last executing test programs:

1.556876413s ago: executing program 0 (id=2814):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b80)={0x44, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x2c, 0x1, 0x0, 0x1, [@nested={0x28, 0x1c, 0x0, 0x1, [@typed={0xc, 0x37, 0x0, 0x0, @u64=0xfffffffffffffff7}, @nested={0x18, 0x17, 0x0, 0x1, [@typed={0x11, 0x77, 0x0, 0x0, @str='0000:00:10.0\x00'}]}]}]}]}, 0x44}}, 0x4010)

1.508714506s ago: executing program 0 (id=2816):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$'], 0x24}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0)

1.508567171s ago: executing program 0 (id=2817):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x8, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000)
sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x930, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x35, 0x1, 0x0, 0x0, "c075bfebcd0ba27d0241591616a6b1cb67d98ec29b60126a252d15082816668e112528aec50cd3705b13923c6b01ee331a6f97344bf7669085864df306abfaa0"}}, 0x80}}, 0x11)

1.506090708s ago: executing program 0 (id=2818):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
sendfile(r2, r1, 0x0, 0x10000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r5, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0xffffffff000)
socket(0xa, 0x3, 0x3a)
connect$phonet_pipe(r0, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0)

844.486439ms ago: executing program 0 (id=2843):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x404, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000304ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2400c044)

790.193815ms ago: executing program 0 (id=2845):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r0, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dd6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d415c12e6c42021b43e26578db3f2b475ea0ebb199323d", 0xfffffda9, 0x0, &(0x7f0000000380), 0x10)

220.448173ms ago: executing program 1 (id=2862):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@updsa={0x150, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5e, 0x14, {{'xcbc(aes)\x00'}, 0x90, 0x0, "0000009cc8d6d2287e1ad94098731cb600ff"}}]}, 0x150}}, 0x0)

220.106065ms ago: executing program 1 (id=2864):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xb, 0x6, 0x5}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x0, 0x61, 0x2e, 0x5f, 0x2e, 0x5f, 0x0]}}, 0x0, 0x3c, 0x0, 0x1, 0x5}, 0x28)

160.234055ms ago: executing program 2 (id=2865):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9f}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

160.073157ms ago: executing program 1 (id=2866):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

159.9076ms ago: executing program 2 (id=2867):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map, 0xffffffffffffffff, 0x2b, 0x4}, 0x20)

74.920078ms ago: executing program 2 (id=2868):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast})

74.699196ms ago: executing program 1 (id=2869):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)

72.957786ms ago: executing program 2 (id=2870):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4)

72.618594ms ago: executing program 1 (id=2871):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xa1, @mcast1, 0x6}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14)

437.109µs ago: executing program 2 (id=2872):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

192.834µs ago: executing program 1 (id=2873):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0)

