode
[  165.191668][T10966] batadv1: entered allmulticast mode
[  165.465909][T10984] sctp: [Deprecated]: syz.2.2186 (pid 10984) Use of int in max_burst socket option deprecated.
[  165.465909][T10984] Use struct sctp_assoc_value instead
[  165.498699][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'.
[  165.656100][T10996] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2191'.
[  165.658993][T10996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2191'.
[  165.662087][T10996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2191'.
[  165.812544][T11010] tipc: Can't bind to reserved service type 0
[  166.334674][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2209'.
[  166.493681][T11045] netlink: 'syz.2.2213': attribute type 2 has an invalid length.
[  166.626528][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'.
[  166.891247][T11057] netlink: 'syz.1.2219': attribute type 1 has an invalid length.
[  166.893773][T11057] nbd: error processing sock list
[  166.895499][T11057] block nbd0: shutting down sockets
[  166.996078][T11081] netlink: 'syz.2.2230': attribute type 4 has an invalid length.
[  166.998666][T11081] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2230'.
[  167.003098][T11081] : renamed from bond0
[  167.102346][T11085] syz.0.2232 uses old SIOCAX25GETINFO
[  167.145819][T11088] netlink: 'syz.0.2233': attribute type 4 has an invalid length.
[  167.162395][T11088] netlink: 'syz.0.2233': attribute type 4 has an invalid length.
[  167.207364][T11092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2235'.
[  167.377647][T11101] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  167.380500][T11101] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  167.625454][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2242'.
[  167.934228][T11122] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.939248][T11122] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  167.942245][T11122] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  167.947921][T11122] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  168.077989][T11130] tap0: tun_chr_ioctl cmd 35108
[  168.553371][T11174] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2272'.
[  168.779201][T11205] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  168.989597][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2296'.
[  169.174169][T11250] netlink: 'syz.1.2308': attribute type 21 has an invalid length.
[  170.726139][T11327] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  170.730099][T11327] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  170.828577][T11337] __nla_validate_parse: 11 callbacks suppressed
[  170.828591][T11337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2344'.
[  170.922434][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2344'.
[  171.773182][T11375] netlink: 'syz.1.2360': attribute type 7 has an invalid length.
[  171.950552][T11390] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2366'.
[  172.093781][T11403] syzkaller1: entered promiscuous mode
[  172.096865][T11403] syzkaller1: entered allmulticast mode
[  172.231253][T11413] dvmrp11: entered allmulticast mode
[  172.326866][T11421] syzkaller1: entered promiscuous mode
[  172.328754][T11421] syzkaller1: entered allmulticast mode
[  172.414164][T11429] batadv_slave_0: entered promiscuous mode
[  172.495022][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2389'.
[  172.497949][T11438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2389'.
[  172.893695][T11477] netlink: 'syz.2.2407': attribute type 3 has an invalid length.
[  172.908570][T11477] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  172.994378][T11481] erspan0: entered promiscuous mode
[  173.024149][T11481] 8021q: adding VLAN 0 to HW filter on device 
[  173.028817][T11481] 8021q: adding VLAN 0 to HW filter on device team0
[  173.059743][T11481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.083885][T11486] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2410'.
[  173.113153][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  173.231223][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  173.411243][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  173.581812][T11519] lo: Caught tx_queue_len zero misconfig
[  174.424586][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.552885][T11569] netlink: 'syz.1.2444': attribute type 1 has an invalid length.
[  174.574892][ T5901] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  174.608458][T11571] netlink: 'syz.2.2445': attribute type 83 has an invalid length.
[  174.640662][T11573] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  174.656464][T11569] 8021q: adding VLAN 0 to HW filter on device bond2
[  174.660655][ T5901] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  174.713616][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'.
[  174.784613][T11569] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  174.788704][T11569] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  174.796551][T11569] bond2 (unregistering): Released all slaves
[  174.820850][T11575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2447'.
[  174.827337][T11575] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  174.839590][  T795] syz1: Port: 1 Link DOWN
[  175.063232][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2458'.
[  175.121337][  T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  175.203452][T11612] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  175.206220][T11612] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  175.232983][T11612] tipc: Resetting bearer <eth:syzkaller0>
[  175.307528][T11621] IPv6: addrconf: prefix option has invalid lifetime
[  175.934894][T11671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2488'.
[  175.939342][T11671] netlink: 'syz.0.2488': attribute type 1 has an invalid length.
[  175.945617][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'.
[  175.991929][T11675] macsec0: entered promiscuous mode
[  175.993972][T11675] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  175.996753][T11675] macsec0: entered allmulticast mode
[  175.998773][T11675] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  176.169045][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2495'.
[  176.173849][T11687] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2495'.
[  176.186876][T11690] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  176.236936][T11696] batadv0: mtu less than device minimum
[  176.240560][T11696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  176.246543][T11696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  176.251654][T11696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  176.256560][T11696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  176.261755][T11696] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  176.288280][T11697] syzkaller1: entered promiscuous mode
[  176.296313][T11697] syzkaller1: entered allmulticast mode
[  176.311483][T11696] batadv_slave_1: entered promiscuous mode
[  176.315911][T11696] batman_adv: batadv0: Adding interface: macsec1
[  176.318380][T11696] batman_adv: batadv0: Interface activated: macsec1
[  177.005264][T11740] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2513'.
[  177.294674][T11760] trusted_key: syz.1.2524 sent an empty control message without MSG_MORE.
[  177.559746][T11770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2529'.
[  177.567278][T11770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2529'.
[  177.570911][T11770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2529'.
[  177.575240][T11770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2529'.
[  177.707461][T11781] tunl0: Caught tx_queue_len zero misconfig
[  178.072804][  T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  178.258866][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'.
[  178.981384][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  179.141645][ T5768] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  179.856731][T11898] pim6reg1: entered promiscuous mode
[  179.858738][T11898] pim6reg1: entered allmulticast mode
[  180.175716][T11922] ip6tnl3: entered promiscuous mode
[  180.177380][T11922] ip6tnl3: entered allmulticast mode
[  180.441508][T11945] netlink: 'syz.0.2600': attribute type 12 has an invalid length.
[  180.508244][T11949] syzkaller0: entered promiscuous mode
[  180.510375][T11949] syzkaller0: entered allmulticast mode
[  180.959051][T11971] __nla_validate_parse: 2 callbacks suppressed
[  180.959066][T11971] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2609'.
