last executing test programs:

549.748349ms ago: executing program 2 (id=3286):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000440)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x805}, 0x40805)

506.212463ms ago: executing program 2 (id=3288):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0)

459.777288ms ago: executing program 2 (id=3290):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="00010000010a0101"], 0x100}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

338.398873ms ago: executing program 1 (id=3295):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000004000a0002"], 0x28}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @remote}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xe, {0x2, 0x0, @multicast1=0xe000cc02}})
sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x6, 0x3, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg2\x00', <r5=>0x0})
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000003c0)=r5)
r6 = socket(0x1e, 0x4, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x1e, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b8200400", @ANYRES32=r8], 0x38}, 0x1, 0x300}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, 0x0)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r10, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
getsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, 0x0, &(0x7f0000000180))
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x9404a089beb68200, &(0x7f0000000340)=0x9, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94)

287.159977ms ago: executing program 1 (id=3297):
syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0)

285.861189ms ago: executing program 1 (id=3299):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
getsockopt(r0, 0x6, 0x1a, 0x0, 0x0)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x160)

209.440835ms ago: executing program 1 (id=3301):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001780)={r1, 0x0, 0x0}, 0x10)

209.021457ms ago: executing program 1 (id=3303):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94)

160.011269ms ago: executing program 1 (id=3304):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c)
accept$inet6(r0, 0x0, 0x0)

108.962274ms ago: executing program 2 (id=3310):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000002880)=0x3, 0x4)

60.016064ms ago: executing program 2 (id=3312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x4040840)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000580), &(0x7f0000000200)=""/28}, 0x20)
ppoll(&(0x7f00000000c0)=[{r5, 0x13108}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4)
listen(r5, 0x8)
socket(0x1e, 0xa, 0x3)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20)
recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0)
recvfrom$inet6(r1, &(0x7f00000000c0)=""/53, 0x35, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40800)

59.827672ms ago: executing program 0 (id=3313):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001d80)={{{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x78, 0x4e21, 0x0, 0x0, 0x0, 0x20, 0x6}, {0x8, 0x66, 0x400, 0x0, 0x5, 0x7, 0x851d}, {0xff, 0x100000001, 0x8, 0x9}, 0xe874, 0x6e6bb5, 0x0, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d6, 0xd5}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3504, 0x3, 0x1, 0x4e, 0x9, 0x6}}, 0xe8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

59.740548ms ago: executing program 0 (id=3314):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140100001800010029bd7000fbdbdf2580"], 0x114}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

59.146616ms ago: executing program 0 (id=3315):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004040000e27f000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380), 0x5, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000440)=""/12, 0x2}, 0x20)

58.201336ms ago: executing program 0 (id=3316):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7})
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)

178.593µs ago: executing program 0 (id=3317):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x800)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}], 0x1}, 0x40000000)

49.942µs ago: executing program 2 (id=3318):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)