0s ago: executing program 2 (id=2874):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001a"], 0x138}, 0x1, 0x0, 0x0, 0x48881}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41813' (ED25519) to the list of known hosts.
syzkaller login: [   56.188139][ T5830] cgroup: Unknown subsys name 'net'
[   56.308788][ T5830] cgroup: Unknown subsys name 'cpuset'
[   56.314605][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.764014][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.997781][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.001703][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.005838][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.008887][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.011480][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.050015][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.054805][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.058107][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.060880][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.063866][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.067672][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.071638][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.075594][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.078609][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.100702][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.261735][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   62.370017][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.373446][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.377682][ T5845] bridge_slave_0: entered allmulticast mode
[   62.381322][ T5845] bridge_slave_0: entered promiscuous mode
[   62.388029][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.390930][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.393861][ T5845] bridge_slave_1: entered allmulticast mode
[   62.397897][ T5845] bridge_slave_1: entered promiscuous mode
[   62.451672][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.472099][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.547697][ T5845] team0: Port device team_slave_0 added
[   62.551949][ T5845] team0: Port device team_slave_1 added
[   62.581640][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   62.593233][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.596214][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.604402][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.609357][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.611742][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.621742][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.626033][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   62.760388][ T5845] hsr_slave_0: entered promiscuous mode
[   62.763337][ T5845] hsr_slave_1: entered promiscuous mode
[   62.796546][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.798839][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.801527][ T5849] bridge_slave_0: entered allmulticast mode
[   62.805781][ T5849] bridge_slave_0: entered promiscuous mode
[   62.823251][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.826594][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.829640][ T5851] bridge_slave_0: entered allmulticast mode
[   62.839184][ T5851] bridge_slave_0: entered promiscuous mode
[   62.863624][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.866766][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.869891][ T5849] bridge_slave_1: entered allmulticast mode
[   62.873871][ T5849] bridge_slave_1: entered promiscuous mode
[   62.878588][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.881513][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.885049][ T5851] bridge_slave_1: entered allmulticast mode
[   62.888531][ T5851] bridge_slave_1: entered promiscuous mode
[   62.942545][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.947823][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.954317][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.967785][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.013861][ T5849] team0: Port device team_slave_0 added
[   63.030697][ T5851] team0: Port device team_slave_0 added
[   63.037219][ T5851] team0: Port device team_slave_1 added
[   63.063743][ T5849] team0: Port device team_slave_1 added
[   63.119866][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.122790][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.133205][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.145826][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.148720][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.159889][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.171201][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.173904][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.183191][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.188602][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.191496][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.204142][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.303456][ T5851] hsr_slave_0: entered promiscuous mode
[   63.307180][ T5851] hsr_slave_1: entered promiscuous mode
[   63.309654][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   63.311772][ T5851] Cannot create hsr debugfs directory
[   63.319415][ T5849] hsr_slave_0: entered promiscuous mode
[   63.322518][ T5849] hsr_slave_1: entered promiscuous mode
[   63.325894][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   63.328113][ T5849] Cannot create hsr debugfs directory
[   63.380682][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.405822][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.426127][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.439968][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.639698][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.648684][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.660064][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.677441][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.721351][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.736902][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.752702][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.759065][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.768636][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.812144][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   63.842357][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.845118][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.870073][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.873031][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.937029][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.972417][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   64.001571][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.004741][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.021491][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.025944][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.028659][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.077658][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   64.088786][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.091009][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.095769][   T54] Bluetooth: hci0: command tx timeout
[   64.095892][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.100969][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.153011][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.159117][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.174909][   T54] Bluetooth: hci1: command tx timeout
[   64.177566][   T54] Bluetooth: hci2: command tx timeout
[   64.211547][ T5845] veth0_vlan: entered promiscuous mode
[   64.220638][ T5845] veth1_vlan: entered promiscuous mode
[   64.241568][ T5845] veth0_macvtap: entered promiscuous mode
[   64.248051][ T5845] veth1_macvtap: entered promiscuous mode
[   64.260065][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.277212][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.287133][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.291491][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.301717][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.313134][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.377692][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.413608][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.434157][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.442129][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.488018][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.493947][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.498807][ T5851] veth0_vlan: entered promiscuous mode
[   64.501800][ T5849] veth0_vlan: entered promiscuous mode
[   64.525739][ T5851] veth1_vlan: entered promiscuous mode
[   64.530457][ T5849] veth1_vlan: entered promiscuous mode
[   64.584192][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.596546][ T5849] veth0_macvtap: entered promiscuous mode
[   64.601174][ T5849] veth1_macvtap: entered promiscuous mode
[   64.608208][ T5851] veth0_macvtap: entered promiscuous mode
[   64.619606][ T5851] veth1_macvtap: entered promiscuous mode
[   64.643986][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.660785][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.674132][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.678385][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.686021][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.697088][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.705794][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.722942][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.783389][ T5865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.789877][ T5865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.792827][ T5865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.813488][ T5865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.862336][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.889173][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.938647][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.957348][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.994834][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.001671][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.039134][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.042826][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.178360][ T5917] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   65.206279][ T5918] warning: `syz.1.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.678509][ T5943] netlink: 'syz.2.15': attribute type 2 has an invalid length.
[   65.689065][ T5943] Zero length message leads to an empty skb
[   66.175142][   T54] Bluetooth: hci0: command tx timeout
[   66.255176][   T54] Bluetooth: hci2: command tx timeout
[   66.265819][   T54] Bluetooth: hci1: command tx timeout
[   66.482291][ T5987] netlink: 'syz.0.31': attribute type 1 has an invalid length.
[   66.488204][ T5987] netlink: 'syz.0.31': attribute type 2 has an invalid length.
[   67.102872][ T6020] netlink: 'syz.0.41': attribute type 1 has an invalid length.
[   67.107139][ T6020] netlink: 168 bytes leftover after parsing attributes in process `syz.0.41'.
[   67.112081][ T6020] NCSI netlink: No device for ifindex 0
[   67.322395][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'.
[   67.573893][ T6051] netlink: 'syz.2.55': attribute type 10 has an invalid length.
[   67.602337][ T6051] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   67.606532][ T6051] team0: Failed to send options change via netlink (err -105)
[   67.609755][ T6051] team0: Port device netdevsim0 added
[   67.640609][ T6055] syzkaller0: entered promiscuous mode
[   67.642896][ T6055] syzkaller0: entered allmulticast mode
[   67.733887][ T6059] netlink: 'syz.2.59': attribute type 2 has an invalid length.
[   68.254865][   T54] Bluetooth: hci0: command tx timeout
[   68.334738][ T5853] Bluetooth: hci2: command tx timeout
[   68.337558][   T54] Bluetooth: hci1: command tx timeout
[   68.687290][ T6072] netlink: 'syz.0.65': attribute type 1 has an invalid length.
[   68.697468][ T6070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.63'.
[   68.912417][ T6086] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.988886][ T6088] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   69.216133][ T6107] netlink: 'syz.0.80': attribute type 7 has an invalid length.
[   69.220461][ T6107] netlink: 'syz.0.80': attribute type 8 has an invalid length.
[   69.657069][ T6133] syz.0.92 uses obsolete (PF_INET,SOCK_PACKET)
