last executing test programs:

519.841376ms ago: executing program 1 (id=2696):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c)

436.61139ms ago: executing program 1 (id=2699):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000200)=0x7fff, 0x4)

381.266501ms ago: executing program 0 (id=2700):
r0 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x24000810)

381.136542ms ago: executing program 1 (id=2701):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x20, 0x20, 0x0, 0xff, 0x0, 0xfe, 0x2, 0x8ba1941754a13caa}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}, @RTA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008010)

380.954764ms ago: executing program 0 (id=2702):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28)

318.376121ms ago: executing program 1 (id=2704):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1})
socket$kcm(0x2, 0xa, 0x2)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socket$packet(0x11, 0x3, 0x300)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0x3e, 0x23, &(0x7f00000000c0)="a0acf1117e0643e2a62f9fb5ec84bbb542603922fe306cd82cb14604a496eab85787dc0f21891e803563ac659986c15289efca595b9672a023e1e27f648e", &(0x7f0000000140)=""/35, 0x3, 0x0, 0x57, 0x72, &(0x7f0000000340)="4eae0c2d50456a3ba9a98842232adbd9d338b4a97ffebcadf57cdc53c998322c30557db46cf655fbc174c61e251071ce626ad1cca354d9635a7ad555d290cf7f34352b17659587536ca7163926103069e5bf8bcbeb445a", &(0x7f0000000400)="4185ff22eed96fcf97b705fbf0c3fbb7de46911d28898644bd0910d378ec7034593fa53033c93dab7e771fe6772db2b7b59d4d1c3b81bbf9db803e9d0521737d3cef0a7113c58f4dfd8ae1daaa15e9ae1957f694e7c8b110ff211ca8ca84ec04002b449feefc108f17de3c8390251fd9cb01", 0x1, 0x0, 0x32}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, 0x0, 0x40)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f00000009c0)={0x1f, 0x1, 0x2}, 0x6)
write(r6, &(0x7f0000000000)="05000000", 0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000180)=[{0x35, 0x0, 0x3, 0xff9f0007}, {0x15, 0x0, 0x0, 0x9e8}, {0x3, 0x20}, {0x0, 0x2, 0x2}, {0x6, 0x9}]})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000f4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000280)={'veth1_to_bond\x00'})
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r9, 0x0, 0xc000)

261.954049ms ago: executing program 0 (id=2705):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x320)

178.468448ms ago: executing program 2 (id=2707):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @none}, 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

178.284619ms ago: executing program 2 (id=2708):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71189a000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94)

131.876599ms ago: executing program 2 (id=2709):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b185300000000000003004000000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

131.475252ms ago: executing program 0 (id=2710):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newneigh={0x38, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x18}, [@NDA_DST_IPV6={0x14, 0x1, @rand_addr=' \x01\x00'}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x38}}, 0x0)

131.306784ms ago: executing program 2 (id=2711):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000407010200000000000000000100000905"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

81.260228ms ago: executing program 0 (id=2712):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884)

81.014153ms ago: executing program 2 (id=2713):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)='\'\x00\x00\x00', 0x4)

80.609282ms ago: executing program 1 (id=2714):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0)

370.639µs ago: executing program 2 (id=2715):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4)
sendmsg$inet(r5, 0x0, 0x41)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
close(r5)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

150.422µs ago: executing program 1 (id=2716):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