[  181.112599][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'.
[  181.122153][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'.
[  181.479062][T11997] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2615'.
[  182.355838][T12012] sctp: [Deprecated]: syz.1.2622 (pid 12012) Use of struct sctp_assoc_value in delayed_ack socket option.
[  182.355838][T12012] Use struct sctp_sack_info instead
[  182.983911][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2637'.
[  183.633730][T12067] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2648'.
[  183.699016][T12073] nbd: must specify at least one socket
[  183.708079][T12074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2649'.
[  184.060376][T12098] net_ratelimit: 34 callbacks suppressed
[  184.060397][T12098] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  184.477406][T12124] dvmrp8: entered allmulticast mode
[  185.246465][T12174] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  185.252085][T12174] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  185.346872][T12182] pimreg: tun_chr_ioctl cmd 1074025677
[  185.349039][T12182] pimreg: linktype set to 780
[  185.354203][T12182] pimreg: tun_chr_ioctl cmd 35111
[  185.598860][T12201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2707'.
[  185.602462][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'.
[  185.675692][   T33] audit: type=1800 audit(1758809728.726:3): pid=12204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2709" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4452 res=0 errno=0
[  186.248810][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2726'.
[  186.252856][T12244] netlink: 'syz.0.2727': attribute type 1 has an invalid length.
[  186.255363][T12244] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2727'.
[  186.562273][T12264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2737'.
[  186.625911][T12268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'.
[  186.629403][T12268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2739'.
[  186.635557][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2739'.
[  186.955644][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2750'.
[  187.288796][T12316] veth0_to_bond: entered allmulticast mode
[  187.864227][T12356] netlink: 'syz.0.2776': attribute type 1 has an invalid length.
[  188.103069][T12375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2786'.
[  188.294126][T12389] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.2791'.
[  188.298020][T12389] netlink: zone id is out of range
[  188.311573][T12389] netlink: zone id is out of range
[  188.342019][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  188.578692][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2799'.
[  188.745389][T12418] macvlan3: entered promiscuous mode
[  188.747886][T12418] macvlan3: entered allmulticast mode
[  188.752339][T12418] bond0: (slave macvlan3): Opening slave failed
[  188.843144][T12425] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  188.939030][T12427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.948030][T12427] syzkaller0: entered promiscuous mode
[  188.957392][T12427] syzkaller0: entered allmulticast mode
[  188.969525][T12427] tipc: Resetting bearer <eth:syzkaller0>
[  188.983818][T12426] tipc: Resetting bearer <eth:syzkaller0>
[  189.008666][T12426] tipc: Disabling bearer <eth:syzkaller0>
[  190.603747][T12516] Bluetooth: MGMT ver 1.23
[  190.759748][T12526] netlink: 'syz.1.2853': attribute type 5 has an invalid length.
[  191.418273][T12567] syzkaller1: entered promiscuous mode
[  191.420010][T12567] syzkaller1: entered allmulticast mode
[  192.162002][T12590] 8021q: adding VLAN 0 to HW filter on device bond2
[  192.179065][T12590] bond0: (slave bond2): Enslaving as an active interface with an up link
[  192.229474][T12600] netlink: 'syz.1.2882': attribute type 1 has an invalid length.
[  192.232649][T12600] netlink: 'syz.1.2882': attribute type 1 has an invalid length.
[  192.371923][T12600] netlink: 'syz.1.2882': attribute type 1 has an invalid length.
[  192.396496][T12600] 8021q: adding VLAN 0 to HW filter on device bond2
[  192.420644][T12600] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  192.432681][T12600] vlan2: entered allmulticast mode
[  192.434260][T12600] veth1: entered allmulticast mode
[  192.436817][T12600] bond2: (slave vlan2): Opening slave failed
[  192.496323][T12614] netlink: 'syz.0.2888': attribute type 39 has an invalid length.
[  192.550550][T12616] __nla_validate_parse: 7 callbacks suppressed
[  192.550571][T12616] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2888'.
[  192.561877][T12616] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2888'.
[  192.564749][T12616] netlink: 'syz.0.2888': attribute type 5 has an invalid length.
[  192.568490][T12616] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2888'.
[  192.579264][T12616] vlan3: entered allmulticast mode
[  192.581155][T12616] bridge_slave_0: entered allmulticast mode
[  192.604555][T12619] erspan0: entered promiscuous mode
[  192.606340][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'.
[  192.673666][ T5891] Bluetooth: hci2: command 0x0405 tx timeout
[  192.677145][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  192.853458][T12641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2899'.
[  193.084591][T12659] ip6tnl0: Caught tx_queue_len zero misconfig
[  193.417109][T12677] veth0_macvtap: Caught tx_queue_len zero misconfig
[  193.434924][T12677] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2916'.
[  193.521798][T12688] IPVS: ip_vs_edit_dest(): server weight less than zero
[  193.819600][T12714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2934'.
[  193.825020][T12714] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2934'.
[  194.499100][T12728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  194.712281][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'.
[  194.913287][T12752] netlink: 'syz.1.2945': attribute type 1 has an invalid length.
[  195.138164][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'.
[  195.142318][T12762] netlink: 'syz.0.2950': attribute type 21 has an invalid length.
[  195.223968][T12767] netlink: 'syz.1.2953': attribute type 1 has an invalid length.
[  195.256121][T12767] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  195.260410][T12767] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  195.268097][T12767] bond3: (slave vcan1): making interface the new active one
[  195.272392][T12767] bond3: (slave vcan1): Enslaving as an active interface with an up link
[  195.285235][T12767] bond3: (slave vcan2): The slave device specified does not support setting the MAC address
[  195.294769][T12767] bond3: (slave vcan2): Enslaving as a backup interface with an up link
[  195.313457][T12767] 8021q: adding VLAN 0 to HW filter on device bond3
[  196.181193][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  196.219302][T12819] netlink: 'syz.0.2976': attribute type 2 has an invalid length.
[  196.667587][T12837] netlink: 'syz.1.2986': attribute type 4 has an invalid length.
[  197.246256][T12881] validate_nla: 1 callbacks suppressed
[  197.246289][T12881] netlink: 'syz.1.3003': attribute type 8 has an invalid length.
[  197.437895][T12896] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  197.447633][T12896] team0: Mode changed to "activebackup"
[  197.697370][T12914] __nla_validate_parse: 8 callbacks suppressed
[  197.697399][T12914] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3016'.