[   69.739755][ T6135] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   69.855630][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.859798][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.966702][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.976703][ T6136] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.091790][ T5912] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.098556][ T5912] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.102374][ T5912] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.107242][ T5912] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.337553][   T54] Bluetooth: hci0: command tx timeout
[   70.412132][ T6157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'.
[   70.416459][ T5853] Bluetooth: hci2: command tx timeout
[   70.418960][   T54] Bluetooth: hci1: command tx timeout
[   70.497655][ T6161] tipc: Started in network mode
[   70.501955][ T6161] tipc: Node identity de34e30830a1, cluster identity 4711
[   70.516676][ T6161] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.526272][ T6161] syzkaller0: entered promiscuous mode
[   70.529400][ T6161] syzkaller0: entered allmulticast mode
[   70.556625][ T6161] tipc: Resetting bearer <eth:syzkaller0>
[   70.562007][ T6158] tipc: Resetting bearer <eth:syzkaller0>
[   70.591277][ T6158] tipc: Disabling bearer <eth:syzkaller0>
[   70.601910][ T6163] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   70.607507][ T5896] IPVS: starting estimator thread 0...
[   70.704731][ T6165] IPVS: using max 80 ests per chain, 192000 per kthread
[   70.786130][ T6179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.874662][   T24] IPVS: starting estimator thread 0...
[   70.967679][ T6186] IPVS: using max 80 ests per chain, 192000 per kthread
[   71.218856][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.224275][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.276966][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'.
[   71.325215][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'.
[   71.730057][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'.
[   71.737998][ T6233] IPVS: Error joining to the multicast group
[   72.148337][ T6260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.145'.
[   72.436527][ T6274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.537726][ T6274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.627945][ T6274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.676711][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'.
[   72.728785][ T6274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.762521][ T6294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.870924][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.874400][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.897072][ T6294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.911482][ T6301] syzkaller0: entered promiscuous mode
[   72.914107][ T6301] syzkaller0: entered allmulticast mode
[   72.943114][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.953693][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.969336][ T6294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.115848][ T6294] team0: Failed to send options change via netlink (err -105)
[   73.120432][ T6294] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   73.128954][ T6294] team0: Port device netdevsim0 removed
[   73.133705][ T6294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.147228][ T6307] netlink: 'syz.0.165': attribute type 1 has an invalid length.
[   73.151783][ T6307] NCSI netlink: No device for ifindex 0
[   73.290559][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.294099][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.323469][ T5912] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.337548][ T5912] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.344823][ T6317] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   73.608123][ T6336] netlink: 'syz.2.180': attribute type 3 has an invalid length.
[   73.617225][ T6336] syz_tun: entered allmulticast mode
[   73.632588][ T6336] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.642526][ T6336] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   73.690899][ T6336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   73.722030][ T6345] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   73.727753][ T6335] syz_tun: left allmulticast mode
[   73.978930][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'.
[   74.188977][ T6390] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.204'.
[   74.279452][ T6394] tipc: Started in network mode
[   74.281683][ T6394] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[   74.288646][ T6394] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   74.527490][ T6411] lo speed is unknown, defaulting to 1000
[   74.530242][ T6411] lo speed is unknown, defaulting to 1000
[   74.533842][ T6411] lo speed is unknown, defaulting to 1000
[   74.545435][ T6411] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   74.576732][ T6411] lo speed is unknown, defaulting to 1000
[   74.577365][ T6416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.214'.
[   74.579808][ T6411] lo speed is unknown, defaulting to 1000
[   74.582890][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'.
[   74.586150][ T6411] lo speed is unknown, defaulting to 1000
[   74.675195][ T6411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.678889][ T6411] veth0_to_bridge: entered promiscuous mode
[   74.681032][ T6411] veth0_to_bridge: entered allmulticast mode
[   74.698398][ T6410] tipc: Disabling bearer <eth:syzkaller0>
[   74.801497][ T6425] openvswitch: netlink: IPv4 tunnel dst address is zero
[   74.866243][ T6428] netlink: 'syz.1.222': attribute type 4 has an invalid length.
[   75.243829][ T6456] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   75.337620][ T6464] wg1 speed is unknown, defaulting to 1000
[   75.340374][ T6464] wg1 speed is unknown, defaulting to 1000
[   75.343974][ T6464] wg1 speed is unknown, defaulting to 1000
[   75.358849][ T6464] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   75.392855][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'.
[   75.400833][ T6464] wg1 speed is unknown, defaulting to 1000
[   75.417772][ T6464] wg1 speed is unknown, defaulting to 1000
[   75.442981][ T6464] wg1 speed is unknown, defaulting to 1000
[   76.522074][ T6504] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.570295][ T6504] syzkaller0: entered promiscuous mode
[   76.572697][ T6504] syzkaller0: entered allmulticast mode
[   76.578572][ T6504] tipc: Resetting bearer <eth:syzkaller0>
[   76.602930][ T6503] tipc: Resetting bearer <eth:syzkaller0>
[   76.806161][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'.
[   77.222484][   T33] audit: type=1800 audit(1757384473.238:2): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.261" name="blkio.bfq.time_recursive" dev="tmpfs" ino=475 res=0 errno=0
[   77.552044][ T6503] tipc: Disabling bearer <eth:syzkaller0>
[   77.559383][ T6511] veth1_to_bond: entered allmulticast mode
[   77.572473][ T6513] bond0: (slave bond_slave_1): Releasing backup interface
[   77.729849][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'.
[   77.740056][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'.
[   78.009588][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'.
[   78.025763][ T6556] tipc: Enabled bearer <udp:syz2>, priority 10
[   78.034200][ T6558] bond0: entered promiscuous mode
[   78.036657][ T6558] bond_slave_0: entered promiscuous mode
[   78.052146][ T6558] bond0: left promiscuous mode
[   78.054378][ T6558] bond_slave_0: left promiscuous mode
[   78.146262][ T6559] veth0_vlan: entered allmulticast mode
[   78.348579][ T6588] syz_tun: entered allmulticast mode
[   78.417596][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'.
[   78.430518][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.434587][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.518956][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.526172][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.579401][ T6588] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   78.597487][ T5912] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.602757][ T5912] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.613872][ T5912] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.619846][ T5912] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.682729][ T6603] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   78.737189][ T6603] bond1: entered promiscuous mode
[   78.739892][ T6603] bond1: entered allmulticast mode
[   78.742101][ T6603] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.921382][ T6621] netlink: 84 bytes leftover after parsing attributes in process `syz.2.306'.
[   79.030312][   T24] tipc: Node number set to 4002800392
[   79.430805][ T6647] netlink: 'syz.2.314': attribute type 13 has an invalid length.
[   79.433831][ T6647] netlink: 'syz.2.314': attribute type 17 has an invalid length.
[   79.520694][ T6647] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.526492][ T6647] 8021q: adding VLAN 0 to HW filter on device team0
[   79.533242][ T6647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.612679][ T6644] lo speed is unknown, defaulting to 1000
[   79.617439][ T6644] wg1 speed is unknown, defaulting to 1000
[   79.773743][ T6644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.942703][ T6633] Bluetooth: hci0: Opcode 0x080f failed: -4
[   80.022846][ T6671] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.322'.
[   80.120232][ T6680] sctp: [Deprecated]: syz.1.326 (pid 6680) Use of int in max_burst socket option.
[   80.120232][ T6680] Use struct sctp_assoc_value instead
[   80.289414][ T6647] syz.2.314 (6647) used greatest stack depth: 19232 bytes left
[   80.320074][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'.
[   80.324091][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'.
[   80.345272][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'.
[   80.351075][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'.
[   80.380994][ T6699] netlink: 'syz.0.334': attribute type 16 has an invalid length.
[   80.384437][ T6699] netlink: 'syz.0.334': attribute type 17 has an invalid length.
[   80.477546][ T6699] IPv6: NLM_F_REPLACE set, but no existing node found!
[   80.668075][ T6716] syzkaller0: entered promiscuous mode
[   80.670625][ T6716] syzkaller0: entered allmulticast mode
[   81.135943][   T54] Bluetooth: hci0: command 0x080f tx timeout
[   82.009375][ T6803] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   82.192603][ T6813] lo speed is unknown, defaulting to 1000
[   82.201556][ T6813] wg1 speed is unknown, defaulting to 1000
[   82.218413][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.929592][ T6844] __nla_validate_parse: 10 callbacks suppressed
[   82.929606][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'.
[   83.197194][ T6864] netlink: 'syz.2.406': attribute type 1 has an invalid length.
[   83.200920][ T6864] netlink: 'syz.2.406': attribute type 2 has an invalid length.
[   83.251581][ T6866] netlink: 312 bytes leftover after parsing attributes in process `syz.0.407'.
[   83.547777][ T6892] netlink: 'syz.0.417': attribute type 11 has an invalid length.
[   83.921797][   T33] audit: type=1800 audit(1757384479.938:3): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.425" name="memory.events" dev="tmpfs" ino=790 res=0 errno=0
[   84.048260][ T6923] lo speed is unknown, defaulting to 1000
[   84.053125][ T6923] wg1 speed is unknown, defaulting to 1000
[   84.945287][ T6959] lo speed is unknown, defaulting to 1000
[   84.948502][ T6959] wg1 speed is unknown, defaulting to 1000
[   85.249057][ T6978] nbd: must specify at least one socket
[   85.439641][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.465750][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.480087][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.483564][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.596929][ T7001] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[   85.648504][ T7005] netlink: 216 bytes leftover after parsing attributes in process `syz.1.468'.
[   85.657655][ T7005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.468'.
[   85.661273][ T7005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.468'.
[   85.670483][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[   86.163775][ T7037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.483'.
[   86.487380][ T7060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'.
[   86.578257][    T9] cfg80211: failed to load regulatory.db
