last executing test programs:

400.869093ms ago: executing program 0 (id=4319):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

350.080614ms ago: executing program 0 (id=4321):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000790116005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

349.840676ms ago: executing program 2 (id=4322):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

349.683505ms ago: executing program 0 (id=4323):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18)
nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000001280))
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20)

257.021181ms ago: executing program 2 (id=4325):
r0 = socket(0x40000000015, 0x5, 0x0)
sendto$l2tp6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20)

190.744253ms ago: executing program 1 (id=4326):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
close(r0)

190.600023ms ago: executing program 2 (id=4327):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

190.476993ms ago: executing program 0 (id=4328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c000380080001"], 0x10c}}, 0x0)

190.442503ms ago: executing program 1 (id=4329):
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @empty}, 0x5, 0x0}, 0x0)

117.924977ms ago: executing program 2 (id=4330):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0x4, 0x7ffe}, 0xc)

117.809178ms ago: executing program 1 (id=4331):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

117.63118ms ago: executing program 0 (id=4332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}], {0x14}}, 0x64}}, 0x0)

67.366158ms ago: executing program 2 (id=4333):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xffefefff}, {0x6, 0x2}]}, 0x10)
sendmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44040050)

67.226738ms ago: executing program 1 (id=4334):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000300))

66.081881ms ago: executing program 0 (id=4335):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0)
close(0x3)

239.619µs ago: executing program 1 (id=4336):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

95.062µs ago: executing program 2 (id=4337):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001988800fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef)

0s ago: executing program 1 (id=4338):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x140, 0x16, 0x1, 0x70bd26, 0x25dfdbff, {{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x9, 0x0}, 0x4e20, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x3a}, {@in=@local, 0x4d2, 0x33}, @in6=@mcast2, {0xffffffffffffc5bf, 0x2, 0x80, 0x3, 0xfff, 0xc9e, 0x3, 0x2000000}, {0x3, 0x3, 0x9, 0x7}, {0xb78, 0x3, 0x5}, 0x70bd28, 0x3503, 0x8, 0x1, 0xd, 0x72}, 0x2, 0x6}, [@algo_crypt={0x48, 0x2, {{'fpu(pcbc(aes))\x00'}}}]}, 0x140}}, 0x400c014)

kernel console output (not intermixed with test programs):

2] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.120949][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.138206][ T5870] hsr_slave_0: entered promiscuous mode
[   69.140795][ T5870] hsr_slave_1: entered promiscuous mode
[   69.144098][ T5870] debugfs: 'hsr0' already exists in 'hsr'
[   69.146457][ T5870] Cannot create hsr debugfs directory
[   69.156495][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.178042][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.266117][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.284453][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.311091][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.326955][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.416608][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.426966][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.434308][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.440687][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.523669][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.561065][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.568888][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   69.583783][  T338] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.586802][  T338] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.607298][  T338] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.610342][  T338] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.620766][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   69.631299][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.646255][  T338] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.649373][  T338] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.666725][  T338] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.670239][  T338] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.700946][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[   69.724926][  T338] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.727635][  T338] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.750697][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.753847][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.771910][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.813543][ T5864] Bluetooth: hci0: command tx timeout
[   69.904529][ T5864] Bluetooth: hci1: command tx timeout
[   69.958269][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.983492][ T5864] Bluetooth: hci2: command tx timeout
[   70.021467][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.040466][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.049059][ T5866] veth0_vlan: entered promiscuous mode
[   70.071666][ T5866] veth1_vlan: entered promiscuous mode
[   70.116836][ T5862] veth0_vlan: entered promiscuous mode
[   70.128549][ T5870] veth0_vlan: entered promiscuous mode
[   70.138852][ T5866] veth0_macvtap: entered promiscuous mode
[   70.145164][ T5862] veth1_vlan: entered promiscuous mode
[   70.149586][ T5866] veth1_macvtap: entered promiscuous mode
[   70.154372][ T5870] veth1_vlan: entered promiscuous mode
[   70.170724][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.181000][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.191375][ T5862] veth0_macvtap: entered promiscuous mode
[   70.201268][ T5862] veth1_macvtap: entered promiscuous mode
[   70.211718][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.217942][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.223653][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.227903][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.245130][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.259396][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.278587][ T5870] veth0_macvtap: entered promiscuous mode
[   70.284914][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.288838][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.303191][ T5870] veth1_macvtap: entered promiscuous mode
[   70.308416][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.319404][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.377894][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.381079][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.389361][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.410556][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.445366][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.457640][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.479530][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.491199][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.491588][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.496819][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.511462][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.515361][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.561888][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.568584][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.586487][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.623112][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.626728][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.680962][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.689417][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.754987][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'.
[   70.977396][ T5943] netlink: 536 bytes leftover after parsing attributes in process `syz.0.33'.
[   70.981069][ T5943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.33'.
[   71.066413][ T5947] bridge0: entered allmulticast mode
[   71.234915][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'.
[   71.254064][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'.
[   71.261277][ T5959] netlink: 'syz.2.42': attribute type 3 has an invalid length.
[   71.500432][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.505303][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.581911][ T5986] batadv_slave_1: entered promiscuous mode
[   71.589498][ T5985] batadv_slave_1: left promiscuous mode
[   71.754269][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'.
[   71.892776][ T5864] Bluetooth: hci0: command tx timeout
[   71.972630][ T5864] Bluetooth: hci1: command tx timeout
[   72.052318][ T5864] Bluetooth: hci2: command tx timeout
[   72.370766][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.625463][ T6065] syz.2.88 uses obsolete (PF_INET,SOCK_PACKET)
[   73.500757][ T6069] netlink: 96 bytes leftover after parsing attributes in process `syz.1.89'.
[   73.527404][ T6069] vlan2: entered allmulticast mode
[   73.529839][ T6069] gretap0: entered allmulticast mode
[   73.765754][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   73.819703][ T6087] Zero length message leads to an empty skb
[   73.897547][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'.
[   73.983656][ T5864] Bluetooth: hci0: command tx timeout
[   74.030642][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[   74.054595][ T6107] macvlan2: entered promiscuous mode
[   74.057951][ T5864] Bluetooth: hci1: command tx timeout
[   74.062617][ T6107] macvlan2: entered allmulticast mode
[   74.129606][ T6113] bridge1: entered promiscuous mode
[   74.133055][ T5864] Bluetooth: hci2: command tx timeout
[   74.135702][ T6113] bridge1: entered allmulticast mode
[   74.650714][ T6139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.721490][ T6137] veth1_to_bond: entered allmulticast mode
[   74.760643][ T6139] bond0: (slave bond_slave_1): Releasing backup interface
[   74.790949][ T6139] veth1_to_bond (unregistering): left allmulticast mode
[   74.854237][ T6148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.948901][ T6152] netlink: 'syz.0.128': attribute type 18 has an invalid length.
[   76.052914][ T5864] Bluetooth: hci0: command tx timeout
[   76.086419][ T6221] netlink: 'syz.2.158': attribute type 1 has an invalid length.
[   76.133932][ T6221] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   76.151370][ T6224] __nla_validate_parse: 3 callbacks suppressed
[   76.151385][ T6224] netlink: 248 bytes leftover after parsing attributes in process `syz.1.159'.
[   76.152646][ T5864] Bluetooth: hci1: command tx timeout
[   76.175997][ T6221] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   76.189242][ T6221] bond1 (unregistering): Released all slaves
[   76.225655][ T5864] Bluetooth: hci2: command tx timeout
[   76.550953][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'.
[   76.561165][ T6243] bridge_slave_1: left allmulticast mode
[   76.566152][ T6243] bridge_slave_1: left promiscuous mode
[   76.569271][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.604445][ T6243] bridge_slave_0: left allmulticast mode
[   76.607268][ T6243] bridge_slave_0: left promiscuous mode
[   76.610062][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.871463][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.875945][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.977650][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.992626][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.027097][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'.
[   77.109954][ T6255] vlan2: left allmulticast mode
[   77.111698][ T6255] gretap0: left allmulticast mode
[   77.119469][ T5874] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.128990][ T5874] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.134444][ T5874] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.137657][ T5874] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.466767][ T6297] tipc: Started in network mode
[   77.470485][ T6297] tipc: Node identity 4a97069f1044, cluster identity 4711
[   77.478121][ T6297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.486837][ T6297] syzkaller0: entered promiscuous mode
[   77.489257][ T6297] syzkaller0: entered allmulticast mode
[   77.525447][ T6297] tipc: Resetting bearer <eth:syzkaller0>
[   77.616296][ T6304] tipc: Resetting bearer <eth:syzkaller0>
[   77.644858][ T6304] tipc: Disabling bearer <eth:syzkaller0>
[   77.667515][ T6297] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.182'.
[   78.355630][ T6345] netlink: 'syz.2.198': attribute type 2 has an invalid length.
[   78.360423][ T6345] netlink: 'syz.2.198': attribute type 1 has an invalid length.
[   78.364422][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'.
[   78.596442][ T6362] trusted_key: syz.2.205 sent an empty control message without MSG_MORE.
[   79.359177][ T6400] Bluetooth: MGMT ver 1.23
[   80.180012][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'.
[   80.298084][ T6428] netlink: 17 bytes leftover after parsing attributes in process `syz.2.228'.
[   81.024909][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'.
[   81.028740][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'.
[   81.104533][ T6454] wg1 speed is unknown, defaulting to 1000
[   81.111132][ T6454] wg1 speed is unknown, defaulting to 1000
[   81.121897][ T6454] wg1 speed is unknown, defaulting to 1000
[   81.136475][ T6454] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   81.158722][ T6454] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   81.215208][ T6454] wg1 speed is unknown, defaulting to 1000
[   81.224387][ T6454] wg1 speed is unknown, defaulting to 1000
[   81.241089][ T6454] wg1 speed is unknown, defaulting to 1000
[   81.317376][ T6471] netlink: 'syz.0.248': attribute type 3 has an invalid length.
[   81.422747][ T6478] nbd0: detected capacity change from 0 to 63
[   81.426521][ T6485] block nbd0: NBD_DISCONNECT
[   81.429146][ T6485] block nbd0: Disconnected due to user request.
[   81.433345][ T6485] block nbd0: shutting down sockets
[   81.439055][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.439088][   T61] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0
[   81.442787][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.450152][   T61] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.454502][   T61] Buffer I/O error on dev nbd0, logical block 2, async page read
[   81.457917][   T61] Buffer I/O error on dev nbd0, logical block 3, async page read
[   81.460956][ T6259] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.469427][ T6259] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.476222][ T6259] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.480867][ T6259] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.486237][ T6478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.251'.
[   81.489440][ T6478] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   81.502198][ T6259] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.505295][ T6259] Buffer I/O error on dev nbd0, logical block 2, async page read
[   81.515028][ T6259] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.518132][ T6259] Buffer I/O error on dev nbd0, logical block 3, async page read
[   81.520867][ T6259] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.529045][ T6259] Buffer I/O error on dev nbd0, logical block 0, async page read
[   81.535770][ T6259] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.539078][ T6259] Buffer I/O error on dev nbd0, logical block 1, async page read
[   81.542499][ T6259] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.546192][ T6259] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   81.550792][ T6259] ldm_validate_partition_table(): Disk read failed.
[   81.555425][ T6259] Dev nbd0: unable to read RDB block 0
[   81.558245][ T6259]  nbd0: unable to read partition table
[   81.565055][ T6259] ldm_validate_partition_table(): Disk read failed.
[   81.571241][ T6259] Dev nbd0: unable to read RDB block 0
[   81.596374][ T6259]  nbd0: unable to read partition table
[   81.838084][ T6511] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[   82.246044][ T6538] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.274'.
[   82.317319][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'.
[   82.379127][ T6544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.418006][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv1
[   82.421905][ T6545] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   82.427044][ T6545] team0: Failed to send options change via netlink (err -105)
[   82.429615][ T6545] team0: Port device batadv1 added
[   82.460532][ T6544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.519918][ T6544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.593158][ T6544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.605979][ T6553] tipc: Failed to remove unknown binding: 66,1,1/0:515146838/515146840
[   82.609711][ T6553] tipc: Failed to remove unknown binding: 66,1,1/0:515146838/515146840
[   82.709288][ T5874] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.725996][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.741124][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.765472][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.782274][ T6545] syz.2.277 (6545) used greatest stack depth: 20056 bytes left
[   83.156144][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'.
[   83.864175][ T6613] netlink: 244 bytes leftover after parsing attributes in process `syz.0.301'.
[   84.162696][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'.
[   84.165982][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'.
[   84.172836][ T6637] netlink: 'syz.2.312': attribute type 20 has an invalid length.
[   84.194176][ T5874] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.197844][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'.
[   84.201387][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'.
[   84.205205][ T5874] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.208689][ T5874] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.215083][ T5874] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.215605][ T6637] netlink: 'syz.2.312': attribute type 20 has an invalid length.
[   84.448644][ T6655] netlink: 'syz.0.320': attribute type 1 has an invalid length.
[   84.455738][ T6655] netlink: 180 bytes leftover after parsing attributes in process `syz.0.320'.
[   85.573176][ T6710] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   85.764890][ T6722] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.769084][ T6722] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.872264][ T6722] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.875792][ T6722] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.925674][ T6722] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.929838][ T6722] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.989179][ T6722] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.994059][ T6722] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.558737][ T6739] netlink: 'syz.1.351': attribute type 7 has an invalid length.
[   86.687253][ T6743] netlink: 'syz.0.350': attribute type 3 has an invalid length.
[   86.749746][ T6745] __nla_validate_parse: 1 callbacks suppressed
[   86.749761][ T6745] netlink: 96 bytes leftover after parsing attributes in process `syz.1.353'.
[   87.002463][   T47] cfg80211: failed to load regulatory.db
[   87.018429][ T5881] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.031024][ T5881] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.178124][ T5881] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.196863][ T5881] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.403754][ T5881] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.407478][ T5881] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.411001][ T5881] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.433351][ T5881] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.783588][ T6778] Driver unsupported XDP return value 0 on prog  (id 50) dev N/A, expect packet loss!
[   88.181457][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[   88.421673][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[   88.649731][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'.
[   88.805265][ T6805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.378'.
[   88.837978][ T6807] warning: `syz.1.379' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.846581][ T6807] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   89.231049][ T6820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'.