[  197.884806][T12927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.945756][T12927] syzkaller0: entered promiscuous mode
[  197.947704][T12927] syzkaller0: entered allmulticast mode
[  197.950527][T12927] tipc: Resetting bearer <eth:syzkaller0>
[  197.960263][T12930] vlan3: entered promiscuous mode
[  197.962632][T12930] bond0: entered promiscuous mode
[  197.964893][T12930] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  197.968791][T12930] bond2: entered promiscuous mode
[  197.970658][T12930] vlan3: entered allmulticast mode
[  197.973055][T12930] bond0: entered allmulticast mode
[  197.975167][T12930] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  197.977561][T12930] bond2: entered allmulticast mode
[  197.981966][T12926] tipc: Resetting bearer <eth:syzkaller0>
[  198.089466][T12940] tipc: Failed to remove unknown binding: 66,1,1/134353152:978496010/978496012
[  198.101650][T12940] tipc: Failed to remove unknown binding: 66,1,1/134353152:978496010/978496012
[  198.104887][T12940] tipc: Failed to remove unknown binding: 66,1,1/134353152:978496010/978496012
[  199.848877][T12926] tipc: Disabling bearer <eth:syzkaller0>
[  200.072028][T12955] vlan1: entered promiscuous mode
[  200.073936][T12955] team0: entered promiscuous mode
[  200.075808][T12955] geneve0: entered promiscuous mode
[  201.295190][T12996] netlink: 'syz.1.3048': attribute type 12 has an invalid length.
[  201.397178][T13000] syzkaller0: entered promiscuous mode
[  201.398970][T13000] syzkaller0: entered allmulticast mode
[  201.521756][   T33] audit: type=1800 audit(1758809744.566:4): pid=13001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3049" name="memory.events" dev="tmpfs" ino=5124 res=0 errno=0
[  202.922421][   T33] audit: type=1800 audit(1758809745.976:5): pid=13011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3052" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5038 res=0 errno=0
[  202.948474][   T33] audit: type=1804 audit(1758809745.986:6): pid=13011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3052" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5038 res=1 errno=0
[  203.422547][T13046] netlink: 'syz.2.3068': attribute type 3 has an invalid length.
[  204.016604][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3073'.
[  204.085445][T13069] netlink: 'syz.0.3075': attribute type 1 has an invalid length.
[  204.115245][T13069] bond3: (slave gretap2): making interface the new active one
[  204.118785][T13069] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  204.138025][T13069] bond3: (slave gretap3): Enslaving as an active interface with an up link
[  204.480901][T13081] 8021q: adding VLAN 0 to HW filter on device bond4
[  204.500831][T13081] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  204.581467][   T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  204.691964][ T5936] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  204.917278][T13126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3100'.
[  204.967787][T13130] netlink: 'syz.1.3101': attribute type 10 has an invalid length.
[  204.977966][T13130] team0: Port device dummy0 added
[  205.075258][T13139] netlink: 'syz.0.3105': attribute type 10 has an invalid length.
[  205.078615][T13139] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3105'.
[  205.088883][T13139] team0: entered promiscuous mode
[  205.259554][T13155] netlink: 'syz.1.3112': attribute type 1 has an invalid length.
[  205.927515][T13187] rdma_op ffff88810a0ae9f0 conn xmit_rdma 0000000000000000
[  206.687154][ T5901] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  206.691789][ T5901] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  206.705776][ T5901] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  206.710588][ T5901] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  206.897590][T13262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  206.900818][T13262] syzkaller0: entered promiscuous mode
[  206.902939][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  206.905934][T13262] syzkaller0: entered allmulticast mode
[  206.926581][T13262] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  207.008936][T13262] tipc: Resetting bearer <eth:syzkaller0>
[  207.027315][T13262] tipc: Disabling bearer <eth:syzkaller0>
[  207.600750][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3176'.
[  207.605723][T13305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.608311][T13305] syzkaller0: entered promiscuous mode
[  207.610097][T13305] syzkaller0: entered allmulticast mode
[  207.616301][T13305] tipc: Resetting bearer <eth:syzkaller0>
[  207.623826][T13304] tipc: Resetting bearer <eth:syzkaller0>
[  207.633440][T13304] tipc: Disabling bearer <eth:syzkaller0>
[  208.088853][T13329] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.092714][T13329] 8021q: adding VLAN 0 to HW filter on device team0
[  208.108487][T13329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.279589][T13338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3192'.
[  208.520686][T13344] pim6reg1: entered promiscuous mode
[  208.524711][T13344] pim6reg1: entered allmulticast mode
[  208.650295][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'.
[  208.656932][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'.
[  208.660570][T13362] netlink: 'syz.2.3203': attribute type 11 has an invalid length.
[  208.789284][T13374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.792828][T13374] syzkaller0: entered promiscuous mode
[  208.794746][T13374] syzkaller0: entered allmulticast mode
[  208.796131][T13376] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3210'.
[  208.816166][T13374] tipc: Resetting bearer <eth:syzkaller0>
[  208.821458][T13370] tipc: Resetting bearer <eth:syzkaller0>
[  208.838030][T13370] tipc: Disabling bearer <eth:syzkaller0>
[  208.935290][T13381] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3212'.
[  209.368997][T13416] ip6gre2: entered allmulticast mode
[  209.926727][T13462] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  210.687063][T13515] bond2: (slave wlan0): Releasing active interface
[  211.625478][T13557] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3280'.
[  211.642620][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3280'.
[  211.820489][T13575] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3290'.
[  211.840882][T13577] !: renamed from dummy0 (while UP)
[  211.927049][T13586] bridge5: entered promiscuous mode
[  212.084268][T13604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3303'.
[  212.108863][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'.
[  213.381583][T13662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  213.601191][T13680] netlink: 'syz.0.3338': attribute type 1 has an invalid length.
[  213.607209][T13680] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3338'.
[  213.703571][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'.
[  213.708978][T13682] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  213.767901][T13682] netlink: 'syz.1.3337': attribute type 4 has an invalid length.