[   86.630792][ T7070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.921424][ T7083] Bluetooth: MGMT ver 1.23
[   87.031826][ T7099] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[   87.039264][ T7099] netlink: 208 bytes leftover after parsing attributes in process `syz.0.511'.
[   87.042968][ T7099] netlink: 'syz.0.511': attribute type 1 has an invalid length.
[   87.055206][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'.
[   87.201569][ T7118] openvswitch: netlink: IP tunnel dst address not specified
[   87.246187][ T7109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.253393][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.258231][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.274043][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.281210][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.325895][ T7109] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   87.508430][   T56] block nbd0: Receive control failed (result -104)
[   89.191623][ T7197] veth3: entered allmulticast mode
[   89.376748][ T7214] __nla_validate_parse: 3 callbacks suppressed
[   89.376762][ T7214] netlink: 48 bytes leftover after parsing attributes in process `syz.0.536'.
[   89.798696][ T7252] netlink: 112 bytes leftover after parsing attributes in process `syz.1.547'.
[   89.803795][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'.
[   90.147516][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.163224][ T7269] bond0: (slave bond1): Enslaving as an active interface with an up link
[   90.320762][ T7286] tipc: Started in network mode
[   90.334763][ T7286] tipc: Node identity 1e56536ca0c8, cluster identity 4711
[   90.337936][ T7286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.342278][ T7286] syzkaller0: entered promiscuous mode
[   90.345389][ T7286] syzkaller0: entered allmulticast mode
[   90.366825][ T7286] tipc: Resetting bearer <eth:syzkaller0>
[   90.375407][ T7284] tipc: Resetting bearer <eth:syzkaller0>
[   90.393307][ T7284] tipc: Disabling bearer <eth:syzkaller0>
[   90.492376][ T7298] netlink: 'syz.2.563': attribute type 4 has an invalid length.
[   90.649778][ T7314] netlink: 'syz.2.570': attribute type 1 has an invalid length.
[   90.923118][ T7332] netlink: 'syz.1.577': attribute type 4 has an invalid length.
[   90.980127][ T7332] netlink: 'syz.1.577': attribute type 4 has an invalid length.
[   91.031123][ T7341] syzkaller1: entered promiscuous mode
[   91.033409][ T7341] syzkaller1: entered allmulticast mode
[   91.478882][ T7374] netlink: 'syz.0.594': attribute type 42 has an invalid length.
[   91.565286][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'.
[   91.935068][ T7406] netlink: 'syz.0.604': attribute type 4 has an invalid length.
[   91.938446][ T7406] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.604'.
[   92.737452][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'.
[   92.740908][ T7462] netlink: 'syz.2.630': attribute type 1 has an invalid length.
[   92.743826][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.630'.
[   93.673913][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.636'.
[   93.789082][ T7476] team0 (unregistering): Port device team_slave_0 removed
[   93.793921][ T7476] team0 (unregistering): Port device team_slave_1 removed
[   93.841664][ T7482] team0: Port device team_slave_0 removed
[   93.877908][ T7488] netlink: 'syz.1.641': attribute type 10 has an invalid length.
[   93.952301][ T7492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.958951][ T7492] syzkaller0: entered promiscuous mode
[   93.961396][ T7492] syzkaller0: entered allmulticast mode
[   93.983932][ T7492] tipc: Resetting bearer <eth:syzkaller0>
[   93.998917][ T7491] tipc: Resetting bearer <eth:syzkaller0>
[   94.007351][ T7491] tipc: Disabling bearer <eth:syzkaller0>
[   94.114065][ T7496] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   94.820004][ T7536] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[   94.981526][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.669'.
[   95.224035][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'.
[   95.270320][ T7561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.273152][ T7561] syzkaller0: entered promiscuous mode
[   95.277442][ T7561] syzkaller0: entered allmulticast mode
[   95.290065][ T7561] tipc: Resetting bearer <eth:syzkaller0>
[   95.298320][ T7560] tipc: Resetting bearer <eth:syzkaller0>
[   95.308245][ T7560] tipc: Disabling bearer <eth:syzkaller0>
[   95.323539][ T7566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.327092][ T7566] syzkaller0: entered promiscuous mode
[   95.329390][ T7566] syzkaller0: entered allmulticast mode
[   95.343772][ T7566] tipc: Resetting bearer <eth:syzkaller0>
[   95.349143][ T7565] tipc: Resetting bearer <eth:syzkaller0>
[   95.357934][ T7565] tipc: Disabling bearer <eth:syzkaller0>
[   95.383696][ T7568] netlink: 'syz.2.677': attribute type 1 has an invalid length.
[   95.470466][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'.
[   95.628439][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'.
[   95.730793][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'.
[   95.744873][ T7585] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[   95.897933][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.688'.
[   95.948180][ T7593] netlink: 104 bytes leftover after parsing attributes in process `syz.1.689'.
[   95.997748][ T7595] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   96.193397][ T7607] netlink: 9 bytes leftover after parsing attributes in process `syz.2.696'.
[   96.250918][ T7613] TCP: TCP_TX_DELAY enabled
[   96.292476][ T7617] vlan0: entered promiscuous mode
[   96.327162][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[   96.423927][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'.
[   96.537519][ T7642] netlink: 'syz.1.713': attribute type 29 has an invalid length.
[   96.540939][ T7642] netlink: 'syz.1.713': attribute type 29 has an invalid length.
[   96.545450][ T7642] unsupported nla_type 58
[   96.636897][ T7640] tc_dump_action: action bad kind
[   96.868305][ T7666] IPVS: Scheduler module ip_vs_ not found
[   97.296283][   T54] Bluetooth: hci2: command tx timeout
[   97.390628][ T7716] netlink: 'syz.0.747': attribute type 21 has an invalid length.
[   98.594062][ T7782] netlink: 'syz.1.776': attribute type 83 has an invalid length.
[   99.373456][ T7834] netlink: 'syz.0.801': attribute type 7 has an invalid length.
[   99.555551][ T7849] lo speed is unknown, defaulting to 1000
[   99.562469][ T7849] wg1 speed is unknown, defaulting to 1000
[   99.813560][ T7871] syz_tun: entered allmulticast mode
[   99.830623][ T7871] dvmrp8: entered allmulticast mode
[   99.843600][ T7868] syz_tun: left allmulticast mode
[  101.084813][ T7935] __nla_validate_parse: 10 callbacks suppressed
[  101.084825][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.845'.
[  102.202873][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'.
[  102.922510][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'.
[  102.971971][ T7992] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.818371][ T8039] pim6reg: entered allmulticast mode
[  103.823654][ T8039] pim6reg: left allmulticast mode
[  104.007878][ T8055] netlink: 'syz.1.900': attribute type 10 has an invalid length.
[  104.021124][ T8055] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  104.501361][ T8092] gretap1: entered allmulticast mode
[  104.894419][ T8115] netlink: 368 bytes leftover after parsing attributes in process `syz.1.923'.
[  104.988098][ T8122] lo speed is unknown, defaulting to 1000
[  104.991799][ T8122] wg1 speed is unknown, defaulting to 1000
[  105.116254][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'.
[  105.663742][ T8180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.951'.
[  105.820087][ T8186] lo speed is unknown, defaulting to 1000
[  105.822835][ T8186] wg1 speed is unknown, defaulting to 1000
[  106.172811][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'.
[  106.177364][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'.
[  106.181192][ T8196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.305395][ T8206] veth0_to_bridge: left promiscuous mode
[  106.307557][ T8206] veth0_to_bridge: left allmulticast mode
[  106.311515][ T8206] vlan0: left promiscuous mode
[  106.314047][ T8208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.962'.
[  106.317544][ T8206] veth3: left allmulticast mode
[  106.323174][ T8206] gretap1: left allmulticast mode
[  106.474380][ T8217] Illegal XDP return value 4294967274 on prog  (id 154) dev syz_tun, expect packet loss!
[  106.649067][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.969'.
[  106.766874][ T8238] netlink: 'syz.0.974': attribute type 1 has an invalid length.
[  107.202949][ T8264] netlink: 'syz.2.985': attribute type 1 has an invalid length.
[  107.469498][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'.
[  107.854077][ T8319] bond1: left promiscuous mode
[  107.884003][ T8319] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  107.939800][ T8319] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1012'.
[  108.062987][ T8337] macvlan2: entered allmulticast mode
[  108.069761][ T8337] veth1_vlan: entered allmulticast mode
[  108.078299][ T8337] veth1_vlan: left allmulticast mode
[  108.301314][ T8350] lo speed is unknown, defaulting to 1000
[  108.307773][ T8350] wg1 speed is unknown, defaulting to 1000
[  108.381496][ T8364] bridge_slave_0: left allmulticast mode
[  108.383843][ T8364] bridge_slave_0: left promiscuous mode
[  108.389099][ T8364] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.397463][ T8364] bridge_slave_1: left allmulticast mode
[  108.399536][ T8364] bridge_slave_1: left promiscuous mode
[  108.401649][ T8364] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.421357][ T8364] bond0: (slave bond_slave_0): Releasing backup interface
[  108.425753][ T8364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.429472][ T8364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.093047][ T8449] netlink: 'syz.2.1072': attribute type 3 has an invalid length.
[  109.117862][ T8453] sctp: [Deprecated]: syz.2.1074 (pid 8453) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.117862][ T8453] Use struct sctp_sack_info instead
[  109.124224][ T8453] sctp: [Deprecated]: syz.2.1074 (pid 8453) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.124224][ T8453] Use struct sctp_sack_info instead
[  109.221461][ T8462] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1078'.
[  109.417243][ T8475] tap0: tun_chr_ioctl cmd 2148553947
[  109.472989][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'.
[  109.687758][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'.
[  110.496131][ T8547] trusted_key: syz.1.1117 sent an empty control message without MSG_MORE.
[  110.605285][ T8551] netlink: 'syz.1.1119': attribute type 10 has an invalid length.
[  110.608276][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1119'.
[  110.616531][ T8551] team0: Port device geneve0 added
[  110.930978][ T8570] IPVS: length: 24 != 1272
[  111.330099][ T8604] __nla_validate_parse: 2 callbacks suppressed
[  111.330110][ T8604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1139'.
[  111.348157][ T8604] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1139'.
[  111.401337][ T8614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'.
[  111.407759][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1141'.
[  111.411365][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1141'.
[  111.496565][ T8625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1147'.
[  111.856372][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'.
[  112.178357][ T8686] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1167'.
[  112.181492][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1167'.
[  112.204954][ T8686] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  112.362185][ T8700] netlink: 'syz.1.1172': attribute type 3 has an invalid length.
[  112.377134][ T8700] netlink: 'syz.1.1172': attribute type 3 has an invalid length.
[  112.617187][ T8716] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1176'.
[  112.955481][ T8754] netlink: 'syz.1.1193': attribute type 6 has an invalid length.
[  112.960303][ T8753] openvswitch: netlink: Multiple metadata blocks provided
[  112.980462][ T8754] netlink: 'syz.1.1193': attribute type 12 has an invalid length.
[  113.166445][ T8762] lo speed is unknown, defaulting to 1000
[  113.172197][ T8762] wg1 speed is unknown, defaulting to 1000
[  113.852390][ T8801] netlink: 'syz.2.1214': attribute type 1 has an invalid length.