[   89.277700][ T6822] ipvlan2: entered promiscuous mode
[   89.291278][ T6822] bridge0: port 3(ipvlan2) entered blocking state
[   89.295790][ T6822] bridge0: port 3(ipvlan2) entered disabled state
[   89.298668][ T6822] ipvlan2: entered allmulticast mode
[   89.300805][ T6822] gretap0: entered allmulticast mode
[   89.319004][ T6822] ipvlan2: left allmulticast mode
[   89.321646][ T6822] gretap0: left allmulticast mode
[   89.350481][   T33] audit: type=1800 audit(1754494014.382:2): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.387" name="memory.events" dev="tmpfs" ino=559 res=0 errno=0
[   90.709502][ T6898] netlink: 'syz.0.416': attribute type 21 has an invalid length.
[   91.528162][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.447'.
[   91.774292][ T6988] netlink: 'syz.0.458': attribute type 10 has an invalid length.
[   91.786771][ T6987] netlink: 'syz.1.460': attribute type 15 has an invalid length.
[   91.790183][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.799726][ T6988] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   91.802146][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'.
[   92.058222][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'.
[   92.061734][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.470'.
[   92.100407][ T7012] netlink: 'syz.2.471': attribute type 4 has an invalid length.
[   92.111072][ T7012] netlink: 'syz.2.471': attribute type 4 has an invalid length.
[   92.378333][ T7028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.599228][ T7044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.485'.
[   92.949790][ T7062] netlink: 44 bytes leftover after parsing attributes in process `syz.1.494'.
[   92.954147][ T7062] netlink: 43 bytes leftover after parsing attributes in process `syz.1.494'.
[   92.958163][ T7062] netlink: 'syz.1.494': attribute type 5 has an invalid length.
[   92.961819][ T7062] netlink: 43 bytes leftover after parsing attributes in process `syz.1.494'.
[   93.020168][ T7062] wg1 speed is unknown, defaulting to 1000
[   93.046316][ T7064] netlink: 192 bytes leftover after parsing attributes in process `syz.1.494'.
[   93.287900][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'.
[   93.325164][ T7081] syzkaller1: entered promiscuous mode
[   93.327534][ T7081] syzkaller1: entered allmulticast mode
[   93.403038][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'.
[   93.575210][ T7113] delete_channel: no stack
[   93.750874][ T7134] netlink: 'syz.0.525': attribute type 11 has an invalid length.
[   93.756533][ T7134] netlink: 'syz.0.525': attribute type 4 has an invalid length.
[   93.791042][ T7140] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.126451][ T7163] netlink: 'syz.1.539': attribute type 10 has an invalid length.
[   94.131675][ T7163] batman_adv: batadv0: Adding interface: team0
[   94.135279][ T7163] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.148172][ T7163] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   94.155462][ T7163] netlink: 'syz.1.539': attribute type 10 has an invalid length.
[   94.159121][ T7163] team0: entered promiscuous mode
[   94.161455][ T7163] team_slave_0: entered promiscuous mode
[   94.166141][ T7163] team_slave_1: entered promiscuous mode
[   94.169919][ T7163] 8021q: adding VLAN 0 to HW filter on device team0
[   94.173660][ T7163] batman_adv: batadv0: Interface activated: team0
[   94.176561][ T7163] batman_adv: batadv0: Interface deactivated: team0
[   94.179554][ T7163] batman_adv: batadv0: Removing interface: team0
[   94.184043][ T7163] bridge0: port 3(team0) entered blocking state
[   94.186919][ T7163] bridge0: port 3(team0) entered disabled state
[   94.189629][ T7163] team0: entered allmulticast mode
[   94.191815][ T7163] team_slave_0: entered allmulticast mode
[   94.195527][ T7163] team_slave_1: entered allmulticast mode
[   94.495399][ T7175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.834652][ T7213] pim6reg1: entered allmulticast mode
[   95.125151][ T7221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.536645][ T7249] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   96.325450][ T7297] validate_nla: 1 callbacks suppressed
[   96.325465][ T7297] netlink: 'syz.1.599': attribute type 1 has an invalid length.
[   96.331363][ T7297] netlink: 'syz.1.599': attribute type 1 has an invalid length.
[   97.264101][ T7349] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   97.599794][  T794] IPVS: starting estimator thread 0...
[   97.682406][ T7367] IPVS: using max 37 ests per chain, 88800 per kthread
[   97.682569][ T7377] netlink: 'syz.1.630': attribute type 4 has an invalid length.
[   97.688414][ T7377] __nla_validate_parse: 11 callbacks suppressed
[   97.688421][ T7377] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.630'.
[   97.801091][ T7390] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.636'.
[   97.882260][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[   97.886067][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.641'.
[   98.230587][ T7428] netlink: 'syz.0.651': attribute type 16 has an invalid length.
[   98.234420][ T7428] netlink: 'syz.0.651': attribute type 17 has an invalid length.
[   98.268480][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.271974][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.323441][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.329885][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.337276][ T7435] IPv6: NLM_F_REPLACE set, but no existing node found!
[   98.404091][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'.
[   98.408450][ T7432] : renamed from pim6reg1
[   98.412757][ T5881] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.417012][ T5881] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.425955][ T5881] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.430257][ T5881] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.682478][ T7453] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[   98.738536][ T7453] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.758433][ T7461] bond1: (slave gretap1): making interface the new active one
[   98.764682][ T7461] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   98.981707][ T7461] syz.1.661 (7461) used greatest stack depth: 20040 bytes left
[   99.051594][ T7484] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[   99.064699][ T7485] openvswitch: netlink: Message has 16 unknown bytes.
[   99.104898][ T7490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   99.176330][ T7498] netlink: 'syz.1.678': attribute type 16 has an invalid length.
[   99.179480][ T7498] netlink: 'syz.1.678': attribute type 17 has an invalid length.
[   99.205502][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'.
[   99.210259][ T7498] IPv6: NLM_F_REPLACE set, but no existing node found!
[   99.220510][ T7500] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   99.229583][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[   99.233760][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[   99.237527][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[   99.249388][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[   99.403260][ T7515] netlink: 'syz.0.690': attribute type 1 has an invalid length.
[   99.842160][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[  101.104630][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  101.108870][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'.
[  101.112665][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'.
[  101.114043][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  101.120860][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  101.127046][ T7628] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  101.153956][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.161489][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  101.171636][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.176242][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.191165][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.265719][ T7632] wg1 speed is unknown, defaulting to 1000
[  101.528177][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[  101.567536][ T7648] netlink: 'syz.0.749': attribute type 3 has an invalid length.
[  101.575342][ T7646] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[  101.589273][ T7646] netlink: 'syz.1.750': attribute type 2 has an invalid length.
[  101.958776][ T7660] syz_tun: entered allmulticast mode
[  101.966330][ T7660] syz_tun: left allmulticast mode
[  103.024921][ T7707] wg1 speed is unknown, defaulting to 1000
[  103.234543][ T7715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.262490][ T7715] syzkaller0: entered promiscuous mode
[  103.264334][ T7715] syzkaller0: entered allmulticast mode
[  103.325668][ T7715] tipc: Resetting bearer <eth:syzkaller0>
[  103.329299][ T7714] tipc: Resetting bearer <eth:syzkaller0>
[  103.354282][ T7714] tipc: Disabling bearer <eth:syzkaller0>
[  104.273561][ T7749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  104.339223][ T7753] __nla_validate_parse: 4 callbacks suppressed
[  104.339238][ T7753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.798'.
[  104.406658][ T7759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.801'.
[  104.588343][ T7769] netlink: 'syz.0.807': attribute type 1 has an invalid length.
[  104.591648][ T7769] netlink: 'syz.0.807': attribute type 4 has an invalid length.
[  104.595750][ T7769] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.807'.
[  104.623675][ T7773] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  104.731057][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'.
[  104.739833][ T7783] gtp0: entered promiscuous mode
[  104.742461][ T7783] gtp0: entered allmulticast mode
[  104.929273][ T7800] netlink: 'syz.2.821': attribute type 13 has an invalid length.
[  104.935164][ T7800] netlink: 'syz.2.821': attribute type 17 has an invalid length.
[  104.951627][ T7802] netlink: 'syz.1.822': attribute type 6 has an invalid length.
[  104.995791][ T7800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.039839][ T7803] wg1 speed is unknown, defaulting to 1000
[  105.094761][ T7800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'.
[  105.128137][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.250240][ T7800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.308544][ T7803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.553347][ T7836] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  106.325860][ T7872] netlink: 128 bytes leftover after parsing attributes in process `syz.2.851'.
[  106.561702][ T7875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.852'.
[  106.761939][ T7889] wg1 speed is unknown, defaulting to 1000
[  107.104099][ T7871] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  107.389613][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.433960][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.571295][   T33] audit: type=1800 audit(1754494032.602:3): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.876" name="memory.events" dev="tmpfs" ino=1716 res=0 errno=0
[  107.815170][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.883'.
[  107.904610][ T7955] syzkaller0: entered promiscuous mode
[  107.907199][ T7955] syzkaller0: entered allmulticast mode
[  108.234655][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'.
[  109.158058][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'.
[  109.393538][ T8015] __nla_validate_parse: 4 callbacks suppressed
[  109.393553][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.905'.
[  109.436715][ T8017] netlink: 'syz.1.907': attribute type 3 has an invalid length.
[  109.440568][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'.
[  109.662265][ T5922] IPVS: starting estimator thread 0...
[  109.682561][ T8046] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  109.733696][ T8042] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  109.752795][ T8047] IPVS: using max 76 ests per chain, 182400 per kthread
[  109.875489][ T8060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.895968][ T8054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.926792][   T47] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  109.935837][   T47] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  109.951103][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  109.956605][ T1090] wlan1: authenticated
[  109.975063][ T1090] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  110.016833][ T1090] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  110.023890][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.034018][ T1090] wlan1: associated
[  110.199262][ T8086] netlink: 'syz.1.935': attribute type 64 has an invalid length.
[  110.203649][ T8087] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  110.208216][ T8087] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  110.212710][ T8086] sctp: [Deprecated]: syz.1.935 (pid 8086) Use of int in max_burst socket option deprecated.
[  110.212710][ T8086] Use struct sctp_assoc_value instead
[  110.213054][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'.
[  110.486328][ T8098] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  110.653213][ T8107] bridge0: port 4(macsec0) entered blocking state
[  110.656151][ T8107] bridge0: port 4(macsec0) entered disabled state
[  110.659183][ T8107] macsec0: entered allmulticast mode
[  110.663189][ T8107] macsec0: entered promiscuous mode
[  110.770629][ T8115] netlink: 'syz.2.947': attribute type 21 has an invalid length.
[  110.775025][ T8115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.947'.
[  110.864516][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'.
[  110.868478][ T8119] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  110.995871][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.953'.
[  111.113602][ T8139] netlink: 248 bytes leftover after parsing attributes in process `syz.0.959'.
[  111.164933][ T8139] bridge0: left allmulticast mode
[  111.290145][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'.
[  111.428551][ T8166] rdma_rxe: rxe_newlink: failed to add lo
[  111.495828][ T8164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.547590][ T8176] ipvlan2: entered promiscuous mode
[  111.725897][ T8185] gretap1: entered promiscuous mode
[  111.728104][ T8185] gretap1: entered allmulticast mode
[  111.876584][ T8193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.981'.
[  111.904957][ T8193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.981'.
[  112.139288][ T8208] netlink: 'syz.0.987': attribute type 2 has an invalid length.
[  112.141890][ T8208] netlink: 'syz.0.987': attribute type 1 has an invalid length.
[  112.148317][ T8208] netlink: 'syz.0.987': attribute type 1 has an invalid length.
[  112.338919][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.356919][ T8206] bond0: (slave rose0): Enslaving as an active interface with an up link
[  112.727003][ T8251] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  112.730947][ T8251] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  113.284913][ T8280] netlink: 'syz.0.1012': attribute type 1 has an invalid length.
[  113.338450][ T8286] veth3: entered promiscuous mode
[  113.459107][ T8298] netlink: 'syz.1.1020': attribute type 30 has an invalid length.
[  113.948081][ T8347] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.990106][ T8347] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.993540][ T8347] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  113.999077][ T8347] bond2: (slave vcan1): Error -95 calling set_mac_address
[  114.029601][ T8353] gretap2: entered promiscuous mode
[  114.037421][ T8353] bond2: (slave gretap2): making interface the new active one
[  114.041258][ T8353] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  114.059151][ T8353] macvlan0: entered promiscuous mode
[  114.061781][ T8353] macvlan0: entered allmulticast mode
[  114.065155][ T8353] bond2: entered promiscuous mode
[  114.068171][ T8353] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  114.076847][ T8353] bond2: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  114.085283][ T8353] bond2: left promiscuous mode
[  115.728199][ T8446] tipc: Started in network mode
[  115.730615][ T8446] tipc: Node identity b2bbc99c294b, cluster identity 4711
[  115.735292][ T8446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.739178][ T8446] syzkaller0: entered promiscuous mode
[  115.741649][ T8446] syzkaller0: entered allmulticast mode
[  115.759719][ T8446] tipc: Resetting bearer <eth:syzkaller0>
[  115.771428][ T8445] tipc: Resetting bearer <eth:syzkaller0>
[  115.793571][ T8445] tipc: Disabling bearer <eth:syzkaller0>
[  115.929893][ T8458] validate_nla: 3 callbacks suppressed
[  115.929908][ T8458] netlink: 'syz.2.1087': attribute type 21 has an invalid length.
[  115.935487][ T8458] __nla_validate_parse: 8 callbacks suppressed
[  115.935495][ T8458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1087'.
[  116.173425][ T8475] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1095'.
[  116.197535][ T8477] batadv_slave_0: entered promiscuous mode
[  116.200173][ T8477] batadv_slave_0: entered allmulticast mode
[  116.768982][ T8524] netlink: 'syz.1.1117': attribute type 6 has an invalid length.
[  117.077167][ T8539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1124'.
[  117.378428][ T8546] tipc: Started in network mode
[  117.380718][ T8546] tipc: Node identity 1a92260f188d, cluster identity 4711
[  117.384513][ T8546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.387917][ T8548] tap0: tun_chr_ioctl cmd 1074812118
[  117.390229][ T8546] syzkaller0: entered promiscuous mode
[  117.396968][ T8546] syzkaller0: entered allmulticast mode
[  117.417623][ T8546] tipc: Resetting bearer <eth:syzkaller0>
[  117.421150][ T8545] tipc: Resetting bearer <eth:syzkaller0>
[  117.431610][ T8545] tipc: Disabling bearer <eth:syzkaller0>
[  117.670560][ T8572] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1140'.
[  117.764145][ T8578] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1143'.
[  117.767407][ T8578] netlink: 'syz.2.1143': attribute type 1 has an invalid length.