0s ago: executing program 0 (id=2717):
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:9565' (ED25519) to the list of known hosts.
syzkaller login: [   55.684799][ T5839] cgroup: Unknown subsys name 'net'
[   55.767829][ T5839] cgroup: Unknown subsys name 'cpuset'
[   55.771593][ T5839] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.135281][ T5839] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.411672][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.416265][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.419921][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.424115][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.428124][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.463478][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.466840][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.470494][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.475829][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.479508][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.571666][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.575391][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.584092][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.588141][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.592238][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.635148][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   60.767085][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.769843][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.772814][ T5853] bridge_slave_0: entered allmulticast mode
[   60.777406][ T5853] bridge_slave_0: entered promiscuous mode
[   60.783284][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.786440][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.789498][ T5853] bridge_slave_1: entered allmulticast mode
[   60.793340][ T5853] bridge_slave_1: entered promiscuous mode
[   60.841952][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.847260][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.851109][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   60.904764][ T5853] team0: Port device team_slave_0 added
[   60.923803][ T5853] team0: Port device team_slave_1 added
[   61.020115][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.022730][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.033353][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.052502][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.055453][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.057852][ T5858] bridge_slave_0: entered allmulticast mode
[   61.061450][ T5858] bridge_slave_0: entered promiscuous mode
[   61.067675][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.070570][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.081378][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.086953][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.089837][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.092782][ T5858] bridge_slave_1: entered allmulticast mode
[   61.096895][ T5858] bridge_slave_1: entered promiscuous mode
[   61.127264][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   61.164770][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.173079][ T5853] hsr_slave_0: entered promiscuous mode
[   61.177281][ T5853] hsr_slave_1: entered promiscuous mode
[   61.186284][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.249058][ T5858] team0: Port device team_slave_0 added
[   61.267632][ T5858] team0: Port device team_slave_1 added
[   61.325431][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.328279][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.330803][ T5862] bridge_slave_0: entered allmulticast mode
[   61.334625][ T5862] bridge_slave_0: entered promiscuous mode
[   61.338313][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.340925][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.349968][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.355494][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.358286][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.368410][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.378505][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.381280][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.384695][ T5862] bridge_slave_1: entered allmulticast mode
[   61.387356][ T5862] bridge_slave_1: entered promiscuous mode
[   61.459064][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.467533][ T5858] hsr_slave_0: entered promiscuous mode
[   61.471088][ T5858] hsr_slave_1: entered promiscuous mode
[   61.474132][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   61.476483][ T5858] Cannot create hsr debugfs directory
[   61.485340][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.524065][ T5862] team0: Port device team_slave_0 added
[   61.546329][ T5862] team0: Port device team_slave_1 added
[   61.613135][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.616457][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.626849][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.632654][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.635871][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.646739][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.707927][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.732646][ T5862] hsr_slave_0: entered promiscuous mode
[   61.736735][ T5862] hsr_slave_1: entered promiscuous mode
[   61.739676][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   61.742072][ T5862] Cannot create hsr debugfs directory
[   61.751304][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.758385][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.769620][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.928279][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.937375][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.946042][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.955580][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.013177][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.021951][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.035410][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.040962][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.089411][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.123528][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   62.130515][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.142521][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.145701][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.153950][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.157034][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.176872][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   62.191469][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.194421][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.224460][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.227412][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.249801][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.308151][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   62.335145][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.338039][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.343096][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.346084][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.410084][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.459927][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.476534][   T54] Bluetooth: hci0: command tx timeout
[   62.481662][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.527778][ T5853] veth0_vlan: entered promiscuous mode
[   62.537249][ T5853] veth1_vlan: entered promiscuous mode
[   62.553798][   T54] Bluetooth: hci1: command tx timeout
[   62.587039][ T5858] veth0_vlan: entered promiscuous mode
[   62.596280][ T5853] veth0_macvtap: entered promiscuous mode
[   62.607996][ T5858] veth1_vlan: entered promiscuous mode
[   62.617227][ T5853] veth1_macvtap: entered promiscuous mode
[   62.634866][   T54] Bluetooth: hci2: command tx timeout
[   62.660497][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.673290][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.677351][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.695350][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.699776][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.709322][ T5858] veth0_macvtap: entered promiscuous mode
[   62.722574][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.728736][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.745717][ T5858] veth1_macvtap: entered promiscuous mode
[   62.777380][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.797118][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.826697][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.831332][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.832675][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.837771][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.837809][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.860869][ T5862] veth0_vlan: entered promiscuous mode
[   62.865474][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.882349][ T5862] veth1_vlan: entered promiscuous mode
[   62.906712][ T3591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.909858][ T3591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.977698][ T5862] veth0_macvtap: entered promiscuous mode
[   62.979877][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.983261][ T5862] veth1_macvtap: entered promiscuous mode