[  214.335538][T13734] bond6: entered promiscuous mode
[  214.338025][T13734] 8021q: adding VLAN 0 to HW filter on device bond6
[  214.639099][T13754] 8021q: adding VLAN 0 to HW filter on device bond9
[  214.664165][T13754] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  214.672181][T13754] bond9: (slave macvlan3): Enslaving as a backup interface with a down link
[  214.689725][T13754] geneve0: left promiscuous mode
[  214.708028][T13754] team0: Port device geneve0 removed
[  214.711803][ T5768] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  214.728492][T13754] bond9: (slave macvlan3): Releasing backup interface
[  214.741453][ T5936] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.746825][ T5936] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.750324][ T5936] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.771146][ T5936] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  215.166522][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3383'.
[  215.177163][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'.
[  215.541357][  T795] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  215.624286][T13816] bond0: Caught tx_queue_len zero misconfig
[  215.900186][T13795] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  216.151117][T13850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3410'.
[  216.154438][T13850] netlink: 'syz.1.3410': attribute type 4 has an invalid length.
[  216.160648][T13851] netlink: 'syz.0.3411': attribute type 21 has an invalid length.
[  216.889859][T13894] netlink: 'syz.0.3430': attribute type 4 has an invalid length.
[  217.064146][T13904] __nla_validate_parse: 1 callbacks suppressed
[  217.064159][T13904] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3435'.
[  217.331681][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3446'.
[  217.687810][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3460'.
[  218.185215][T13982] bridge0: port 1(veth0_to_bridge) entered blocking state
[  218.189005][T13982] bridge0: port 1(veth0_to_bridge) entered disabled state
[  218.192972][T13982] veth0_to_bridge: entered allmulticast mode
[  218.198278][T13982] veth0_to_bridge: entered promiscuous mode
[  219.145561][T14036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3497'.
[  219.250446][T14045] netlink: 'syz.1.3501': attribute type 6 has an invalid length.
[  219.266293][T14045] netlink: 'syz.1.3501': attribute type 12 has an invalid length.
[  219.269246][T14045] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3501'.
[  219.342684][T14048] syzkaller1: entered promiscuous mode
[  219.344915][T14048] syzkaller1: entered allmulticast mode
[  219.593855][T14062] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3507'.
[  220.316074][T14102] batman_adv: batadv0: Local translation table size (136) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  220.329374][T14102] vlan4: entered allmulticast mode
[  220.332381][T14102] batadv0: entered allmulticast mode
[  220.379849][T14104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3527'.
[  220.597385][T14118] netlink: 'syz.2.3533': attribute type 11 has an invalid length.
[  220.600330][T14118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3533'.
[  220.704663][T14131] netlink: 'syz.2.3538': attribute type 2 has an invalid length.
[  220.707159][T14131] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.3538'.
[  220.896350][T14135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.142393][T14157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3551'.
[  221.342473][T14184] netlink: 'syz.0.3565': attribute type 5 has an invalid length.
[  221.344436][T14185] C: renamed from lo (while UP)
[  221.349323][T14185] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  223.447500][T14268] netlink: 'syz.0.3598': attribute type 1 has an invalid length.
[  223.450421][T14268] netlink: 'syz.0.3598': attribute type 4 has an invalid length.
[  223.461989][T14268] __nla_validate_parse: 1 callbacks suppressed
[  223.462001][T14268] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3598'.
[  223.558567][T14272] delete_channel: no stack
[  223.830303][T14286] netlink: 'syz.2.3609': attribute type 1 has an invalid length.
[  223.848243][T14299] !: renamed from dummy0 (while UP)
[  223.875682][T14299] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  223.932743][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3615'.
[  224.042095][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3617'.
[  224.150321][T14310] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  224.209699][T14310] team1: entered promiscuous mode
[  224.212659][T14310] team1: entered allmulticast mode
[  224.495029][T14329] netlink: 'syz.0.3624': attribute type 1 has an invalid length.
[  225.133053][T14368] netlink: 'syz.2.3641': attribute type 2 has an invalid length.
[  225.136217][T14368] netlink: 'syz.2.3641': attribute type 8 has an invalid length.
[  225.139241][T14368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3641'.
[  225.379130][T14392] netlink: 'syz.2.3652': attribute type 39 has an invalid length.
[  225.426700][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'.
[  225.484380][T14402] erspan0: left promiscuous mode
[  225.486291][T14402] macsec0: entered allmulticast mode
[  225.498349][T14402] erspan0: entered promiscuous mode
[  225.500182][T14402] erspan0: entered allmulticast mode
[  225.503629][T14402] macsec0: left allmulticast mode
[  225.505577][T14402] erspan0: left allmulticast mode
[  225.976444][T14451] sctp: [Deprecated]: syz.1.3679 (pid 14451) Use of int in max_burst socket option.
[  225.976444][T14451] Use struct sctp_assoc_value instead
[  226.082619][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'.
[  226.138175][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3687'.
[  226.142271][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3687'.
[  227.388473][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3710'.
[  227.560529][   T13] nci: nci_rx_work: unknown MT 0x1
[  228.506890][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3725'.
[  228.531057][T14557] 8021q: adding VLAN 0 to HW filter on device bond10
[  228.557163][T14557] 8021q: adding VLAN 0 to HW filter on device bond10
[  228.559578][T14557] bond10: (slave wireguard2): The slave device specified does not support setting the MAC address
[  228.568107][T14557] bond10: (slave wireguard2): Error -95 calling set_mac_address
[  228.773351][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3733'.
[  228.829134][T14577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3733'.
[  228.835704][T14577] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3733'.
[  228.868637][T14581] netlink: 'syz.0.3734': attribute type 1 has an invalid length.
[  229.047524][T14593] batman_adv: batadv0: Interface deactivated: 0!
[  229.050176][T14593] batman_adv: batadv0: Removing interface: 0!
[  229.064111][T14593] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  229.147662][T14596] netlink: 'syz.0.3740': attribute type 10 has an invalid length.
[  229.928579][T14597] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  229.933424][T14597] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  229.984907][T14602] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  229.987772][T14602] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  230.108642][T14612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3748'.
[  230.112142][T14612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3748'.