0s ago: executing program 0 (id=3319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x78, 0xfffff028}, {0x6, 0x25, 0x4, 0x207}]}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64783' (ED25519) to the list of known hosts.
syzkaller login: [   41.513100][ T5791] cgroup: Unknown subsys name 'net'
[   41.574807][ T5791] cgroup: Unknown subsys name 'cpuset'
[   41.579156][ T5791] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.744692][ T5791] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.439874][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.451429][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.454086][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.457208][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.459815][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.502054][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.504977][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.507856][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.511524][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.515228][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.518723][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.543733][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.547005][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.549978][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.553143][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.625215][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   45.705214][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.708120][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.711069][ T5845] bridge_slave_0: entered allmulticast mode
[   45.714834][ T5845] bridge_slave_0: entered promiscuous mode
[   45.719417][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.722715][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.725566][ T5845] bridge_slave_1: entered allmulticast mode
[   45.728715][ T5845] bridge_slave_1: entered promiscuous mode
[   45.735416][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   45.772544][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.796058][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.833831][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.836755][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.839773][ T5850] bridge_slave_0: entered allmulticast mode
[   45.844353][ T5850] bridge_slave_0: entered promiscuous mode
[   45.853935][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   45.859678][ T5845] team0: Port device team_slave_0 added
[   45.862454][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.865236][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.868210][ T5850] bridge_slave_1: entered allmulticast mode
[   45.871770][ T5850] bridge_slave_1: entered promiscuous mode
[   45.878534][ T5845] team0: Port device team_slave_1 added
[   45.908836][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.911827][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.920219][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.925039][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.935320][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.937539][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.946807][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.953715][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.986769][ T5845] hsr_slave_0: entered promiscuous mode
[   45.989046][ T5845] hsr_slave_1: entered promiscuous mode
[   45.992474][ T5850] team0: Port device team_slave_0 added
[   46.002615][ T5850] team0: Port device team_slave_1 added
[   46.021664][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.024697][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.027598][ T5852] bridge_slave_0: entered allmulticast mode
[   46.030024][ T5852] bridge_slave_0: entered promiscuous mode
[   46.037687][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.040013][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.048784][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.058077][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.061042][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.064505][ T5852] bridge_slave_1: entered allmulticast mode
[   46.067597][ T5852] bridge_slave_1: entered promiscuous mode
[   46.070728][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.073245][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.082104][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.103481][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.108683][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.125749][ T5850] hsr_slave_0: entered promiscuous mode
[   46.127963][ T5850] hsr_slave_1: entered promiscuous mode
[   46.130344][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   46.132815][ T5850] Cannot create hsr debugfs directory
[   46.151136][ T5852] team0: Port device team_slave_0 added
[   46.162276][ T5852] team0: Port device team_slave_1 added
[   46.183355][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.185914][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.196126][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.201764][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.204087][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.213080][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.247654][ T5852] hsr_slave_0: entered promiscuous mode
[   46.249900][ T5852] hsr_slave_1: entered promiscuous mode
[   46.253199][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   46.255146][ T5852] Cannot create hsr debugfs directory
[   46.284952][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.295517][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.308459][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.314908][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.359881][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.366528][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.369379][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.372549][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.375419][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.380626][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.387237][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.399851][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.414273][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.417703][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.424346][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.428784][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.445968][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.448932][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.452009][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.454899][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.466503][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.469365][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.472281][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.475029][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.492005][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.505820][ T4070] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.509116][ T4070] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.513859][ T4070] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.517080][ T4070] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.521190][ T4070] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.525675][ T4070] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.535673][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   46.551163][ T4070] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.554241][ T4070] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.558073][ T4070] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.561084][ T4070] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.573091][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.590827][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   46.599514][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.615000][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.617947][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.629037][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   46.633907][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.636902][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.650338][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.653463][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.672485][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.675554][ T4049] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.709935][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.715270][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.765560][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.788443][ T5845] veth0_vlan: entered promiscuous mode
[   46.798788][ T5845] veth1_vlan: entered promiscuous mode
[   46.809197][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.820005][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.830090][ T5845] veth0_macvtap: entered promiscuous mode
[   46.836036][ T5845] veth1_macvtap: entered promiscuous mode
[   46.849841][ T5850] veth0_vlan: entered promiscuous mode
[   46.858191][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.867417][ T5850] veth1_vlan: entered promiscuous mode
[   46.874332][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.886123][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.889764][ T5852] veth0_vlan: entered promiscuous mode
[   46.895953][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.903748][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.909010][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.916439][ T5852] veth1_vlan: entered promiscuous mode
[   46.929590][ T5850] veth0_macvtap: entered promiscuous mode
[   46.934216][ T5850] veth1_macvtap: entered promiscuous mode
[   46.951196][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.957552][ T5852] veth0_macvtap: entered promiscuous mode
[   46.964639][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.969380][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.976150][ T5852] veth1_macvtap: entered promiscuous mode
[   46.979548][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.983068][ T5709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.994918][ T5709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.998130][ T5709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.001077][ T5709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.013019][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.015067][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.018344][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.025968][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.046079][ T5709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.049705][ T5709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.057435][ T4049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.060406][ T4049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.065128][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.075022][ T5709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.078755][ T5709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.120722][ T4070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.126724][ T4070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.146085][ T4070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.149127][ T4070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.178495][ T4049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.182777][ T4049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.253063][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[   47.258075][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[   47.263659][ T5926] Zero length message leads to an empty skb
[   47.286089][ T5928] tipc: Started in network mode
[   47.288341][ T5928] tipc: Node identity 7a6517b7e0a7, cluster identity 4711
[   47.294990][ T5928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.307726][ T5928] syzkaller0: entered promiscuous mode
[   47.309842][ T5928] syzkaller0: entered allmulticast mode
[   47.317270][ T5928] tipc: Resetting bearer <eth:syzkaller0>
[   47.319942][ T5927] tipc: Resetting bearer <eth:syzkaller0>
[   47.325759][ T5927] tipc: Disabling bearer <eth:syzkaller0>
[   47.366095][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   47.481503][ T5854] Bluetooth: hci0: command tx timeout
[   47.571495][ T5954] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET)
[   47.572050][ T5854] Bluetooth: hci2: command tx timeout
[   47.576419][ T5847] Bluetooth: hci1: command tx timeout
[   47.708495][ T5969] bridge_slave_0: left allmulticast mode
[   47.721678][ T5969] bridge_slave_0: left promiscuous mode
[   47.725889][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.734616][ T5969] bridge_slave_1: left allmulticast mode
[   47.737066][ T5969] bridge_slave_1: left promiscuous mode
[   47.737725][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'.
[   47.739431][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.762138][ T5969] bond0: (slave bond_slave_0): Releasing backup interface
[   47.767841][ T5969] bond0: (slave bond_slave_1): Releasing backup interface
[   47.775525][ T5969] team0: Port device team_slave_0 removed
[   47.780531][ T5969] team0: Port device team_slave_1 removed
[   47.790828][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.794930][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.799048][ T5969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.804185][ T5969] batman_adv: batadv0: Removing interface: batadv_slave_1
[   48.413011][ T6049] netlink: 52 bytes leftover after parsing attributes in process `syz.1.51'.
[   48.498167][ T6064] netlink: 'syz.2.56': attribute type 1 has an invalid length.
[   48.619769][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'.
[   48.828886][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.904576][ T6118] Illegal XDP return value 342161336 on prog  (id 13) dev N/A, expect packet loss!
[   48.911168][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'.
[   48.951472][ T6127] warning: `syz.1.78' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.973485][ T6129] tipc: Started in network mode
[   48.975360][ T6129] tipc: Node identity 9a3861f0f7d4, cluster identity 4711
[   48.978236][ T6129] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.980917][ T6129] syzkaller0: entered promiscuous mode
[   48.983136][ T6129] syzkaller0: entered allmulticast mode
[   48.996362][ T6129] tipc: Resetting bearer <eth:syzkaller0>