[  115.080887][ T8842] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  115.106516][ T8842] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  115.182361][ T8854] netlink: 'syz.0.1238': attribute type 20 has an invalid length.
[  115.849416][ T8913] netlink: 'syz.0.1248': attribute type 3 has an invalid length.
[  115.888249][ T8924] IPv6: NLM_F_REPLACE set, but no existing node found!
[  116.044959][ T8938] syzkaller1: entered promiscuous mode
[  116.047040][ T8938] syzkaller1: entered allmulticast mode
[  116.217820][ T8955] netlink: 'syz.1.1275': attribute type 29 has an invalid length.
[  116.226080][ T8955] netlink: 'syz.1.1275': attribute type 29 has an invalid length.
[  116.229159][ T8955] netlink: 'syz.1.1275': attribute type 29 has an invalid length.
[  116.232249][ T8955] netlink: 'syz.1.1275': attribute type 29 has an invalid length.
[  116.237976][ T8955] netlink: 'syz.1.1275': attribute type 29 has an invalid length.
[  116.240849][ T8955] netlink: 'syz.1.1275': attribute type 29 has an invalid length.
[  116.243980][ T8955] netlink: 'syz.1.1275': attribute type 29 has an invalid length.
[  116.248785][ T8955] netlink: 'syz.1.1275': attribute type 29 has an invalid length.
[  116.370488][ T8971] syzkaller1: entered promiscuous mode
[  116.372864][ T8971] syzkaller1: entered allmulticast mode
[  116.622917][ T8991] __nla_validate_parse: 10 callbacks suppressed
[  116.622934][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'.
[  116.632625][ T8991] IPv6: Can't replace route, no match found
[  116.924467][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'.
[  116.967170][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1304'.
[  116.996727][ T9020] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1306'.
[  117.234228][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'.
[  117.273889][ T9044] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1318'.
[  117.464948][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  117.466413][ T9060] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  117.816805][ T9089] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1339'.
[  117.893090][ T9093] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1341'.
[  118.000071][ T9099] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1344'.
[  118.228906][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'.
[  118.607339][ T9140] lo speed is unknown, defaulting to 1000
[  118.611184][ T9140] wg1 speed is unknown, defaulting to 1000
[  118.629511][ T9143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.520450][ T9217] xt_HMARK: spi-set and port-set can't be combined
[  121.237718][ T9295] validate_nla: 26 callbacks suppressed
[  121.237732][ T9295] netlink: 'syz.2.1423': attribute type 1 has an invalid length.
[  121.264169][ T9295] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  121.273922][ T9295] gretap3: entered promiscuous mode
[  121.518396][ T9320] netlink: 'syz.0.1434': attribute type 3 has an invalid length.
[  121.807203][ T9337] __nla_validate_parse: 7 callbacks suppressed
[  121.807219][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'.
[  122.029891][ T9354] netlink: 'syz.0.1451': attribute type 1 has an invalid length.
[  122.033287][ T9354] netlink: 'syz.0.1451': attribute type 2 has an invalid length.
[  122.040810][ T9354] netlink: 'syz.0.1451': attribute type 1 has an invalid length.
[  122.044836][ T9354] netlink: 'syz.0.1451': attribute type 2 has an invalid length.
[  122.148754][ T9363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.316804][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'.
[  123.386417][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1475'.
[  123.687906][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'.
[  123.723791][ T9442] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1488'.
[  123.937697][ T9458] lo speed is unknown, defaulting to 1000
[  123.940735][ T9458] wg1 speed is unknown, defaulting to 1000
[  124.180612][ T9481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'.
[  124.392816][ T9496] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  124.470171][ T9502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.478257][ T9502] syzkaller0: entered promiscuous mode
[  124.480248][ T9502] syzkaller0: entered allmulticast mode
[  124.493548][ T9502] tipc: Resetting bearer <eth:syzkaller0>
[  124.498269][ T9501] tipc: Resetting bearer <eth:syzkaller0>
[  124.521622][ T9501] tipc: Disabling bearer <eth:syzkaller0>
[  124.656639][ T9517] bond0: (slave bond1): Error -95 calling ndo_bpf
[  124.890207][ T9538] netlink: 'syz.0.1528': attribute type 13 has an invalid length.
[  124.892932][ T9538] netlink: 'syz.0.1528': attribute type 17 has an invalid length.
[  124.936001][ T9538] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.941688][ T9538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.948392][    T9] lo speed is unknown, defaulting to 1000
[  124.951379][    T9] syz2: Port: 1 Link ACTIVE
[  124.951635][ T9539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.992047][ T9539] syzkaller0: entered promiscuous mode
[  124.994691][ T9539] syzkaller0: entered allmulticast mode
[  124.997950][ T9539] tipc: Resetting bearer <eth:syzkaller0>
[  125.006564][ T9537] tipc: Resetting bearer <eth:syzkaller0>
[  125.368218][ T9551] netlink: 'syz.0.1533': attribute type 1 has an invalid length.
[  125.371526][ T9551] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1533'.
[  125.986399][   T24] tipc: Node number set to 3198047084
[  126.172734][ T9537] tipc: Disabling bearer <eth:syzkaller0>
[  126.184818][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1537'.
[  126.401377][ T9592] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  126.429504][ T9594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1548'.
[  126.458928][ T9594] bond0: (slave dummy0): Releasing backup interface
[  126.468350][ T9594] batman_adv: batadv0: Adding interface: dummy0
[  126.471032][ T9594] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.482102][ T9594] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  126.507305][ T9594] batman_adv: batadv0: Adding interface: ip6gretap2
[  126.514630][ T9594] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.527652][ T9594] batman_adv: batadv0: Interface activated: ip6gretap2
[  126.610260][ T9606] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  126.685609][ T9614] syz_tun: entered allmulticast mode
[  126.688951][ T9614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1558'.
[  126.695385][ T9614] unsupported nlmsg_type 40
[  126.708909][ T9613] syz_tun: left allmulticast mode
[  126.891346][ T9627] syzkaller0: entered promiscuous mode
[  126.893596][ T9627] syzkaller0: entered allmulticast mode
[  127.988766][ T9642] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1572'.
[  128.282468][ T9664] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1578'.
[  128.990557][ T9732] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  128.993685][ T9732] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  129.213779][ T9746] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.384702][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'.
[  129.963009][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1613'.
[  130.389549][ T9823] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1622'.
[  130.423455][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'.
[  130.453419][ T9828] team0: entered promiscuous mode
[  130.458530][ T9828] team0: entered allmulticast mode
[  130.474999][ T9828] 8021q: adding VLAN 0 to HW filter on device team0
[  130.489321][ T9832] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1626'.
[  130.871806][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'.
[  131.130692][ T9880] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1647'.
[  131.134939][ T9880] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1647'.
[  131.407661][ T9900] netlink: 'syz.2.1656': attribute type 11 has an invalid length.
[  132.199212][ T9965] netlink: zone id is out of range
[  132.201535][ T9965] netlink: zone id is out of range
[  132.207113][ T9965] netlink: zone id is out of range
[  132.209245][ T9965] netlink: get zone limit has 8 unknown bytes
[  132.236198][ T9968] veth0: entered promiscuous mode
[  132.238683][ T9968] veth0: left promiscuous mode
[  132.288509][ T9972] netlink: 'syz.1.1689': attribute type 1 has an invalid length.
[  132.469210][ T9985] netlink: 'syz.0.1693': attribute type 10 has an invalid length.
[  132.482756][ T9985] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.491121][ T9985] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  132.909211][T10006] lo speed is unknown, defaulting to 1000
[  132.920807][T10006] wg1 speed is unknown, defaulting to 1000
[  133.033822][T10014] __nla_validate_parse: 6 callbacks suppressed
[  133.033838][T10014] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.1708'.
[  133.501777][ T5895] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  133.505941][ T5895] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  133.515669][ T5895] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  134.378826][ T5912] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.437705][T10060] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  134.443748][T10060] team0: left promiscuous mode
[  134.446786][T10060] team0: left allmulticast mode
[  134.458946][ T5912] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.464002][  T792] lo speed is unknown, defaulting to 1000
[  134.469478][  T792] syz2: Port: 1 Link DOWN
[  134.471605][   T24] IPVS: starting estimator thread 0...
[  134.486861][ T5912] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.494585][ T5912] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.605958][T10064] IPVS: using max 48 ests per chain, 115200 per kthread
[  134.689211][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'.
[  135.069017][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1734'.
[  135.356087][T10105] netlink: 'syz.1.1743': attribute type 9 has an invalid length.
[  135.365759][T10105] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1743'.
[  135.569559][T10119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1748'.
[  135.573475][T10119] netlink: 'syz.2.1748': attribute type 1 has an invalid length.
[  135.971811][T10135] netlink: 'syz.1.1755': attribute type 5 has an invalid length.
[  136.271818][T10157] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  136.277508][T10157] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  136.341707][T10163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  136.503509][T10178] netlink: 'syz.1.1776': attribute type 2 has an invalid length.
[  136.700629][T10202] netlink: zone id is out of range
[  136.703586][T10202] netlink: zone id is out of range
[  136.707538][T10202] netlink: zone id is out of range
[  136.709875][T10202] netlink: zone id is out of range
[  136.712552][T10202] netlink: zone id is out of range
[  137.049230][T10229] lo speed is unknown, defaulting to 1000
[  137.053077][T10229] wg1 speed is unknown, defaulting to 1000
[  137.147122][T10229] netlink: 'syz.0.1800': attribute type 13 has an invalid length.
[  137.153324][T10229] netlink: 'syz.0.1800': attribute type 17 has an invalid length.
[  137.610993][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1806'.
[  137.614949][T10244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1806'.
[  138.096047][T10268] sit0: entered promiscuous mode
[  138.098311][T10268] netlink: 'syz.2.1818': attribute type 1 has an invalid length.
[  138.101701][T10268] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1818'.
[  138.581139][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1835'.
[  138.725561][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'.
[  138.739942][T10321] netlink: 'syz.0.1844': attribute type 2 has an invalid length.
[  139.589510][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'.
[  139.892027][T10390] netlink: 'syz.2.1873': attribute type 3 has an invalid length.
[  140.203815][T10426] : entered promiscuous mode
[  140.227777][T10428] netlink: 'syz.2.1890': attribute type 23 has an invalid length.
[  140.269413][T10430] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  140.304259][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'.
[  140.361561][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1896'.
[  140.423961][T10448] netlink: 'syz.0.1900': attribute type 6 has an invalid length.
[  140.465786][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'.
[  140.491758][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1903'.
[  140.527709][T10456] tap0: tun_chr_ioctl cmd 1074025677
[  140.529623][T10456] tap0: linktype set to 825