[  117.994524][ T8598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.693418][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  119.073339][ T8680] bridge0: port 3(erspan0) entered blocking state
[  119.084148][ T8680] bridge0: port 3(erspan0) entered disabled state
[  119.092653][ T8680] erspan0: entered allmulticast mode
[  119.097148][ T8680] erspan0: entered promiscuous mode
[  119.105711][ T8680] erspan0: left allmulticast mode
[  119.108542][ T8680] erspan0: left promiscuous mode
[  119.111813][ T8680] bridge0: port 3(erspan0) entered disabled state
[  119.138505][ T8682] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96
[  119.346892][ T8693] xt_socket: unknown flags 0x50
[  119.715168][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'.
[  119.870784][ T8730] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1209'.
[  120.020155][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'.
[  120.024636][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'.
[  120.337851][ T8762] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.342756][ T8762] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.882418][ T8782] netlink: 'syz.1.1234': attribute type 13 has an invalid length.
[  120.885254][ T8782] netlink: 'syz.1.1234': attribute type 17 has an invalid length.
[  120.922748][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.925960][ T8782] 8021q: adding VLAN 0 to HW filter on device team0
[  120.933980][ T8782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  120.968208][ T8782] syz.1.1234 (8782) used greatest stack depth: 19928 bytes left
[  121.760828][ T8801] __nla_validate_parse: 4 callbacks suppressed
[  121.760837][ T8801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'.
[  122.082803][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'.
[  122.632874][ T8844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1259'.
[  122.653030][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  122.659082][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  122.667402][ T8847] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.670491][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  122.674791][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  123.092896][ T8884] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  123.096575][ T8883] IPVS: stopping backup sync thread 8884 ...
[  123.106044][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1276'.
[  123.112543][ T8883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1276'.
[  123.252743][ T8883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1276'.
[  123.443593][ T8912] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1289'.
[  123.525879][ T8924] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1292'.
[  123.673497][ T8937] wg1 speed is unknown, defaulting to 1000
[  123.689619][ T8941] netlink: 'syz.2.1300': attribute type 4 has an invalid length.
[  123.719686][ T8941] netlink: 'syz.2.1300': attribute type 4 has an invalid length.
[  123.919276][ T8954] netlink: 'syz.1.1306': attribute type 23 has an invalid length.
[  123.920093][ T8950] syzkaller0: entered promiscuous mode
[  123.925939][ T8950] syzkaller0: entered allmulticast mode
[  124.903274][ T8973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.906166][ T8973] IPv6: NLM_F_CREATE should be set when creating new route
[  124.909049][ T8973] IPv6: NLM_F_CREATE should be set when creating new route
[  124.975415][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1316'.
[  125.009784][ T8978] bond1: entered promiscuous mode
[  125.021882][ T8978] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.094307][ T8978] bond1 (unregistering): Released all slaves
[  125.221833][ T9002] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1326'.
[  125.296899][ T9006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.305969][ T9006] syzkaller0: entered promiscuous mode
[  125.307844][ T9006] syzkaller0: entered allmulticast mode
[  125.330184][ T9005] tipc: Resetting bearer <eth:syzkaller0>
[  125.367761][ T9005] tipc: Disabling bearer <eth:syzkaller0>
[  125.416442][ T9017] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  125.651867][ T9024] wg1 speed is unknown, defaulting to 1000
[  126.024063][ T9047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.275466][ T9059] bond_slave_0: entered promiscuous mode
[  126.278012][ T9059] bond_slave_1: entered promiscuous mode
[  126.298127][ T9059] vlan2: entered promiscuous mode
[  126.299859][ T9059] bond0: entered promiscuous mode
[  126.617328][ T9093] netlink: 'syz.1.1365': attribute type 1 has an invalid length.
[  126.632769][ T9093] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  126.644351][ T9093] gretap3: entered promiscuous mode
[  126.822496][ T9107] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.826474][ T9107] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.905741][ T9107] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.909198][ T9107] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.955031][ T9107] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  126.959010][ T9107] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.021680][ T9107] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.026091][ T9107] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.086083][ T5881] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.089758][ T5881] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.108328][ T5874] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.112427][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.122944][ T5881] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.128309][ T5881] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.138165][ T5881] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.152179][ T5881] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.451501][ T9118] __nla_validate_parse: 9 callbacks suppressed
[  127.451510][ T9118] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1376'.
[  127.808104][ T9145] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  127.845227][ T9145] veth3: entered promiscuous mode
[  127.857095][ T9145] bond0: (slave veth3): Enslaving as an active interface with an up link
[  127.860242][ T9152] bridge0: port 3(veth0_to_bridge) entered blocking state
[  127.863229][ T9152] bridge0: port 3(veth0_to_bridge) entered disabled state
[  127.866640][ T9152] veth0_to_bridge: entered allmulticast mode
[  127.873554][ T9152] veth0_to_bridge: entered promiscuous mode
[  128.004112][ T9169] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  128.006792][ T9169] netlink: 'syz.1.1396': attribute type 13 has an invalid length.
[  128.019587][ T9169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.041223][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'.
[  128.445629][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'.
[  128.468088][ T9213] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.504663][ T9218] IPv6: Can't replace route, no match found
[  130.416308][ T9295] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1454'.
[  131.381292][ T9328] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  131.422738][ T9331] netlink: 'syz.2.1471': attribute type 1 has an invalid length.
[  131.426342][ T9331] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1471'.
[  131.688207][ T9354] lo speed is unknown, defaulting to 1000
[  131.690932][ T9354] lo speed is unknown, defaulting to 1000
[  131.705152][ T9354] lo speed is unknown, defaulting to 1000
[  131.719951][ T9354] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  131.764518][ T9354] lo speed is unknown, defaulting to 1000
[  131.768285][ T9354] lo speed is unknown, defaulting to 1000
[  131.778928][ T9354] lo speed is unknown, defaulting to 1000
[  131.842719][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'.
[  131.847217][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1486'.
[  132.014813][ T9377] syzkaller1: tun_chr_ioctl cmd 1074025673
[  132.366380][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1502'.
[  132.370667][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'.
[  132.375363][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'.
[  132.465804][ T9402] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1503'.
[  132.951373][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.959267][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.984160][ T9416] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  132.986607][ T9416] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  133.086604][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'.
[  133.451691][ T9465] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  133.696089][ T9493] netlink: 'syz.0.1536': attribute type 10 has an invalid length.
[  133.700808][ T9493] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.705401][ T9493] team0: Port device bond0 added
[  133.961681][ T9522] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  134.363489][ T9540] wg1 speed is unknown, defaulting to 1000
[  134.368375][ T9540] lo speed is unknown, defaulting to 1000
[  134.944145][ T9553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1563'.
[  135.458452][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'.
[  135.686933][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'.
[  136.131361][ T9662] wg1 speed is unknown, defaulting to 1000
[  136.137199][ T9662] lo speed is unknown, defaulting to 1000
[  136.320088][ T9681] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  136.646428][ T9697] wg1 speed is unknown, defaulting to 1000
[  136.651436][ T9697] lo speed is unknown, defaulting to 1000
[  136.687456][ T9699] netlink: 'syz.1.1629': attribute type 10 has an invalid length.
[  136.701892][ T9699] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  136.988020][ T9718] netlink: 'syz.1.1636': attribute type 1 has an invalid length.
[  136.991293][ T9718] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1636'.
[  137.054114][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'.
[  137.310364][ T9734] syzkaller1: entered promiscuous mode
[  137.313861][ T9734] syzkaller1: entered allmulticast mode
[  137.530146][ T9756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.538742][ T9754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'.
[  137.665581][ T9775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1664'.
[  137.668744][ T9775] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.852702][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1671'.
[  137.946277][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'.
[  138.136413][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1676'.
[  138.168212][ T9806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'.
[  138.173457][ T9806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'.
[  138.546458][ T9842] netlink: 'syz.1.1691': attribute type 2 has an invalid length.
[  138.557692][ T9842] netlink: 'syz.1.1691': attribute type 2 has an invalid length.
[  138.724991][ T9857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1697'.
[  138.809976][ T9862] netlink: 'syz.0.1698': attribute type 23 has an invalid length.
[  138.821472][ T9863] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1700'.
[  138.917692][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'.
[  139.246877][ T9894] syzkaller1: entered promiscuous mode
[  139.248972][ T9894] syzkaller1: entered allmulticast mode
[  139.468840][ T9907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.475375][ T9907] syzkaller0: entered promiscuous mode
[  139.477196][ T9907] syzkaller0: entered allmulticast mode
[  139.511363][ T9907] tipc: Resetting bearer <eth:syzkaller0>
[  139.527459][ T9905] tipc: Resetting bearer <eth:syzkaller0>
[  139.541751][ T9905] tipc: Disabling bearer <eth:syzkaller0>
[  139.680960][ T9922] tc_dump_action: action bad kind
[  139.810050][ T9933] batadv_slave_0: entered promiscuous mode
[  139.827594][ T9933] batadv_slave_0 (unregistering): left promiscuous mode
[  139.835598][ T9933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.898707][ T9942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.967284][ T9947] netlink: 'syz.0.1730': attribute type 1 has an invalid length.
[  139.970722][ T9947] netlink: 'syz.0.1730': attribute type 3 has an invalid length.
[  140.071165][ T9955] wg1 speed is unknown, defaulting to 1000
[  140.075466][ T9955] lo speed is unknown, defaulting to 1000
[  140.311727][ T9975] netlink: 'syz.2.1743': attribute type 3 has an invalid length.
[  140.390671][ T9991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.407489][ T9991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.411596][ T9991] bond0 (unregistering): (slave veth3): Releasing backup interface
[  140.420303][ T9991] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  140.429727][ T9991] bond0 (unregistering): Released all slaves
[  141.348215][T10073] IPVS: Scheduler module ip_vs_sip not found
[  141.744474][T10098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.790891][T10101] IPv6: sit2: Disabled Multicast RS
[  141.798661][T10101] sit2: entered allmulticast mode
[  141.908083][T10118] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  141.910820][T10118] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  141.920006][T10118] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  142.304684][T10171] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  142.385740][T10179] bond0 (uninitialized): Unable to set up delay as MII monitoring is disabled
[  144.148328][T10253] __nla_validate_parse: 16 callbacks suppressed
[  144.148344][T10253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1873'.
[  144.374570][T10267] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  144.504933][T10272] bond0: (slave bond_slave_0): Releasing backup interface
[  144.521802][T10272] bond_slave_0: left promiscuous mode
[  144.533848][T10272] bond0: (slave bond_slave_1): Releasing backup interface
[  144.539582][T10272] bond_slave_1: left promiscuous mode
[  144.557623][T10272] team0: Port device team_slave_0 removed
[  144.579832][T10272] team0: Port device team_slave_1 removed
[  144.602691][T10272] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.605701][T10272] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.629469][T10272] team0: Port device batadv1 removed
[  144.657712][T10281] IPVS: stopping backup sync thread 9522 ...
[  144.789853][T10287] lo speed is unknown, defaulting to 1000
[  144.791267][T10289] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  144.810204][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1886'.
[  144.905927][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'.
[  145.046317][T10314] macsec1: entered promiscuous mode
[  145.048612][T10314] macsec1: entered allmulticast mode
[  145.386251][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1903'.
[  145.785454][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1910'.
[  145.790616][T10359] netlink: 'syz.2.1910': attribute type 1 has an invalid length.
[  146.017420][T10384] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  146.183092][T10403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1927'.
[  146.386980][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'.
[  146.397733][T10427] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1936'.
[  146.468369][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1938'.
[  146.580417][T10442] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1942'.
[  147.727872][T10499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.737372][T10501] netlink: 'syz.2.1968': attribute type 2 has an invalid length.
[  148.407703][T10546] syzkaller1: entered promiscuous mode
[  148.409735][T10546] syzkaller1: entered allmulticast mode
[  148.639327][T10557] netlink: 'syz.0.1993': attribute type 62 has an invalid length.
[  148.947161][T10567] netlink: 'syz.0.1998': attribute type 4 has an invalid length.
[  148.967759][T10567] netlink: 'syz.0.1998': attribute type 4 has an invalid length.
[  148.987090][   T10] lo speed is unknown, defaulting to 1000
[  148.992328][   T10] syz2: Port: 1 Link ACTIVE
[  149.417350][T10586] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  149.859328][T10610] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  150.562316][T10658] __nla_validate_parse: 3 callbacks suppressed
[  150.562325][T10658] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2033'.
[  150.583691][T10658] team0: Port device bond0 removed
[  150.587254][T10658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.591740][T10658] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  150.607112][T10658] bond0 (unregistering): Released all slaves
[  150.800169][T10677] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  150.948389][T10689] netlink: 'syz.2.2048': attribute type 41 has an invalid length.
[  150.956853][T10687] netpci0: tun_chr_ioctl cmd 1074025681
[  151.188875][T10704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2054'.
[  151.228920][T10706] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2055'.
[  151.244049][T10706] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  151.248456][T10706] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  151.753609][T10716] netlink: 'syz.1.2059': attribute type 15 has an invalid length.
[  151.780265][T10718] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2060'.
[  152.100899][T10744] !: renamed from dummy0 (while UP)
[  152.126618][T10747] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.130205][T10747] syzkaller0: entered promiscuous mode
[  152.133849][T10747] syzkaller0: entered allmulticast mode
[  152.147988][T10747] tipc: Resetting bearer <eth:syzkaller0>
[  152.154080][T10746] tipc: Resetting bearer <eth:syzkaller0>
[  152.165060][T10746] tipc: Disabling bearer <eth:syzkaller0>
[  152.190699][T10750] lo speed is unknown, defaulting to 1000
[  152.697703][T10801] tipc: Enabled bearer <udp:syz2>, priority 10
[  152.862815][T10813] block nbd0: server does not support multiple connections per device.
[  152.869673][T10813] block nbd0: shutting down sockets
[  153.650971][T10895] ieee802154 phy0 wpan0: encryption failed: -22