[   48.999080][ T6128] tipc: Resetting bearer <eth:syzkaller0>
[   49.003745][ T6128] tipc: Disabling bearer <eth:syzkaller0>
[   49.042710][ T6135] netlink: 'syz.2.82': attribute type 4 has an invalid length.
[   49.087448][ T6139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.83'.
[   49.147670][ T6147] macvtap1: entered allmulticast mode
[   49.151814][ T6147] veth0_macvtap: entered allmulticast mode
[   49.262921][ T6165] netlink: 'syz.0.97': attribute type 15 has an invalid length.
[   49.305212][ T6171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   49.376078][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'.
[   49.395485][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[   49.420441][ T6191] bond1 (unregistering): Released all slaves
[   49.482423][ T6199] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   49.571429][ T5847] Bluetooth: hci0: command tx timeout
[   49.643944][ T5854] Bluetooth: hci2: command tx timeout
[   49.646402][ T5847] Bluetooth: hci1: command tx timeout
[   49.859736][ T6241] openvswitch: netlink: Message has 4 unknown bytes.
[   49.862465][ T6241] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.023390][ T6255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   50.281152][ T6269] netlink: 'syz.1.137': attribute type 10 has an invalid length.
[   50.287400][ T6269] team0: Cannot enslave team device to itself
[   50.798190][ T6320] netlink: set zone limit has 4 unknown bytes
[   50.863196][ T6330] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[   50.929307][ T6338] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   51.105668][ T6366] netlink: 'syz.0.183': attribute type 27 has an invalid length.
[   51.113789][ T6366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.461054][ T6402] sctp: [Deprecated]: syz.0.199 (pid 6402) Use of int in maxseg socket option.
[   51.461054][ T6402] Use struct sctp_assoc_value instead
[   51.641653][ T5847] Bluetooth: hci0: command tx timeout
[   51.725101][ T5847] Bluetooth: hci1: command tx timeout
[   51.727363][ T5847] Bluetooth: hci2: command tx timeout
[   51.829155][ T6453] netlink: 'syz.1.224': attribute type 8 has an invalid length.
[   51.847658][ T6456] netlink: 'syz.2.225': attribute type 17 has an invalid length.
[   51.867771][ T6453] bond0: entered promiscuous mode
[   51.869888][ T6453] bond_slave_0: entered promiscuous mode
[   51.877412][ T6453] bond_slave_1: entered promiscuous mode
[   51.880753][ T6453] bond0: left promiscuous mode
[   51.884707][ T6453] bond_slave_0: left promiscuous mode
[   51.887216][ T6453] bond_slave_1: left promiscuous mode
[   51.907747][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.911009][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.965971][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.972817][ T6456] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.034382][ T6456] veth0_macvtap: left allmulticast mode
[   52.043594][ T5974] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.047312][ T5974] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.051170][ T5974] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.072236][ T5974] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   52.180944][ T6481] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   52.206101][ T6481] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   52.476380][ T6520] tap0: tun_chr_ioctl cmd 1074025677
[   52.478211][ T6520] tap0: linktype set to 825
[   53.699353][ T6611] __nla_validate_parse: 8 callbacks suppressed
[   53.699363][ T6611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.288'.
[   53.721305][ T5847] Bluetooth: hci0: command tx timeout
[   53.731124][ T6611] netlink: 64 bytes leftover after parsing attributes in process `syz.2.288'.
[   53.771681][ T6611] tipc: Invalid UDP bearer configuration
[   53.771704][ T6611] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   53.801322][ T5847] Bluetooth: hci2: command tx timeout
[   53.803174][ T5847] Bluetooth: hci1: command tx timeout
[   54.857680][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'.
[   54.952881][ T6653] netlink: 256 bytes leftover after parsing attributes in process `syz.2.307'.
[   54.956762][ T6653] netlink: 48 bytes leftover after parsing attributes in process `syz.2.307'.
[   54.968916][ T6653] lo speed is unknown, defaulting to 1000
[   54.972748][ T6653] lo speed is unknown, defaulting to 1000
[   54.975404][ T6653] lo speed is unknown, defaulting to 1000
[   55.042647][ T6659] netlink: 'syz.1.309': attribute type 13 has an invalid length.
[   55.047158][ T6659] netlink: 'syz.1.309': attribute type 17 has an invalid length.
[   55.052071][ T6658] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.055931][ T6658] 8021q: adding VLAN 0 to HW filter on device team0
[   55.061995][ T6658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.075091][ T6653] infiniband syz0: set active
[   55.078178][ T6653] infiniband syz0: added lo
[   55.112205][ T6653] RDS/IB: syz0: added
[   55.116314][ T6653] smc: adding ib device syz0 with port count 1
[   55.123664][ T6653] smc:    ib device syz0 port 1 has pnetid 
[   55.127818][ T6659] 8021q: adding VLAN 0 to HW filter on device team0
[   55.132243][ T6659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   55.139732][   T47] lo speed is unknown, defaulting to 1000
[   55.143221][   T47] syz0: Port: 1 Link ACTIVE
[   55.143609][ T6653] lo speed is unknown, defaulting to 1000
[   55.149958][ T5689] lo speed is unknown, defaulting to 1000
[   55.195653][ T6653] lo speed is unknown, defaulting to 1000
[   55.263279][ T6653] lo speed is unknown, defaulting to 1000
[   55.327707][ T6653] lo speed is unknown, defaulting to 1000
[   55.421654][ T6674] netlink: 380 bytes leftover after parsing attributes in process `syz.0.315'.
[   55.436468][ T6676] netlink: 'syz.1.316': attribute type 10 has an invalid length.
[   55.440155][ T6676] bridge0: port 3(macsec0) entered blocking state
[   55.443774][ T6676] bridge0: port 3(macsec0) entered disabled state
[   55.446658][ T6676] macsec0: entered allmulticast mode
[   55.448563][ T6676] veth1_macvtap: entered allmulticast mode
[   55.472654][ T6676] macsec0: entered promiscuous mode
[   55.475053][ T6676] bridge0: port 3(macsec0) entered blocking state
[   55.477882][ T6676] bridge0: port 3(macsec0) entered forwarding state
[   55.730780][ T6711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.333'.
[   56.034741][ T6760] netlink: 256 bytes leftover after parsing attributes in process `syz.1.355'.
[   56.099650][ T6766] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.145164][ T6766] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.221671][ T6766] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.267123][ T6766] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.330610][ T5974] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.337895][ T5709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.345690][ T5709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.353427][ T5709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.338254][ T6813] bridge_slave_0: left allmulticast mode
[   57.340824][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.347857][ T6813] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   57.377686][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[   57.511635][ T6825] block nbd0: server does not support multiple connections per device.
[   57.515223][ T6825] block nbd0: shutting down sockets
[   57.648547][ T6842] netlink: 'syz.1.390': attribute type 6 has an invalid length.
[   57.673541][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'.
[   58.649076][ T6914] netlink: 'syz.0.417': attribute type 3 has an invalid length.
[   58.963316][ T6943] syzkaller1: entered promiscuous mode
[   58.965669][ T6943] syzkaller1: entered allmulticast mode
[   59.220355][ T6955] netlink: 'syz.0.436': attribute type 2 has an invalid length.
[   59.530826][ T6977] syzkaller0: entered promiscuous mode
[   59.534016][ T6977] syzkaller0: entered allmulticast mode
[   59.665088][ T6986] IPVS: Scheduler module ip_vs_sip not found
[   59.972996][ T7017] syzkaller1: entered promiscuous mode
[   59.975003][ T7017] syzkaller1: entered allmulticast mode
[   60.070687][ T7024] netlink: 'syz.0.468': attribute type 1 has an invalid length.
[   60.077760][ T7024] __nla_validate_parse: 3 callbacks suppressed
[   60.077774][ T7024] netlink: 244 bytes leftover after parsing attributes in process `syz.0.468'.
[   60.116378][ T7028] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.119683][ T7028] syzkaller0: entered promiscuous mode
[   60.123740][ T7028] syzkaller0: entered allmulticast mode
[   60.128409][ T7028] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[   60.136700][ T7028] tipc: Resetting bearer <eth:syzkaller0>
[   60.141176][ T7027] tipc: Resetting bearer <eth:syzkaller0>
[   60.149806][ T7027] tipc: Disabling bearer <eth:syzkaller0>
[   60.320079][ T7059] netlink: 48 bytes leftover after parsing attributes in process `syz.0.483'.
[   60.391101][ T7067] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.397113][ T7067] syzkaller0: entered promiscuous mode
[   60.398948][ T7067] syzkaller0: entered allmulticast mode
[   60.407219][ T7067] tipc: Resetting bearer <eth:syzkaller0>
[   60.416832][ T7066] tipc: Resetting bearer <eth:syzkaller0>
[   60.422495][ T7066] tipc: Disabling bearer <eth:syzkaller0>
[   60.430495][ T7075] netlink: 'syz.1.492': attribute type 1 has an invalid length.
[   60.434661][ T7075] netlink: 184 bytes leftover after parsing attributes in process `syz.1.492'.
[   60.465055][ T7077] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   60.507950][ T7082] netlink: 'syz.0.495': attribute type 10 has an invalid length.
[   60.682055][ T7089] lo speed is unknown, defaulting to 1000
[   60.684252][ T7092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.688059][ T7092] syzkaller0: entered promiscuous mode
[   60.690678][ T7092] syzkaller0: entered allmulticast mode
[   60.697674][ T7092] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   60.705524][ T7092] tipc: Resetting bearer <eth:syzkaller0>
[   60.709494][ T7091] tipc: Resetting bearer <eth:syzkaller0>
[   60.714362][ T7091] tipc: Disabling bearer <eth:syzkaller0>
[   61.189838][ T7114] netlink: 'syz.2.508': attribute type 3 has an invalid length.
[   62.117287][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.120262][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.145160][ T7164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.280204][ T7170] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.284863][ T7169] tipc: Resetting bearer <eth:syzkaller0>
[   62.324123][ T7169] tipc: Disabling bearer <eth:syzkaller0>
[   62.389840][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.535'.
[   62.755835][ T7194] lo speed is unknown, defaulting to 1000
[   63.099390][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[   63.102758][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'.
[   63.105735][ T7204] netlink: 'syz.1.547': attribute type 18 has an invalid length.
[   63.125082][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'.
[   63.487379][ T7222] lo speed is unknown, defaulting to 1000
[   63.609954][ T7239] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.560'.
[   63.615270][ T7239] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   63.619826][ T7239] openvswitch: netlink: Message has 8454 unknown bytes.
[   63.677332][ T5689] IPVS: starting estimator thread 0...
[   63.749575][ T7253] pim6reg1: entered promiscuous mode
[   63.757459][ T7253] pim6reg1: entered allmulticast mode
[   63.761893][ T7245] IPVS: using max 136 ests per chain, 326400 per kthread
[   63.842618][ T5689] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   63.845617][ T5689] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   63.849163][ T5689] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   64.025703][ T7273] netlink: 'syz.2.575': attribute type 11 has an invalid length.
[   64.073889][ T7276] tipc: Started in network mode
[   64.075749][ T7276] tipc: Node identity 4, cluster identity 4711
[   64.078109][ T7276] tipc: Node number set to 4
[   64.202169][ T7291] netlink: 156 bytes leftover after parsing attributes in process `syz.0.583'.
[   64.285690][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'.
[   64.313937][ T7306] tap0: tun_chr_ioctl cmd 35108
[   64.470026][ T7323] team0: Device macvlan2 is already an upper device of the team interface
[   64.859629][ T7375] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   65.698176][ T7418] netlink: 'syz.1.641': attribute type 3 has an invalid length.
[   65.715233][ T7422] netlink: 'syz.2.643': attribute type 21 has an invalid length.
[   65.718525][ T7424] gtp0: entered promiscuous mode
[   65.720811][ T7422] __nla_validate_parse: 3 callbacks suppressed
[   65.720818][ T7422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.643'.
[   65.896713][ T7444] macvlan2: entered allmulticast mode
[   65.898481][ T7444] veth1_vlan: entered allmulticast mode
[   65.901039][ T7444] veth1_vlan: left allmulticast mode
[   66.166524][ T7471] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1
[   66.204518][ T7479] netlink: 48 bytes leftover after parsing attributes in process `syz.2.670'.
[   66.270196][ T7486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'.
[   66.323122][ T7492] syzkaller1: entered promiscuous mode
[   66.325054][ T7492] syzkaller1: entered allmulticast mode
[   66.648866][ T7511] netlink: 830 bytes leftover after parsing attributes in process `syz.2.684'.
[   66.958564][ T7537] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   67.048909][ T7549] netlink: 'syz.1.702': attribute type 3 has an invalid length.
[   67.052019][ T7549] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.702'.
[   67.213855][ T7566] lo speed is unknown, defaulting to 1000
[   67.393995][   T10] cfg80211: failed to load regulatory.db
[   67.431840][ T7590] syzkaller1: entered promiscuous mode
[   67.434157][ T7590] syzkaller1: entered allmulticast mode
[   67.624914][ T7606] block nbd0: server does not support multiple connections per device.
[   67.630499][ T7606] block nbd0: shutting down sockets
[   67.762544][ T7623] lo speed is unknown, defaulting to 1000
[   68.443877][ T7695] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.447023][ T7695] syzkaller0: entered promiscuous mode
[   68.449481][ T7695] syzkaller0: entered allmulticast mode
[   68.456551][ T7695] tipc: Resetting bearer <eth:syzkaller0>
[   68.458968][ T7694] tipc: Resetting bearer <eth:syzkaller0>