[   63.004670][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.007936][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.072104][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.083300][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.094073][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.097181][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.106481][ T5750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.111997][ T5750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.117619][ T5750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.120996][ T5750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.211725][ T5920] netlink: 'syz.1.5': attribute type 10 has an invalid length.
[   63.225353][ T5920] team0: Device dummy0 is up. Set it down before adding it as a team port
[   63.272638][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.278928][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.285139][ T5923] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'.
[   63.295552][ T5923] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   63.298686][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'.
[   63.321230][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.326578][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.520158][ T5942] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.391877][ T6007] syzkaller0: entered promiscuous mode
[   64.404022][ T6007] syzkaller0: entered allmulticast mode
[   64.563850][   T54] Bluetooth: hci0: command tx timeout
[   64.644070][   T54] Bluetooth: hci1: command tx timeout
[   64.724142][   T54] Bluetooth: hci2: command tx timeout
[   65.651305][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   65.810221][ T6066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'.
[   65.973537][ T6077] netlink: 'syz.0.68': attribute type 3 has an invalid length.
[   66.172324][ T6096] netlink: 'syz.1.77': attribute type 1 has an invalid length.
[   66.258835][ T6104] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   66.292917][ T6106] netlink: 'syz.0.82': attribute type 2 has an invalid length.
[   66.415390][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.88'.
[   66.610758][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'.
[   66.614731][ T6136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.634945][   T54] Bluetooth: hci0: command tx timeout
[   66.713702][   T54] Bluetooth: hci1: command tx timeout
[   66.804780][   T54] Bluetooth: hci2: command tx timeout
[   67.162714][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'.
[   67.171630][ T6172] netlink: 'syz.2.108': attribute type 2 has an invalid length.
[   68.034898][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.118'.
[   68.078220][ T6194] syz.1.117 uses obsolete (PF_INET,SOCK_PACKET)
[   68.222881][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.226983][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.365296][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.376715][ T6201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.507499][ T6207] geneve2: entered promiscuous mode
[   68.509866][ T6207] geneve2: entered allmulticast mode
[   68.515486][ T5750] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.522767][ T5750] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[   68.534144][ T5750] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.537995][ T5750] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[   68.569295][ T5750] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.573074][ T5750] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[   68.595537][ T5750] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.609611][ T5750] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[   68.615824][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   68.644914][ T6227] Illegal XDP return value 4294967262 on prog  (id 19) dev syz_tun, expect packet loss!
[   68.706835][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'.
[   68.724078][   T54] Bluetooth: hci0: command tx timeout
[   68.770122][ T6233] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.793853][   T54] Bluetooth: hci1: command tx timeout
[   68.883762][   T54] Bluetooth: hci2: command tx timeout
[   69.073509][ T6253] Zero length message leads to an empty skb
[   69.079656][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'.
[   69.085473][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'.
[   69.089463][ T6256] netlink: 'syz.2.146': attribute type 18 has an invalid length.
[   69.166098][ T6260] netlink: 152 bytes leftover after parsing attributes in process `syz.2.148'.
[   69.169879][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.148'.
[   69.272244][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'.
[   69.475853][ T6284] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   69.483786][ T6280] IPVS: stopping backup sync thread 6284 ...
[   69.632950][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'.
[   69.639027][ T6293] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   70.669809][ T6356] netlink: 'syz.1.191': attribute type 3 has an invalid length.
[   70.673139][ T6356] netlink: 224 bytes leftover after parsing attributes in process `syz.1.191'.
[   71.172799][ T6362] tc_dump_action: action bad kind
[   71.210687][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.213518][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.684747][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   71.696829][ T6388] dummy0: entered promiscuous mode
[   71.699381][ T6388] macsec1: entered promiscuous mode
[   71.702099][ T6388] macsec1: entered allmulticast mode
[   71.705158][ T6388] dummy0: entered allmulticast mode
[   71.709806][ T6388] dummy0: left allmulticast mode
[   71.712168][ T6388] dummy0: left promiscuous mode
[   71.999235][ T6397] IPv6: sit1: Disabled Multicast RS
[   72.023860][ T6397] Bluetooth: MGMT ver 1.23
[   72.905780][ T6429] syzkaller1: entered promiscuous mode
[   72.908161][ T6429] syzkaller1: entered allmulticast mode
[   72.911300][ T6431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.952061][ T6433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.491025][ T6462] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   73.495404][ T6462] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   74.310797][ T6489] syzkaller1: entered promiscuous mode
[   74.313177][ T6489] syzkaller1: entered allmulticast mode
[   74.318224][ T6489] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[   74.556309][ T6497] openvswitch: netlink: Missing key (keys=40, expected=80)
[   74.578476][ T6499] __nla_validate_parse: 1 callbacks suppressed
[   74.578485][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'.
[   74.589216][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'.
[   74.986476][ T6519] netlink: 5008 bytes leftover after parsing attributes in process `syz.1.265'.
[   75.619031][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'.
[   75.867611][ T6571] netlink: 'syz.0.289': attribute type 1 has an invalid length.
[   75.945474][ T6577] netlink: 308 bytes leftover after parsing attributes in process `syz.2.293'.
[   76.198306][ T6596] tipc: Started in network mode
[   76.200476][ T6596] tipc: Node identity 465ad5aef5e2, cluster identity 4711
[   76.213904][ T6596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.227493][ T6596] syzkaller0: entered promiscuous mode
[   76.235324][ T6596] syzkaller0: entered allmulticast mode
[   76.283724][ T6596] tipc: Resetting bearer <eth:syzkaller0>
[   76.289126][ T6595] tipc: Resetting bearer <eth:syzkaller0>
[   76.300904][ T6595] tipc: Disabling bearer <eth:syzkaller0>
[   76.515643][ T6618] netlink: 'syz.2.312': attribute type 1 has an invalid length.
[   76.968627][ T6651] team_slave_0: entered promiscuous mode
[   76.971162][ T6651] team_slave_1: entered promiscuous mode
[   76.977651][ T6651] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   76.982136][ T6651] team_slave_0: left promiscuous mode
[   76.984620][ T6651] team_slave_1: left promiscuous mode
[   77.071126][ T6658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.326'.
[   77.359289][ T6679] netlink: 104 bytes leftover after parsing attributes in process `syz.0.334'.
[   77.491887][ T6691] Bluetooth: MGMT ver 1.23
[   78.391443][ T6725] netem: incorrect ge model size
[   78.393267][ T6725] netem: change failed
[   78.809978][ T6764] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.823067][ T6764] syzkaller0: entered promiscuous mode
[   78.837748][ T6764] syzkaller0: entered allmulticast mode
[   78.868670][ T6764] tipc: Resetting bearer <eth:syzkaller0>
[   78.885912][ T6763] tipc: Resetting bearer <eth:syzkaller0>
[   78.912945][ T6763] tipc: Disabling bearer <eth:syzkaller0>
[   79.545369][ T6805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.802644][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'.
[   79.808257][ T6831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.396'.
[   80.169646][   T33] audit: type=1800 audit(1758546520.183:2): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.405" name="memory.events" dev="tmpfs" ino=671 res=0 errno=0
[   80.413479][ T6879] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.418'.
[   80.747613][ T6902] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   80.900217][ T6915] dummy0: entered promiscuous mode
[   80.904022][ T6915] batadv_slave_0: entered promiscuous mode
[   80.908018][ T6915] hsr1: entered allmulticast mode
[   80.910258][ T6915] dummy0: entered allmulticast mode
[   80.916206][ T6915] batadv_slave_0: entered allmulticast mode
[   81.071922][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'.
[   81.094395][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'.
[   81.094445][ T5873] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.102628][ T5873] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.107845][ T5873] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.112670][ T5873] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.295402][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.298305][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.397772][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.410062][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.452247][ T2203] cfg80211: failed to load regulatory.db