[  153.658174][T10897] nbd: must specify a device to reconfigure
[  153.714563][   T10] tipc: Node number set to 1523779231
[  153.907430][T10907] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[  153.942750][ T5881] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.945756][ T5881] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.956855][ T5881] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.959637][ T5881] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.967662][ T5881] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.970495][ T5881] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.973785][ T5881] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.976484][ T5881] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.044680][T10920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.048469][T10920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.125611][T10920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.130014][T10920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.167804][T10920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.173386][T10920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.226736][T10920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  154.230836][T10920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  154.314687][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.318155][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  154.333880][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.337444][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  154.351831][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.354793][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  154.363695][ T5881] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  154.366653][ T5881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  154.628979][T10936] netlink: 'syz.0.2128': attribute type 21 has an invalid length.
[  154.636888][T10936] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2128'.
[  154.844337][T10954] syzkaller0: entered promiscuous mode
[  154.847485][T10954] syzkaller0: entered allmulticast mode
[  154.854380][T10954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.872892][T10953] tipc: Resetting bearer <eth:syzkaller0>
[  154.893078][T10953] tipc: Disabling bearer <eth:syzkaller0>
[  155.090977][T10975] netlink: 'syz.1.2145': attribute type 3 has an invalid length.
[  155.096826][T10973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2146'.
[  155.099237][T10975] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2145'.
[  155.476897][T11006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.480291][T11006] syzkaller0: entered promiscuous mode
[  155.482391][T11006] syzkaller0: entered allmulticast mode
[  155.501691][T11006] tipc: Resetting bearer <eth:syzkaller0>
[  155.512555][T11004] tipc: Resetting bearer <eth:syzkaller0>
[  155.526460][T11004] tipc: Disabling bearer <eth:syzkaller0>
[  155.668889][T11020] netlink: 'syz.1.2163': attribute type 13 has an invalid length.
[  155.671746][T11020] netlink: 'syz.1.2163': attribute type 17 has an invalid length.
[  155.677073][T11020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.713054][T11020] lo speed is unknown, defaulting to 1000
[  155.957897][T11037] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2169'.
[  156.207568][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'.
[  156.694562][T11072] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2185'.
[  157.104499][T11087] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2192'.
[  157.105112][T11088] netlink: 'syz.1.2191': attribute type 9 has an invalid length.
[  157.677571][T11118] lo speed is unknown, defaulting to 1000
[  157.725690][ T5864] Bluetooth: hci2: link tx timeout
[  157.727750][ T5864] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  157.730572][ T5864] Bluetooth: hci2: link tx timeout
[  157.733758][ T5864] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  157.736958][ T5864] Bluetooth: hci2: link tx timeout
[  157.738798][ T5864] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  157.741365][ T5864] Bluetooth: hci2: link tx timeout
[  157.744955][ T5864] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  157.747554][ T5864] Bluetooth: hci2: link tx timeout
[  157.749225][ T5864] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  157.751824][ T5864] Bluetooth: hci2: link tx timeout
[  157.753701][ T5864] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  157.958096][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'.
[  157.960497][T11120] raw_sendmsg: syz.1.2205 forgot to set AF_INET. Fix it!
[  157.962107][T11133] veth0_to_bridge: left allmulticast mode
[  157.967132][T11133] veth0_to_bridge: left promiscuous mode
[  157.969852][T11133] bridge0: port 3(veth0_to_bridge) entered disabled state
[  158.012226][T11133] bridge_slave_1: left allmulticast mode
[  158.014676][T11133] bridge_slave_1: left promiscuous mode
[  158.018805][T11133] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.029687][T11133] bridge_slave_0: left allmulticast mode
[  158.031866][T11133] bridge_slave_0: left promiscuous mode
[  158.042758][T11133] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.142255][T11148] ..@: renamed from bond_slave_0
[  159.206633][ T5863] lo speed is unknown, defaulting to 1000
[  159.207655][ T5874] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.208713][ T5863] syz2: Port: 1 Link DOWN
[  159.213127][ T5874] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  159.230747][ T5874] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.360879][ T5874] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  159.366872][ T5874] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.371249][ T5874] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  159.377060][ T5874] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.381258][ T5874] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  159.813858][ T5864] Bluetooth: hci2: command 0x0406 tx timeout
[  160.762308][T11253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2262'.
[  160.867129][T11259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2266'.
[  161.223341][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2272'.
[  161.743680][T11295] wireguard0: entered promiscuous mode
[  161.747612][T11295] wireguard0: entered allmulticast mode
[  161.892852][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  161.937831][T11302] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2282'.
[  162.130729][T11310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.135491][T11310] syzkaller0: entered promiscuous mode
[  162.137604][T11310] syzkaller0: entered allmulticast mode
[  162.150876][T11310] tipc: Resetting bearer <eth:syzkaller0>
[  162.154520][T11309] tipc: Resetting bearer <eth:syzkaller0>
[  162.161277][T11309] tipc: Disabling bearer <eth:syzkaller0>
[  162.319470][T11318] netlink: 'syz.2.2289': attribute type 1 has an invalid length.
[  162.345300][T11318] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.370088][T11318] 8021q: adding VLAN 0 to HW filter on device bond1
[  162.373724][T11318] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  162.379572][T11318] bond1: (slave vxcan5): Error -95 calling set_mac_address
[  162.418325][T11321] veth7: entered promiscuous mode
[  162.427110][T11321] bond1: (slave veth7): Enslaving as an active interface with a down link
[  162.527426][T11327] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2291'.
[  162.663987][T11332] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  162.810206][T11345] netlink: 'syz.2.2297': attribute type 1 has an invalid length.
[  162.814336][T11345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.017533][T11383] netlink: 'syz.0.2312': attribute type 4 has an invalid length.
[  164.612619][T11440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'.
[  164.651369][T11442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2336'.
[  164.698430][T11445] netlink: 'syz.0.2337': attribute type 39 has an invalid length.
[  164.811830][T11451] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  164.986395][T11454] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  165.148493][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2346'.
[  165.840804][T11523] netlink: 'syz.1.2357': attribute type 1 has an invalid length.
[  165.881085][T11523] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.901824][T11523] bond0: (slave geneve2): making interface the new active one
[  165.906627][T11523] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  165.917948][ T5874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.921636][ T5874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.927439][ T5874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.930988][ T5874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.938996][T11523] bond0: entered promiscuous mode
[  165.941274][T11523] geneve2: entered promiscuous mode
[  165.962492][T11523] syz.1.2357 (11523) used greatest stack depth: 18776 bytes left
[  166.365085][T11565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.368776][T11565] syzkaller0: entered promiscuous mode
[  166.371285][T11565] syzkaller0: entered allmulticast mode
[  166.383528][T11565] tipc: Resetting bearer <eth:syzkaller0>
[  166.392565][T11564] tipc: Resetting bearer <eth:syzkaller0>
[  166.411074][T11564] tipc: Disabling bearer <eth:syzkaller0>
[  166.434872][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'.
[  166.604787][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'.
[  166.852294][   T55] Bluetooth: hci0: command tx timeout
[  166.973854][T11608] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2393'.
[  167.003437][T11615] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  167.126251][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2398'.
[  167.175430][T11628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2397'.
[  167.223136][T11635] netlink: 'syz.1.2401': attribute type 1 has an invalid length.
[  167.247633][T11635] 8021q: adding VLAN 0 to HW filter on device bond3
[  167.252157][T11635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2401'.
[  167.412773][T11656] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2401'.
[  167.623349][T11673] netlink: 'syz.0.2416': attribute type 1 has an invalid length.
[  167.626743][T11673] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2416'.
[  167.630599][T11673] netlink: 'syz.0.2416': attribute type 1 has an invalid length.
[  167.636175][T11673] netlink: 'syz.0.2416': attribute type 2 has an invalid length.
[  167.757437][T11682] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2420'.
[  168.482435][T11694] netlink: 'syz.2.2426': attribute type 1 has an invalid length.
[  168.485497][T11694] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.868203][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'.
[  168.897653][T11723] netlink: 'syz.0.2441': attribute type 10 has an invalid length.
[  168.902246][T11723] netlink: 'syz.0.2441': attribute type 10 has an invalid length.
[  168.951347][T11725] syzkaller0: entered promiscuous mode
[  168.953256][T11725] syzkaller0: entered allmulticast mode
[  169.031356][T11729] syz.0.2443: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  169.048552][T11729] CPU: 0 UID: 0 PID: 11729 Comm: syz.0.2443 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  169.048571][T11729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.048578][T11729] Call Trace:
[  169.048584][T11729]  <TASK>
[  169.048590][T11729]  dump_stack_lvl+0x189/0x250
[  169.048625][T11729]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  169.048643][T11729]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.048656][T11729]  ? __pfx__printk+0x10/0x10
[  169.048671][T11729]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  169.048686][T11729]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  169.048704][T11729]  warn_alloc+0x214/0x310
[  169.048720][T11729]  ? stack_depot_save_flags+0x40/0x900
[  169.048740][T11729]  ? __pfx_warn_alloc+0x10/0x10
[  169.048760][T11729]  ? kasan_save_track+0x4f/0x80
[  169.048775][T11729]  ? xskq_create+0x56/0x170
[  169.048787][T11729]  ? xsk_init_queue+0xb0/0x110
[  169.048797][T11729]  ? xsk_setsockopt+0x4dc/0x8d0
[  169.048806][T11729]  ? do_sock_setsockopt+0x17c/0x1b0
[  169.048822][T11729]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  169.048834][T11729]  ? do_syscall_64+0xfa/0x3b0
[  169.048845][T11729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.048862][T11729]  __vmalloc_node_range_noprof+0x125/0x12f0
[  169.048902][T11729]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  169.048921][T11729]  ? __kasan_kmalloc+0x93/0xb0
[  169.048938][T11729]  vmalloc_user_noprof+0xad/0xf0
[  169.048954][T11729]  ? xskq_create+0xbf/0x170
[  169.048967][T11729]  xskq_create+0xbf/0x170
[  169.048982][T11729]  xsk_init_queue+0xb0/0x110
[  169.048996][T11729]  xsk_setsockopt+0x4dc/0x8d0
[  169.049010][T11729]  ? __pfx_xsk_setsockopt+0x10/0x10
[  169.049022][T11729]  ? __pfx_aa_sk_perm+0x10/0x10
[  169.049037][T11729]  ? aa_sock_opt_perm+0x74/0x110
[  169.049049][T11729]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  169.049060][T11729]  ? __pfx_xsk_setsockopt+0x10/0x10
[  169.049070][T11729]  do_sock_setsockopt+0x17c/0x1b0
[  169.049093][T11729]  __x64_sys_setsockopt+0x13f/0x1b0
[  169.049112][T11729]  do_syscall_64+0xfa/0x3b0
[  169.049123][T11729]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.049136][T11729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.049148][T11729]  ? exc_page_fault+0x9f/0xf0
[  169.049161][T11729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.049173][T11729] RIP: 0033:0x7f4bd1b8ebe9
[  169.049184][T11729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.049193][T11729] RSP: 002b:00007f4bd2a91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  169.049206][T11729] RAX: ffffffffffffffda RBX: 00007f4bd1db5fa0 RCX: 00007f4bd1b8ebe9
[  169.049214][T11729] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  169.049220][T11729] RBP: 00007f4bd1c11e19 R08: 0000000000000004 R09: 0000000000000000
[  169.049227][T11729] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.049234][T11729] R13: 00007f4bd1db6038 R14: 00007f4bd1db5fa0 R15: 00007fffbdad0148
[  169.049255][T11729]  </TASK>
[  169.049569][T11729] Mem-Info:
[  169.171201][T11729] active_anon:13637 inactive_anon:0 isolated_anon:0
[  169.171201][T11729]  active_file:1115 inactive_file:38260 isolated_file:0
[  169.171201][T11729]  unevictable:1768 dirty:314 writeback:0
[  169.171201][T11729]  slab_reclaimable:9829 slab_unreclaimable:70142
[  169.171201][T11729]  mapped:18259 shmem:2419 pagetables:972
[  169.171201][T11729]  sec_pagetables:0 bounce:0
[  169.171201][T11729]  kernel_misc_reclaimable:0
[  169.171201][T11729]  free:274241 free_pcp:20126 free_cma:0
[  169.190098][T11729] Node 0 active_anon:14980kB inactive_anon:0kB active_file:1324kB inactive_file:134356kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44688kB dirty:52kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6788kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  169.201576][T11729] Node 1 active_anon:39568kB inactive_anon:0kB active_file:3136kB inactive_file:18684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28348kB dirty:1204kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4868kB pagetables:1640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  169.212617][T11729] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  169.222445][T11729] lowmem_reserve[]: 0 814 814 814 814
[  169.224475][T11729] Node 0 DMA32 free:276132kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14980kB inactive_anon:0kB active_file:1324kB inactive_file:134356kB unevictable:3536kB writepending:52kB present:1556484kB managed:833944kB mlocked:0kB bounce:0kB free_pcp:33296kB local_pcp:14860kB free_cma:0kB
[  169.235855][T11729] lowmem_reserve[]: 0 0 0 0 0
[  169.237571][T11729] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  169.248518][T11729] lowmem_reserve[]: 0 0 854 854 854
[  169.250496][T11729] Node 1 Normal free:346980kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39568kB inactive_anon:0kB active_file:3136kB inactive_file:18684kB unevictable:3536kB writepending:1204kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:47048kB local_pcp:15712kB free_cma:0kB
[  169.261787][T11729] lowmem_reserve[]: 0 0 0 0 0
[  169.263585][T11729] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  169.267756][T11729] Node 0 DMA32: 491*4kB (UME) 155*8kB (ME) 160*16kB (UME) 241*32kB (UME) 158*64kB (UME) 97*128kB (UME) 48*256kB (UM) 25*512kB (UME) 6*1024kB (UM) 6*2048kB (UM) 48*4096kB (UM) = 276132kB
[  169.273925][T11729] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  169.279342][T11729] Node 1 Normal: 409*4kB (UM) 220*8kB (UME) 178*16kB (UM) 238*32kB (UME) 281*64kB (UME) 72*128kB (UM) 25*256kB (UM) 5*512kB (UM) 6*1024kB (U) 2*2048kB (U) 70*4096kB (UM) = 346980kB
[  169.285413][T11729] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  169.288504][T11729] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  169.295839][T11729] 41794 total pagecache pages
[  169.300599][T11729] 0 pages in swap cache
[  169.302193][T11729] Free swap  = 124996kB
[  169.306835][T11729] Total swap = 124996kB
[  169.311279][T11729] 786301 pages RAM
[  169.312725][T11729] 0 pages HighMem/MovableOnly
[  169.317712][T11729] 240567 pages reserved
[  169.319171][T11729] 0 pages cma reserved
[  170.839592][T11779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.844525][T11779] syzkaller0: entered promiscuous mode
[  170.846802][T11779] syzkaller0: entered allmulticast mode
[  170.861252][T11779] tipc: Resetting bearer <eth:syzkaller0>
[  170.867750][T11778] tipc: Resetting bearer <eth:syzkaller0>
[  170.877246][T11778] tipc: Disabling bearer <eth:syzkaller0>
[  171.183117][T11791] netlink: zone id is out of range
[  171.192164][T11791] netlink: zone id is out of range
[  171.194742][T11791] netlink: zone id is out of range
[  171.197050][T11791] netlink: zone id is out of range
[  171.199392][T11791] netlink: zone id is out of range
[  171.201920][T11791] netlink: zone id is out of range