[   68.462861][ T7694] tipc: Disabling bearer <eth:syzkaller0>
[   68.663805][ T7701] vlan2: entered promiscuous mode
[   68.665730][ T7701] vlan2: entered allmulticast mode
[   68.667516][ T7701] hsr_slave_1: entered allmulticast mode
[   68.673486][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[   68.804459][ T7707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.807787][ T7707] syzkaller0: entered promiscuous mode
[   68.809674][ T7707] syzkaller0: entered allmulticast mode
[   68.814226][ T7707] tipc: Resetting bearer <eth:syzkaller0>
[   68.816727][ T7706] tipc: Resetting bearer <eth:syzkaller0>
[   68.819443][ T7706] tipc: Disabling bearer <eth:syzkaller0>
[   68.898898][ T7711] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   68.999507][ T7719] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[   69.539203][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'.
[   69.567236][ T7763] netlink: 'syz.2.799': attribute type 1 has an invalid length.
[   69.570149][ T7763] netlink: 172 bytes leftover after parsing attributes in process `syz.2.799'.
[   69.660568][ T7773] pim6reg99999999: entered allmulticast mode
[   69.733805][ T7781] openvswitch: netlink: Message has 16 unknown bytes.
[   70.095008][ T7848] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   70.162459][ T7860] netlink: 96 bytes leftover after parsing attributes in process `syz.0.843'.
[   70.165515][ T7861] lo speed is unknown, defaulting to 1000
[   70.167501][ T7861] lo speed is unknown, defaulting to 1000
[   70.176185][ T7861] lo speed is unknown, defaulting to 1000
[   70.179045][ T7861] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.191973][ T7861] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   70.206176][ T7861] lo speed is unknown, defaulting to 1000
[   70.208745][ T7861] lo speed is unknown, defaulting to 1000
[   70.212057][ T7861] lo speed is unknown, defaulting to 1000
[   70.408515][ T7898] syz_tun: entered allmulticast mode
[   70.413012][ T7898] dvmrp8: entered allmulticast mode
[   70.468691][ T7907] netlink: 'syz.1.860': attribute type 3 has an invalid length.
[   70.469531][ T7897] syz_tun: left allmulticast mode
[   70.487805][ T7897] dvmrp8: left allmulticast mode
[   70.592866][ T7918] tipc: Cannot configure node identity twice
[   70.696146][ T7931] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   70.745215][ T7937] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.747870][ T7937] syzkaller0: entered promiscuous mode
[   70.749693][ T7937] syzkaller0: entered allmulticast mode
[   70.767700][ T7937] tipc: Resetting bearer <eth:syzkaller0>
[   70.770657][ T7935] tipc: Resetting bearer <eth:syzkaller0>
[   70.776408][ T7935] tipc: Disabling bearer <eth:syzkaller0>
[   70.908026][ T7962] syzkaller0: entered promiscuous mode
[   70.909927][ T7962] syzkaller0: entered allmulticast mode
[   71.022509][ T7975] lo speed is unknown, defaulting to 1000
[   71.091843][ T7975] lo speed is unknown, defaulting to 1000
[   71.162663][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.165961][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.171040][ T7990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.174620][ T7990] syzkaller0: entered promiscuous mode
[   71.183904][ T7990] syzkaller0: entered allmulticast mode
[   71.188369][ T7990] tipc: Resetting bearer <eth:syzkaller0>
[   71.191166][ T7989] tipc: Resetting bearer <eth:syzkaller0>
[   71.194605][ T7989] tipc: Disabling bearer <eth:syzkaller0>
[   71.201026][ T7993] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.279000][ T8004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'.
[   71.339892][ T8015] C: renamed from lo (while UP)
[   71.344392][ T8015] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   71.414263][ T8027] IPv6: NLM_F_REPLACE set, but no existing node found!
[   71.632155][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[   71.632459][ T8046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.635958][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[   71.640985][ T8046] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[   71.644303][ T8046] netlink: 224 bytes leftover after parsing attributes in process `syz.0.922'.
[   71.775196][ T8060] netlink: 830 bytes leftover after parsing attributes in process `syz.0.928'.
[   71.937834][ T8075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.957824][ T8077] netlink: 56 bytes leftover after parsing attributes in process `syz.0.936'.
[   72.333448][ T8088] Bluetooth: MGMT ver 1.23
[   72.488155][ T8104] netlink: 'syz.2.947': attribute type 2 has an invalid length.
[   72.713227][ T8140] netlink: 60 bytes leftover after parsing attributes in process `syz.2.964'.
[   72.964944][ T8160] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   73.036720][ T8167] netlink: 'syz.0.976': attribute type 3 has an invalid length.
[   73.039272][ T8167] netlink: 240 bytes leftover after parsing attributes in process `syz.0.976'.
[   73.330454][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'.
[   73.334876][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'.
[   73.338648][ T8186] netlink: 'syz.0.984': attribute type 18 has an invalid length.
[   73.375227][ T8188] netlink: 'syz.0.985': attribute type 32 has an invalid length.
[   73.377967][ T8188] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   73.660159][ T8211] C speed is unknown, defaulting to 1000
[   73.666707][ T8216] netlink: 'syz.0.997': attribute type 11 has an invalid length.
[   73.717924][ T8211] C speed is unknown, defaulting to 1000
[   74.206946][ T8270] netlink: 'syz.2.1022': attribute type 23 has an invalid length.
[   74.913371][ T8304] netlink: 'syz.0.1037': attribute type 1 has an invalid length.
[   75.149328][ T8321] netlink: 'syz.1.1045': attribute type 6 has an invalid length.
[   75.910533][ T8378] C speed is unknown, defaulting to 1000
[   75.945883][ T8378] C speed is unknown, defaulting to 1000
[   76.141493][ T8393] bridge0: port 3(macsec0) entered disabled state
[   76.162062][ T8393] bridge_slave_0: left promiscuous mode
[   76.173793][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.178914][ T8393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.205688][ T8393] veth1_macvtap: left allmulticast mode
[   76.212781][ T8393] gtp0: left promiscuous mode
[   76.215227][ T5974] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.218456][ T5974] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.223532][ T5974] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.226829][ T5974] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.754737][ T8405] __nla_validate_parse: 8 callbacks suppressed
[   76.754751][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.760852][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.770681][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.776179][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.779898][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.782969][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.786111][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.789044][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.793360][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.796256][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'.
[   76.806909][ T8405] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[   78.128757][ T8511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.154756][ T8511] syzkaller0: entered promiscuous mode
[   78.157101][ T8511] syzkaller0: entered allmulticast mode
[   78.160829][ T8511] tipc: Resetting bearer <eth:syzkaller0>
[   78.168408][ T8510] tipc: Resetting bearer <eth:syzkaller0>
[   78.236546][ T8510] tipc: Disabling bearer <eth:syzkaller0>
[   78.240792][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.412790][ T8551] netlink: 'syz.1.1137': attribute type 10 has an invalid length.
[   78.416753][ T8551] batman_adv: batadv0: Adding interface: virt_wifi0
[   78.418994][ T8551] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.427557][ T8551] batman_adv: batadv0: Interface activated: virt_wifi0
[   78.494929][ T8563] batman_adv: batadv0: Adding interface: dummy0
[   78.497091][ T8563] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.505811][ T8563] batman_adv: batadv0: Interface activated: dummy0
[   78.511519][ T8563] batadv0: mtu less than device minimum
[   78.513634][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.517111][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.520667][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.524263][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.527744][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.531430][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.535125][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.538531][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.542076][ T8563] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   78.777094][ T8572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.780480][ T8572] syzkaller0: entered promiscuous mode
[   78.783107][ T8572] syzkaller0: entered allmulticast mode
[   78.789150][ T8572] tipc: Resetting bearer <eth:syzkaller0>
[   78.793162][ T8571] tipc: Resetting bearer <eth:syzkaller0>
[   78.796076][ T8571] tipc: Disabling bearer <eth:syzkaller0>
[   78.954968][ T8582] team0: entered allmulticast mode
[   78.957210][ T8582] team_slave_0: entered allmulticast mode
[   78.959655][ T8582] team_slave_1: entered allmulticast mode
[   79.317053][ T8598] netlink: 'syz.2.1159': attribute type 13 has an invalid length.
[   79.320352][ T8598] netlink: 'syz.2.1159': attribute type 17 has an invalid length.
[   79.363545][ T1272] C speed is unknown, defaulting to 1000
[   79.407338][ T8598] C speed is unknown, defaulting to 1000
[   79.454419][ T8603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.489951][ T8598] C speed is unknown, defaulting to 1000
[   79.512986][ T8603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.563913][ T8615] syz_tun: entered promiscuous mode
[   79.567948][ T8615] syz_tun: left promiscuous mode
[   79.920850][ T8654] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   79.958221][ T8656] trusted_key: syz.1.1177 sent an empty control message without MSG_MORE.
[   80.050237][ T8661] syzkaller1: entered promiscuous mode
[   80.054675][ T8661] syzkaller1: entered allmulticast mode
[   80.546194][ T8715] C speed is unknown, defaulting to 1000
[   80.612921][ T8715] C speed is unknown, defaulting to 1000
[   80.620236][ T8720] C speed is unknown, defaulting to 1000
[   80.713921][ T8720] C speed is unknown, defaulting to 1000
[   81.787811][ T8779] __nla_validate_parse: 158 callbacks suppressed
[   81.787825][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1223'.
[   81.816576][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1224'.
[   82.017403][ T8790] unsupported nla_type 52263
[   82.693430][   T33] audit: type=1804 audit(1756670256.294:2): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1236" name="/newroot/400/cgroup.controllers" dev="tmpfs" ino=2032 res=1 errno=0
[   82.705300][   T33] audit: type=1800 audit(1756670256.294:3): pid=8814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1236" name="cgroup.controllers" dev="tmpfs" ino=2032 res=0 errno=0
[   82.765828][ T8818] C speed is unknown, defaulting to 1000
[   82.803180][ T8818] C speed is unknown, defaulting to 1000
[   83.029731][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'.
[   83.104921][ T8854] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[   83.267645][ T8870] ip6tnl2: entered promiscuous mode
[   83.351900][ T8872] block nbd0: server does not support multiple connections per device.
[   83.356932][ T8872] block nbd0: shutting down sockets
[   83.504702][ T8894] netlink: 'syz.1.1273': attribute type 1 has an invalid length.
[   83.507985][ T8894] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1273'.
[   83.690469][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'.
[   83.705618][ T8918] syzkaller1: entered promiscuous mode
[   83.709498][ T8918] syzkaller1: entered allmulticast mode
[   84.199950][ T8943] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   84.266821][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'.
[   84.386725][ T8963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.389317][ T8963] syzkaller0: entered promiscuous mode
[   84.391152][ T8963] syzkaller0: entered allmulticast mode
[   84.405508][ T8963] tipc: Resetting bearer <eth:syzkaller0>
[   84.407890][ T8962] tipc: Resetting bearer <eth:syzkaller0>
[   84.410485][ T8962] tipc: Disabling bearer <eth:syzkaller0>
[   84.643429][ T8982] C speed is unknown, defaulting to 1000
[   84.706502][ T8982] C speed is unknown, defaulting to 1000
[   84.762002][ T8987] netlink: 'syz.1.1313': attribute type 66 has an invalid length.
[   84.822528][ T8991] C speed is unknown, defaulting to 1000
[   84.874241][ T8991] C speed is unknown, defaulting to 1000
[   84.912479][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'.
[   85.106539][ T9005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1320'.
[   85.153693][ T9009] pimreg: entered allmulticast mode
[   85.161476][ T9009] dvmrp8: entered allmulticast mode
[   85.165944][ T9009] pimreg: left allmulticast mode
[   85.168268][ T9009] dvmrp8: left allmulticast mode
[   85.352069][ T9027] C speed is unknown, defaulting to 1000
[   85.404873][ T9027] C speed is unknown, defaulting to 1000
[   85.436058][ T9042] net_ratelimit: 12 callbacks suppressed
[   85.436072][ T9042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.514889][ T9056] netlink: 'syz.2.1344': attribute type 1 has an invalid length.
[   85.546505][ T9056] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   85.555310][ T9056] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.557153][ T5974] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   85.581013][ T9056] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   85.585137][ T9056] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[   85.598353][ T9056] bond2 (unregistering): Released all slaves
[   85.799678][ T9105] netlink: 'syz.2.1359': attribute type 13 has an invalid length.
[   85.803512][ T9105] netlink: 'syz.2.1359': attribute type 17 has an invalid length.
[   85.806319][ T9106] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   85.811616][ T9105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.847797][ T9110] C speed is unknown, defaulting to 1000
[   85.908083][ T9110] C speed is unknown, defaulting to 1000
[   85.926542][ T9121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'.
[   85.963177][ T9126] ip6gre2: entered promiscuous mode