[   81.567656][ T6938] hsr1: left allmulticast mode
[   81.569831][ T6938] dummy0: left allmulticast mode
[   81.572191][ T6938] batadv_slave_0: left allmulticast mode
[   81.587513][ T5873] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.591311][ T5873] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.616670][ T5873] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.623924][ T5873] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   81.751734][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'.
[   81.848957][ T6958] bridge1: port 1(ipvlan2) entered blocking state
[   81.852116][ T6958] bridge1: port 1(ipvlan2) entered disabled state
[   81.859884][ T6958] ipvlan2: entered allmulticast mode
[   81.862169][ T6958] macvlan1: entered allmulticast mode
[   81.874867][ T6958] ipvlan2: left allmulticast mode
[   81.877126][ T6958] macvlan1: left allmulticast mode
[   81.895996][ T6961] vlan2: entered promiscuous mode
[   81.898366][ T6961] batadv0: entered promiscuous mode
[   81.935665][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'.
[   82.066854][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'.
[   82.130622][ T6980] netlink: 'syz.2.455': attribute type 29 has an invalid length.
[   82.135666][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[   82.196268][ T6987] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.456'.
[   82.297280][   T51] IPVS: starting estimator thread 0...
[   82.315426][ T6997] ieee802154 phy0 wpan0: encryption failed: -22
[   82.342829][ T6999] netlink: 'syz.2.463': attribute type 1 has an invalid length.
[   82.385172][ T6999] bond1: entered promiscuous mode
[   82.387898][ T6999] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.393905][ T6995] IPVS: using max 78 ests per chain, 187200 per kthread
[   82.408419][ T6999] bond1: (slave bridge2): making interface the new active one
[   82.412606][ T6999] bridge2: entered promiscuous mode
[   82.416647][ T6999] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   82.521985][ T7010] geneve2: left promiscuous mode
[   82.523829][ T7010] geneve2: left allmulticast mode
[   82.531788][ T5914] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.541662][ T5914] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[   82.552526][ T5914] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.556611][ T5914] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[   82.567796][ T5914] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.571529][ T5914] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[   82.582434][ T5914] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   82.586383][ T5914] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[   82.940891][ T7040] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[   83.309032][ T7072] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   83.312367][   T24] IPVS: starting estimator thread 0...
[   83.413841][ T7082] IPVS: using max 43 ests per chain, 103200 per kthread
[   83.601706][ T7098] syzkaller1: entered promiscuous mode
[   83.607648][ T7098] syzkaller1: entered allmulticast mode
[   83.886920][ T7110] netlink: 'syz.2.514': attribute type 21 has an invalid length.
[   83.994441][ T7118] sctp: [Deprecated]: syz.2.517 (pid 7118) Use of int in max_burst socket option.
[   83.994441][ T7118] Use struct sctp_assoc_value instead
[   84.249813][ T7132] bond1: left promiscuous mode
[   84.252492][ T7132] bridge2: left promiscuous mode
[   84.262720][ T7132] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   84.596829][ T7157] netlink: 'syz.2.535': attribute type 3 has an invalid length.
[   84.620925][ T7157] netlink: 'syz.2.535': attribute type 3 has an invalid length.
[   84.662940][ T7151] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   84.847018][ T7180] __nla_validate_parse: 9 callbacks suppressed
[   84.847032][ T7180] netlink: 76 bytes leftover after parsing attributes in process `syz.2.544'.
[   84.962316][ T7193] ieee802154 phy0 wpan0: encryption failed: -22
[   84.977351][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'.
[   84.981160][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'.
[   85.086591][ T7202] tun0: tun_chr_ioctl cmd 1074025675
[   85.089073][ T7202] tun0: persist enabled
[   85.091488][ T7202] tun0: tun_chr_ioctl cmd 1074025675
[   85.095151][ T7202] tun0: persist disabled
[   86.081012][ T7235] tipc: Started in network mode
[   86.083384][ T7235] tipc: Node identity ff, cluster identity 4711
[   86.089314][ T7235] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   86.460205][   T33] audit: type=1804 audit(1758546526.473:3): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.577" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=984 res=1 errno=0
[   86.473167][   T33] audit: type=1800 audit(1758546526.473:4): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.577" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=984 res=0 errno=0
[   86.530018][ T7257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.988606][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.588'.
[   87.066036][ T7278] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   87.176902][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'.
[   87.191755][ T7288] sctp: [Deprecated]: syz.2.594 (pid 7288) Use of int in maxseg socket option.
[   87.191755][ T7288] Use struct sctp_assoc_value instead
[   87.318513][ T7296] netlink: 'syz.2.597': attribute type 1 has an invalid length.
[   87.512548][ T7311] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.516120][ T7311] syzkaller0: entered promiscuous mode
[   87.518782][ T7311] syzkaller0: entered allmulticast mode
[   87.531242][ T7311] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   87.538269][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'.
[   87.551569][ T7311] tipc: Resetting bearer <eth:syzkaller0>
[   87.556928][ T7309] tipc: Resetting bearer <eth:syzkaller0>
[   87.566441][ T7309] tipc: Disabling bearer <eth:syzkaller0>
[   88.090801][ T7365] xt_limit: Overflow, try lower: 271964/0
[   88.403001][ T7405] openvswitch: netlink: Flow actions attr not present in new flow.
[   88.430123][ T7408] delete_channel: no stack
[   89.348281][ T7432] netlink: 'syz.1.658': attribute type 4 has an invalid length.
[   89.470589][ T7449] netlink: 'syz.1.663': attribute type 12 has an invalid length.
[   90.568433][ T7530] syzkaller1: entered promiscuous mode
[   90.570788][ T7530] syzkaller1: entered allmulticast mode
[   90.692897][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'.
[   90.698795][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'.
[   90.929333][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'.
[   91.381970][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'.
[   91.412871][ T7602] netlink: 48 bytes leftover after parsing attributes in process `syz.0.738'.
[   91.499612][ T7611] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   91.746967][ T7635] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.753'.
[   91.880390][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'.
[   92.899176][ T7700] netlink: 'syz.0.779': attribute type 1 has an invalid length.
[   92.936958][ T7700] bond1: (slave geneve3): making interface the new active one
[   92.940519][ T7700] bond1: (slave geneve3): Enslaving as an active interface with an up link
[   92.943562][ T5914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   92.951285][ T5914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   92.955761][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'.
[   92.961979][ T7700] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.965376][ T5914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   93.003866][ T5914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   93.019208][ T7703] netlink: 248 bytes leftover after parsing attributes in process `syz.1.780'.
[   93.583360][ T7756] netlink: 'syz.0.793': attribute type 282 has an invalid length.
[   93.777071][ T7770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.799'.
[   93.781731][ T7770] netlink: 'syz.0.799': attribute type 2 has an invalid length.
[   93.881400][ T7779] tipc: Started in network mode
[   93.883814][ T7779] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   93.886609][ T7779] tipc: Enabled bearer <eth:team0>, priority 0
[   93.967378][ T7787] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   94.200137][ T7814] openvswitch: netlink: Geneve option length err (len 256, max 255).
[   95.004957][  T973] tipc: Node number set to 11578026
[   96.502331][ T7901] __nla_validate_parse: 3 callbacks suppressed
[   96.502346][ T7901] netlink: 256 bytes leftover after parsing attributes in process `syz.0.856'.
[   96.653271][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.858'.
[   96.676957][ T7906] netlink: 48 bytes leftover after parsing attributes in process `syz.0.858'.
[   97.465917][ T7951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'.
[   97.601393][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'.
[   97.896033][ T7988] geneve2: entered promiscuous mode
[   97.932154][ T7990] ip6gretap1: entered allmulticast mode
[   98.011736][ T7996] netlink: 14 bytes leftover after parsing attributes in process `syz.2.898'.
[   98.029944][ T7996] hsr_slave_0: left promiscuous mode
[   98.033150][ T7996] hsr_slave_1: left promiscuous mode
[   98.089902][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'.
[   98.092947][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.137870][ T8002] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.232615][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'.
[   98.354609][ T8027] netlink: 'syz.0.913': attribute type 9 has an invalid length.