[  171.205496][T11791] netlink: zone id is out of range
[  171.208151][T11791] netlink: zone id is out of range
[  171.217795][T11791] netlink: zone id is out of range
[  171.290309][T11791] lo speed is unknown, defaulting to 1000
[  171.446530][T11811] gtp2: entered promiscuous mode
[  171.448477][T11811] gtp2: entered allmulticast mode
[  172.075822][T11868] __nla_validate_parse: 3 callbacks suppressed
[  172.075831][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'.
[  172.120794][T11873] netlink: 'syz.1.2507': attribute type 21 has an invalid length.
[  172.248765][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'.
[  172.258990][T11887] macvtap1: entered promiscuous mode
[  172.260912][T11887] macvtap1: entered allmulticast mode
[  172.265585][T11887] bond0: entered allmulticast mode
[  172.268936][T11887] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  172.280011][T11887] bond0: left allmulticast mode
[  172.290011][T11892] nbd: couldn't find device at index 536870912
[  172.451040][   T33] audit: type=1800 audit(1754494097.482:4): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2524" name="memory.events" dev="tmpfs" ino=3816 res=0 errno=0
[  172.461235][   T33] audit: type=1804 audit(1754494097.482:5): pid=11908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2524" name="memory.events" dev="tmpfs" ino=3816 res=1 errno=0
[  172.552423][T11920] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2529'.
[  172.586973][T11924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.589592][T11924] syzkaller0: entered promiscuous mode
[  172.591387][T11924] syzkaller0: entered allmulticast mode
[  172.606030][T11928] netlink: 'syz.1.2534': attribute type 1 has an invalid length.
[  172.612480][T11928] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2534'.
[  172.619357][T11928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2534'.
[  172.625684][T11924] tipc: Resetting bearer <eth:syzkaller0>
[  172.634693][T11922] tipc: Resetting bearer <eth:syzkaller0>
[  172.656090][T11922] tipc: Disabling bearer <eth:syzkaller0>
[  172.771888][T11944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2542'.
[  172.844673][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2546'.
[  172.922612][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2544'.
[  172.930941][T11948] pim6reg: entered allmulticast mode
[  172.939133][T11948] pim6reg: left allmulticast mode
[  173.091925][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'.
[  173.429164][T11998] 8021q: adding VLAN 0 to HW filter on device team0
[  173.435549][ T5923] lo speed is unknown, defaulting to 1000
[  173.438745][ T5923] syz2: Port: 1 Link ACTIVE
[  173.447588][T11998] veth0_to_team: entered promiscuous mode
[  173.450215][T11998] veth0_to_team: entered allmulticast mode
[  173.538081][T12011] netlink: 'syz.1.2573': attribute type 15 has an invalid length.
[  174.411047][T12055] smc: net device bond0 applied user defined pnetid SYZ2
[  174.421329][T12055] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2595'.
[  174.566160][T12055] smc: removing net device bond0 with user defined pnetid SYZ2
[  174.571421][T12055] bond0 (unregistering): Released all slaves
[  174.680405][T12072] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  174.724957][   T47] lo speed is unknown, defaulting to 1000
[  174.727511][   T47] syz2: Port: 1 Link DOWN
[  175.837995][T12179] : entered promiscuous mode
[  176.176173][T12197] can: request_module (can-proto-0) failed.
[  176.379971][T12226] bridge_slave_1: default FDB implementation only supports local addresses
[  176.448821][T12234] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  176.768696][T12265] sctp: [Deprecated]: syz.0.2691 (pid 12265) Use of int in max_burst socket option.
[  176.768696][T12265] Use struct sctp_assoc_value instead
[  177.064924][T12282] net_ratelimit: 8 callbacks suppressed
[  177.064938][T12282] openvswitch: netlink: Message has 4 unknown bytes.
[  177.070449][T12282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.443965][T12306] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  177.578571][T12313] __nla_validate_parse: 6 callbacks suppressed
[  177.578586][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'.
[  177.708116][T12325] netlink: 'syz.2.2722': attribute type 2 has an invalid length.
[  177.720253][T12325] netlink: 'syz.2.2722': attribute type 1 has an invalid length.
[  178.273798][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.277297][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.294212][T12370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.416939][T12376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2747'.
[  178.600983][T12389] lo speed is unknown, defaulting to 1000
[  178.654975][T12389] ieee802154 phy0 wpan0: encryption failed: -22
[  178.719811][T12394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.732599][T12394] syzkaller0: entered promiscuous mode
[  178.734581][T12394] syzkaller0: entered allmulticast mode
[  178.746348][T12394] tipc: Resetting bearer <eth:syzkaller0>
[  178.750030][T12393] tipc: Resetting bearer <eth:syzkaller0>
[  178.759514][T12393] tipc: Disabling bearer <eth:syzkaller0>
[  179.502528][T12409] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2758'.
[  179.735710][T12426] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.2765'.
[  179.903456][T12443] Bluetooth: MGMT ver 1.23
[  180.257917][T12467] bond4: entered promiscuous mode
[  180.260510][T12467] 8021q: adding VLAN 0 to HW filter on device bond4
[  180.530382][T12472] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2786'.
[  180.620241][T12478] netlink: 'syz.0.2788': attribute type 12 has an invalid length.
[  180.624089][T12478] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2788'.
[  180.855648][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2800'.
[  181.066662][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2810'.
[  181.070252][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2810'.
[  181.082636][T12519] netlink: 'syz.2.2810': attribute type 1 has an invalid length.
[  181.085198][T12519] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2810'.
[  181.123072][T12519] nbd: socks must be embedded in a SOCK_ITEM attr
[  181.126403][T12519] block nbd0: shutting down sockets
[  181.137787][T12526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.140958][T12526] syzkaller0: entered promiscuous mode
[  181.147294][T12526] syzkaller0: entered allmulticast mode
[  181.166991][T12526] tipc: Resetting bearer <eth:syzkaller0>
[  181.169293][T12526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.172733][T12526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.190043][T12525] tipc: Resetting bearer <eth:syzkaller0>
[  181.200887][T12525] tipc: Disabling bearer <eth:syzkaller0>
[  181.497360][T12560] netlink: 'syz.1.2824': attribute type 1 has an invalid length.
[  182.489443][T12649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.499697][T12649] syzkaller0: entered promiscuous mode
[  182.501909][T12649] syzkaller0: entered allmulticast mode
[  182.528107][T12649] tipc: Resetting bearer <eth:syzkaller0>
[  182.531889][T12648] tipc: Resetting bearer <eth:syzkaller0>
[  182.544677][T12648] tipc: Disabling bearer <eth:syzkaller0>
[  182.724682][T12665] __nla_validate_parse: 3 callbacks suppressed
[  182.724693][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'.
[  182.886453][T12681] netlink: 'syz.0.2884': attribute type 13 has an invalid length.
[  182.890060][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2884'.
[  182.895421][T12681] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  182.903551][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2886'.
[  183.018118][T12695] netlink: 'syz.0.2889': attribute type 9 has an invalid length.
[  183.112659][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'.
[  183.116296][T12699] netlink: 'syz.2.2890': attribute type 5 has an invalid length.
[  183.119441][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2890'.
[  183.341780][T12701] ieee802154 phy0 wpan0: encryption failed: -22
[  183.538260][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2894'.
[  183.541969][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2894'.
[  183.785027][T12721] bridge0: port 1(gretap0) entered blocking state
[  183.788163][T12721] bridge0: port 1(gretap0) entered disabled state
[  183.791258][T12721] gretap0: entered allmulticast mode
[  183.795839][T12721] gretap0: left allmulticast mode
[  183.940670][T12733] lo speed is unknown, defaulting to 1000
[  183.975146][T12738] lo speed is unknown, defaulting to 1000
[  184.381852][T12767] netlink: 'syz.0.2920': attribute type 10 has an invalid length.
[  184.471596][T12767] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2920'.
[  184.659282][T12783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.918273][T12810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2939'.
[  185.040126][T12825] bridge4: entered allmulticast mode
[  185.118988][T12836] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2951'.
[  185.248122][T12849] gretap0: entered promiscuous mode
[  185.504273][T12866] netlink: 'syz.0.2963': attribute type 1 has an invalid length.
[  185.909262][T12881] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.068131][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  186.088877][T12900] netlink: 'syz.0.2978': attribute type 10 has an invalid length.
[  186.391946][T12928] netlink: 'syz.0.2990': attribute type 7 has an invalid length.
[  186.437871][T12932] netlink: 'syz.0.2993': attribute type 2 has an invalid length.
[  186.944314][T12954] lo speed is unknown, defaulting to 1000
[  187.530563][T12966] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.536965][T12966] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.579607][T12968] netlink: 'syz.0.3007': attribute type 2 has an invalid length.
[  187.928597][T12984] lo speed is unknown, defaulting to 1000
[  188.575991][T13003] __nla_validate_parse: 4 callbacks suppressed
[  188.576005][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3020'.
[  188.591800][T13003] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3020'.
[  188.610093][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3023'.
[  188.614881][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3020'.
[  188.619298][T13003] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3020'.
[  188.858900][T13024] IPv6: Can't replace route, no match found
[  189.965280][T13047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3038'.
[  190.019709][T13054] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  190.473818][T13094] netlink: 'syz.1.3060': attribute type 1 has an invalid length.
[  190.478512][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3059'.
[  190.520746][T13094] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  190.534462][T13094] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  190.539564][T13094] bond5: (slave vti0): making interface the new active one
[  190.544382][T13094] bond5: (slave vti0): Enslaving as an active interface with an up link
[  190.567512][T13103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.570608][T13103] syzkaller0: entered promiscuous mode
[  190.572998][T13103] syzkaller0: entered allmulticast mode
[  190.578543][T13103] tipc: Resetting bearer <eth:syzkaller0>
[  190.596008][T13102] tipc: Resetting bearer <eth:syzkaller0>
[  190.609598][T13102] tipc: Disabling bearer <eth:syzkaller0>
[  190.610661][T13106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3064'.
[  190.794493][T13123] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3073'.
[  190.801617][T13123] netlink: zone id is out of range
[  190.807739][T13123] netlink: zone id is out of range
[  190.811164][T13123] netlink: zone id is out of range
[  190.813485][T13123] netlink: zone id is out of range
[  190.815629][T13123] netlink: zone id is out of range
[  190.818766][T13123] netlink: zone id is out of range
[  190.820898][T13123] netlink: zone id is out of range
[  190.826260][T13123] netlink: zone id is out of range
[  190.828375][T13123] netlink: zone id is out of range
[  190.830435][T13123] netlink: zone id is out of range
[  190.840462][T13129] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  190.884526][T13127] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  191.332124][ T5864] Bluetooth: hci1: command 0x0406 tx timeout
[  191.376207][T13180] netlink: 'syz.1.3098': attribute type 1 has an invalid length.
[  191.407759][T13180] bond6: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  191.415374][T13180] 8021q: adding VLAN 0 to HW filter on device bond6
[  191.430388][T13180] veth9: entered promiscuous mode
[  191.435741][T13180] bond6: (slave veth9): Enslaving as a backup interface with a down link
[  191.440523][T13180] team0: left allmulticast mode
[  191.443033][T13180] team_slave_0: left allmulticast mode
[  191.448933][T13180] team_slave_1: left allmulticast mode
[  191.451529][T13180] team0: left promiscuous mode
[  191.454375][T13180] team_slave_0: left promiscuous mode
[  191.456835][T13180] team_slave_1: left promiscuous mode
[  191.459357][T13180] bridge0: port 3(team0) entered disabled state
[  191.464792][T13180] bridge_slave_0: left allmulticast mode
[  191.474588][T13180] bridge_slave_0: left promiscuous mode
[  191.477070][T13180] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.481887][T13180] bridge_slave_1: left allmulticast mode
[  191.484801][T13180] bridge_slave_1: left promiscuous mode
[  191.487303][T13180] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.497532][T13180] team0: Port device team_slave_0 removed
[  191.501493][T13180] team0: Port device team_slave_1 removed
[  191.505330][T13180] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.508633][T13180] macsec0: left allmulticast mode
[  191.510614][T13180] macsec0: left promiscuous mode
[  191.514005][T13180] bridge0: port 4(macsec0) entered disabled state
[  191.519618][T13180] bond1: (slave gretap1): Releasing active interface
[  191.524781][T13180] bond2: (slave gretap2): Releasing active interface
[  191.529016][T13180] bond0: (slave geneve2): Releasing active interface
[  191.531642][T13180] geneve2: left promiscuous mode
[  191.538107][T13180] bond5: (slave vti0): Releasing backup interface
[  191.544001][T13180] bond6: (slave ip6gretap2): Removing an active aggregator
[  191.548542][T13180] bond6: (slave ip6gretap2): Releasing backup interface
[  191.551296][T13180] bond6: (slave ip6gretap2): the permanent HWaddr of slave - ba:1e:60:76:cd:4c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  191.561456][T13180] bond6: (slave veth9): Releasing backup interface
[  191.570189][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.576120][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.592381][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.597009][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.746339][T13198] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3104'.
[  192.968462][T13261] sctp: [Deprecated]: syz.1.3134 (pid 13261) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.968462][T13261] Use struct sctp_sack_info instead
[  193.977243][T13347] __nla_validate_parse: 8 callbacks suppressed
[  193.977258][T13347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3171'.
[  194.055046][T13353] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3173'.
[  194.060410][T13353] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3173'.
[  194.131469][T13360] vxcan3: entered allmulticast mode
[  194.190263][T13366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3173'.
[  194.282922][T13368] lo speed is unknown, defaulting to 1000
[  194.320633][T13374] syzkaller1: entered promiscuous mode
[  194.322672][T13374] syzkaller1: entered allmulticast mode
[  194.368254][T13378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3181'.
[  194.426207][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3181'.
[  194.535214][T13385] netlink: 'syz.2.3185': attribute type 11 has an invalid length.
[  195.393092][T13411] lo speed is unknown, defaulting to 1000
[  195.423834][T13417] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3195'.
[  195.574831][T13430] netlink: 'syz.1.3203': attribute type 1 has an invalid length.
[  195.578591][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'.
[  195.654523][T13436] netem: incorrect gi model size
[  195.656410][T13436] netem: change failed
[  195.686786][T13438] netlink: 'syz.0.3206': attribute type 1 has an invalid length.
[  195.714803][T13443] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.725905][T13438] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  195.754141][T13438] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.784837][T13438] veth7: entered promiscuous mode
[  195.789745][T13438] bond1: (slave veth7): Enslaving as a backup interface with a down link
[  195.799470][T13447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.807407][T13438] team0: Port device team_slave_0 removed
[  195.811508][T13438] team0: Port device team_slave_1 removed
[  195.815500][T13438] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.821918][T13438] bond1: (slave ip6gretap2): Removing an active aggregator
[  195.826061][T13438] bond1: (slave ip6gretap2): Releasing backup interface
[  195.829048][T13438] bond1: (slave ip6gretap2): the permanent HWaddr of slave - 0a:aa:ff:b5:3b:ff - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  195.860016][T13438] bond1: (slave veth7): Releasing backup interface
[  195.866872][T13447] syzkaller0: entered promiscuous mode
[  195.868762][T13447] syzkaller0: entered allmulticast mode
[  195.893165][T13447] tipc: Resetting bearer <eth:syzkaller0>
[  195.897907][T13446] tipc: Resetting bearer <eth:syzkaller0>
[  195.910847][T13446] tipc: Disabling bearer <eth:syzkaller0>
[  196.101204][T13465] lo speed is unknown, defaulting to 1000
[  196.290187][T13481] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3223'.
[  196.296801][T13481] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3223'.
[  196.436661][T13491] netlink: 'syz.1.3228': attribute type 1 has an invalid length.
[  196.459445][T13491] 8021q: adding VLAN 0 to HW filter on device bond7