[   86.166492][ T9150] netlink: 'syz.1.1371': attribute type 32 has an invalid length.
[   86.172306][ T9150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1371'.
[   86.349337][ T9165] Bluetooth: MGMT ver 1.23
[   86.374086][ T9167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.376926][ T9167] syzkaller0: entered promiscuous mode
[   86.379486][ T9167] syzkaller0: entered allmulticast mode
[   86.386848][ T9167] tipc: Resetting bearer <eth:syzkaller0>
[   86.389775][ T9166] tipc: Resetting bearer <eth:syzkaller0>
[   86.395057][ T9166] tipc: Disabling bearer <eth:syzkaller0>
[   86.757150][ T9201] netlink: 'syz.1.1391': attribute type 5 has an invalid length.
[   86.888059][ T9227] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.893851][   T10] IPVS: starting estimator thread 0...
[   86.896572][ T9227] tipc: Failed to remove unknown binding: 66,1,1/4:2991389677/2991389679
[   86.901146][ T9227] tipc: Failed to remove unknown binding: 66,1,1/4:2991389677/2991389679
[   86.904774][ T9227] tipc: Failed to remove unknown binding: 66,1,1/4:2991389677/2991389679
[   86.909823][ T9227] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1401'.
[   86.981429][ T9228] IPVS: using max 139 ests per chain, 333600 per kthread
[   87.013316][ T9236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.016600][ T9236] syzkaller0: entered promiscuous mode
[   87.018876][ T9236] syzkaller0: entered allmulticast mode
[   87.025620][ T9236] tipc: Resetting bearer <eth:syzkaller0>
[   87.028847][ T9235] tipc: Resetting bearer <eth:syzkaller0>
[   87.033488][ T9235] tipc: Disabling bearer <eth:syzkaller0>
[   87.250605][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'.
[   87.732099][ T9258] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1416'.
[   88.102242][ T9294] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1433'.
[   88.116521][ T9294] 0X: renamed from caif0
[   88.125465][ T9294] 0X: entered allmulticast mode
[   88.127474][ T9294] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   88.242098][ T9306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'.
[   88.447004][ T9338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1454'.
[   88.658111][ T9368] C speed is unknown, defaulting to 1000
[   88.698765][ T9368] C speed is unknown, defaulting to 1000
[   89.449139][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'.
[   89.593566][ T9396] netlink: 'syz.0.1477': attribute type 1 has an invalid length.
[   89.596196][ T9396] netlink: 'syz.0.1477': attribute type 1 has an invalid length.
[   89.598896][ T9396] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1477'.
[   89.936098][ T9470] netlink: 'syz.0.1510': attribute type 1 has an invalid length.
[   89.942409][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'.
[   89.970872][ T9469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1511'.
[   90.033829][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.037325][ T9480] 8021q: adding VLAN 0 to HW filter on device team0
[   90.041060][ T9480] 0X: left allmulticast mode
[   90.043358][ T9480] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   90.052421][ T9482] geneve2: entered promiscuous mode
[   90.054591][ T9482] geneve2: entered allmulticast mode
[   90.336087][ T9519] pim6reg: entered allmulticast mode
[   90.338949][ T9519] pim6reg: left allmulticast mode
[   90.585255][ T9558] syzkaller1: entered promiscuous mode
[   90.587199][ T9558] syzkaller1: entered allmulticast mode
[   90.618193][ T9562] netlink: 'syz.2.1556': attribute type 6 has an invalid length.
[   90.667213][ T9566] netlink: 'syz.2.1558': attribute type 39 has an invalid length.
[   90.975615][ T9596] netlink: 'syz.2.1570': attribute type 12 has an invalid length.
[   90.978438][ T9596] netlink: 'syz.2.1570': attribute type 29 has an invalid length.
[   91.005129][ T9599] ieee802154 phy1 wpan1: encryption failed: -22
[   91.107366][ T9604] C speed is unknown, defaulting to 1000
[   91.158763][ T9604] C speed is unknown, defaulting to 1000
[   91.519046][ T9611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.580631][ T9613] netlink: 'syz.0.1575': attribute type 21 has an invalid length.
[   92.013850][ T9638] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   92.050587][ T9642] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   92.054987][ T9642] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   92.057859][ T9642] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   92.145334][ T9647] __nla_validate_parse: 8 callbacks suppressed
[   92.145344][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1586'.
[   92.150921][ T9647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1586'.
[   92.597782][ T9665] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1594'.
[   92.701634][ T9671] syzkaller0: tun_chr_ioctl cmd 1074025677
[   92.704304][ T9671] syzkaller0: linktype set to 1
[   92.912499][ T9704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1613'.
[   93.123543][ T9732] bridge3: the hash_elasticity option has been deprecated and is always 16
[   93.142966][ T9734] netlink: 'syz.1.1626': attribute type 10 has an invalid length.
[   93.146269][ T9734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1626'.
[   93.152505][ T9734] team0: Port device geneve0 added
[   93.155354][ T5709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.158796][ T5709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.168086][ T5709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.174436][ T5709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.442507][ T9797] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   93.446999][ T9797] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   93.450097][ T9797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   93.550779][ T9806] netlink: 'syz.0.1651': attribute type 10 has an invalid length.
[   93.553983][ T9806] batman_adv: batadv0: Interface deactivated: dummy0
[   93.557083][ T9806] batman_adv: batadv0: Removing interface: dummy0
[   93.560933][ T9806] team0: Port device dummy0 added
[   93.570200][ T9806] team0: Port device dummy0 removed
[   93.574359][ T9806] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   94.251410][ T9825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1658'.
[   94.252689][ T9823] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1657'.
[   94.361361][ T9831] wireguard0: entered promiscuous mode
[   94.365515][ T9831] wireguard0: entered allmulticast mode
[   94.417045][ T9838] bridge1: entered promiscuous mode
[   94.419365][ T9838] bridge1: entered allmulticast mode
[   94.537322][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'.
[   94.550453][ T9862] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[   94.561170][ T9862] syzkaller0: entered promiscuous mode
[   94.563551][ T9862] syzkaller0: entered allmulticast mode
[   94.673263][ T9879] sctp: [Deprecated]: syz.2.1684 (pid 9879) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.673263][ T9879] Use struct sctp_sack_info instead
[   94.679040][ T9879] sctp: [Deprecated]: syz.2.1684 (pid 9879) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.679040][ T9879] Use struct sctp_sack_info instead
[   94.746451][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.749788][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.330168][ T9938] validate_nla: 2 callbacks suppressed
[   95.330182][ T9938] netlink: 'syz.0.1712': attribute type 10 has an invalid length.
[   95.336622][ T9938] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   95.343673][ T9938] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   95.678928][ T9968] netlink: 'syz.0.1725': attribute type 21 has an invalid length.
[   95.682688][ T9968] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1725'.
[   95.687889][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'.
[   96.601330][ T5854] Bluetooth: hci2: command tx timeout
[   97.340289][T10073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.416306][T10073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.470613][T10073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.479610][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'.
[   97.523539][T10073] bond0: (slave netdevsim0): Releasing backup interface
[   97.530179][T10073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.595060][ T5974] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.610279][ T5974] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.621580][ T5974] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.633064][ T5974] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.808905][T10134] netlink: 'syz.2.1792': attribute type 3 has an invalid length.
[   97.869288][T10135] team0: left allmulticast mode
[   97.871748][T10135] team_slave_0: left allmulticast mode
[   97.874136][T10135] team_slave_1: left allmulticast mode
[   97.883376][T10135] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   97.934778][T10135] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   97.937637][T10135] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[   97.943513][T10135] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   97.947397][T10135] macvtap1: left allmulticast mode
[   97.959998][T10135] wireguard0: left promiscuous mode
[   97.965468][T10135] wireguard0: left allmulticast mode
[   97.968136][ T1272] C speed is unknown, defaulting to 1000
[   97.970432][ T1272] syz2: Port: 1 Link DOWN
[   97.999760][T10137] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1793'.
[   98.109781][T10149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1799'.
[   98.175686][T10153] netlink: 'syz.0.1801': attribute type 7 has an invalid length.
[   98.327171][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'.
[   98.331073][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'.
[   98.519147][T10172] sctp: [Deprecated]: syz.1.1809 (pid 10172) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.519147][T10172] Use struct sctp_sack_info instead
[   98.591375][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'.
[   98.900035][T10205] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1825'.
[   98.923269][T10207] openvswitch: netlink: IP tunnel dst address not specified
[   99.036891][T10219] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1832'.
[   99.040720][T10219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1832'.
[   99.044645][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'.
[   99.839663][T10265] netlink: 'syz.2.1854': attribute type 1 has an invalid length.
[  100.074689][T10279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.164787][T10291] veth3: entered promiscuous mode
[  100.305191][   T33] audit: type=1800 audit(1756670273.904:4): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1872" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3328 res=0 errno=0
[  100.320815][   T33] audit: type=1800 audit(1756670273.914:5): pid=10311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1872" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3328 res=0 errno=0
[  100.344273][ T5854] Bluetooth: hci2: link tx timeout
[  100.345954][ T5854] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  100.371977][T10320] netlink: 'syz.2.1876': attribute type 1 has an invalid length.
[  100.802495][T10349] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.806724][T10349] 8021q: adding VLAN 0 to HW filter on device team0
[  100.813146][T10349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.818234][   T10] C speed is unknown, defaulting to 1000
[  100.820408][   T10] syz2: Port: 1 Link ACTIVE
[  101.028416][T10361] netlink: 'syz.2.1891': attribute type 1 has an invalid length.
[  101.106413][T10367] openvswitch: netlink: Missing key (keys=40, expected=80)
[  101.191771][T10376] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  101.888033][ T5909] IPVS: starting estimator thread 0...
[  101.981366][T10453] IPVS: using max 133 ests per chain, 319200 per kthread
[  102.269090][T10507] batadv1: entered allmulticast mode
[  102.271815][T10507] 8021q: adding VLAN 0 to HW filter on device batadv1
[  102.361620][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  103.529570][T10612] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  104.756282][T10700] ieee802154 phy1 wpan1: encryption failed: -22
[  104.972588][T10746] __nla_validate_parse: 11 callbacks suppressed
[  104.972598][T10746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2061'.
[  104.978007][T10746] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2061'.
[  104.980983][T10746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2061'.
[  105.031587][T10752] netlink: 'syz.0.2064': attribute type 2 has an invalid length.
[  105.034746][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2064'.
[  105.055983][T10756] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2066'.
[  105.058895][T10756] 0X: renamed from caif0
[  105.062810][T10756] 0X: entered allmulticast mode
[  105.064665][T10756] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  105.360648][T10806] C speed is unknown, defaulting to 1000
[  105.404921][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'.
[  105.407199][T10806] C speed is unknown, defaulting to 1000
[  105.546616][T10823] C speed is unknown, defaulting to 1000
[  105.704977][T10823] C speed is unknown, defaulting to 1000
[  105.978168][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2118'.
[  106.194299][T10914] sock: sock_timestamping_bind_phc: sock not bind to device
[  106.215182][T10916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2132'.
[  106.538497][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  106.600763][T10969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2154'.
[  106.897419][T10991] netlink: 'syz.2.2164': attribute type 1 has an invalid length.
[  107.188248][T11011] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  109.101602][T11111] netlink: 'syz.2.2217': attribute type 3 has an invalid length.
[  109.106019][T11110] bond0: (slave bond_slave_1): Releasing backup interface
[  109.342011][T11158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.345787][T11158] syzkaller0: entered promiscuous mode
[  109.348681][T11158] syzkaller0: entered allmulticast mode
[  109.354338][T11158] tipc: Resetting bearer <eth:syzkaller0>
[  109.356817][T11156] tipc: Resetting bearer <eth:syzkaller0>
[  109.360430][T11156] tipc: Disabling bearer <eth:syzkaller0>
[  109.855581][T11213] netlink: 'syz.1.2261': attribute type 99 has an invalid length.
[  109.989718][T11233] __nla_validate_parse: 6 callbacks suppressed
[  109.989732][T11233] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2269'.