[  230.336185][T14623] nbd0: detected capacity change from 0 to 127
[  230.352378][T14341] block nbd0: Send control failed (result -32)
[  230.355449][T14341] block nbd0: Request send failed, requeueing
[  230.361187][   T56] block nbd0: Receive control failed (result -32)
[  230.362613][ T5311] block nbd0: Dead connection, failed to find a fallback
[  230.366731][ T5311] block nbd0: shutting down sockets
[  230.369311][ T5311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.375251][T14341] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.379294][ T5311] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.384058][T14341] Buffer I/O error on dev nbd0, logical block 1, async page read
[  230.387711][T14341] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.391442][T14341] Buffer I/O error on dev nbd0, logical block 2, async page read
[  230.394768][T14341] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.398483][T14341] Buffer I/O error on dev nbd0, logical block 3, async page read
[  230.401959][T14341] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.405655][T14341] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.409022][T14341] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.412744][T14341] Buffer I/O error on dev nbd0, logical block 1, async page read
[  230.416239][T14341] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.419954][T14341] Buffer I/O error on dev nbd0, logical block 2, async page read
[  230.423337][T14341] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.427579][T14341] Buffer I/O error on dev nbd0, logical block 3, async page read
[  230.431574][T14341] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.435499][T14341] Buffer I/O error on dev nbd0, logical block 0, async page read
[  230.448886][T14341] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  230.452978][T14341] Buffer I/O error on dev nbd0, logical block 1, async page read
[  230.461512][T14341] ldm_validate_partition_table(): Disk read failed.
[  230.466221][T14341] Dev nbd0: unable to read RDB block 0
[  230.473888][T14341]  nbd0: unable to read partition table
[  230.491445][T14341] ldm_validate_partition_table(): Disk read failed.
[  230.497628][T14341] Dev nbd0: unable to read RDB block 0
[  230.506101][T14341]  nbd0: unable to read partition table
[  230.608571][T14636] sctp: [Deprecated]: syz.2.3758 (pid 14636) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.608571][T14636] Use struct sctp_sack_info instead
[  230.617698][T14636] sctp: [Deprecated]: syz.2.3758 (pid 14636) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.617698][T14636] Use struct sctp_sack_info instead
[  230.702679][T14640] nbd: nbd0 already in use
[  230.985315][T14662] tipc: Enabled bearer <eth:veth1_to_bridge>, priority 10
[  231.253428][T14688] batadv_slave_1: Caught tx_queue_len zero misconfig
[  231.319791][T14697] openvswitch: netlink: EtherType 50a is less than min 600
[  231.401685][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3792'.
[  231.405150][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3792'.
[  231.408614][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3792'.
[  231.422310][T14709] netlink: 'syz.2.3794': attribute type 4 has an invalid length.
[  231.652284][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3806'.
[  231.729043][T14740] netlink: 'syz.2.3809': attribute type 30 has an invalid length.
[  232.045296][T14760] batman_adv: batadv0: Adding interface: macsec1
[  232.047943][T14760] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.069851][T14760] batman_adv: batadv0: Interface activated: macsec1
[  232.484557][T14791] netem: change failed
[  232.623662][T14803] netlink: 'syz.1.3833': attribute type 10 has an invalid length.
[  232.645622][T14803] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  232.648618][T14803] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  233.168596][T14821] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0
[  233.874620][T14840] __nla_validate_parse: 5 callbacks suppressed
[  233.874642][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3849'.
[  234.216784][T14881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3865'.
[  234.541706][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3881'.
[  234.549067][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3881'.
[  235.741340][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'.
[  236.009898][T14982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3911'.
[  236.062755][T14987] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  236.068071][T14987] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  237.319154][T15046] syzkaller1: entered promiscuous mode
[  237.327123][T15046] syzkaller1: entered allmulticast mode
[  237.405699][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'.
[  238.163325][T15089] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  238.202660][T15091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3961'.
[  238.209697][T15093] netlink: 'syz.0.3962': attribute type 13 has an invalid length.
[  238.213127][T15093] netlink: 'syz.0.3962': attribute type 17 has an invalid length.
[  238.417384][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3965'.
[  238.426679][T15093] team0: left promiscuous mode
[  238.430407][T15093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.463494][T15106] netlink: 'syz.2.3965': attribute type 2 has an invalid length.
[  238.595153][T15123] IPVS: Unknown mcast interface: vcan0
[  238.670697][T15131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3977'.
[  240.106497][T15172] netlink: 'syz.1.3996': attribute type 1 has an invalid length.
[  240.109651][T15172] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3996'.
[  240.119390][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3996'.
[  241.457194][T15214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.460714][T15214] syzkaller0: entered promiscuous mode
[  241.463538][T15214] syzkaller0: entered allmulticast mode
[  241.495862][T15214] tipc: Resetting bearer <eth:syzkaller0>
[  241.503400][T15213] tipc: Resetting bearer <eth:syzkaller0>
[  241.536845][T15213] tipc: Disabling bearer <eth:syzkaller0>
[  241.674798][T15226] netlink: 'syz.1.4023': attribute type 1 has an invalid length.
[  241.723945][T15226] 8021q: adding VLAN 0 to HW filter on device bond4
[  241.745165][T15234] bond4: (slave geneve3): making interface the new active one
[  241.755157][T15234] bond4: (slave geneve3): Enslaving as an active interface with an up link
[  241.774639][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.779185][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.787293][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.790615][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.793329][T15234] syz.1.4023 (15234) used greatest stack depth: 18632 bytes left
[  242.120851][T15265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4040'.
[  242.126445][T15265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4040'.
[  242.153820][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4041'.
[  242.389867][T15284] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.414096][T15284] tipc: Resetting bearer <eth:syzkaller0>
[  242.466784][T15293] xt_l2tp: v2 tid > 0xffff: 37482740
[  242.623102][T15292] batman_adv: batadv0: Interface deactivated: macsec1
[  242.624759][T15307] netlink: 'syz.0.4060': attribute type 21 has an invalid length.
[  242.628741][T15307] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4060'.
[  242.636047][T15307] netlink: 'syz.0.4060': attribute type 21 has an invalid length.
[  242.639230][T15307] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4060'.
[  242.656434][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.659115][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.662564][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.665140][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  242.762889][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4062'.
[  242.887021][T15323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4066'.
[  242.947508][T15325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  243.003977][T15327] veth0_to_bridge: left allmulticast mode
[  243.006531][T15327] veth0_to_bridge: left promiscuous mode
[  243.009116][T15327] bridge0: port 1(veth0_to_bridge) entered disabled state
[  243.033097][ T5768] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  243.077053][T15326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4064'.
[  243.096163][T15325] team0: Mode changed to "loadbalance"
[  243.381526][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  243.535944][T15343] pim6reg: entered allmulticast mode
[  243.548996][T15343] pim6reg: left allmulticast mode
[  243.581584][ T5768] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  243.734602][T15347] netlink: 'syz.1.4072': attribute type 3 has an invalid length.