[  196.477486][T13491] 8021q: adding VLAN 0 to HW filter on device bond7
[  196.479932][T13491] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  196.484297][T13491] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  197.021018][T13518] sctp: [Deprecated]: syz.1.3240 (pid 13518) Use of int in maxseg socket option.
[  197.021018][T13518] Use struct sctp_assoc_value instead
[  197.157603][T13530] sctp: [Deprecated]: syz.2.3245 (pid 13530) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.157603][T13530] Use struct sctp_sack_info instead
[  197.160017][T13532] netlink: 'syz.1.3246': attribute type 8 has an invalid length.
[  198.896954][T13607] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.900430][T13607] syzkaller0: entered promiscuous mode
[  198.904443][T13607] syzkaller0: entered allmulticast mode
[  198.918273][T13607] tipc: Resetting bearer <eth:syzkaller0>
[  198.922658][T13606] tipc: Resetting bearer <eth:syzkaller0>
[  198.936285][T13606] tipc: Disabling bearer <eth:syzkaller0>
[  199.175313][T13634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  199.207131][T13636] netlink: 'syz.2.3287': attribute type 1 has an invalid length.
[  199.210559][T13636] __nla_validate_parse: 7 callbacks suppressed
[  199.210571][T13636] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3287'.
[  199.216983][T13636] netlink: 'syz.2.3287': attribute type 2 has an invalid length.
[  199.220223][T13636] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3287'.
[  199.365425][T13637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3286'.
[  199.387442][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3291'.
[  199.408529][T13647] net_ratelimit: 33 callbacks suppressed
[  199.408539][T13647] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  199.851347][T13669] lo speed is unknown, defaulting to 1000
[  200.481497][T13696] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3313'.
[  200.486015][T13696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3313'.
[  200.489892][T13696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3313'.
[  200.801859][T13710] netlink: 'syz.0.3315': attribute type 3 has an invalid length.
[  200.943422][T13712] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  201.344880][T13721] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3322'.
[  201.352604][T13722] netlink: 'syz.1.3323': attribute type 1 has an invalid length.
[  201.394929][T13722] 8021q: adding VLAN 0 to HW filter on device bond8
[  201.425961][T13724] vlan0: entered allmulticast mode
[  201.429098][T13724] veth1: entered allmulticast mode
[  201.432620][T13724] bond8: (slave vlan0): Opening slave failed
[  201.783843][T13745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3333'.
[  201.787685][T13745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3333'.
[  202.049402][   T47] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  202.227096][ T5881] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  202.440185][T13794] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  202.496591][T13796] lo speed is unknown, defaulting to 1000
[  202.534022][   T47] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  203.255742][ T5881] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  203.259950][ T5881] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  203.312369][   T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  203.631656][T13861] netlink: 'syz.1.3388': attribute type 1 has an invalid length.
[  203.666355][T13867] C: renamed from lo
[  203.672678][T13867] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  203.739505][T13873] IPv6: sit3: Disabled Multicast RS
[  203.801682][T13879] syzkaller1: entered promiscuous mode
[  203.805804][T13879] syzkaller1: entered allmulticast mode
[  204.025686][T13916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.028514][T13916] syzkaller0: entered promiscuous mode
[  204.030887][T13916] syzkaller0: entered allmulticast mode
[  204.049612][T13916] tipc: Resetting bearer <eth:syzkaller0>
[  204.053152][T13913] tipc: Resetting bearer <eth:syzkaller0>
[  204.067643][T13913] tipc: Disabling bearer <eth:syzkaller0>
[  204.331623][T13940] __nla_validate_parse: 7 callbacks suppressed
[  204.331634][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3427'.
[  205.333171][T13976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3441'.
[  205.374159][T13976] lo speed is unknown, defaulting to 1000
[  205.479496][T13987] netlink: 'syz.1.3444': attribute type 4 has an invalid length.
[  206.615644][   T47] lo speed is unknown, defaulting to 1000
[  206.719172][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'.
[  206.737847][T14025] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  206.747868][T14025] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  206.793682][T14034] 8021q: VLANs not supported on ipvlan1
[  206.928450][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'.
[  206.932756][T14046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.942135][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  207.078709][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3479'.
[  207.610329][T14110] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.643858][T14115] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  207.775180][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3512'.
[  207.884605][T14143] tap0: tun_chr_ioctl cmd 1074025677
[  207.886492][T14143] tap0: linktype set to 0
[  208.457985][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3532'.
[  208.559796][T14183] netlink: 'syz.2.3535': attribute type 1 has an invalid length.
[  208.563605][T14183] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3535'.
[  208.611052][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3537'.
[  208.614289][T14187] netlink: 'syz.2.3537': attribute type 1 has an invalid length.
[  208.661180][T14191] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3539'.
[  209.041129][T14213] netlink: 'syz.2.3547': attribute type 7 has an invalid length.
[  209.079197][T14215] unknown channel width for channel at 909000KHz?
[  209.086928][T14215] unknown channel width for channel at 909000KHz?
[  209.089736][T14215] unknown channel width for channel at 909000KHz?
[  209.206959][T14233] netlink: 'syz.0.3555': attribute type 5 has an invalid length.
[  209.218074][T14230] 8021q: adding VLAN 0 to HW filter on device bond9
[  209.222793][T14230] team0: Port device bond9 added
[  209.343290][T14247] netlink: 'syz.1.3561': attribute type 7 has an invalid length.
[  209.346654][T14247] netlink: 'syz.1.3561': attribute type 3 has an invalid length.
[  209.349160][T14247] __nla_validate_parse: 3 callbacks suppressed
[  209.349167][T14247] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3561'.
[  209.439442][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  209.452468][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  209.457761][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  209.461455][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.810089][T14278] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3574'.
[  209.918855][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'.
[  209.936514][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'.
[  209.948664][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3577'.
[  209.951498][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3577'.
[  209.956748][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3577'.
[  209.959907][T14285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3577'.
[  209.964285][T14285] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3577'.
[  210.082451][T14294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3577'.
[  210.290684][T14309] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  211.291036][T14377] netlink: zone id is out of range
[  211.690935][T14392] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.950717][T14416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.206498][T14441] delete_channel: no stack
[  212.330251][T14455] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  212.429846][T14467] lo speed is unknown, defaulting to 1000
[  213.594071][T14524] netlink: 'syz.0.3689': attribute type 17 has an invalid length.
[  214.212184][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  214.267569][T14577] team0 (unregistering): Port device bond9 removed
[  215.599791][T14630] __nla_validate_parse: 12 callbacks suppressed
[  215.599805][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'.
[  215.747983][T14634] TCP: TCP_TX_DELAY enabled
[  216.376196][T14684] netlink: 'syz.1.3762': attribute type 3 has an invalid length.
[  216.437258][T14688] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  216.444314][T14688] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  216.494064][T14693] netlink: 'syz.0.3761': attribute type 10 has an invalid length.
[  216.512364][   T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  216.515258][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3765'.
[  216.558862][T14683] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  216.563117][T14683] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  216.587470][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3768'.
[  216.591771][T14703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3768'.
[  216.762602][   T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  217.266565][T14784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3807'.
[  217.293312][T14784] lo speed is unknown, defaulting to 1000
[  217.310050][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'.
[  217.321394][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3809'.
[  217.347448][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3810'.
[  217.630360][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'.
[  217.634187][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3818'.
[  217.659463][T14806] syzkaller0: tun_chr_ioctl cmd 1074025677
[  217.663569][T14806] syzkaller0: linktype set to 1
[  219.308902][T14929] lo speed is unknown, defaulting to 1000
[  219.403567][T14929] netlink: 'syz.1.3871': attribute type 13 has an invalid length.
[  219.406597][T14929] netlink: 'syz.1.3871': attribute type 17 has an invalid length.
[  219.421261][T14929] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  220.685823][T14983] __nla_validate_parse: 9 callbacks suppressed
[  220.685838][T14983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3892'.
[  220.768566][T14992] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  220.817871][T14997] gtp0: left promiscuous mode
[  220.819457][T14997] gtp0: left allmulticast mode
[  220.821341][T14997] gretap2: left promiscuous mode
[  220.834656][T14997] gretap3: left promiscuous mode
[  220.836446][T14997] veth3: left promiscuous mode
[  220.842869][T14997] bond0: left promiscuous mode
[  220.851266][T14997] gtp2: left promiscuous mode
[  220.854452][T14997] gtp2: left allmulticast mode
[  220.858940][T14997] bond4: left promiscuous mode
[  220.861897][T14997] bridge4: left allmulticast mode
[  220.874102][T14997] veth9: left promiscuous mode
[  220.896483][T14500] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.899976][T14500] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.925473][T14500] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  220.928687][T14500] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  221.088903][T15018] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  221.172221][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  221.236369][T15024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3908'.
[  221.239492][T15024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3908'.
[  221.247387][T15024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3908'.
[  221.250520][T15024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3908'.
[  221.291083][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'.
[  221.297418][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'.
[  221.301722][T15030] netlink: 'syz.1.3912': attribute type 21 has an invalid length.
[  221.303085][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'.
[  221.308349][T15030] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3912'.
[  221.310900][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'.
[  222.051235][T15115] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  222.064064][T15116] netlink: 'syz.2.3947': attribute type 4 has an invalid length.
[  224.178440][T15258] macsec2: entered promiscuous mode
[  224.180295][T15258] ip6gretap0: entered promiscuous mode
[  224.187727][T15258] macsec2: entered allmulticast mode
[  224.190086][T15258] ip6gretap0: entered allmulticast mode
[  224.227389][T15264] netlink: 'syz.1.4015': attribute type 1 has an invalid length.
[  224.230919][T15264] netlink: 'syz.1.4015': attribute type 2 has an invalid length.
[  224.656264][T15305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  225.453875][T15360] gretap0: entered promiscuous mode
[  225.464943][T15360] gretap0: left promiscuous mode
[  225.488226][T15362] syzkaller0: entered promiscuous mode
[  225.490496][T15362] syzkaller0: entered allmulticast mode
[  225.495250][T15362] syzkaller0: tun_chr_ioctl cmd 1074025677
[  225.497782][T15362] syzkaller0: Linktype set failed because interface is up
[  226.002355][T15401] nbd1: detected capacity change from 0 to 63
[  226.006422][T15404] block nbd1: NBD_DISCONNECT
[  226.008651][T15404] block nbd1: Disconnected due to user request.
[  226.012249][T15404] block nbd1: shutting down sockets
[  226.017234][    C1] blk_print_req_error: 136 callbacks suppressed
[  226.017294][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.023855][    C1] buffer_io_error: 138 callbacks suppressed
[  226.023867][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  226.029776][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.033648][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  226.036962][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.040643][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  226.043918][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.047736][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  226.051184][T15214] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.055041][T15214] Buffer I/O error on dev nbd1, logical block 0, async page read
[  226.058296][T15214] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.068080][T15214] Buffer I/O error on dev nbd1, logical block 1, async page read
[  226.071339][T15214] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.080995][T15214] Buffer I/O error on dev nbd1, logical block 2, async page read
[  226.085425][T15214] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.099685][T15214] Buffer I/O error on dev nbd1, logical block 3, async page read
[  226.123463][T15214] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.140154][T15214] Buffer I/O error on dev nbd1, logical block 0, async page read
[  226.145362][T15214] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.157847][T15214] Buffer I/O error on dev nbd1, logical block 1, async page read
[  226.174916][T15214] ldm_validate_partition_table(): Disk read failed.
[  226.186236][T15214] Dev nbd1: unable to read RDB block 0
[  226.196287][T15214]  nbd1: unable to read partition table
[  226.210424][T15214] ldm_validate_partition_table(): Disk read failed.
[  226.219576][T15214] Dev nbd1: unable to read RDB block 0
[  226.227659][T15214]  nbd1: unable to read partition table
[  226.661479][T15437] netlink: 'syz.0.4090': attribute type 1 has an invalid length.
[  226.665414][T15437] netlink: 'syz.0.4090': attribute type 2 has an invalid length.
[  226.823396][T15451] __nla_validate_parse: 14 callbacks suppressed
[  226.823412][T15451] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4097'.
[  226.980715][T15464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4103'.
[  227.128198][T15480] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4111'.
[  227.273254][T15493] nbd: socks must be embedded in a SOCK_ITEM attr
[  227.276716][T15493] block nbd0: shutting down sockets
[  227.402720][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'.
[  227.406118][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4121'.
[  227.425679][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4121'.
[  227.429483][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4121'.
[  227.449242][T15511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4125'.
[  227.449620][T15503] openvswitch: netlink: Multiple metadata blocks provided
[  227.560079][T15515] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4128'.
[  227.662175][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  228.086972][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4145'.
[  228.376932][T15590] netlink: 'syz.2.4163': attribute type 16 has an invalid length.
[  228.505696][T15599] netlink: 'syz.1.4167': attribute type 21 has an invalid length.
[  228.509406][T15599] netlink: 'syz.1.4167': attribute type 22 has an invalid length.
[  228.513305][T15599] netlink: 'syz.1.4167': attribute type 23 has an invalid length.
[  228.935577][T15637] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  229.186349][T15652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.670775][T15678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  229.696420][T15680] netlink: 'syz.0.4204': attribute type 1 has an invalid length.
[  229.851798][T15688] sctp: [Deprecated]: syz.1.4203 (pid 15688) Use of struct sctp_assoc_value in delayed_ack socket option.
[  229.851798][T15688] Use struct sctp_sack_info instead
[  229.964042][T15698] netlink: 'syz.0.4212': attribute type 2 has an invalid length.
[  230.320034][T15716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.325152][T15716] syzkaller0: entered promiscuous mode
[  230.327292][T15716] syzkaller0: entered allmulticast mode
[  230.352640][T15716] tipc: Resetting bearer <eth:syzkaller0>
[  230.356670][T15715] tipc: Resetting bearer <eth:syzkaller0>
[  230.370327][T15715] tipc: Disabling bearer <eth:syzkaller0>
[  230.496708][T15726] Unsupported ieee802154 address type: 0