[  140.911151][T10492] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  141.001068][   T33] audit: type=1800 audit(1757384537.018:4): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1917" name="memory.events" dev="tmpfs" ino=3257 res=0 errno=0
[  141.349210][T10525] net_ratelimit: 5 callbacks suppressed
[  141.349246][T10525] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.362999][T10528] netlink: 'syz.0.1934': attribute type 12 has an invalid length.
[  141.369252][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'.
[  141.390093][T10526] dummy0: entered promiscuous mode
[  141.396311][T10526] dummy0: left promiscuous mode
[  141.731275][T10554] sctp: [Deprecated]: syz.2.1942 (pid 10554) Use of int in max_burst socket option deprecated.
[  141.731275][T10554] Use struct sctp_assoc_value instead
[  141.937429][T10568] delete_channel: no stack
[  142.009073][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'.
[  143.766992][T10655] __nla_validate_parse: 1 callbacks suppressed
[  143.767007][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'.
[  143.774825][T10655] netlink: 'syz.2.1977': attribute type 15 has an invalid length.
[  143.778119][T10655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'.
[  143.781234][T10655] netlink: 'syz.2.1977': attribute type 15 has an invalid length.
[  143.920024][T10669] syzkaller1: entered promiscuous mode
[  143.925246][T10669] syzkaller1: entered allmulticast mode
[  143.964391][T10673] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  144.914655][ T5853] Bluetooth: hci2: command 0x0405 tx timeout
[  145.322464][T10753] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2016'.
[  145.430963][T10765] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2024'.
[  145.485489][T10773] netlink: 'syz.1.2027': attribute type 3 has an invalid length.
[  145.488601][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'.
[  145.491557][T10773] netlink: 'syz.1.2027': attribute type 3 has an invalid length.
[  145.494104][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'.
[  145.540604][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2031'.
[  145.641209][T10791] macsec1: entered promiscuous mode
[  145.643306][T10791] bridge0: entered promiscuous mode
[  145.651832][T10791] bridge0: port 3(macsec1) entered blocking state
[  145.656117][T10791] bridge0: port 3(macsec1) entered disabled state
[  145.659028][T10791] macsec1: entered allmulticast mode
[  145.661273][T10791] bridge0: entered allmulticast mode
[  145.668100][T10791] macsec1: left allmulticast mode
[  145.670386][T10791] bridge0: left allmulticast mode
[  145.675348][T10791] bridge0: left promiscuous mode
[  145.840508][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2047'.
[  145.844904][T10814] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  145.848542][T10814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.969149][T10831] netlink: 'syz.2.2054': attribute type 1 has an invalid length.
[  145.974661][T10831] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2054'.
[  145.986913][T10831] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2054'.
[  146.262869][T10865] lo speed is unknown, defaulting to 1000
[  146.266217][T10865] wg1 speed is unknown, defaulting to 1000
[  147.050272][T10883] netlink: 'syz.0.2077': attribute type 4 has an invalid length.
[  147.576854][T10922] netlink: 'syz.2.2097': attribute type 39 has an invalid length.
[  148.738243][T10994] netlink: 'syz.1.2129': attribute type 1 has an invalid length.
[  148.866276][T11005] netlink: 'syz.0.2134': attribute type 5 has an invalid length.
[  149.675602][T11036] lo speed is unknown, defaulting to 1000
[  149.680243][T11036] wg1 speed is unknown, defaulting to 1000
[  149.852897][T11036] __nla_validate_parse: 5 callbacks suppressed
[  149.852914][T11036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2147'.
[  149.862034][T11036] netlink: 'syz.2.2147': attribute type 13 has an invalid length.
[  149.865629][T11036] netlink: 'syz.2.2147': attribute type 17 has an invalid length.
[  149.876441][T11036] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  151.197442][T11122] bond0: entered promiscuous mode
[  151.200493][T11122] bond_slave_0: entered promiscuous mode
[  151.203204][T11122] bond_slave_1: entered promiscuous mode
[  151.249946][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'.
[  151.316272][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2189'.
[  151.320290][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2189'.
[  151.324218][T11131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2189'.
[  151.375884][   T54] Bluetooth: hci0: command 0x080f tx timeout
[  151.529058][T11146] netlink: 'syz.1.2195': attribute type 4 has an invalid length.
[  151.657012][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2200'.
[  151.694300][T11161] netlink: 'syz.1.2202': attribute type 10 has an invalid length.
[  151.703899][T11161] 8021q: adding VLAN 0 to HW filter on device team0
[  151.710997][T11161] bond0: (slave team0): Enslaving as an active interface with an up link
[  151.758805][T11163] lo speed is unknown, defaulting to 1000
[  151.766736][T11163] wg1 speed is unknown, defaulting to 1000
[  151.838885][T11174] batadv_slave_1: entered promiscuous mode
[  151.847997][T11173] batadv_slave_1: left promiscuous mode
[  152.386446][T11232] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2232'.
[  152.590609][T11246] netlink: 'syz.2.2237': attribute type 21 has an invalid length.
[  152.594111][T11246] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2237'.
[  152.598326][T11246] netlink: 'syz.2.2237': attribute type 4 has an invalid length.
[  152.601885][T11246] netlink: 'syz.2.2237': attribute type 3 has an invalid length.
[  152.607587][T11246] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2237'.
[  152.826869][T11254] lo speed is unknown, defaulting to 1000
[  152.832112][T11254] wg1 speed is unknown, defaulting to 1000
[  153.682976][T11290] ip6tnl2: entered promiscuous mode
[  153.808601][T11298] IPVS: Scheduler module ip_vs_sip not found
[  153.817299][T11298] IPVS: length: 141 != 8
[  154.176407][T11326] tipc: Failed to remove unknown binding: 66,1,1/0:2924634871/2924634873
[  154.180585][T11326] tipc: Failed to remove unknown binding: 66,1,1/0:2924634871/2924634873
[  154.184116][T11326] tipc: Failed to remove unknown binding: 66,1,1/0:2924634871/2924634873
[  154.398966][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'.
[  154.728302][T11350] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.731648][T11350] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.793200][T11355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.796335][T11355] IPv6: NLM_F_CREATE should be set when creating new route
[  154.799419][T11355] IPv6: NLM_F_CREATE should be set when creating new route
[  154.802492][T11355] IPv6: NLM_F_CREATE should be set when creating new route
[  154.882293][T11353] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2269'.
[  154.885614][T11353] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2269'.
[  155.101682][T11372] netlink: 'syz.1.2278': attribute type 6 has an invalid length.
[  155.174410][T11374] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2279'.
[  155.183612][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'.
[  155.376238][T11378] netlink: 'syz.1.2281': attribute type 1 has an invalid length.
[  155.379065][T11378] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2281'.
[  155.530319][T11388] netlink: zone id is out of range
[  155.577772][T11392] netlink: 'syz.0.2288': attribute type 1 has an invalid length.
[  155.614657][T11392] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.637141][T11392] bond1: (slave geneve2): making interface the new active one
[  155.641494][T11392] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  155.656369][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.659746][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.682396][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.692676][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.215718][T11411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.221574][T11411] syzkaller0: entered promiscuous mode
[  156.223947][T11411] syzkaller0: entered allmulticast mode
[  156.245162][T11411] tipc: Resetting bearer <eth:syzkaller0>
[  156.249562][T11410] tipc: Resetting bearer <eth:syzkaller0>
[  156.262687][T11410] tipc: Disabling bearer <eth:syzkaller0>
[  156.568770][T11427] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2303'.
[  156.578391][T11427] batadv1: entered promiscuous mode
[  156.580243][T11427] batadv1: entered allmulticast mode
[  157.716856][T11496] netlink: 'syz.0.2335': attribute type 4 has an invalid length.
[  158.369714][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2348'.
[  158.721427][T11558] netlink: 'syz.1.2363': attribute type 15 has an invalid length.
[  158.724097][T11558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2363'.
[  158.730665][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'.
[  158.789966][T11566] netlink: 'syz.0.2366': attribute type 6 has an invalid length.
[  158.794391][T11566] netlink: 'syz.0.2366': attribute type 6 has an invalid length.
[  158.900965][T11579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.903927][T11579] syzkaller0: entered promiscuous mode
[  158.906637][T11579] syzkaller0: entered allmulticast mode
[  158.918482][T11579] tipc: Resetting bearer <eth:syzkaller0>
[  158.921586][T11578] tipc: Resetting bearer <eth:syzkaller0>
[  158.929299][T11578] tipc: Disabling bearer <eth:syzkaller0>
[  158.952083][T11577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.958627][T11577] syzkaller0: entered promiscuous mode
[  158.960641][T11577] syzkaller0: entered allmulticast mode
[  158.975170][T11577] tipc: Resetting bearer <eth:syzkaller0>
[  158.997654][T11577] tipc: Resetting bearer <eth:syzkaller0>
[  159.010325][T11577] tipc: Disabling bearer <eth:syzkaller0>
[  159.040355][T11586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2375'.
[  160.332115][T11618] __nla_validate_parse: 3 callbacks suppressed
[  160.332128][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'.
[  160.348198][T11618] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2388'.
[  160.351617][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2388'.
[  161.334055][T11666] lo speed is unknown, defaulting to 1000
[  161.343655][T11666] wg1 speed is unknown, defaulting to 1000
[  162.164258][T11684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2414'.
[  162.224076][T11686] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2415'.
[  162.237309][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'.
[  162.241136][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'.
[  162.414875][T11702] netlink: 'syz.2.2423': attribute type 1 has an invalid length.
[  162.417904][T11702] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2423'.
[  162.421052][T11702] netlink: 'syz.2.2423': attribute type 1 has an invalid length.
[  162.545522][T11711] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  162.962963][T11744] bridge_slave_0: left allmulticast mode
[  162.965566][T11744] bridge_slave_0: left promiscuous mode
[  162.968142][T11744] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.973572][T11744] bridge_slave_1: left allmulticast mode
[  162.979184][T11744] bridge_slave_1: left promiscuous mode
[  162.981917][T11744] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.989130][T11744] bond0: (slave bond_slave_0): Releasing backup interface
[  162.992642][T11744] bond_slave_0: left promiscuous mode
[  162.998686][T11744] bond0: (slave bond_slave_1): Releasing backup interface
[  163.002832][T11744] bond_slave_1: left promiscuous mode
[  163.008449][T11744] team0: Port device team_slave_1 removed
[  163.011307][T11744] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.017607][T11744] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.074973][T11744] netlink: 'syz.2.2440': attribute type 10 has an invalid length.
[  163.082810][T11744] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  163.086830][T11744] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  163.094926][T11744] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  163.099195][T11744] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  163.231155][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'.
[  163.336634][T11767] netlink: 'syz.0.2452': attribute type 1 has an invalid length.
[  163.353699][T11767] bond3: entered promiscuous mode
[  163.355860][T11767] 8021q: adding VLAN 0 to HW filter on device bond3
[  163.373722][T11767] bond3: (slave bridge6): making interface the new active one