[  110.018566][T11235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.022300][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2272'.
[  110.026508][T11235] syzkaller0: entered promiscuous mode
[  110.028935][T11235] syzkaller0: entered allmulticast mode
[  110.036128][T11237] vlan2: entered promiscuous mode
[  110.038307][T11237] macvtap0: entered promiscuous mode
[  110.047561][T11235] tipc: Resetting bearer <eth:syzkaller0>
[  110.050758][T11234] tipc: Resetting bearer <eth:syzkaller0>
[  110.057538][T11234] tipc: Disabling bearer <eth:syzkaller0>
[  110.117240][T11241] geneve2: entered promiscuous mode
[  110.130521][T11243] netlink: 'syz.0.2275': attribute type 1 has an invalid length.
[  110.135373][T11243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2275'.
[  110.266024][T11261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2284'.
[  110.334330][T11268] pim6reg: entered allmulticast mode
[  110.346078][T11268] pim6reg: left allmulticast mode
[  110.513560][T11295] veth0: entered promiscuous mode
[  110.516887][T11294] veth0: left promiscuous mode
[  110.618278][T11307] netlink: 'syz.0.2305': attribute type 10 has an invalid length.
[  110.627156][T11307] veth0_vlan: left promiscuous mode
[  110.630123][T11307] veth0_vlan: entered promiscuous mode
[  110.639415][T11307] team0: Device veth0_vlan failed to register rx_handler
[  110.684019][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'.
[  110.687834][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'.
[  110.960691][T11329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.963473][T11329] IPv6: NLM_F_CREATE should be set when creating new route
[  110.966530][T11329] IPv6: NLM_F_CREATE should be set when creating new route
[  110.970589][T11329] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.113403][T11334] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[  111.385088][T11341] ieee802154 phy1 wpan1: encryption failed: -22
[  111.418658][T11343] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  111.548520][T11355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.560356][T11355] syzkaller0: entered promiscuous mode
[  111.564142][T11355] syzkaller0: entered allmulticast mode
[  111.586290][T11355] tipc: Resetting bearer <eth:syzkaller0>
[  111.593108][T11354] tipc: Resetting bearer <eth:syzkaller0>
[  111.596019][T11354] tipc: Disabling bearer <eth:syzkaller0>
[  111.663794][T11365] netlink: 'syz.2.2328': attribute type 1 has an invalid length.
[  111.992593][T11399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.995145][T11399] syzkaller0: entered promiscuous mode
[  111.997041][T11399] syzkaller0: entered allmulticast mode
[  112.005151][T11399] tipc: Resetting bearer <eth:syzkaller0>
[  112.007611][T11398] tipc: Resetting bearer <eth:syzkaller0>
[  112.010417][T11398] tipc: Disabling bearer <eth:syzkaller0>
[  112.115878][T11402] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2344'.
[  112.219611][T11411] netlink: 'syz.0.2347': attribute type 1 has an invalid length.
[  112.229643][T11411] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.242406][T11411] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.245202][T11411] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  112.249917][T11411] bond1: (slave vxcan5): Error -95 calling set_mac_address
[  112.289653][T11411] veth7: entered promiscuous mode
[  112.292325][T11411] bond1: (slave veth7): Enslaving as an active interface with a down link
[  112.303471][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.306048][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.432792][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'.
[  112.562406][T11447] netlink: 'syz.0.2363': attribute type 10 has an invalid length.
[  112.565842][T11447] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2363'.
[  112.570033][T11447] bond0: (slave dummy0): Releasing backup interface
[  112.576770][T11447] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  112.763500][T11400] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  112.784078][T11458] netlink: 'syz.1.2368': attribute type 1 has an invalid length.
[  113.312612][T11465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2371'.
[  113.644614][T11486] netlink: 'syz.0.2379': attribute type 21 has an invalid length.
[  113.647568][T11486] netlink: 'syz.0.2379': attribute type 1 has an invalid length.
[  114.002992][T11513] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  114.289664][T11521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.294956][T11521] syzkaller0: entered promiscuous mode
[  114.297296][T11521] syzkaller0: entered allmulticast mode
[  114.304212][T11521] tipc: Resetting bearer <eth:syzkaller0>
[  114.307346][T11520] tipc: Resetting bearer <eth:syzkaller0>
[  114.310538][T11520] tipc: Disabling bearer <eth:syzkaller0>
[  114.638350][T11552] netlink: 'syz.0.2408': attribute type 13 has an invalid length.
[  114.670352][T11559] netlink: 'syz.2.2410': attribute type 21 has an invalid length.
[  114.828159][T11571] C speed is unknown, defaulting to 1000
[  114.893023][T11571] C speed is unknown, defaulting to 1000
[  115.627177][T11625] __nla_validate_parse: 9 callbacks suppressed
[  115.627186][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'.
[  115.714180][T11633] netlink: 'syz.0.2430': attribute type 19 has an invalid length.
[  115.717323][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'.
[  115.721187][T11633] netlink: 'syz.0.2430': attribute type 19 has an invalid length.
[  115.727108][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2430'.
[  116.193023][T11650] netlink: 'syz.0.2437': attribute type 1 has an invalid length.
[  116.195733][T11650] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2437'.
[  116.296112][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'.
[  116.609544][T11677] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2448'.
[  116.648099][T11680] C speed is unknown, defaulting to 1000
[  116.705548][T11680] C speed is unknown, defaulting to 1000
[  117.459483][T11727] bridge4: entered allmulticast mode
[  118.107049][T11781] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2491'.
[  118.230317][T11787] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2493'.
[  118.432812][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2501'.
[  118.517397][T11819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2507'.
[  118.647480][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.650514][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.814036][T11868] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  118.819146][T11868] tipc: Enabled bearer <udp:s>, priority 10
[  118.951308][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  118.993929][T11892] gretap1: entered promiscuous mode
[  118.997547][T11892] validate_nla: 2 callbacks suppressed
[  118.997554][T11892] netlink: 'syz.0.2540': attribute type 7 has an invalid length.
[  119.025224][T11892] C speed is unknown, defaulting to 1000
[  119.060017][T11892] C speed is unknown, defaulting to 1000
[  119.221305][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  119.751332][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  119.902734][T11907] netlink: 'syz.0.2544': attribute type 13 has an invalid length.
[  119.906243][T11907] netlink: 'syz.0.2544': attribute type 17 has an invalid length.
[  119.975263][T11907] 0X: left allmulticast mode
[  119.977408][T11907] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  120.012591][T11906] C speed is unknown, defaulting to 1000
[  120.047061][T11907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.134750][T11906] C speed is unknown, defaulting to 1000
[  120.758748][T11935] __nla_validate_parse: 6 callbacks suppressed
[  120.758761][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2557'.
[  120.761339][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  120.767918][T11933] geneve2: left allmulticast mode
[  120.770383][T11933] bond1: (slave veth7): Releasing active interface
[  120.775323][T11933] bridge4: left allmulticast mode
[  120.995516][T11966] netlink: 'syz.1.2572': attribute type 1 has an invalid length.
[  121.233474][T11980] bridge0: port 3(veth0_to_team) entered blocking state
[  121.236007][T11980] bridge0: port 3(veth0_to_team) entered disabled state
[  121.238510][T11980] veth0_to_team: entered allmulticast mode
[  121.240938][T11980] veth0_to_team: entered promiscuous mode
[  121.245473][T11980] veth0_to_team: left allmulticast mode
[  121.247424][T11980] veth0_to_team: left promiscuous mode
[  121.249611][T11980] bridge0: port 3(veth0_to_team) entered disabled state
[  121.255482][T11980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.258382][T11980] IPv6: NLM_F_CREATE should be set when creating new route
[  121.366472][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2585'.
[  121.369558][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2585'.
[  121.373041][T11995] netlink: 'syz.2.2585': attribute type 13 has an invalid length.
[  121.398054][T11998] syz_tun: entered allmulticast mode
[  121.403366][T11998] dvmrp8: entered allmulticast mode
[  121.408776][T11998] syz_tun: left allmulticast mode
[  121.411038][T11998] dvmrp8: left allmulticast mode
[  121.520273][T11998] C speed is unknown, defaulting to 1000
[  121.573276][T11998] C speed is unknown, defaulting to 1000
[  121.801461][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  121.911950][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2588'.
[  122.445399][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'.
[  122.676379][T12046] vlan2: entered promiscuous mode
[  122.678693][T12046] team0: entered promiscuous mode
[  122.841335][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  122.916269][T12068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.921153][T12068] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  122.923968][T12068] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  122.927979][T12068] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  122.936498][T12068] tipc: Resetting bearer <eth:syzkaller0>
[  122.961739][T12070] C speed is unknown, defaulting to 1000
[  123.015465][T12070] C speed is unknown, defaulting to 1000
[  123.132978][T12081] netlink: 'syz.0.2623': attribute type 4 has an invalid length.
[  123.149111][T12090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2627'.
[  123.303160][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'.
[  123.369314][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2644'.
[  123.369745][T12122] syzkaller1: entered promiscuous mode
[  123.377330][T12122] syzkaller1: entered allmulticast mode
[  123.400234][T12128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.598770][T12145] C speed is unknown, defaulting to 1000
[  123.646714][T12156] macvtap1: entered allmulticast mode
[  123.648531][T12156] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  123.662186][T12156] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  123.673949][T12145] C speed is unknown, defaulting to 1000
[  123.679189][T12173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.720597][T12177] C speed is unknown, defaulting to 1000
[  123.778737][T12186] nbd: must specify at least one socket
[  123.784925][T12177] C speed is unknown, defaulting to 1000
[  123.881381][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  123.941328][ T5689] tipc: Node number set to 2596411319
[  123.945778][T12214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2686'.
[  124.314373][T12255] netlink: 'syz.2.2704': attribute type 5 has an invalid length.
[  124.316989][T12255] netlink: 'syz.2.2704': attribute type 7 has an invalid length.
[  124.322705][T12255] : entered promiscuous mode
[  124.710764][ T5974] bond0: (slave bond_slave_0): interface is now down
[  124.713342][T12269] bond0: entered promiscuous mode
[  124.715317][T12269] bond_slave_0: entered promiscuous mode
[  124.717691][T12269] bond0: entered allmulticast mode
[  124.719621][T12269] bond_slave_0: entered allmulticast mode
[  124.731541][ T5974] bond0: (slave bond_slave_0): interface is now down
[  124.734097][ T5974] bond0: now running without any active interface!
[  124.899075][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'.
[  124.921405][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  125.322933][   T33] audit: type=1800 audit(1756670298.924:6): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2728" name="cgroup.controllers" dev="tmpfs" ino=4784 res=0 errno=0
[  125.673714][   T47] C speed is unknown, defaulting to 1000
[  125.676100][   T47] syz2: Port: 1 Link DOWN
[  125.681421][T12371] geneve2: entered promiscuous mode
[  125.683729][T12371] geneve2: entered allmulticast mode
[  125.687018][ T5709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.690852][ T5709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.698648][ T5709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.704420][ T5709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.790359][T12385] __nla_validate_parse: 4 callbacks suppressed
[  125.790369][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2763'.
[  125.881138][T12397] netlink: 'syz.2.2767': attribute type 9 has an invalid length.
[  125.961358][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  126.007222][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2771'.
[  126.060985][T12415] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2773'.
[  126.388855][T12443] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.392737][T12443] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  126.929802][T12487] tipc: Resetting bearer <eth:syzkaller0>
[  126.963942][T12487] ip6tnl2: left promiscuous mode
[  126.967311][T12487] ip6gre2: left promiscuous mode
[  126.971039][T12487] geneve2: left promiscuous mode
[  126.975848][T12487] veth3: left promiscuous mode
[  126.977715][T12487] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  126.980193][T12487] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  126.983222][T12487] veth7: left promiscuous mode
[  126.987023][T12487] gretap1: left promiscuous mode
[  126.997767][ T5709] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.000973][ T5709] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.004225][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  127.007412][ T5709] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.010682][ T5709] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.039227][T12493] netlink: 'syz.0.2808': attribute type 21 has an invalid length.
[  127.042620][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'.
[  127.262617][T12504] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2813'.