[  245.154000][T15426] netlink: 'syz.1.4106': attribute type 1 has an invalid length.
[  245.157282][T15426] __nla_validate_parse: 6 callbacks suppressed
[  245.157296][T15426] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4106'.
[  245.223460][ T5891] Bluetooth: hci2: command 0x0405 tx timeout
[  245.247819][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4108'.
[  245.311526][T15432] vlan2: entered allmulticast mode
[  245.316638][T15432] bond5: entered allmulticast mode
[  245.546277][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4113'.
[  245.843599][T15477] syzkaller1: entered promiscuous mode
[  245.845351][T15477] syzkaller1: entered allmulticast mode
[  245.980849][T15487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4122'.
[  246.379859][T15518] netlink: 'syz.0.4142': attribute type 13 has an invalid length.
[  246.392811][T15518] netlink: 'syz.0.4142': attribute type 17 has an invalid length.
[  246.421490][T15518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.681269][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4153'.
[  246.886573][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4158'.
[  247.139375][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4160'.
[  248.457291][T15619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4178'.
[  248.515573][ T5901] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  248.518824][ T5901] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  248.523066][ T5901] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  248.530855][ T5901] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  248.542600][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4181'.
[  248.830777][T15645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4190'.
[  249.035076][T15632] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  249.037985][T15632] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  249.049811][T15632] ip6tnl2: left promiscuous mode
[  249.052682][T15632] gtp0: left promiscuous mode
[  249.054589][T15632] gtp0: left allmulticast mode
[  249.139985][T15632] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  249.147535][T15632] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  249.150523][T15632] macsec0: left promiscuous mode
[  249.153256][T15632] macsec0: left allmulticast mode
[  249.157887][T15632] batman_adv: batadv0: Interface deactivated: macsec1
[  249.167284][T15632] ip6tnl3: left promiscuous mode
[  249.169425][T15632] ip6tnl3: left allmulticast mode
[  249.248913][T15632] vlan3: left promiscuous mode
[  249.253306][T15632] bond0: left promiscuous mode
[  249.255353][T15632] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  249.258207][T15632] bond2: left promiscuous mode
[  249.260628][T15632] vlan3: left allmulticast mode
[  249.262667][T15632] bond0: left allmulticast mode
[  249.264427][T15632] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  249.266994][T15632] bond2: left allmulticast mode
[  249.285148][T15632] bond6: left promiscuous mode
[  249.288263][T15632] vlan4: left allmulticast mode
[  249.292052][T15632] batadv0: left allmulticast mode
[  249.298623][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.301915][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20001 - 0
[  249.305082][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.308312][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20001 - 0
[  249.312556][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.315494][   T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20001 - 0
[  249.318192][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.331904][   T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20001 - 0
[  249.369961][T15664] syzkaller1: entered promiscuous mode
[  249.372509][T15664] syzkaller1: entered allmulticast mode
[  249.560320][T15681] netlink: 'syz.0.4204': attribute type 10 has an invalid length.
[  249.576298][T15681] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.587603][T15681] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  249.645334][T15676] netlink: 'syz.0.4204': attribute type 10 has an invalid length.
[  250.165583][T15701] __nla_validate_parse: 1 callbacks suppressed
[  250.165594][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4213'.
[  250.380162][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'.
[  250.388081][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'.
[  250.667597][T15727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4224'.
[  250.733534][T15731] netlink: 'syz.0.4226': attribute type 7 has an invalid length.
[  250.736514][T15731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4226'.
[  250.781388][T15731] 8021q: adding VLAN 0 to HW filter on device bond7
[  250.784431][T15731] bridge7: port 1(bond7) entered blocking state
[  250.787113][T15731] bridge7: port 1(bond7) entered disabled state
[  250.789694][T15731] bond7: entered allmulticast mode
[  250.797426][T15731] bridge7: port 1(bond7) entered blocking state
[  250.800241][T15731] bridge7: port 1(bond7) entered forwarding state
[  251.192040][T15761] netlink: 'syz.1.4239': attribute type 12 has an invalid length.
[  251.562028][  T182] bridge7: port 1(bond7) entered disabled state
[  251.713061][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4254'.
[  251.721322][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4254'.
[  251.725827][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4254'.
[  251.729201][T15792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4254'.
[  252.059537][   T55] Bluetooth: hci2: link tx timeout
[  252.063239][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  252.080534][   T55] Bluetooth: hci2: link tx timeout
[  252.082936][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  252.217315][T15814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4262'.
[  253.281496][T15902] ==================================================================
[  253.284645][T15902] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  253.287706][T15902] Read of size 1 at addr ffff8880259f6bb0 by task syz.2.4301/15902
[  253.290809][T15902] 
[  253.291692][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.2.4301 Not tainted syzkaller #0 PREEMPT(full) 
[  253.291710][T15902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.291719][T15902] Call Trace:
[  253.291726][T15902]  <TASK>
[  253.291736][T15902]  dump_stack_lvl+0x189/0x250
[  253.291764][T15902]  ? __kasan_check_byte+0x12/0x40
[  253.291786][T15902]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.291803][T15902]  ? lock_release+0x4b/0x3e0
[  253.291821][T15902]  ? __virt_addr_valid+0x4a5/0x5c0
[  253.291836][T15902]  print_report+0xca/0x240
[  253.291852][T15902]  ? xfrm_state_find+0x2cf2/0x5400
[  253.291867][T15902]  kasan_report+0x118/0x150
[  253.291884][T15902]  ? xfrm_state_find+0x2cf2/0x5400
[  253.291904][T15902]  xfrm_state_find+0x2cf2/0x5400
[  253.291921][T15902]  ? __lock_acquire+0xab9/0xd20
[  253.291947][T15902]  ? xfrm_state_find+0x1da/0x5400
[  253.291964][T15902]  ? __pfx_xfrm_state_find+0x10/0x10
[  253.291985][T15902]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  253.292010][T15902]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  253.292022][T15902]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  253.292044][T15902]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  253.292058][T15902]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  253.292081][T15902]  ? xfrm_expand_policies+0x41f/0x6a0
[  253.292102][T15902]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  253.292126][T15902]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  253.292148][T15902]  ? __lock_acquire+0xab9/0xd20
[  253.292166][T15902]  xfrm_lookup_route+0x3c/0x1c0
[  253.292186][T15902]  __ip4_datagram_connect+0x9a5/0x1270
[  253.292210][T15902]  udp_connect+0x33/0x1f0
[  253.292227][T15902]  __sys_connect+0x316/0x440
[  253.292245][T15902]  ? __pfx___sys_connect+0x10/0x10
[  253.292265][T15902]  ? rcu_is_watching+0x15/0xb0
[  253.292281][T15902]  __x64_sys_connect+0x7a/0x90
[  253.292295][T15902]  do_syscall_64+0xfa/0x3b0
[  253.292309][T15902]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.292327][T15902]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.292343][T15902]  ? exc_page_fault+0x9f/0xf0
[  253.292366][T15902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.292381][T15902] RIP: 0033:0x7fbdc618ec29
[  253.292396][T15902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.292410][T15902] RSP: 002b:00007fbdc7038038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  253.292703][T15902] RAX: ffffffffffffffda RBX: 00007fbdc63d6180 RCX: 00007fbdc618ec29
[  253.292717][T15902] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000007
[  253.292727][T15902] RBP: 00007fbdc6211e41 R08: 0000000000000000 R09: 0000000000000000
[  253.292737][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.292754][T15902] R13: 00007fbdc63d6218 R14: 00007fbdc63d6180 R15: 00007ffd7e20af38
[  253.292773][T15902]  </TASK>
[  253.292779][T15902] 
[  253.337495][T15903] netlink: 'syz.2.4301': attribute type 12 has an invalid length.