[   98.357973][ T8027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.913'.
[   98.396455][ T8029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.469863][ T8098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.473413][ T8098] syzkaller0: entered promiscuous mode
[  100.480340][ T8098] syzkaller0: entered allmulticast mode
[  100.495143][ T8098] tipc: Resetting bearer <eth:syzkaller0>
[  100.499405][ T8097] tipc: Resetting bearer <eth:syzkaller0>
[  100.507727][ T8097] tipc: Disabling bearer <eth:syzkaller0>
[  100.582071][ T8107] netlink: 'syz.0.945': attribute type 21 has an invalid length.
[  100.588992][ T8107] netlink: 'syz.0.945': attribute type 30 has an invalid length.
[  100.668504][ T8113] netlink: 128 bytes leftover after parsing attributes in process `syz.0.948'.
[  101.063355][ T8148] netlink: 'syz.2.964': attribute type 13 has an invalid length.
[  101.066374][ T8148] netlink: 'syz.2.964': attribute type 13 has an invalid length.
[  101.680686][ T8190] sctp: [Deprecated]: syz.0.983 (pid 8190) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.680686][ T8190] Use struct sctp_sack_info instead
[  101.942844][ T8200] syzkaller1: entered promiscuous mode
[  101.945060][ T8200] syzkaller1: entered allmulticast mode
[  102.037548][ T8210] lo: entered allmulticast mode
[  102.043961][ T8209] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.051089][ T8209] bond0: (slave rose0): Enslaving as an active interface with an up link
[  102.055969][ T8210] lo: left allmulticast mode
[  102.241063][ T8227] lo: entered allmulticast mode
[  102.250301][ T8227] lo: left allmulticast mode
[  102.337761][ T8239] __nla_validate_parse: 3 callbacks suppressed
[  102.337770][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'.
[  102.418214][ T8232] netlink: 'syz.0.1000': attribute type 13 has an invalid length.
[  102.580674][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'.
[  102.589448][ T8258] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1009'.
[  102.808998][ T8276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'.
[  102.896558][ T8276] vlan0: entered allmulticast mode
[  102.898707][ T8276] bridge0: entered allmulticast mode
[  102.901135][ T8276] bridge2: port 1(vlan0) entered blocking state
[  102.904233][ T8276] bridge2: port 1(vlan0) entered disabled state
[  102.909469][ T8276] vlan0: entered promiscuous mode
[  102.911699][ T8276] bridge0: entered promiscuous mode
[  102.936127][ T8276] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  103.353780][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  103.357173][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout
[  103.843210][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1034'.
[  103.890681][ T8319] netlink: 'syz.2.1036': attribute type 1 has an invalid length.
[  103.894155][ T8319] netlink: 'syz.2.1036': attribute type 2 has an invalid length.
[  103.897671][ T8319] netlink: 'syz.2.1036': attribute type 8 has an invalid length.
[  103.901111][ T8319] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1036'.
[  104.362289][ T8360] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1055'.
[  104.648977][ T8382] netlink: 'syz.2.1065': attribute type 10 has an invalid length.
[  104.658738][ T8382] team0: Device dummy0 failed to register rx_handler
[  104.669088][ T8382] netlink: 'syz.2.1065': attribute type 10 has an invalid length.
[  104.673822][ T8382] syz.2.1065 (8382) used greatest stack depth: 18744 bytes left
[  104.762800][ T8384] IPVS: Scheduler module ip_vs_sip not found
[  105.286531][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1081'.
[  105.481890][ T8433] openvswitch: netlink: Duplicate or invalid key (type 0).
[  105.487507][ T8433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.561441][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'.
[  105.787171][ T8464] netlink: 'syz.0.1101': attribute type 1 has an invalid length.
[  105.790682][ T8464] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1101'.
[  105.985211][ T8462] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  105.988883][ T8462] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.004005][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout
[  106.618704][ T8473] netlink: 'syz.1.1103': attribute type 3 has an invalid length.
[  107.899764][ T8563] ip6tnl0: Caught tx_queue_len zero misconfig
[  107.904247][ T8561] netlink: 'syz.1.1145': attribute type 1 has an invalid length.
[  107.939768][ T8561] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.970304][ T8561] 8021q: adding VLAN 0 to HW filter on device bond1
[  107.973389][ T8561] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address
[  107.979364][ T8561] bond1: (slave vxcan5): Error -95 calling set_mac_address
[  107.992939][ T8568] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.999867][ T8568] syzkaller0: entered promiscuous mode
[  108.002214][ T8568] syzkaller0: entered allmulticast mode
[  108.029222][ T8572] veth3: entered promiscuous mode
[  108.036710][ T8572] bond1: (slave veth3): Enslaving as an active interface with a down link
[  108.056825][ T8568] tipc: Resetting bearer <eth:syzkaller0>
[  108.061557][ T8567] tipc: Resetting bearer <eth:syzkaller0>
[  108.072339][ T8567] tipc: Disabling bearer <eth:syzkaller0>
[  108.078303][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.081296][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.187527][ T8576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.190676][ T8576] syzkaller0: entered promiscuous mode
[  108.192814][ T8576] syzkaller0: entered allmulticast mode
[  108.223474][ T8576] tipc: Resetting bearer <eth:syzkaller0>
[  108.230215][ T8575] tipc: Resetting bearer <eth:syzkaller0>
[  108.242153][ T8575] tipc: Disabling bearer <eth:syzkaller0>
[  108.289587][ T8580] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  108.311428][ T8582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.356966][ T8588] __nla_validate_parse: 2 callbacks suppressed
[  108.356978][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'.
[  108.433058][ T8597] netlink: 'syz.0.1162': attribute type 10 has an invalid length.
[  108.436440][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'.
[  108.701920][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'.
[  108.716028][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'.
[  108.719822][ T8624] netlink: 'syz.1.1173': attribute type 18 has an invalid length.
[  108.785764][ T8630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1176'.
[  108.789926][ T8630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1176'.
[  108.820600][ T8632] xt_policy: neither incoming nor outgoing policy selected
[  109.066332][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1185'.
[  109.362269][ T8662] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  109.425692][ T8666] pim6reg1: entered promiscuous mode
[  109.427683][ T8666] pim6reg1: entered allmulticast mode
[  109.984656][ T8704] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1211'.
[  110.002374][ T8704] vlan2: entered allmulticast mode
[  110.007351][ T8704] gretap0: entered allmulticast mode
[  110.656774][ T8760] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.1235'.
[  110.831914][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1241'.
[  111.346478][ T8802] netlink: 'syz.1.1255': attribute type 8 has an invalid length.
[  111.584045][ T8816] netlink: 'syz.1.1261': attribute type 2 has an invalid length.
[  111.700752][ T8820] pimreg: entered allmulticast mode
[  111.711987][ T8820] dvmrp8: entered allmulticast mode
[  111.719081][ T8819] pimreg: left allmulticast mode
[  111.721117][ T8819] dvmrp8: left allmulticast mode
[  112.212581][ T8851] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.517073][ T8881] veth0_to_bridge: entered promiscuous mode
[  112.689868][ T8906] netlink: 'syz.0.1296': attribute type 13 has an invalid length.
[  112.839443][ T8918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.254644][ T8946] netlink: 'syz.2.1315': attribute type 4 has an invalid length.
[  113.646054][ T8955] __nla_validate_parse: 7 callbacks suppressed
[  113.646070][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'.
[  113.725215][ T8961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.762108][ T8961] syzkaller0: entered promiscuous mode
[  113.767473][ T8961] syzkaller0: entered allmulticast mode
[  113.771994][ T8961] tipc: Resetting bearer <eth:syzkaller0>
[  113.777879][ T8960] tipc: Resetting bearer <eth:syzkaller0>
[  114.602983][ T8969] trusted_key: syz.1.1325 sent an empty control message without MSG_MORE.
[  114.644779][ T8960] tipc: Disabling bearer <eth:syzkaller0>
[  114.695610][ T8974] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1326'.
[  114.700144][ T8971] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1326'.
[  114.986212][ T8994] openvswitch: netlink: IP tunnel dst address not specified
[  114.991213][ T8995] netlink: 'syz.2.1337': attribute type 1 has an invalid length.
[  114.995262][ T8995] netlink: 'syz.2.1337': attribute type 2 has an invalid length.
[  115.045054][ T8997] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  115.200257][ T9005] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  115.314435][ T9026] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  115.412345][ T9037] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1354'.
[  115.469296][ T9041] veth0: entered promiscuous mode
[  115.472254][ T9040] veth0: left promiscuous mode
[  116.218386][ T9058] lo speed is unknown, defaulting to 1000
[  116.224566][ T9058] lo speed is unknown, defaulting to 1000
[  116.229022][ T9058] lo speed is unknown, defaulting to 1000
[  116.391965][   T51] lo speed is unknown, defaulting to 1000
[  116.394985][ T9058] infiniband syz0: set active
[  116.397330][ T9058] infiniband syz0: added lo
[  116.457147][ T9058] RDS/IB: syz0: added