[  163.377133][T11767] bridge6: entered promiscuous mode
[  163.379842][T11767] bond3: (slave bridge6): Enslaving as an active interface with an up link
[  163.627821][T11784] netlink: 'syz.0.2460': attribute type 3 has an invalid length.
[  163.799546][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2464'.
[  164.035901][T11795] veth1_macvtap: left promiscuous mode
[  164.432641][T11836] netlink: 'syz.1.2478': attribute type 1 has an invalid length.
[  164.437969][T11836] netlink: 'syz.1.2478': attribute type 2 has an invalid length.
[  165.189625][T11856] geneve2: entered promiscuous mode
[  165.194681][ T6991] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.200151][ T6991] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.203131][ T6991] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.214169][ T6991] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.360106][T11873] netlink: 'syz.0.2494': attribute type 11 has an invalid length.
[  165.363005][T11873] __nla_validate_parse: 1 callbacks suppressed
[  165.363018][T11873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2494'.
[  165.412630][T11871] lo speed is unknown, defaulting to 1000
[  165.417861][T11871] wg1 speed is unknown, defaulting to 1000
[  165.489316][T11875] tap0: tun_chr_ioctl cmd 1074025677
[  165.491409][T11875] tap0: linktype set to 776
[  165.661979][T11887] syzkaller1: entered allmulticast mode
[  167.088113][T11909] netlink: 'syz.2.2506': attribute type 22 has an invalid length.
[  167.368314][T11923] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2511'.
[  167.412094][T11927] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  167.426364][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2513'.
[  167.556608][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'.
[  167.615074][T11942] bond0: (slave team0): Releasing backup interface
[  167.619603][T11942] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  167.689616][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2523'.
[  167.955724][T11966] block nbd1: server does not support multiple connections per device.
[  167.966673][T11966] block nbd1: shutting down sockets
[  168.003187][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'.
[  168.083114][T11988] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.143059][T11988] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.188792][T11988] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.239420][T11988] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.313602][ T5912] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.328323][ T5912] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.332729][T12005] veth0_to_bridge: entered promiscuous mode
[  168.359286][T12005] veth0_to_bridge: left promiscuous mode
[  168.361781][ T6991] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.387186][ T6991] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.391010][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2552'.
[  168.551149][T12023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.554289][T12023] syzkaller0: entered promiscuous mode
[  168.556692][T12023] syzkaller0: entered allmulticast mode
[  168.579080][T12023] tipc: Resetting bearer <eth:syzkaller0>
[  168.586524][T12020] tipc: Resetting bearer <eth:syzkaller0>
[  168.605170][T12020] tipc: Disabling bearer <eth:syzkaller0>
[  169.040990][T12069] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2580'.
[  169.252682][T12089] netlink: 'syz.2.2590': attribute type 6 has an invalid length.
[  169.446023][T12099] lo speed is unknown, defaulting to 1000
[  169.449794][T12099] wg1 speed is unknown, defaulting to 1000
[  169.631174][T12107] netlink: 'syz.2.2598': attribute type 1 has an invalid length.
[  169.644805][T12107] netlink: 'syz.2.2598': attribute type 4 has an invalid length.
[  169.759227][T12117] openvswitch: netlink: Flow actions attr not present in new flow.
[  169.799746][T12116] lo speed is unknown, defaulting to 1000
[  169.803239][T12116] wg1 speed is unknown, defaulting to 1000
[  170.096970][T12135] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2610'.
[  170.424187][T12144] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  171.852142][T12186] lo speed is unknown, defaulting to 1000
[  171.856452][T12186] wg1 speed is unknown, defaulting to 1000
[  172.628152][T12237] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2656'.
[  172.648323][T12237] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.702198][T12237] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.752724][T12237] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.811707][T12237] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.887037][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.911597][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.914389][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.923375][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.031901][T12263] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  173.051615][T12266] netlink: 'syz.1.2669': attribute type 5 has an invalid length.
[  173.114159][T12275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.118686][T12275] syzkaller0: entered promiscuous mode
[  173.120601][T12275] syzkaller0: entered allmulticast mode
[  173.136051][T12275] tipc: Resetting bearer <eth:syzkaller0>
[  173.140544][T12273] tipc: Resetting bearer <eth:syzkaller0>
[  173.150185][T12273] tipc: Disabling bearer <eth:syzkaller0>
[  173.216930][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'.
[  173.283558][T12292] lo speed is unknown, defaulting to 1000
[  173.286710][T12292] wg1 speed is unknown, defaulting to 1000
[  173.368317][T12297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.379157][T12297] syzkaller0: entered promiscuous mode
[  173.381460][T12297] syzkaller0: entered allmulticast mode
[  173.399150][T12300] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  173.404284][T12297] tipc: Resetting bearer <eth:syzkaller0>
[  173.419533][T12295] tipc: Resetting bearer <eth:syzkaller0>
[  173.439924][T12295] tipc: Disabling bearer <eth:syzkaller0>
[  173.617416][T12309] netlink: 'syz.1.2689': attribute type 1 has an invalid length.
[  173.825890][T12317] netlink: 'syz.1.2693': attribute type 4 has an invalid length.
[  173.833030][T12317] netlink: 'syz.1.2693': attribute type 4 has an invalid length.
[  173.946445][T12323] netlink: 'syz.1.2696': attribute type 3 has an invalid length.
[  174.257893][T12337] syzkaller1: entered promiscuous mode
[  174.260337][T12337] syzkaller1: entered allmulticast mode
[  174.835951][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2726'.
[  174.922174][T12397] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  175.243436][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'.
[  175.373861][T12447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.380869][T12447] syzkaller0: entered promiscuous mode
[  175.383330][T12447] syzkaller0: entered allmulticast mode
[  175.395343][T12447] tipc: Resetting bearer <eth:syzkaller0>
[  175.399253][T12446] tipc: Resetting bearer <eth:syzkaller0>
[  175.408248][T12446] tipc: Disabling bearer <eth:syzkaller0>
[  175.954595][T12479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2770'.
[  175.957480][T12479] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2770'.
[  175.968024][T12479] tipc: Invalid UDP bearer configuration
[  175.968053][T12479] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  176.053308][T12486] netlink: 'syz.2.2774': attribute type 1 has an invalid length.
[  176.158610][T12495] unknown channel width for channel at 909000KHz?
[  176.161323][T12495] unknown channel width for channel at 909000KHz?
[  176.163999][T12495] unknown channel width for channel at 909000KHz?
[  176.415333][T12503] netlink: 'syz.0.2781': attribute type 1 has an invalid length.
[  176.418257][T12503] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2781'.
[  176.421382][T12503] netlink: 'syz.0.2781': attribute type 1 has an invalid length.
[  176.763385][T12533] netem: incorrect gi model size
[  176.767591][T12533] netem: change failed
[  176.770096][T12535] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2797'.
[  176.868035][T12547] netlink: 'syz.1.2803': attribute type 1 has an invalid length.
[  176.870938][T12547] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2803'.
[  176.874393][T12547] netlink: 'syz.1.2803': attribute type 1 has an invalid length.
[  176.905133][T12551] netlink: 'syz.1.2805': attribute type 5 has an invalid length.
[  177.052231][T12571] netlink: zone id is out of range
[  177.054083][T12571] netlink: zone id is out of range
[  177.057607][T12571] netlink: set zone limit has 4 unknown bytes
[  177.720416][T12630] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  177.728174][T12630] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  177.979434][T12657] netlink: 'syz.2.2848': attribute type 21 has an invalid length.
[  177.983635][T12657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2848'.
[  178.047015][T12661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2850'.
[  178.097342][T12665] netlink: 'syz.1.2852': attribute type 6 has an invalid length.
[  178.620601][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2873'.
[  178.636475][T12711] ==================================================================
[  178.639876][T12711] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  178.643125][T12711] Read of size 2 at addr ffff88802a18ca42 by task syz.2.2874/12711
[  178.647372][T12711] 
[  178.648403][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.2.2874 Not tainted syzkaller #0 PREEMPT(full) 
[  178.648418][T12711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.648426][T12711] Call Trace:
[  178.648432][T12711]  <TASK>
[  178.648438][T12711]  dump_stack_lvl+0x189/0x250
[  178.648455][T12711]  ? __kasan_check_byte+0x12/0x40
[  178.648474][T12711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.648489][T12711]  ? lock_release+0x4b/0x3e0
[  178.648508][T12711]  ? __virt_addr_valid+0x4a5/0x5c0
[  178.648524][T12711]  print_report+0xca/0x240
[  178.648535][T12711]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  178.648548][T12711]  kasan_report+0x118/0x150
[  178.648564][T12711]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  178.648579][T12711]  __xfrm_state_lookup+0x6ad/0x8d0
[  178.648594][T12711]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  178.648608][T12711]  ? xfrm_state_lookup+0x45/0x1e0
[  178.648621][T12711]  xfrm_state_lookup+0x11e/0x1e0
[  178.648637][T12711]  ipcomp4_init_state+0x205/0xb20
[  178.648654][T12711]  ? __xfrm_init_state+0x7ef/0x13f0
[  178.648677][T12711]  __xfrm_init_state+0xa76/0x13f0
[  178.648692][T12711]  ? __xfrm_init_state+0x7ef/0x13f0
[  178.648709][T12711]  xfrm_add_sa+0x2f5b/0x4070
[  178.648782][T12711]  ? __pfx_xfrm_add_sa+0x10/0x10
[  178.648800][T12711]  ? apparmor_capable+0x137/0x1b0
[  178.648816][T12711]  ? __nla_parse+0x40/0x60
[  178.648829][T12711]  xfrm_user_rcv_msg+0x7a3/0xab0
[  178.648848][T12711]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  178.648876][T12711]  ? __pfx___mutex_trylock_common+0x10/0x10
[  178.648891][T12711]  ? rcu_is_watching+0x15/0xb0
[  178.648904][T12711]  ? trace_contention_end+0x39/0x120
[  178.648916][T12711]  ? __mutex_lock+0x335/0x1350
[  178.648932][T12711]  netlink_rcv_skb+0x208/0x470
[  178.648945][T12711]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  178.648962][T12711]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  178.648977][T12711]  ? netlink_deliver_tap+0x2e/0x1b0
[  178.648989][T12711]  ? netlink_deliver_tap+0x2e/0x1b0
[  178.649001][T12711]  xfrm_netlink_rcv+0x79/0x90
[  178.649017][T12711]  netlink_unicast+0x82f/0x9e0
[  178.649037][T12711]  ? __pfx_netlink_unicast+0x10/0x10
[  178.649054][T12711]  ? netlink_sendmsg+0x642/0xb30
[  178.649065][T12711]  ? skb_put+0x11b/0x210
[  178.649079][T12711]  netlink_sendmsg+0x805/0xb30
[  178.649094][T12711]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.649106][T12711]  ? aa_sock_msg_perm+0xf1/0x1d0
[  178.649117][T12711]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  178.649129][T12711]  ? __pfx_netlink_sendmsg+0x10/0x10
[  178.649141][T12711]  __sock_sendmsg+0x21c/0x270
[  178.649158][T12711]  ____sys_sendmsg+0x505/0x830
[  178.649173][T12711]  ? __pfx_____sys_sendmsg+0x10/0x10
[  178.649188][T12711]  ? import_iovec+0x74/0xa0
[  178.649202][T12711]  ___sys_sendmsg+0x21f/0x2a0
[  178.649216][T12711]  ? __pfx____sys_sendmsg+0x10/0x10
[  178.649239][T12711]  ? __fget_files+0x2a/0x420
[  178.649250][T12711]  ? __fget_files+0x3a0/0x420
[  178.649263][T12711]  __x64_sys_sendmsg+0x19b/0x260