[  253.338059][T15902] Allocated by task 12530:
[  253.338073][T15902]  kasan_save_track+0x3e/0x80
[  253.338096][T15902]  __kasan_slab_alloc+0x6c/0x80
[  253.338115][T15902]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  253.410576][T15902]  xfrm_state_alloc+0x24/0x2f0
[  253.412457][T15902]  ipcomp6_init_state+0x2bb/0x900
[  253.414446][T15902]  __xfrm_init_state+0xa76/0x13f0
[  253.416434][T15902]  xfrm_init_state+0x18/0xa0
[  253.418271][T15902]  pfkey_add+0x1d38/0x2e00
[  253.420051][T15902]  pfkey_sendmsg+0xbfe/0x1090
[  253.421933][T15902]  __sock_sendmsg+0x21c/0x270
[  253.423806][T15902]  ____sys_sendmsg+0x52d/0x830
[  253.425694][T15902]  ___sys_sendmsg+0x21f/0x2a0
[  253.427504][T15902]  __sys_sendmmsg+0x227/0x430
[  253.429249][T15902]  __x64_sys_sendmmsg+0xa0/0xc0
[  253.431182][T15902]  do_syscall_64+0xfa/0x3b0
[  253.432946][T15902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.435163][T15902] 
[  253.436105][T15902] Freed by task 5768:
[  253.437654][T15902]  kasan_save_track+0x3e/0x80
[  253.439476][T15902]  kasan_save_free_info+0x46/0x50
[  253.441405][T15902]  __kasan_slab_free+0x5b/0x80
[  253.443285][T15902]  kmem_cache_free+0x18f/0x400
[  253.445152][T15902]  xfrm_state_gc_task+0x52d/0x6b0
[  253.447088][T15902]  process_scheduled_works+0xae1/0x17b0
[  253.449209][T15902]  worker_thread+0x8a0/0xda0
[  253.450968][T15902]  kthread+0x711/0x8a0
[  253.452561][T15902]  ret_from_fork+0x439/0x7d0
[  253.454360][T15902]  ret_from_fork_asm+0x1a/0x30
[  253.456220][T15902] 
[  253.457140][T15902] The buggy address belongs to the object at ffff8880259f6880
[  253.457140][T15902]  which belongs to the cache xfrm_state of size 928
[  253.462319][T15902] The buggy address is located 816 bytes inside of
[  253.462319][T15902]  freed 928-byte region [ffff8880259f6880, ffff8880259f6c20)
[  253.467503][T15902] 
[  253.468435][T15902] The buggy address belongs to the physical page:
[  253.470881][T15902] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880259f5200 pfn:0x259f4
[  253.474741][T15902] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  253.478017][T15902] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  253.480918][T15902] page_type: f5(slab)
[  253.482507][T15902] raw: 00fff00000000040 ffff88801db7d280 dead000000000122 0000000000000000
[  253.485784][T15902] raw: ffff8880259f5200 00000000800e0006 00000000f5000000 0000000000000000
[  253.488973][T15902] head: 00fff00000000040 ffff88801db7d280 dead000000000122 0000000000000000
[  253.492258][T15902] head: ffff8880259f5200 00000000800e0006 00000000f5000000 0000000000000000
[  253.495532][T15902] head: 00fff00000000002 ffffea0000967d01 00000000ffffffff 00000000ffffffff
[  253.498757][T15902] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  253.502000][T15902] page dumped because: kasan: bad access detected
[  253.504347][T15902] page_owner tracks the page as allocated
[  253.506535][T15902] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6175, tgid 6174 (syz.2.122), ts 78080850116, free_ts 77453916363
[  253.513732][T15902]  post_alloc_hook+0x240/0x2a0
[  253.515675][T15902]  get_page_from_freelist+0x21e4/0x22c0
[  253.517835][T15902]  __alloc_frozen_pages_noprof+0x181/0x370
[  253.520189][T15902]  alloc_pages_mpol+0x232/0x4a0
[  253.522142][T15902]  allocate_slab+0x8a/0x370
[  253.523956][T15902]  ___slab_alloc+0xbeb/0x1420
[  253.525776][T15902]  kmem_cache_alloc_noprof+0x283/0x3c0
[  253.527887][T15902]  xfrm_state_alloc+0x24/0x2f0
[  253.529740][T15902]  xfrm_state_find+0x37d4/0x5400
[  253.531692][T15902]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  253.534042][T15902]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  253.536121][T15902]  xfrm_lookup_route+0x3c/0x1c0
[  253.537990][T15902]  sctp_v6_get_dst+0x7cc/0x1bc0
[  253.539926][T15902]  sctp_transport_route+0x118/0x2f0
[  253.541942][T15902]  sctp_assoc_add_peer+0x657/0x13b0
[  253.543943][T15902]  sctp_connect_new_asoc+0x30a/0x690
[  253.545954][T15902] page last free pid 5294 tgid 5294 stack trace:
[  253.548327][T15902]  __free_frozen_pages+0xbc4/0xd30
[  253.550322][T15902]  __slab_free+0x303/0x3c0
[  253.552086][T15902]  qlist_free_all+0x97/0x140
[  253.553910][T15902]  kasan_quarantine_reduce+0x148/0x160
[  253.555977][T15902]  __kasan_slab_alloc+0x22/0x80
[  253.557877][T15902]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  253.559963][T15902]  getname_flags+0xb8/0x540
[  253.561738][T15902]  do_readlinkat+0xbc/0x500
[  253.563518][T15902]  __x64_sys_readlink+0x7f/0x90
[  253.565424][T15902]  do_syscall_64+0xfa/0x3b0
[  253.567155][T15902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.569437][T15902] 
[  253.570368][T15902] Memory state around the buggy address:
[  253.572570][T15902]  ffff8880259f6a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  253.575586][T15902]  ffff8880259f6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  253.578659][T15902] >ffff8880259f6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  253.581671][T15902]                                      ^