[  116.460882][ T9058] smc: adding ib device syz0 with port count 1
[  116.465951][ T9058] smc:    ib device syz0 port 1 has pnetid 
[  116.472221][   T51] lo speed is unknown, defaulting to 1000
[  116.488432][ T9058] lo speed is unknown, defaulting to 1000
[  116.644155][ T9069] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.647238][ T9069] syzkaller0: entered promiscuous mode
[  116.649459][ T9069] syzkaller0: entered allmulticast mode
[  116.650519][ T9071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.667997][ T9069] tipc: Resetting bearer <eth:syzkaller0>
[  116.676576][ T9068] tipc: Resetting bearer <eth:syzkaller0>
[  116.692174][ T9068] tipc: Disabling bearer <eth:syzkaller0>
[  116.709064][ T9058] lo speed is unknown, defaulting to 1000
[  116.799844][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'.
[  116.866321][ T9058] lo speed is unknown, defaulting to 1000
[  117.290534][ T9097] lo speed is unknown, defaulting to 1000
[  118.447280][ T9136] veth0: Caught tx_queue_len zero misconfig
[  118.465258][ T9137] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1394'.
[  118.510927][ T9139] netlink: 'syz.0.1397': attribute type 1 has an invalid length.
[  118.518026][ T9139] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1397'.
[  118.685894][ T9147] netlink: 'syz.2.1401': attribute type 5 has an invalid length.
[  118.691439][ T9150] lo: Caught tx_queue_len zero misconfig
[  118.695154][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1402'.
[  118.698384][ T9150] sch_fq: defrate 0 ignored.
[  118.927667][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'.
[  118.930912][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'.
[  118.963205][ T9176] netlink: 'syz.2.1414': attribute type 10 has an invalid length.
[  118.966873][ T9176] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1414'.
[  118.969883][ T9177] netlink: 'syz.0.1415': attribute type 12 has an invalid length.
[  118.973187][ T9177] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1415'.
[  118.973221][ T9176] team0: Port device geneve0 added
[  118.979902][ T5873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.983064][ T5873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.987758][ T5873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.991001][ T5873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.135597][ T9189] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1421'.
[  119.215872][ T9201] tap0: tun_chr_ioctl cmd 1074025681
[  119.216525][ T9200] Bluetooth: MGMT ver 1.23
[  119.327958][ T9211] netlink: 'syz.0.1432': attribute type 6 has an invalid length.
[  119.352544][ T9211] netlink: 'syz.0.1432': attribute type 12 has an invalid length.
[  119.357482][ T9211] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1432'.
[  119.381723][ T9220] bridge3: entered promiscuous mode
[  119.393447][ T5873] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.402953][ T5873] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.411212][ T5873] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.432919][ T5873] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.663300][ T9249] netlink: 'syz.0.1443': attribute type 6 has an invalid length.
[  119.674594][ T9249] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1443'.
[  119.676512][ T9251] netlink: 'syz.1.1446': attribute type 1 has an invalid length.
[  119.682335][ T9251] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1446'.
[  119.852549][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'.
[  120.035301][ T9281] : entered promiscuous mode
[  120.080100][ T9294] netlink: 'syz.2.1466': attribute type 11 has an invalid length.
[  120.125268][ T9301] veth0_to_bond: entered allmulticast mode
[  120.630083][ T9326] team0: Port device geneve0 removed
[  121.636354][ T9369] syzkaller0: entered promiscuous mode
[  121.638749][ T9369] syzkaller0: entered allmulticast mode
[  122.951540][ T9399] netlink: 'syz.2.1513': attribute type 1 has an invalid length.
[  123.685031][ T9469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.687740][ T9469] syzkaller0: entered promiscuous mode
[  123.689752][ T9469] syzkaller0: entered allmulticast mode
[  123.700884][ T9469] tipc: Resetting bearer <eth:syzkaller0>
[  123.704825][ T9468] tipc: Resetting bearer <eth:syzkaller0>
[  123.712440][ T9468] tipc: Disabling bearer <eth:syzkaller0>
[  123.998075][ T9481] validate_nla: 1 callbacks suppressed
[  123.998088][ T9481] netlink: 'syz.1.1553': attribute type 23 has an invalid length.
[  124.205396][ T9498] __nla_validate_parse: 5 callbacks suppressed
[  124.205405][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'.
[  124.210834][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1561'.
[  124.344804][ T9510] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1567'.
[  124.583038][   T33] audit: type=1800 audit(1758546564.593:5): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1567" name="memory.events" dev="tmpfs" ino=2606 res=0 errno=0
[  124.844320][ T9532] lo speed is unknown, defaulting to 1000
[  124.865203][ T9544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1575'.
[  124.976236][ T9550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1583'.
[  125.185544][ T9560] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1587'.
[  125.217021][ T9563] netlink: 'syz.0.1588': attribute type 10 has an invalid length.
[  125.223801][ T9563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1588'.
[  125.408406][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1593'.
[  125.413974][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1593'.
[  125.582009][ T9587] sit0: entered promiscuous mode
[  125.589726][ T9587] netlink: 'syz.2.1599': attribute type 1 has an invalid length.
[  125.593199][ T9587] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1599'.
[  125.835068][ T9601] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.838662][ T9601] syzkaller0: entered promiscuous mode
[  125.841296][ T9601] syzkaller0: entered allmulticast mode
[  125.859664][ T9601] tipc: Resetting bearer <eth:syzkaller0>
[  125.864896][ T9600] tipc: Resetting bearer <eth:syzkaller0>
[  125.878210][ T9600] tipc: Disabling bearer <eth:syzkaller0>
[  126.093549][ T9613] lo speed is unknown, defaulting to 1000
[  126.929968][ T9642] netlink: 'syz.0.1622': attribute type 4 has an invalid length.
[  126.959859][ T5914] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.970593][ T5914] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  126.978741][ T5914] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.012813][ T5914] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  127.153357][ T9664] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  127.260962][ T9652] netlink: 'syz.2.1625': attribute type 4 has an invalid length.
[  127.280011][ T9664] sctp: [Deprecated]: syz.0.1631 (pid 9664) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.280011][ T9664] Use struct sctp_sack_info instead
[  127.723690][   T24] IPVS: starting estimator thread 0...
[  127.813947][ T9706] IPVS: using max 46 ests per chain, 110400 per kthread
[  128.979408][ T9807] netlink: 'syz.0.1692': attribute type 1 has an invalid length.
[  128.982347][ T9807] netlink: 'syz.0.1692': attribute type 6 has an invalid length.
[  129.290477][ T9833] tunl0: Caught tx_queue_len zero misconfig
[  129.296544][ T9832] siw: device registration error -23
[  129.328292][ T9832] lo speed is unknown, defaulting to 1000
[  129.566140][ T9848] __nla_validate_parse: 10 callbacks suppressed
[  129.566149][ T9848] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1706'.
[  129.705314][ T9854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1709'.
[  130.024355][ T9867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'.
[  130.508283][ T9894] netlink: 'syz.0.1727': attribute type 21 has an invalid length.
[  130.511774][ T9894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1727'.
[  130.647368][ T9903] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1731'.
[  130.754747][ T9906] bridge_slave_0: left allmulticast mode
[  130.757104][ T9906] bridge_slave_0: left promiscuous mode
[  130.759620][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.765617][ T9906] bridge_slave_1: left allmulticast mode
[  130.768058][ T9906] bridge_slave_1: left promiscuous mode
[  130.770524][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.780642][ T9906] bond0: (slave bond_slave_0): Releasing backup interface
[  130.785593][ T9906] bond0: (slave bond_slave_1): Releasing backup interface
[  130.790976][ T9906] team0: Port device team_slave_0 removed
[  130.796083][ T9906] team0: Port device team_slave_1 removed
[  130.798878][ T9906] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.802641][ T9906] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.808633][ T9906] bond1: (slave geneve3): Releasing active interface
[  131.330563][ T9915] sctp: [Deprecated]: syz.1.1736 (pid 9915) Use of int in max_burst socket option.
[  131.330563][ T9915] Use struct sctp_assoc_value instead
[  131.995352][ T9929] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1743'.
[  132.021303][ T9934] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.1745'.
[  132.202802][ T9944] lo speed is unknown, defaulting to 1000
[  132.231823][ T9949] netlink: 'syz.0.1752': attribute type 1 has an invalid length.
[  132.245275][ T9949] netlink: 'syz.0.1752': attribute type 1 has an invalid length.
[  132.635859][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  133.522249][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1779'.
[  133.583528][T10018] sock: sock_timestamping_bind_phc: sock not bind to device
[  133.616983][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'.
[  134.025668][T10026] lo speed is unknown, defaulting to 1000
[  134.300085][T10033] netlink: 'syz.0.1785': attribute type 32 has an invalid length.