[  127.410381][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2823'.
[  127.450494][T12522] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2822'.
[  127.564101][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'.
[  127.624041][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2838'.
[  127.677864][T12563] geneve2: left promiscuous mode
[  127.680009][T12563] geneve2: left allmulticast mode
[  127.686277][ T5709] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.690038][ T5709] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.700382][ T5709] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.704129][ T5709] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.708563][T12571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2843'.
[  127.890741][T12607] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.895998][T12607] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  127.899102][T12607] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  127.987834][T12626] netlink: 'syz.1.2867': attribute type 1 has an invalid length.
[  127.990583][T12626] netlink: 'syz.1.2867': attribute type 2 has an invalid length.
[  127.994423][T12626] netlink: 'syz.1.2867': attribute type 1 has an invalid length.
[  127.997156][T12626] netlink: 'syz.1.2867': attribute type 2 has an invalid length.
[  128.041370][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  128.047025][T12629] bond2: (slave ip6gretap1): making interface the new active one
[  128.050859][T12629] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  128.473097][T12685] syzkaller0: entered promiscuous mode
[  128.475085][T12685] syzkaller0: entered allmulticast mode
[  128.478246][T12685] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.481033][T12685] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  128.485929][T12685] tipc: Resetting bearer <eth:syzkaller0>
[  128.488928][T12684] tipc: Resetting bearer <eth:syzkaller0>
[  128.496377][T12684] tipc: Disabling bearer <eth:syzkaller0>
[  128.548497][T12691] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  128.590905][T12697] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.595015][T12697] syzkaller0: entered promiscuous mode
[  128.597375][T12697] syzkaller0: entered allmulticast mode
[  128.603623][T12697] tipc: Resetting bearer <eth:syzkaller0>
[  128.606690][T12696] tipc: Resetting bearer <eth:syzkaller0>
[  128.609900][T12696] tipc: Disabling bearer <eth:syzkaller0>
[  129.065167][T12735] IPVS: stopping backup sync thread 8943 ...
[  129.081391][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  129.193305][T12763] netlink: 'syz.2.2930': attribute type 4 has an invalid length.
[  129.314531][T12784] dvmrp8: entered allmulticast mode
[  129.333311][T12783] dvmrp8: left allmulticast mode
[  129.880676][T12844] bridge_slave_0: default FDB implementation only supports local addresses
[  130.034268][T12865] netlink: 'syz.1.2974': attribute type 2 has an invalid length.
[  130.121434][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  130.848068][T12880] netlink: 'syz.2.2979': attribute type 10 has an invalid length.
[  130.851586][T12880] __nla_validate_parse: 5 callbacks suppressed
[  130.851598][T12880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2979'.
[  130.859920][T12880] team0: Port device geneve0 added
[  130.866036][ T5709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.869888][ T5709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.876274][ T5709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.880110][ T5709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.939572][T12892] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.994123][T12892] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.053593][T12892] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.114054][T12907] ieee802154 phy1 wpan1: encryption failed: -22
[  131.126676][T12892] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.161359][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  131.208307][ T5709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.214108][ T5709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.220195][ T5709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.226632][ T5709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.381040][T12940] netlink: 'syz.0.3008': attribute type 1 has an invalid length.
[  131.384663][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3008'.
[  131.407750][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3010'.
[  131.535691][T12962] dvmrp0: entered allmulticast mode
[  131.591103][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3021'.
[  131.607011][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3021'.
[  131.762948][T12975] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3025'.
[  131.847175][T12986] pimreg: entered allmulticast mode
[  131.865958][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3032'.
[  131.894877][T12998] bridge0: port 1(wlan0) entered blocking state
[  131.897790][T12998] bridge0: port 1(wlan0) entered disabled state
[  131.900703][T12998] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  131.904490][T12998] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  132.201357][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  132.602816][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.616124][T13038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3051'.
[  132.841124][T13043] bond2: (slave geneve3): Opening slave failed
[  132.923200][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  132.976869][T13055] C speed is unknown, defaulting to 1000
[  133.028564][T13055] C speed is unknown, defaulting to 1000
[  133.155540][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'.
[  133.241348][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  133.489706][T13094] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.528251][T13094] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.585867][T13094] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.673347][T13094] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.725024][ T5709] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.741889][ T6467] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.745285][ T6467] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.748601][ T6467] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.897129][T13131] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.939695][T13131] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.018101][T13131] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.056282][T13131] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.146907][ T5709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.152968][ T5709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.161168][T13160] bridge0: port 3(vlan2) entered blocking state
[  134.161877][T13162] netlink: 'syz.0.3096': attribute type 1 has an invalid length.
[  134.164687][T13160] bridge0: port 3(vlan2) entered disabled state
[  134.169815][T13160] vlan2: entered allmulticast mode
[  134.173717][T13160] bridge0: entered allmulticast mode
[  134.177252][T13160] vlan2: left allmulticast mode
[  134.179070][T13160] bridge0: left allmulticast mode
[  134.182736][ T5709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.194086][ T5709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.203728][T13162] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  134.208898][T13162] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  134.213968][T13162] bond3: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  134.282483][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  134.323679][T13178] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  134.327675][T13178] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  134.619415][T13212] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  134.779402][T13238] : renamed from bond_slave_0
[  135.502068][   T33] audit: type=1804 audit(1756670309.104:7): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3148" name="/newroot/1062/cgroup.controllers" dev="tmpfs" ino=5367 res=1 errno=0
[  135.511053][   T33] audit: type=1800 audit(1756670309.104:8): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3148" name="cgroup.controllers" dev="tmpfs" ino=5367 res=0 errno=0
[  135.521635][   T33] audit: type=1800 audit(1756670309.104:9): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3148" name="cgroup.controllers" dev="tmpfs" ino=5367 res=0 errno=0
[  135.648057][T13293] C speed is unknown, defaulting to 1000
[  135.681087][T13293] C speed is unknown, defaulting to 1000
[  135.752094][T13293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.928385][T13305] __nla_validate_parse: 12 callbacks suppressed
[  135.928397][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'.
[  135.935185][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3160'.
[  135.938377][T13305] netlink: 'syz.1.3160': attribute type 11 has an invalid length.
[  137.315241][T13342] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3176'.
[  137.594148][T13353] bridge0: port 2(batadv_slave_1) entered blocking state
[  137.596909][T13353] bridge0: port 2(batadv_slave_1) entered disabled state
[  137.599738][T13353] batadv_slave_1: entered allmulticast mode
[  137.637367][T13353] batadv_slave_1: entered promiscuous mode
[  137.668653][T13353] batadv_slave_1: left allmulticast mode
[  137.670472][T13353] batadv_slave_1: left promiscuous mode
[  137.689306][T13353] bridge0: port 2(batadv_slave_1) entered disabled state
[  137.765039][T13369] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  138.033627][T13399] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3195'.
[  138.528243][T13421] C speed is unknown, defaulting to 1000
[  138.649468][T13421] C speed is unknown, defaulting to 1000
[  138.737808][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'.
[  138.748652][T13432] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.761271][T13432] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.337457][T13481] netlink: 'syz.1.3227': attribute type 11 has an invalid length.
[  139.554410][T13486] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3229'.
[  139.557858][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3229'.
[  139.633469][T13496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.031002][T13507] ieee802154 phy1 wpan1: encryption failed: -90
[  140.194610][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'.
[  140.347184][T13542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3254'.
[  140.410372][T13550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.413090][T13550] syzkaller0: entered promiscuous mode
[  140.414999][T13550] syzkaller0: entered allmulticast mode
[  140.419134][T13550] tipc: Resetting bearer <eth:syzkaller0>
[  140.422305][T13549] tipc: Resetting bearer <eth:syzkaller0>
[  140.425072][T13549] tipc: Disabling bearer <eth:syzkaller0>
[  140.590525][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3264'.
[  140.649393][T13567] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000
[  140.702649][T13573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.989586][T13591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3278'.
[  141.117382][T13601] C speed is unknown, defaulting to 1000
[  141.154430][T13601] C speed is unknown, defaulting to 1000
[  141.248209][T13612] netlink: 'syz.1.3287': attribute type 8 has an invalid length.
[  141.408776][T13625] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3290'.
[  141.450972][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3295'.
[  141.459105][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3295'.
[  141.699518][T13671] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3314'.
[  141.745316][T13668] geneve3: entered promiscuous mode
[  141.747612][ T5974] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  141.750448][ T5974] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  141.754006][ T5974] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  141.756700][ T5974] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  141.827013][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'.
[  141.837410][T13688] ==================================================================
[  141.840664][T13688] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  141.843863][T13688] Read of size 2 at addr ffff888111b7c142 by task syz.0.3321/13688
[  141.847951][T13688] 
[  141.848957][T13688] CPU: 1 UID: 0 PID: 13688 Comm: syz.0.3321 Not tainted syzkaller #0 PREEMPT(full) 
[  141.848974][T13688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.848981][T13688] Call Trace:
[  141.848987][T13688]  <TASK>
[  141.848993][T13688]  dump_stack_lvl+0x189/0x250
[  141.849014][T13688]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.849029][T13688]  ? lock_release+0x4b/0x3e0
[  141.849050][T13688]  ? __virt_addr_valid+0x4a5/0x5c0
[  141.849067][T13688]  print_report+0xca/0x240
[  141.849079][T13688]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  141.849090][T13688]  kasan_report+0x118/0x150
[  141.849108][T13688]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  141.849122][T13688]  __xfrm_state_lookup+0x6ad/0x8d0
[  141.849136][T13688]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  141.849150][T13688]  ? xfrm_state_lookup+0x45/0x1e0
[  141.849165][T13688]  xfrm_state_lookup+0x11e/0x1e0
[  141.849180][T13688]  ipcomp4_init_state+0x205/0xb20
[  141.849193][T13688]  ? lock_release+0x4b/0x3e0
[  141.849209][T13688]  ? rcu_is_watching+0x15/0xb0
[  141.849223][T13688]  __xfrm_init_state+0xa76/0x13f0
[  141.849237][T13688]  ? __xfrm_init_state+0x7ef/0x13f0
[  141.849252][T13688]  xfrm_add_sa+0x2f5b/0x4070
[  141.849269][T13688]  ? __pfx_xfrm_add_sa+0x10/0x10
[  141.849281][T13688]  ? apparmor_capable+0x137/0x1b0
[  141.849297][T13688]  ? __nla_parse+0x40/0x60
[  141.849316][T13688]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.849333][T13688]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.849357][T13688]  ? __pfx___mutex_trylock_common+0x10/0x10
[  141.849370][T13688]  ? kasan_save_track+0x4f/0x80
[  141.849385][T13688]  ? rcu_is_watching+0x15/0xb0
[  141.849395][T13688]  ? trace_contention_end+0x39/0x120
[  141.849408][T13688]  ? __mutex_lock+0x335/0x1350
[  141.849427][T13688]  netlink_rcv_skb+0x208/0x470
[  141.849453][T13688]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  141.849467][T13688]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  141.849489][T13688]  ? lock_release+0x4b/0x3e0
[  141.849506][T13688]  ? net_generic+0x1e/0x240
[  141.849520][T13688]  ? net_generic+0x1e/0x240