[  178.649276][T12711]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  178.649292][T12711]  ? rcu_is_watching+0x15/0xb0
[  178.649305][T12711]  ? do_syscall_64+0xbe/0x3b0
[  178.649320][T12711]  do_syscall_64+0xfa/0x3b0
[  178.649331][T12711]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.649343][T12711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.649354][T12711]  ? exc_page_fault+0x9f/0xf0
[  178.649366][T12711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.649377][T12711] RIP: 0033:0x7f5dc718ebe9
[  178.649388][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.649398][T12711] RSP: 002b:00007f5dc8003038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  178.649412][T12711] RAX: ffffffffffffffda RBX: 00007f5dc73c5fa0 RCX: 00007f5dc718ebe9
[  178.649420][T12711] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  178.649426][T12711] RBP: 00007f5dc7211e19 R08: 0000000000000000 R09: 0000000000000000
[  178.649433][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  178.649439][T12711] R13: 00007f5dc73c6038 R14: 00007f5dc73c5fa0 R15: 00007ffefe0db148
[  178.649453][T12711]  </TASK>
[  178.649457][T12711] 
[  178.816101][T12711] Allocated by task 12686:
[  178.818029][T12711]  kasan_save_track+0x3e/0x80
[  178.820014][T12711]  __kasan_slab_alloc+0x6c/0x80
[  178.822050][T12711]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  178.824356][T12711]  xfrm_state_alloc+0x24/0x2f0
[  178.826435][T12711]  xfrm_add_sa+0x17d1/0x4070
[  178.828443][T12711]  xfrm_user_rcv_msg+0x7a3/0xab0
[  178.830583][T12711]  netlink_rcv_skb+0x208/0x470
[  178.832650][T12711]  xfrm_netlink_rcv+0x79/0x90
[  178.834644][T12711]  netlink_unicast+0x82f/0x9e0
[  178.836654][T12711]  netlink_sendmsg+0x805/0xb30
[  178.838688][T12711]  __sock_sendmsg+0x21c/0x270
[  178.840690][T12711]  ____sys_sendmsg+0x505/0x830
[  178.842654][T12711]  ___sys_sendmsg+0x21f/0x2a0
[  178.844683][T12711]  __x64_sys_sendmsg+0x19b/0x260
[  178.846865][T12711]  do_syscall_64+0xfa/0x3b0
[  178.848755][T12711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.851259][T12711] 
[  178.852305][T12711] Freed by task 792:
[  178.853926][T12711]  kasan_save_track+0x3e/0x80
[  178.855965][T12711]  kasan_save_free_info+0x46/0x50
[  178.858107][T12711]  __kasan_slab_free+0x5b/0x80
[  178.860166][T12711]  kmem_cache_free+0x18f/0x400
[  178.862190][T12711]  xfrm_state_gc_task+0x52d/0x6b0
[  178.864411][T12711]  process_scheduled_works+0xae1/0x17b0
[  178.866760][T12711]  worker_thread+0x8a0/0xda0
[  178.868658][T12711]  kthread+0x711/0x8a0
[  178.870446][T12711]  ret_from_fork+0x3fc/0x770
[  178.872441][T12711]  ret_from_fork_asm+0x1a/0x30
[  178.874499][T12711] 
[  178.875549][T12711] The buggy address belongs to the object at ffff88802a18c900
[  178.875549][T12711]  which belongs to the cache xfrm_state of size 928
[  178.881323][T12711] The buggy address is located 322 bytes inside of
[  178.881323][T12711]  freed 928-byte region [ffff88802a18c900, ffff88802a18cca0)
[  178.887149][T12711] 
[  178.888202][T12711] The buggy address belongs to the physical page:
[  178.890937][T12711] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a18c480 pfn:0x2a18c
[  178.895138][T12711] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  178.898760][T12711] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  178.901841][T12711] page_type: f5(slab)
[  178.903466][T12711] raw: 00fff00000000040 ffff88801c751c80 dead000000000122 0000000000000000
[  178.907110][T12711] raw: ffff88802a18c480 00000000800e000b 00000000f5000000 0000000000000000
[  178.910768][T12711] head: 00fff00000000040 ffff88801c751c80 dead000000000122 0000000000000000
[  178.914393][T12711] head: ffff88802a18c480 00000000800e000b 00000000f5000000 0000000000000000
[  178.918103][T12711] head: 00fff00000000002 ffffea0000a86301 00000000ffffffff 00000000ffffffff
[  178.921754][T12711] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  178.925395][T12711] page dumped because: kasan: bad access detected
[  178.928167][T12711] page_owner tracks the page as allocated
[  178.930610][T12711] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6024, tgid 6023 (syz.1.43), ts 67199614630, free_ts 66093111550
[  178.938512][T12711]  post_alloc_hook+0x240/0x2a0
[  178.940598][T12711]  get_page_from_freelist+0x21e4/0x22c0
[  178.943004][T12711]  __alloc_frozen_pages_noprof+0x181/0x370
[  178.945628][T12711]  alloc_pages_mpol+0x232/0x4a0
[  178.947710][T12711]  allocate_slab+0x8a/0x370
[  178.949711][T12711]  ___slab_alloc+0xbeb/0x1420
[  178.951788][T12711]  kmem_cache_alloc_noprof+0x283/0x3c0
[  178.954164][T12711]  xfrm_state_alloc+0x24/0x2f0
[  178.956268][T12711]  pfkey_add+0x6e4/0x2e00
[  178.958174][T12711]  pfkey_sendmsg+0xbfe/0x1090
[  178.960189][T12711]  __sock_sendmsg+0x21c/0x270
[  178.962229][T12711]  ____sys_sendmsg+0x505/0x830
[  178.964285][T12711]  ___sys_sendmsg+0x21f/0x2a0
[  178.966279][T12711]  __x64_sys_sendmsg+0x19b/0x260
[  178.968320][T12711]  do_syscall_64+0xfa/0x3b0
[  178.970220][T12711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.972708][T12711] page last free pid 5846 tgid 5846 stack trace:
[  178.975456][T12711]  __free_frozen_pages+0xbc4/0xd30
[  178.977660][T12711]  __slab_free+0x303/0x3c0
[  178.979616][T12711]  qlist_free_all+0x97/0x140
[  178.981600][T12711]  kasan_quarantine_reduce+0x148/0x160
[  178.983914][T12711]  __kasan_slab_alloc+0x22/0x80
[  178.986013][T12711]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  178.988422][T12711]  getname_flags+0xb8/0x540
[  178.990667][T12711]  user_path_at+0x24/0x60
[  178.992820][T12711]  do_faccessat+0x5d8/0xd90
[  178.995035][T12711]  __x64_sys_faccessat2+0x9a/0xb0
[  178.997220][T12711]  do_syscall_64+0xfa/0x3b0
[  178.999186][T12711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.001692][T12711] 
[  179.002757][T12711] Memory state around the buggy address:
[  179.005171][T12711]  ffff88802a18c900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.008583][T12711]  ffff88802a18c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.011984][T12711] >ffff88802a18ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.015753][T12711]                                            ^
[  179.018516][T12711]  ffff88802a18ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.021951][T12711]  ffff88802a18cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  179.025343][T12711] ==================================================================
[  179.035132][T12711] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  179.038591][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.2.2874 Not tainted syzkaller #0 PREEMPT(full) 
[  179.042361][T12711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.046575][T12711] Call Trace:
[  179.047999][T12711]  <TASK>
[  179.049259][T12711]  dump_stack_lvl+0x99/0x250
[  179.051239][T12711]  ? __asan_memcpy+0x40/0x70
[  179.053156][T12711]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.055388][T12711]  ? __pfx__printk+0x10/0x10
[  179.057368][T12711]  vpanic+0x281/0x750
[  179.059075][T12711]  ? preempt_schedule+0xae/0xc0
[  179.061159][T12711]  ? __pfx_vpanic+0x10/0x10
[  179.063154][T12711]  ? preempt_schedule_common+0x83/0xd0
[  179.065446][T12711]  ? preempt_schedule+0xae/0xc0
[  179.067521][T12711]  ? __pfx_preempt_schedule+0x10/0x10
[  179.069836][T12711]  panic+0xb9/0xc0
[  179.071406][T12711]  ? __pfx_panic+0x10/0x10
[  179.073274][T12711]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  179.075755][T12711]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  179.078036][T12711]  check_panic_on_warn+0x89/0xb0
[  179.080246][T12711]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  179.082531][T12711]  end_report+0x78/0x160
[  179.084440][T12711]  kasan_report+0x129/0x150
[  179.086409][T12711]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  179.088692][T12711]  __xfrm_state_lookup+0x6ad/0x8d0
[  179.090863][T12711]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  179.093215][T12711]  ? xfrm_state_lookup+0x45/0x1e0
[  179.095377][T12711]  xfrm_state_lookup+0x11e/0x1e0
[  179.097565][T12711]  ipcomp4_init_state+0x205/0xb20
[  179.099787][T12711]  ? __xfrm_init_state+0x7ef/0x13f0
[  179.102131][T12711]  __xfrm_init_state+0xa76/0x13f0
[  179.104310][T12711]  ? __xfrm_init_state+0x7ef/0x13f0
[  179.106468][T12711]  xfrm_add_sa+0x2f5b/0x4070
[  179.108398][T12711]  ? __pfx_xfrm_add_sa+0x10/0x10
[  179.110424][T12711]  ? apparmor_capable+0x137/0x1b0
[  179.112502][T12711]  ? __nla_parse+0x40/0x60
[  179.114382][T12711]  xfrm_user_rcv_msg+0x7a3/0xab0
[  179.116503][T12711]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  179.119009][T12711]  ? __pfx___mutex_trylock_common+0x10/0x10
[  179.121555][T12711]  ? rcu_is_watching+0x15/0xb0
[  179.123584][T12711]  ? trace_contention_end+0x39/0x120
[  179.125870][T12711]  ? __mutex_lock+0x335/0x1350
[  179.127911][T12711]  netlink_rcv_skb+0x208/0x470
[  179.130002][T12711]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  179.132363][T12711]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  179.134653][T12711]  ? netlink_deliver_tap+0x2e/0x1b0
[  179.136889][T12711]  ? netlink_deliver_tap+0x2e/0x1b0
[  179.139113][T12711]  xfrm_netlink_rcv+0x79/0x90
[  179.141164][T12711]  netlink_unicast+0x82f/0x9e0
[  179.143189][T12711]  ? __pfx_netlink_unicast+0x10/0x10
[  179.145473][T12711]  ? netlink_sendmsg+0x642/0xb30
[  179.147589][T12711]  ? skb_put+0x11b/0x210
[  179.149380][T12711]  netlink_sendmsg+0x805/0xb30
[  179.151392][T12711]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.153628][T12711]  ? aa_sock_msg_perm+0xf1/0x1d0
[  179.155704][T12711]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.157977][T12711]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.160168][T12711]  __sock_sendmsg+0x21c/0x270
[  179.162119][T12711]  ____sys_sendmsg+0x505/0x830
[  179.164162][T12711]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.166440][T12711]  ? import_iovec+0x74/0xa0
[  179.168398][T12711]  ___sys_sendmsg+0x21f/0x2a0
[  179.170401][T12711]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.172638][T12711]  ? __fget_files+0x2a/0x420
[  179.174623][T12711]  ? __fget_files+0x3a0/0x420
[  179.176657][T12711]  __x64_sys_sendmsg+0x19b/0x260
[  179.178774][T12711]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  179.181099][T12711]  ? rcu_is_watching+0x15/0xb0
[  179.183159][T12711]  ? do_syscall_64+0xbe/0x3b0
[  179.185198][T12711]  do_syscall_64+0xfa/0x3b0
[  179.187165][T12711]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.189298][T12711]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.191902][T12711]  ? exc_page_fault+0x9f/0xf0
[  179.193934][T12711]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.196439][T12711] RIP: 0033:0x7f5dc718ebe9
[  179.198363][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.206411][T12711] RSP: 002b:00007f5dc8003038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  179.209897][T12711] RAX: ffffffffffffffda RBX: 00007f5dc73c5fa0 RCX: 00007f5dc718ebe9
[  179.213114][T12711] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  179.216401][T12711] RBP: 00007f5dc7211e19 R08: 0000000000000000 R09: 0000000000000000
[  179.219630][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.222830][T12711] R13: 00007f5dc73c6038 R14: 00007f5dc73c5fa0 R15: 00007ffefe0db148
[  179.226088][T12711]  </TASK>
[  179.228191][T12711] Kernel Offset: disabled
[  179.230061][T12711] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:22:54  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001281 RDI=0000000000001282 RBP=00000000000003f8 RSP=ffffc90006e86930
R8 =ffff888020d58237 R9 =1ffff110041ab046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018ea R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5dc80036c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=00000001215f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5dc7397498 00007f5dc7397470 XMM03=00007f5dc73974a8 00007f5dc73974a0
XMM04=00007f5dc7efd100 00007f5dc7397460 XMM05=00007f5dc7397478 00007f5dc73974c0
XMM06=00007f5dc73974b8 00007f5dc73974b0 XMM07=00007f5dc73974a8 00007f5dc73974a0
XMM08=0000000000000000 00007f5dc7212ee7 XMM09=0000000000000000 00007f5dc7212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000001d7e8 RBX=ffffffff99d92de8 RCX=61c8864680b583eb RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff99d92df0 RBP=000000000021a100 RSP=ffffc900001b77f0
R8 =ffffc900001b786f R9 =0000000000000000 R10=ffffc900001b7848 R11=fffff52000036f0e
R12=ffff888122046000 R13=ffff888122046e88 R14=0000000000000000 R15=ffffffff81a7fb0b
RIP=ffffffff84d068a5 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3248d0 CR3=000000002951a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