[  230.916266][T15766] netlink: 'syz.1.4241': attribute type 2 has an invalid length.
[  230.921073][T15765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.929371][T15761] lo speed is unknown, defaulting to 1000
[  230.937656][T15757] tipc: Resetting bearer <eth:syzkaller0>
[  230.950417][T15757] tipc: Disabling bearer <eth:syzkaller0>
[  231.021938][T15771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.029527][T15771] syzkaller0: entered promiscuous mode
[  231.032779][T15771] syzkaller0: entered allmulticast mode
[  231.056555][T15771] tipc: Resetting bearer <eth:syzkaller0>
[  231.118459][T15770] tipc: Resetting bearer <eth:syzkaller0>
[  231.141407][T15770] tipc: Disabling bearer <eth:syzkaller0>
[  231.584860][T15819] netlink: 'syz.0.4266': attribute type 15 has an invalid length.
[  231.588061][T15819] netlink: 'syz.0.4266': attribute type 18 has an invalid length.
[  231.730883][T15836] netlink: 'syz.0.4274': attribute type 1 has an invalid length.
[  232.024090][T15862] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  232.105627][T15877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.110783][T15877] syzkaller0: entered promiscuous mode
[  232.113294][T15877] syzkaller0: entered allmulticast mode
[  232.124892][T15877] tipc: Resetting bearer <eth:syzkaller0>
[  232.127504][T15875] tipc: Resetting bearer <eth:syzkaller0>
[  232.137489][T15875] tipc: Disabling bearer <eth:syzkaller0>
[  232.216728][T15883] __nla_validate_parse: 11 callbacks suppressed
[  232.216744][T15883] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4294'.
[  232.454936][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4303'.
[  232.637194][T15917] team0: Port device gtp0 added
[  232.974499][T15945] tipc: Invalid UDP bearer configuration
[  232.974544][T15945] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  233.265997][T15975] ==================================================================
[  233.269144][T15975] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  233.272087][T15975] Read of size 4 at addr ffff888107388e44 by task syz.1.4338/15975
[  233.276019][T15975] 
[  233.276985][T15975] CPU: 1 UID: 0 PID: 15975 Comm: syz.1.4338 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  233.276999][T15975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.277005][T15975] Call Trace:
[  233.277011][T15975]  <TASK>
[  233.277017][T15975]  dump_stack_lvl+0x189/0x250
[  233.277033][T15975]  ? __kasan_check_byte+0x12/0x40
[  233.277049][T15975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.277060][T15975]  ? lock_release+0x4b/0x3e0
[  233.277075][T15975]  ? __virt_addr_valid+0x4a5/0x5c0
[  233.277089][T15975]  print_report+0xca/0x240
[  233.277105][T15975]  ? xfrm_alloc_spi+0x570/0xf30
[  233.277121][T15975]  kasan_report+0x118/0x150
[  233.277135][T15975]  ? xfrm_alloc_spi+0x570/0xf30
[  233.277151][T15975]  xfrm_alloc_spi+0x570/0xf30
[  233.277165][T15975]  ? xfrm_alloc_spi+0x2a0/0xf30
[  233.277182][T15975]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  233.277195][T15975]  ? xfrm_find_acq+0x87/0xa0
[  233.277210][T15975]  xfrm_alloc_userspi+0x70b/0xc90
[  233.277220][T15975]  ? __pfx_aa_get_newest_label+0x10/0x10
[  233.277233][T15975]  ? apparmor_capable+0x137/0x1b0
[  233.277246][T15975]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  233.277256][T15975]  ? __nla_parse+0x40/0x60
[  233.277271][T15975]  xfrm_user_rcv_msg+0x7a3/0xab0
[  233.277288][T15975]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  233.277311][T15975]  ? __pfx___mutex_trylock_common+0x10/0x10
[  233.277328][T15975]  ? rcu_is_watching+0x15/0xb0
[  233.277343][T15975]  ? trace_contention_end+0x39/0x120
[  233.277352][T15975]  ? __mutex_lock+0x335/0x1340
[  233.277366][T15975]  netlink_rcv_skb+0x208/0x470
[  233.277378][T15975]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  233.277393][T15975]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  233.277408][T15975]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.277419][T15975]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.277430][T15975]  xfrm_netlink_rcv+0x79/0x90
[  233.277445][T15975]  netlink_unicast+0x82f/0x9e0
[  233.277457][T15975]  ? __pfx_netlink_unicast+0x10/0x10
[  233.277468][T15975]  ? netlink_sendmsg+0x642/0xb30
[  233.277480][T15975]  ? skb_put+0x11b/0x210
[  233.277495][T15975]  netlink_sendmsg+0x805/0xb30
[  233.277510][T15975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.277522][T15975]  ? aa_sock_msg_perm+0x94/0x160
[  233.277533][T15975]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  233.277542][T15975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.277554][T15975]  __sock_sendmsg+0x21c/0x270
[  233.277565][T15975]  ____sys_sendmsg+0x505/0x830
[  233.277579][T15975]  ? __pfx_____sys_sendmsg+0x10/0x10
[  233.277595][T15975]  ? import_iovec+0x74/0xa0
[  233.277607][T15975]  ___sys_sendmsg+0x21f/0x2a0
[  233.277621][T15975]  ? __pfx____sys_sendmsg+0x10/0x10
[  233.277643][T15975]  ? __fget_files+0x2a/0x420
[  233.277655][T15975]  ? __fget_files+0x3a0/0x420
[  233.277669][T15975]  __x64_sys_sendmsg+0x19b/0x260
[  233.277683][T15975]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  233.277699][T15975]  ? rcu_is_watching+0x15/0xb0
[  233.277714][T15975]  ? do_syscall_64+0xbe/0x3b0
[  233.277727][T15975]  do_syscall_64+0xfa/0x3b0
[  233.277738][T15975]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.277748][T15975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.277758][T15975]  ? exc_page_fault+0x9f/0xf0
[  233.277768][T15975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.277778][T15975] RIP: 0033:0x7f7579d8ebe9
[  233.277789][T15975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.277798][T15975] RSP: 002b:00007f757abbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.277810][T15975] RAX: ffffffffffffffda RBX: 00007f7579fb5fa0 RCX: 00007f7579d8ebe9
[  233.277817][T15975] RDX: 000000000400c014 RSI: 0000200000000340 RDI: 0000000000000003
[  233.277854][T15975] RBP: 00007f7579e11e19 R08: 0000000000000000 R09: 0000000000000000
[  233.277862][T15975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.277869][T15975] R13: 00007f7579fb6038 R14: 00007f7579fb5fa0 R15: 00007ffd8a2d9a98
[  233.277882][T15975]  </TASK>
[  233.277886][T15975] 
[  233.426345][T15975] Allocated by task 9849:
[  233.428051][T15975]  kasan_save_track+0x3e/0x80
[  233.429949][T15975]  __kasan_slab_alloc+0x6c/0x80
[  233.431902][T15975]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  233.434065][T15975]  xfrm_state_alloc+0x24/0x2f0
[  233.435894][T15975]  __find_acq_core+0x8a7/0x1c00
[  233.437711][T15975]  xfrm_find_acq+0x78/0xa0
[  233.439416][T15975]  xfrm_alloc_userspi+0x6b3/0xc90
[  233.441306][T15975]  xfrm_user_rcv_msg+0x7a3/0xab0
[  233.443182][T15975]  netlink_rcv_skb+0x208/0x470
[  233.445016][T15975]  xfrm_netlink_rcv+0x79/0x90
[  233.446798][T15975]  netlink_unicast+0x82f/0x9e0
[  233.448621][T15975]  netlink_sendmsg+0x805/0xb30
[  233.450450][T15975]  __sock_sendmsg+0x21c/0x270
[  233.452243][T15975]  ____sys_sendmsg+0x505/0x830
[  233.454039][T15975]  ___sys_sendmsg+0x21f/0x2a0
[  233.455815][T15975]  __x64_sys_sendmsg+0x19b/0x260
[  233.457707][T15975]  do_syscall_64+0xfa/0x3b0
[  233.459417][T15975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.461686][T15975] 
[  233.462630][T15975] Freed by task 5923:
[  233.464160][T15975]  kasan_save_track+0x3e/0x80
[  233.465968][T15975]  kasan_save_free_info+0x46/0x50
[  233.467928][T15975]  __kasan_slab_free+0x62/0x70
[  233.469785][T15975]  kmem_cache_free+0x18f/0x400
[  233.471706][T15975]  xfrm_state_gc_task+0x52d/0x6b0
[  233.473669][T15975]  process_scheduled_works+0xae1/0x17b0
[  233.475753][T15975]  worker_thread+0x8a0/0xda0
[  233.477550][T15975]  kthread+0x711/0x8a0
[  233.479172][T15975]  ret_from_fork+0x3fc/0x770
[  233.480951][T15975]  ret_from_fork_asm+0x1a/0x30
[  233.482791][T15975] 
[  233.483751][T15975] The buggy address belongs to the object at ffff888107388d80
[  233.483751][T15975]  which belongs to the cache xfrm_state of size 928
[  233.489001][T15975] The buggy address is located 196 bytes inside of
[  233.489001][T15975]  freed 928-byte region [ffff888107388d80, ffff888107389120)
[  233.494295][T15975] 
[  233.495247][T15975] The buggy address belongs to the physical page:
[  233.497674][T15975] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888107389200 pfn:0x107388
[  233.501567][T15975] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  233.504812][T15975] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  233.508038][T15975] page_type: f5(slab)
[  233.509583][T15975] raw: 057ff00000000240 ffff888104f36780 ffffea00044fff10 ffffea000441ef10
[  233.512879][T15975] raw: ffff888107389200 00000000000e0003 00000000f5000000 0000000000000000
[  233.516140][T15975] head: 057ff00000000240 ffff888104f36780 ffffea00044fff10 ffffea000441ef10
[  233.519409][T15975] head: ffff888107389200 00000000000e0003 00000000f5000000 0000000000000000
[  233.522666][T15975] head: 057ff00000000002 ffffea00041ce201 00000000ffffffff 00000000ffffffff
[  233.525935][T15975] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  233.529280][T15975] page dumped because: kasan: bad access detected
[  233.531723][T15975] page_owner tracks the page as allocated
[  233.533879][T15975] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7605, tgid 7604 (syz.2.732), ts 100809530857, free_ts 96349211815
[  233.540897][T15975]  post_alloc_hook+0x240/0x2a0
[  233.542756][T15975]  get_page_from_freelist+0x21e4/0x22c0
[  233.544851][T15975]  __alloc_frozen_pages_noprof+0x181/0x370
[  233.547046][T15975]  alloc_pages_mpol+0x232/0x4a0
[  233.548954][T15975]  allocate_slab+0x8a/0x370
[  233.550698][T15975]  ___slab_alloc+0xbeb/0x1410
[  233.552580][T15975]  kmem_cache_alloc_noprof+0x283/0x3c0
[  233.554663][T15975]  xfrm_state_alloc+0x24/0x2f0
[  233.556493][T15975]  xfrm_state_find+0x37d4/0x5400
[  233.558467][T15975]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  233.560804][T15975]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  233.562936][T15975]  xfrm_lookup_route+0x3c/0x1c0
[  233.564814][T15975]  udp_sendmsg+0x142e/0x2170
[  233.566647][T15975]  __sock_sendmsg+0x19c/0x270
[  233.568503][T15975]  ____sys_sendmsg+0x52d/0x830
[  233.570473][T15975]  ___sys_sendmsg+0x21f/0x2a0
[  233.572310][T15975] page last free pid 5862 tgid 5862 stack trace:
[  233.574790][T15975]  __free_frozen_pages+0xc71/0xe70
[  233.576793][T15975]  __slab_free+0x303/0x3c0
[  233.578544][T15975]  qlist_free_all+0x97/0x140
[  233.580348][T15975]  kasan_quarantine_reduce+0x148/0x160
[  233.582416][T15975]  __kasan_slab_alloc+0x22/0x80
[  233.584306][T15975]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  233.586382][T15975]  vm_area_dup+0x2b/0x680
[  233.588058][T15975]  dup_mmap+0x90c/0x1ac0
[  233.589724][T15975]  copy_mm+0x13c/0x4b0
[  233.591342][T15975]  copy_process+0x1706/0x3c00
[  233.593146][T15975]  kernel_clone+0x21e/0x840
[  233.594928][T15975]  __x64_sys_clone+0x18b/0x1e0
[  233.596846][T15975]  do_syscall_64+0xfa/0x3b0
[  233.598649][T15975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.600928][T15975] 
[  233.601878][T15975] Memory state around the buggy address:
[  233.604045][T15975]  ffff888107388d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  233.607178][T15975]  ffff888107388d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.610341][T15975] >ffff888107388e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.613370][T15975]                                            ^
[  233.615692][T15975]  ffff888107388e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.618796][T15975]  ffff888107388f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.621898][T15975] ==================================================================
[  233.625359][T15975] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  233.628520][T15975] CPU: 1 UID: 0 PID: 15975 Comm: syz.1.4338 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  233.633208][T15975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.637047][T15975] Call Trace:
[  233.638357][T15975]  <TASK>
[  233.639533][T15975]  dump_stack_lvl+0x99/0x250
[  233.641320][T15975]  ? __asan_memcpy+0x40/0x70
[  233.643151][T15975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.645251][T15975]  ? __pfx__printk+0x10/0x10
[  233.647087][T15975]  vpanic+0x27a/0x730
[  233.648649][T15975]  ? __pfx_vpanic+0x10/0x10
[  233.650475][T15975]  ? irqentry_exit+0x74/0x90
[  233.652290][T15975]  panic+0xb9/0xc0
[  233.653716][T15975]  ? __pfx_panic+0x10/0x10
[  233.655511][T15975]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  233.657874][T15975]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.660193][T15975]  ? xfrm_alloc_spi+0x570/0xf30
[  233.662072][T15975]  check_panic_on_warn+0x89/0xb0
[  233.663964][T15975]  ? xfrm_alloc_spi+0x570/0xf30
[  233.665872][T15975]  end_report+0x78/0x160
[  233.667585][T15975]  kasan_report+0x129/0x150
[  233.669347][T15975]  ? xfrm_alloc_spi+0x570/0xf30
[  233.671225][T15975]  xfrm_alloc_spi+0x570/0xf30
[  233.673069][T15975]  ? xfrm_alloc_spi+0x2a0/0xf30
[  233.674988][T15975]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  233.677002][T15975]  ? xfrm_find_acq+0x87/0xa0
[  233.678816][T15975]  xfrm_alloc_userspi+0x70b/0xc90
[  233.680754][T15975]  ? __pfx_aa_get_newest_label+0x10/0x10
[  233.683011][T15975]  ? apparmor_capable+0x137/0x1b0
[  233.685063][T15975]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  233.687199][T15975]  ? __nla_parse+0x40/0x60
[  233.688935][T15975]  xfrm_user_rcv_msg+0x7a3/0xab0
[  233.690798][T15975]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  233.692881][T15975]  ? __pfx___mutex_trylock_common+0x10/0x10
[  233.695149][T15975]  ? rcu_is_watching+0x15/0xb0
[  233.697013][T15975]  ? trace_contention_end+0x39/0x120
[  233.699078][T15975]  ? __mutex_lock+0x335/0x1340
[  233.700938][T15975]  netlink_rcv_skb+0x208/0x470
[  233.702808][T15975]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  233.704938][T15975]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  233.706952][T15975]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.708992][T15975]  ? netlink_deliver_tap+0x2e/0x1b0
[  233.711030][T15975]  xfrm_netlink_rcv+0x79/0x90
[  233.712903][T15975]  netlink_unicast+0x82f/0x9e0
[  233.714787][T15975]  ? __pfx_netlink_unicast+0x10/0x10
[  233.716847][T15975]  ? netlink_sendmsg+0x642/0xb30
[  233.718721][T15975]  ? skb_put+0x11b/0x210
[  233.720349][T15975]  netlink_sendmsg+0x805/0xb30
[  233.722338][T15975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.724546][T15975]  ? aa_sock_msg_perm+0x94/0x160
[  233.726560][T15975]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  233.728674][T15975]  ? __pfx_netlink_sendmsg+0x10/0x10
[  233.730780][T15975]  __sock_sendmsg+0x21c/0x270
[  233.732643][T15975]  ____sys_sendmsg+0x505/0x830
[  233.734503][T15975]  ? __pfx_____sys_sendmsg+0x10/0x10
[  233.736547][T15975]  ? import_iovec+0x74/0xa0
[  233.738314][T15975]  ___sys_sendmsg+0x21f/0x2a0
[  233.740169][T15975]  ? __pfx____sys_sendmsg+0x10/0x10
[  233.742219][T15975]  ? __fget_files+0x2a/0x420
[  233.744037][T15975]  ? __fget_files+0x3a0/0x420
[  233.745887][T15975]  __x64_sys_sendmsg+0x19b/0x260
[  233.747896][T15975]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  233.749983][T15975]  ? rcu_is_watching+0x15/0xb0
[  233.751844][T15975]  ? do_syscall_64+0xbe/0x3b0
[  233.753657][T15975]  do_syscall_64+0xfa/0x3b0
[  233.755448][T15975]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.757485][T15975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.759873][T15975]  ? exc_page_fault+0x9f/0xf0
[  233.761698][T15975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.764077][T15975] RIP: 0033:0x7f7579d8ebe9
[  233.765929][T15975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.773328][T15975] RSP: 002b:00007f757abbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  233.776631][T15975] RAX: ffffffffffffffda RBX: 00007f7579fb5fa0 RCX: 00007f7579d8ebe9
[  233.779648][T15975] RDX: 000000000400c014 RSI: 0000200000000340 RDI: 0000000000000003
[  233.782647][T15975] RBP: 00007f7579e11e19 R08: 0000000000000000 R09: 0000000000000000
[  233.785708][T15975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.788873][T15975] R13: 00007f7579fb6038 R14: 00007f7579fb5fa0 R15: 00007ffd8a2d9a98
[  233.791942][T15975]  </TASK>
[  233.793942][T15975] Kernel Offset: disabled
[  233.795640][T15975] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:29:18  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffd4000148c89 RBX=ffffc9000325f790 RCX=ffff888108441cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffc9000325f6c0
R8 =ffffc9000325f790 R9 =0000000093d21e0d R10=000000000000000b R11=ffffffff81ac10b0
R12=ffffea0000a46448 R13=0000000000000000 R14=ffffea0000000000 R15=0000000000a46440
RIP=ffffffff822a8eae RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557f622500 ffffffff 00c00000
GS =0000 ffff8880b8679000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4bd28e56c0 CR3=0000000110246000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4bd1c12e53
XMM06=0000000000000000 00007f4bd1c12e4d XMM07=0000000000000000 00007f4bd1c12e61
XMM08=0000000000000000 00007f4bd1c12ee7 XMM09=0000000000000000 00007f4bd1c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33b4060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001327 RDI=0000000000001328 RBP=ffffffff99da0730 RSP=ffffc900062be990
R8 =ffff8880206a8237 R9 =1ffff110040d5046 R10=dffffc0000000000 R11=ffffffff854bde30
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99da04a0 R15=0000000000000000
RIP=ffffffff854bdea7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f757abbf6c0 ffffffff 00c00000
GS =0000 ffff8881a3c79000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000340 CR3=000000010ec3a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7579f87498 00007f7579f87470 XMM03=00007f7579f874a8 00007f7579f874a0
XMM04=00007f757aaed100 00007f7579f87460 XMM05=00007f7579f87478 00007f7579f874c0
XMM06=00007f7579f874b8 00007f7579f874b0 XMM07=00007f7579f874a8 00007f7579f874a0
XMM08=0000000000000000 00007f7579e12ee7 XMM09=0000000000000000 00007f7579e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