[  134.358335][T10036] netlink: 'syz.1.1787': attribute type 3 has an invalid length.
[  134.361634][T10036] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1787'.
[  134.400547][T10039] netlink: 'syz.0.1788': attribute type 1 has an invalid length.
[  134.653274][T10063] netlink: 'syz.2.1799': attribute type 2 has an invalid length.
[  134.676336][T10063] k*: entered promiscuous mode
[  134.687764][T10063] sit0: left promiscuous mode
[  134.697618][T10063] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.701104][T10063] 8021q: adding VLAN 0 to HW filter on device team0
[  134.707595][T10063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.733535][T10069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.913201][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'.
[  135.053538][T10098] netlink: 'syz.2.1815': attribute type 15 has an invalid length.
[  135.308102][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'.
[  135.375194][T10128] netlink: 'syz.0.1829': attribute type 1 has an invalid length.
[  135.378639][T10128] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.1829'.
[  135.454951][T10145] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  135.457975][T10145] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  135.800914][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'.
[  136.061879][T10184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.065365][T10184] IPv6: NLM_F_CREATE should be set when creating new route
[  136.068518][T10184] IPv6: NLM_F_CREATE should be set when creating new route
[  136.072042][T10184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.439636][T10215] unknown channel width for channel at 909000KHz?
[  136.543831][T10228] vlan0: entered promiscuous mode
[  136.762071][T10251] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1886'.
[  136.888978][T10271] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1897'.
[  137.160292][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'.
[  137.305913][T10319] netlink: 'syz.2.1919': attribute type 4 has an invalid length.
[  137.380800][T10327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.383793][T10327] syzkaller0: entered promiscuous mode
[  137.385736][T10327] syzkaller0: entered allmulticast mode
[  137.395478][T10327] sch_fq: defrate 257 ignored.
[  137.400138][T10327] tipc: Resetting bearer <eth:syzkaller0>
[  137.406209][T10326] tipc: Resetting bearer <eth:syzkaller0>
[  137.416023][T10326] tipc: Disabling bearer <eth:syzkaller0>
[  137.498635][T10335] netlink: 'syz.2.1927': attribute type 7 has an invalid length.
[  137.498724][T10333] netlink: 'syz.1.1926': attribute type 1 has an invalid length.
[  137.529275][T10333] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.558791][T10333] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.561783][T10333] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  137.568630][T10333] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  137.582202][T10342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.604241][T10347] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  137.709259][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1940'.
[  137.712592][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1940'.
[  137.879459][T10383] team0: Device ipvlan0 failed to register rx_handler
[  138.012754][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1951'.
[  138.016272][T10388] netlink: 'syz.2.1951': attribute type 2 has an invalid length.
[  138.019396][T10388] netlink: 'syz.2.1951': attribute type 1 has an invalid length.
[  138.393168][T10408] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  138.695490][T10428] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  138.902643][T10453] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  139.748378][T10514] IPVS: Error connecting to the multicast addr
[  139.838013][T10521] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  139.841501][T10521] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  139.890793][T10528] ieee802154 phy0 wpan0: encryption failed: -22
[  140.015636][T10541] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.018830][T10541] syzkaller0: entered promiscuous mode
[  140.021260][T10541] syzkaller0: entered allmulticast mode
[  140.026484][T10541] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  140.040503][T10541] tipc: Resetting bearer <eth:syzkaller0>
[  140.045055][T10540] tipc: Resetting bearer <eth:syzkaller0>
[  140.056195][T10540] tipc: Disabling bearer <eth:syzkaller0>
[  140.781114][T10632] __nla_validate_parse: 7 callbacks suppressed
[  140.781128][T10632] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2033'.
[  140.919708][T10651] batman_adv: batadv0: Adding interface: ip6gretap1
[  140.921984][T10651] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.934627][T10651] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  141.522074][T10685] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2057'.
[  141.529236][T10685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2057'.
[  141.721414][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'.
[  141.957398][T10721] syz_tun: entered allmulticast mode
[  141.972200][T10720] syz_tun: left allmulticast mode
[  142.316238][T10751] 8021q: adding VLAN 0 to HW filter on device bond2
[  142.362953][T10758] bond0: Caught tx_queue_len zero misconfig
[  142.453786][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'.
[  142.535899][T10772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2096'.
[  142.761538][T10796] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  142.930065][T10813] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2114'.
[  143.029495][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2116'.
[  143.233881][T10831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2122'.
[  143.260254][T10833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.558890][T10860] geneve2: entered promiscuous mode
[  143.677780][T10871] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.708443][T10874] netlink: 'syz.1.2143': attribute type 1 has an invalid length.
[  143.711171][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2143'.
[  143.798136][T10878] netlink: 'syz.1.2145': attribute type 11 has an invalid length.
[  144.019912][T10908] netlink: 'syz.2.2157': attribute type 83 has an invalid length.
[  144.063295][T10913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.066317][T10913] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.105706][T10916] sctp: [Deprecated]: syz.0.2161 (pid 10916) Use of int in max_burst socket option deprecated.
[  144.105706][T10916] Use struct sctp_assoc_value instead
[  144.128413][T10918] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  144.131976][T10918] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  144.740073][T10968] geneve2: entered promiscuous mode
[  144.741883][T10968] geneve2: entered allmulticast mode
[  144.744642][ T5750] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 50878 - 0
[  144.747538][ T5750] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 50878 - 0
[  144.750524][ T5750] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 50878 - 0
[  144.759139][ T5750] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 50878 - 0
[  145.810954][T10986] Bluetooth: hci0: Opcode 0x080f failed: -4
[  146.595259][T11031] geneve3: entered promiscuous mode
[  146.881241][T11053] sctp: [Deprecated]: syz.1.2223 (pid 11053) Use of int in maxseg socket option.
[  146.881241][T11053] Use struct sctp_assoc_value instead
[  147.028744][T11065] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  147.031498][T11065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.111362][T11073] pim6reg1: entered promiscuous mode
[  147.113210][T11073] pim6reg1: entered allmulticast mode
[  147.115665][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout
[  147.262815][T11081] netlink: 'syz.2.2237': attribute type 1 has an invalid length.
[  147.361596][T11089] netlink: 'syz.2.2241': attribute type 32 has an invalid length.
[  147.850221][T11105] __nla_validate_parse: 7 callbacks suppressed
[  147.850231][T11105] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2247'.
[  147.862585][T11018] Set syz1 is full, maxelem 65536 reached
[  147.871280][ T2276] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[  147.879933][ T2276] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0
[  147.888893][ T2276] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe
[  147.914844][ T2276] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  148.081245][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'.
[  148.258632][T11153] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  148.265819][T11153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  148.437296][T11172] lo speed is unknown, defaulting to 1000
[  149.055653][T11195] netlink: 'syz.1.2288': attribute type 1 has an invalid length.
[  149.420644][T11213] netlink: 'syz.2.2297': attribute type 9 has an invalid length.
[  149.423994][T11213] netlink: 'syz.2.2297': attribute type 7 has an invalid length.
[  149.427791][T11213] netlink: 'syz.2.2297': attribute type 8 has an invalid length.
[  149.469652][T11221] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  150.071116][T11277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.103298][T11277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50878 - 0
[  150.190460][T11277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.214022][T11277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50878 - 0
[  150.286419][T11277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.291795][T11277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50878 - 0
[  150.313761][ T2276] page_pool_release_retry() stalled pool shutdown: id 21, 3329 inflight 60 sec
[  150.344982][T11277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.348998][T11277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50878 - 0