[  253.583815][T15902]  ffff8880259f6c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  253.586790][T15902]  ffff8880259f6c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  253.589798][T15902] ==================================================================
[  253.594620][T15902] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  253.597415][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.2.4301 Not tainted syzkaller #0 PREEMPT(full) 
[  253.600965][T15902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  253.604920][T15902] Call Trace:
[  253.606216][T15902]  <TASK>
[  253.607385][T15902]  dump_stack_lvl+0x99/0x250
[  253.609201][T15902]  ? __asan_memcpy+0x40/0x70
[  253.611049][T15902]  ? __pfx_dump_stack_lvl+0x10/0x10
[  253.613100][T15902]  ? __pfx__printk+0x10/0x10
[  253.614929][T15902]  vpanic+0x281/0x750
[  253.616537][T15902]  ? preempt_schedule+0xae/0xc0
[  253.618487][T15902]  ? __pfx_vpanic+0x10/0x10
[  253.620299][T15902]  ? preempt_schedule_common+0x83/0xd0
[  253.622448][T15902]  ? preempt_schedule+0xae/0xc0
[  253.624388][T15902]  ? __pfx_preempt_schedule+0x10/0x10
[  253.626537][T15902]  panic+0xb9/0xc0
[  253.628039][T15902]  ? __pfx_panic+0x10/0x10
[  253.629836][T15902]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  253.632197][T15902]  ? xfrm_state_find+0x2cf2/0x5400
[  253.634213][T15902]  check_panic_on_warn+0x89/0xb0
[  253.636165][T15902]  ? xfrm_state_find+0x2cf2/0x5400
[  253.638167][T15902]  end_report+0x78/0x160
[  253.639905][T15902]  kasan_report+0x129/0x150
[  253.641696][T15902]  ? xfrm_state_find+0x2cf2/0x5400
[  253.643760][T15902]  xfrm_state_find+0x2cf2/0x5400
[  253.645733][T15902]  ? __lock_acquire+0xab9/0xd20
[  253.647692][T15902]  ? xfrm_state_find+0x1da/0x5400
[  253.649735][T15902]  ? __pfx_xfrm_state_find+0x10/0x10
[  253.651820][T15902]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  253.654215][T15902]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  253.656526][T15902]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  253.659034][T15902]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  253.661347][T15902]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  253.663692][T15902]  ? xfrm_expand_policies+0x41f/0x6a0
[  253.665775][T15902]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  253.667867][T15902]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  253.670129][T15902]  ? __lock_acquire+0xab9/0xd20
[  253.672058][T15902]  xfrm_lookup_route+0x3c/0x1c0
[  253.674009][T15902]  __ip4_datagram_connect+0x9a5/0x1270
[  253.676139][T15902]  udp_connect+0x33/0x1f0
[  253.677828][T15902]  __sys_connect+0x316/0x440
[  253.679633][T15902]  ? __pfx___sys_connect+0x10/0x10
[  253.681537][T15902]  ? rcu_is_watching+0x15/0xb0
[  253.683272][T15902]  __x64_sys_connect+0x7a/0x90
[  253.685112][T15902]  do_syscall_64+0xfa/0x3b0
[  253.686863][T15902]  ? lockdep_hardirqs_on+0x9c/0x150
[  253.688881][T15902]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.691235][T15902]  ? exc_page_fault+0x9f/0xf0
[  253.693108][T15902]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  253.695466][T15902] RIP: 0033:0x7fbdc618ec29
[  253.697214][T15902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.704520][T15902] RSP: 002b:00007fbdc7038038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  253.707721][T15902] RAX: ffffffffffffffda RBX: 00007fbdc63d6180 RCX: 00007fbdc618ec29
[  253.710755][T15902] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000007
[  253.713748][T15902] RBP: 00007fbdc6211e41 R08: 0000000000000000 R09: 0000000000000000
[  253.716829][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.719844][T15902] R13: 00007fbdc63d6218 R14: 00007fbdc63d6180 R15: 00007ffd7e20af38
[  253.722905][T15902]  </TASK>
[  253.724891][T15902] Kernel Offset: disabled
[  253.726633][T15902] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:16:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000e769 RDI=000000000000e76a RBP=00000000000003f8 RSP=ffffc90002f5ee10
R8 =ffff888107580237 R9 =1ffff11020eb0046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78d7 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbdc70386c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbdc7037fc8 CR3=000000010ce40000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbdc63a7498 00007fbdc63a7470 XMM03=00007fbdc63a74a8 00007fbdc63a74a0
XMM04=00007fbdc6f0d100 00007fbdc63a7460 XMM05=00007fbdc63a7478 00007fbdc63a74c0
XMM06=00007fbdc63a74b8 00007fbdc63a74b0 XMM07=00007fbdc63a74a8 00007fbdc63a74a0
XMM08=32c61c3de4b09c32 614239264817ccbd XMM09=0000000000000000 00007fbdc6212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=f68d4a416ae27000 RBX=ffffffff819683f8 RCX=f68d4a416ae27000 RDX=0000000000000001
RSI=ffffffff8d9b06ab RDI=ffffffff8be33f00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa2ee30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b72f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c35e673 CR3=000000002a60c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fbdc6212e7b
XMM06=0000000000000000 00007fbdc6212e75 XMM07=0000000000000000 00007fbdc6212e89
XMM08=0000000000000000 00007fbdc6212f0f XMM09=0000000000000000 00007fbdc6212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