[  141.849534][T13688]  ? netlink_deliver_tap+0x2e/0x1b0
[  141.849552][T13688]  xfrm_netlink_rcv+0x79/0x90
[  141.849565][T13688]  netlink_unicast+0x82f/0x9e0
[  141.849583][T13688]  ? __pfx_netlink_unicast+0x10/0x10
[  141.849599][T13688]  ? netlink_sendmsg+0x642/0xb30
[  141.849615][T13688]  ? skb_put+0x11b/0x210
[  141.849627][T13688]  netlink_sendmsg+0x805/0xb30
[  141.849647][T13688]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.849665][T13688]  ? futex_unqueue+0x22/0x240
[  141.849709][T13688]  ? aa_sock_msg_perm+0xf1/0x1d0
[  141.849721][T13688]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.849735][T13688]  ? __pfx_netlink_sendmsg+0x10/0x10
[  141.849754][T13688]  __sock_sendmsg+0x21c/0x270
[  141.849771][T13688]  ____sys_sendmsg+0x505/0x830
[  141.849785][T13688]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.849799][T13688]  ? import_iovec+0x74/0xa0
[  141.849814][T13688]  ___sys_sendmsg+0x21f/0x2a0
[  141.849826][T13688]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.849839][T13688]  ? futex_wait+0x285/0x360
[  141.849862][T13688]  ? __fget_files+0x2a/0x420
[  141.849878][T13688]  ? __fget_files+0x3a0/0x420
[  141.849897][T13688]  __x64_sys_sendmsg+0x19b/0x260
[  141.849909][T13688]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  141.849927][T13688]  ? rcu_is_watching+0x15/0xb0
[  141.849939][T13688]  do_syscall_64+0xfa/0x3b0
[  141.849957][T13688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.849969][T13688]  ? exc_page_fault+0x9f/0xf0
[  141.849985][T13688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.849997][T13688] RIP: 0033:0x7feb22b8ebe9
[  141.850009][T13688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.850019][T13688] RSP: 002b:00007feb23ad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  141.850034][T13688] RAX: ffffffffffffffda RBX: 00007feb22dc5fa0 RCX: 00007feb22b8ebe9
[  141.850043][T13688] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  141.850051][T13688] RBP: 00007feb22c11e19 R08: 0000000000000000 R09: 0000000000000000
[  141.850058][T13688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.850066][T13688] R13: 00007feb22dc6038 R14: 00007feb22dc5fa0 R15: 00007ffcaaab9ef8
[  141.850080][T13688]  </TASK>
[  141.850085][T13688] 
[  142.014915][T13688] Allocated by task 9296:
[  142.016728][T13688]  kasan_save_track+0x3e/0x80
[  142.018729][T13688]  __kasan_slab_alloc+0x6c/0x80
[  142.020736][T13688]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  142.023028][T13688]  xfrm_state_alloc+0x24/0x2f0
[  142.025089][T13688]  __find_acq_core+0x8a7/0x1c00
[  142.027157][T13688]  xfrm_find_acq+0x78/0xa0
[  142.029015][T13688]  xfrm_alloc_userspi+0x6b3/0xc90
[  142.031093][T13688]  xfrm_user_rcv_msg+0x7a3/0xab0
[  142.033092][T13688]  netlink_rcv_skb+0x208/0x470
[  142.035043][T13688]  xfrm_netlink_rcv+0x79/0x90
[  142.036995][T13688]  netlink_unicast+0x82f/0x9e0
[  142.038985][T13688]  netlink_sendmsg+0x805/0xb30
[  142.040968][T13688]  __sock_sendmsg+0x21c/0x270
[  142.042898][T13688]  ____sys_sendmsg+0x505/0x830
[  142.044868][T13688]  ___sys_sendmsg+0x21f/0x2a0
[  142.046790][T13688]  __x64_sys_sendmsg+0x19b/0x260
[  142.048844][T13688]  do_syscall_64+0xfa/0x3b0
[  142.051296][T13688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.053726][T13688] 
[  142.054721][T13688] Freed by task 47:
[  142.056306][T13688]  kasan_save_track+0x3e/0x80
[  142.058258][T13688]  kasan_save_free_info+0x46/0x50
[  142.060302][T13688]  __kasan_slab_free+0x5b/0x80
[  142.062291][T13688]  kmem_cache_free+0x18f/0x400
[  142.064249][T13688]  xfrm_state_gc_task+0x52d/0x6b0
[  142.066290][T13688]  process_scheduled_works+0xae1/0x17b0
[  142.068531][T13688]  worker_thread+0x8a0/0xda0
[  142.070437][T13688]  kthread+0x711/0x8a0
[  142.072101][T13688]  ret_from_fork+0x3fc/0x770
[  142.073996][T13688]  ret_from_fork_asm+0x1a/0x30
[  142.075926][T13688] 
[  142.076930][T13688] The buggy address belongs to the object at ffff888111b7c000
[  142.076930][T13688]  which belongs to the cache xfrm_state of size 928
[  142.081780][T13688] The buggy address is located 322 bytes inside of
[  142.081780][T13688]  freed 928-byte region [ffff888111b7c000, ffff888111b7c3a0)
[  142.086255][T13688] 
[  142.087156][T13688] The buggy address belongs to the physical page:
[  142.089445][T13688] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111b7fa80 pfn:0x111b7c
[  142.092702][T13688] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  142.095477][T13688] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  142.098078][T13688] page_type: f5(slab)
[  142.099568][T13688] raw: 057ff00000000040 ffff88801beb0780 dead000000000122 0000000000000000
[  142.102727][T13688] raw: ffff888111b7fa80 00000000800e0008 00000000f5000000 0000000000000000
[  142.105979][T13688] head: 057ff00000000040 ffff88801beb0780 dead000000000122 0000000000000000
[  142.109164][T13688] head: ffff888111b7fa80 00000000800e0008 00000000f5000000 0000000000000000
[  142.112379][T13688] head: 057ff00000000002 ffffea000446df01 00000000ffffffff 00000000ffffffff
[  142.115650][T13688] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  142.118634][T13688] page dumped because: kasan: bad access detected
[  142.120719][T13688] page_owner tracks the page as allocated
[  142.122523][T13688] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6305, tgid 6304 (syz.0.154), ts 50627953573, free_ts 50502473421
[  142.128773][T13688]  post_alloc_hook+0x240/0x2a0
[  142.130427][T13688]  get_page_from_freelist+0x21e4/0x22c0
[  142.132256][T13688]  __alloc_frozen_pages_noprof+0x181/0x370
[  142.134403][T13688]  alloc_pages_mpol+0x232/0x4a0
[  142.136150][T13688]  allocate_slab+0x8a/0x370
[  142.137622][T13688]  ___slab_alloc+0xbeb/0x1410
[  142.139297][T13688]  kmem_cache_alloc_noprof+0x283/0x3c0
[  142.141326][T13688]  xfrm_state_alloc+0x24/0x2f0
[  142.143193][T13688]  __find_acq_core+0x8a7/0x1c00
[  142.144809][T13688]  xfrm_find_acq+0x78/0xa0
[  142.146277][T13688]  xfrm_alloc_userspi+0x6b3/0xc90
[  142.147933][T13688]  xfrm_user_rcv_msg+0x7a3/0xab0
[  142.149608][T13688]  netlink_rcv_skb+0x208/0x470
[  142.151192][T13688]  xfrm_netlink_rcv+0x79/0x90
[  142.152811][T13688]  netlink_unicast+0x82f/0x9e0
[  142.154726][T13688]  netlink_sendmsg+0x805/0xb30
[  142.156702][T13688] page last free pid 6293 tgid 6292 stack trace:
[  142.159257][T13688]  __free_frozen_pages+0xbc4/0xd30
[  142.161369][T13688]  stack_depot_save_flags+0x436/0x860
[  142.163547][T13688]  kasan_save_track+0x4f/0x80
[  142.165476][T13688]  __kasan_kmalloc+0x93/0xb0
[  142.167349][T13688]  __kmalloc_noprof+0x27a/0x4f0
[  142.169354][T13688]  l2tp_session_create+0x44/0xd60
[  142.171449][T13688]  l2tp_eth_create+0x172/0xbd0
[  142.173444][T13688]  l2tp_nl_cmd_session_create+0x733/0xc20
[  142.175808][T13688]  genl_family_rcv_msg_doit+0x215/0x300
[  142.178110][T13688]  genl_rcv_msg+0x60e/0x790
[  142.180009][T13688]  netlink_rcv_skb+0x208/0x470
[  142.182011][T13688]  genl_rcv+0x28/0x40
[  142.183663][T13688]  netlink_unicast+0x82f/0x9e0
[  142.185750][T13688]  netlink_sendmsg+0x805/0xb30
[  142.187762][T13688]  __sock_sendmsg+0x21c/0x270
[  142.189695][T13688]  ____sys_sendmsg+0x505/0x830
[  142.191664][T13688] 
[  142.192696][T13688] Memory state around the buggy address:
[  142.194955][T13688]  ffff888111b7c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.198213][T13688]  ffff888111b7c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.201486][T13688] >ffff888111b7c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.204721][T13688]                                            ^
[  142.207232][T13688]  ffff888111b7c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.210502][T13688]  ffff888111b7c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.213807][T13688] ==================================================================
[  142.218854][T13688] Kernel panic - not syncing: KASAN: panic_on_warn set ...
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  142.221836][T13688] CPU: 1 UID: 0 PID: 13688 Comm: syz.0.3321 Not tainted syzkaller #0 PREEMPT(full) 
[  142.225718][T13688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.229783][T13688] Call Trace:
[  142.231183][T13688]  <TASK>
[  142.232425][T13688]  dump_stack_lvl+0x99/0x250
[  142.234361][T13688]  ? __asan_memcpy+0x40/0x70
[  142.236314][T13688]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.238450][T13688]  ? __pfx__printk+0x10/0x10
[  142.240342][T13688]  vpanic+0x281/0x750
[  142.242032][T13688]  ? preempt_schedule+0xae/0xc0
[  142.244064][T13688]  ? __pfx_vpanic+0x10/0x10
[  142.245947][T13688]  ? preempt_schedule_common+0x83/0xd0
[  142.248157][T13688]  ? preempt_schedule+0xae/0xc0
[  142.250184][T13688]  ? __pfx_preempt_schedule+0x10/0x10
[  142.252430][T13688]  panic+0xb9/0xc0
[  142.253974][T13688]  ? __pfx_panic+0x10/0x10
[  142.255835][T13688]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  142.258287][T13688]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  142.260490][T13688]  check_panic_on_warn+0x89/0xb0
[  142.262513][T13688]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  142.264648][T13688]  end_report+0x78/0x160
[  142.266426][T13688]  kasan_report+0x129/0x150
[  142.268277][T13688]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  142.270445][T13688]  __xfrm_state_lookup+0x6ad/0x8d0
[  142.272557][T13688]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  142.274943][T13688]  ? xfrm_state_lookup+0x45/0x1e0
[  142.277196][T13688]  xfrm_state_lookup+0x11e/0x1e0
[  142.279218][T13688]  ipcomp4_init_state+0x205/0xb20
[  142.281297][T13688]  ? lock_release+0x4b/0x3e0
[  142.283200][T13688]  ? rcu_is_watching+0x15/0xb0
[  142.285147][T13688]  __xfrm_init_state+0xa76/0x13f0
[  142.287237][T13688]  ? __xfrm_init_state+0x7ef/0x13f0
[  142.289362][T13688]  xfrm_add_sa+0x2f5b/0x4070
[  142.291278][T13688]  ? __pfx_xfrm_add_sa+0x10/0x10
[  142.293344][T13688]  ? apparmor_capable+0x137/0x1b0
[  142.295407][T13688]  ? __nla_parse+0x40/0x60
[  142.297318][T13688]  xfrm_user_rcv_msg+0x7a3/0xab0
[  142.299388][T13688]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  142.301718][T13688]  ? __pfx___mutex_trylock_common+0x10/0x10
[  142.304170][T13688]  ? kasan_save_track+0x4f/0x80
[  142.306232][T13688]  ? rcu_is_watching+0x15/0xb0
[  142.308216][T13688]  ? trace_contention_end+0x39/0x120
[  142.310142][T13688]  ? __mutex_lock+0x335/0x1350
[  142.311928][T13688]  netlink_rcv_skb+0x208/0x470
[  142.313492][T13688]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  142.315308][T13688]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  142.317074][T13688]  ? lock_release+0x4b/0x3e0
[  142.318608][T13688]  ? net_generic+0x1e/0x240
[  142.320085][T13688]  ? net_generic+0x1e/0x240
[  142.321616][T13688]  ? netlink_deliver_tap+0x2e/0x1b0
[  142.323605][T13688]  xfrm_netlink_rcv+0x79/0x90
[  142.325234][T13688]  netlink_unicast+0x82f/0x9e0
[  142.327051][T13688]  ? __pfx_netlink_unicast+0x10/0x10
[  142.329063][T13688]  ? netlink_sendmsg+0x642/0xb30
[  142.330829][T13688]  ? skb_put+0x11b/0x210
[  142.332295][T13688]  netlink_sendmsg+0x805/0xb30
[  142.334082][T13688]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.335826][T13688]  ? futex_unqueue+0x22/0x240
[  142.337701][T13688]  ? aa_sock_msg_perm+0xf1/0x1d0
[  142.339444][T13688]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  142.341296][T13688]  ? __pfx_netlink_sendmsg+0x10/0x10
[  142.343083][T13688]  __sock_sendmsg+0x21c/0x270
[  142.344613][T13688]  ____sys_sendmsg+0x505/0x830
[  142.346321][T13688]  ? __pfx_____sys_sendmsg+0x10/0x10
[  142.348106][T13688]  ? import_iovec+0x74/0xa0
[  142.349637][T13688]  ___sys_sendmsg+0x21f/0x2a0
[  142.351176][T13688]  ? __pfx____sys_sendmsg+0x10/0x10
[  142.352932][T13688]  ? futex_wait+0x285/0x360
[  142.354689][T13688]  ? __fget_files+0x2a/0x420
[  142.356229][T13688]  ? __fget_files+0x3a0/0x420
[  142.357878][T13688]  __x64_sys_sendmsg+0x19b/0x260
[  142.359482][T13688]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  142.361268][T13688]  ? rcu_is_watching+0x15/0xb0
[  142.362849][T13688]  do_syscall_64+0xfa/0x3b0
[  142.364349][T13688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.366404][T13688]  ? exc_page_fault+0x9f/0xf0
[  142.368068][T13688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.370173][T13688] RIP: 0033:0x7feb22b8ebe9
[  142.371614][T13688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.378114][T13688] RSP: 002b:00007feb23ad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.380801][T13688] RAX: ffffffffffffffda RBX: 00007feb22dc5fa0 RCX: 00007feb22b8ebe9
[  142.383493][T13688] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  142.386340][T13688] RBP: 00007feb22c11e19 R08: 0000000000000000 R09: 0000000000000000
[  142.389042][T13688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.391605][T13688] R13: 00007feb22dc6038 R14: 00007feb22dc5fa0 R15: 00007ffcaaab9ef8
[  142.394559][T13688]  </TASK>
[  142.396462][T13688] Kernel Offset: disabled
[  142.397868][T13688] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:58:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000053dda RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000053dda RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000007e50
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81703490
R12=000000000fffdb17 R13=dffffc0000000000 R14=0000000000053dda R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555573bb45c8 CR3=00000001114d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f56f0797498 00007f56f0797470 XMM03=00007f56f07974a8 00007f56f07974a0
XMM04=00007f56f12fd100 00007f56f0797460 XMM05=00007f56f0797478 00007f56f07974c0
XMM06=00007f56f07974b8 00007f56f07974b0 XMM07=00007f56f07974a8 00007f56f07974a0
XMM08=0000000000000000 00007f56f0612ee7 XMM09=0000000000000000 00007f56f0612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001144 RDI=0000000000001145 RBP=00000000000003f8 RSP=ffffc900079f6930
R8 =ffff888107d28237 R9 =1ffff11020fa5046 R10=dffffc0000000000 R11=ffffffff854f1e80
R12=dffffc0000000000 R13=ffffffff99afa8ff R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1efc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007feb23ad66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb23ad5fc8 CR3=000000012bab2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007feb22d97498 00007feb22d97470 XMM03=00007feb22d974a8 00007feb22d974a0
XMM04=00007feb238fd100 00007feb22d97460 XMM05=00007feb22d97478 00007feb22d974c0
XMM06=00007feb22d974b8 00007feb22d974b0 XMM07=00007feb22d974a8 00007feb22d974a0
XMM08=0000000000000000 00007feb22c12ee7 XMM09=0000000000000000 00007feb22c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