[  150.387997][T11306] sctp: [Deprecated]: syz.0.2326 (pid 11306) Use of int in max_burst socket option.
[  150.387997][T11306] Use struct sctp_assoc_value instead
[  150.486273][ T5914] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 50878 - 0
[  150.490686][ T5914] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  150.501656][T11314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2330'.
[  150.506285][ T5914] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 50878 - 0
[  150.506309][ T5914] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  150.517963][ T5914] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 50878 - 0
[  150.521320][ T5914] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  150.540432][T11314] team0: No ports can be present during mode change
[  150.547469][ T5914] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 50878 - 0
[  150.548191][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2330'.
[  150.553674][ T5914] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  150.561189][T11314] tipc: Enabled bearer <eth:team0>, priority 0
[  150.831963][T11337] netlink: 'syz.1.2341': attribute type 1 has an invalid length.
[  150.834794][T11337] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2341'.
[  151.034728][T11355] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2349'.
[  151.331872][T11380] lo speed is unknown, defaulting to 1000
[  151.662778][T11404] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2368'.
[  151.675047][ T5859] tipc: Node number set to 4278190080
[  152.571968][T11440] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2384'.
[  152.727522][T11444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2386'.
[  153.976796][T11492] syzkaller1: tun_chr_ioctl cmd 2147767520
[  154.307716][T11512] bridge0: port 1(erspan0) entered blocking state
[  154.310333][T11512] bridge0: port 1(erspan0) entered disabled state
[  154.312682][T11512] erspan0: entered allmulticast mode
[  154.321969][T11512] erspan0: entered promiscuous mode
[  154.337128][T11512] erspan0: left allmulticast mode
[  154.339324][T11512] erspan0: left promiscuous mode
[  154.342170][T11512] bridge0: port 1(erspan0) entered disabled state
[  154.357263][T11518] netlink: 23 bytes leftover after parsing attributes in process `syz.1.2419'.
[  154.418499][T11522] xt_l2tp: v2 tid > 0xffff: 37482740
[  154.749567][T11543] lo speed is unknown, defaulting to 1000
[  154.774256][T11546] netlink: 'syz.2.2432': attribute type 10 has an invalid length.
[  154.792350][T11546] bridge0: port 3(macsec0) entered blocking state
[  154.795701][T11546] bridge0: port 3(macsec0) entered disabled state
[  154.799174][T11546] macsec0: entered allmulticast mode
[  154.801207][T11546] veth1_macvtap: entered allmulticast mode
[  154.805316][T11546] macsec0: entered promiscuous mode
[  154.852629][T11551] netlink: 'syz.0.2434': attribute type 58 has an invalid length.
[  154.863707][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2434'.
[  154.914672][T11554] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2435'.
[  155.261190][T11573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2444'.
[  155.265166][T11573] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2444'.
[  155.428375][T11587] lo speed is unknown, defaulting to 1000
[  155.504427][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2453'.
[  155.694747][T11596] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2454'.
[  155.745930][T11600] netlink: 'syz.0.2456': attribute type 9 has an invalid length.
[  156.461086][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'.
[  157.165959][T11647] netlink: 'syz.0.2475': attribute type 10 has an invalid length.
[  157.174563][T11647] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  157.507238][T11652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.517626][T11652] syzkaller0: entered promiscuous mode
[  157.520789][T11652] syzkaller0: entered allmulticast mode
[  157.545992][T11652] tipc: Resetting bearer <eth:syzkaller0>
[  157.557057][T11651] tipc: Resetting bearer <eth:syzkaller0>
[  157.569303][T11651] tipc: Disabling bearer <eth:syzkaller0>
[  157.752329][T11660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  157.853201][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2485'.
[  157.970429][T11669] tipc: Resetting bearer <eth:team0>
[  157.984252][T11669] veth0_to_bond: left allmulticast mode
[  157.988271][T11669] veth1_macvtap: left allmulticast mode
[  158.023161][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'.
[  158.359735][T11723] lo speed is unknown, defaulting to 1000
[  159.337131][T11774] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  159.461088][T11790] openvswitch: netlink: Flow actions attr not present in new flow.
[  159.679595][T11811] __nla_validate_parse: 1 callbacks suppressed
[  159.679606][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  159.685879][T11811] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2540'.
[  159.689587][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'.
[  159.878281][T11832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2548'.
[  159.958256][T11842] netlink: 'syz.0.2552': attribute type 8 has an invalid length.
[  159.960879][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'.
[  160.103765][T11861] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  160.157590][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'.
[  160.317283][T11887] netlink: 'syz.0.2576': attribute type 11 has an invalid length.
[  160.340400][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'.
[  160.429517][T11898] IPv6: Can't replace route, no match found
[  160.482864][T11902] ieee802154 phy0 wpan0: encryption failed: -22
[  160.535657][T11908] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2586'.
[  160.706971][T11923] syzkaller1: entered promiscuous mode
[  160.709464][T11923] syzkaller1: entered allmulticast mode
[  160.736885][T11927] bond0: Unable to set up delay as MII monitoring is disabled
[  160.816704][T11937] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  160.901229][T11945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2604'.
[  160.905553][T11945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2604'.
[  160.909426][T11945] netlink: 'syz.0.2604': attribute type 6 has an invalid length.
[  160.952385][T11950] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  161.137786][T11972] veth1_to_batadv: Caught tx_queue_len zero misconfig
[  161.252136][T11985] netlink: 'syz.0.2623': attribute type 2 has an invalid length.
[  161.260946][T11985] netlink: 'syz.0.2623': attribute type 1 has an invalid length.
[  161.625986][T12009] netlink: 'syz.0.2627': attribute type 2 has an invalid length.
[  162.614645][T12068] lo speed is unknown, defaulting to 1000
[  163.659091][T12154] netlink: 'syz.0.2668': attribute type 13 has an invalid length.
[  163.662320][T12154] netlink: 'syz.0.2668': attribute type 17 has an invalid length.
[  163.766990][T12154] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.788453][T12160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.795644][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  163.845655][T12160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.851100][T12154] 8021q: adding VLAN 0 to HW filter on device team0
[  163.857586][T12154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.871278][T12151] lo speed is unknown, defaulting to 1000
[  163.932113][T12155] netlink: 'syz.2.2669': attribute type 29 has an invalid length.
[  163.938419][T12158] netlink: 'syz.2.2669': attribute type 29 has an invalid length.
[  163.997137][ T5750] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  164.000800][ T5750] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  164.057097][T12159] lo speed is unknown, defaulting to 1000
[  164.335527][T12156] lo speed is unknown, defaulting to 1000
[  164.384789][   T51] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  164.677411][T12173] netlink: 'syz.2.2673': attribute type 27 has an invalid length.
[  164.680857][T12173] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  165.037182][  T973] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  165.119924][T12202] __nla_validate_parse: 12 callbacks suppressed
[  165.119940][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2686'.
[  165.190034][T12208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.566051][T12236] tap0: tun_chr_ioctl cmd 1074025677
[  165.568472][T12236] tap0: linktype set to 800
[  165.813399][T12258] lo speed is unknown, defaulting to 1000
[  165.845826][T12261] ==================================================================
[  165.849209][T12261] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  165.852394][T12261] Read of size 4 at addr ffff888039f740c4 by task syz.1.2716/12261
[  165.856520][T12261] 
[  165.857595][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.1.2716 Not tainted syzkaller #0 PREEMPT(full) 
[  165.857611][T12261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.857619][T12261] Call Trace:
[  165.857626][T12261]  <TASK>
[  165.857632][T12261]  dump_stack_lvl+0x189/0x250
[  165.857650][T12261]  ? __kasan_check_byte+0x12/0x40
[  165.857670][T12261]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.857683][T12261]  ? lock_release+0x4b/0x3e0
[  165.857715][T12261]  ? __virt_addr_valid+0x4a5/0x5c0
[  165.857732][T12261]  print_report+0xca/0x240
[  165.857769][T12261]  ? xfrm_alloc_spi+0x570/0xf30
[  165.857787][T12261]  kasan_report+0x118/0x150
[  165.857806][T12261]  ? xfrm_alloc_spi+0x570/0xf30
[  165.857823][T12261]  xfrm_alloc_spi+0x570/0xf30
[  165.857838][T12261]  ? xfrm_alloc_spi+0x2a0/0xf30
[  165.857865][T12261]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  165.857880][T12261]  ? xfrm_find_acq+0x87/0xa0
[  165.857897][T12261]  xfrm_alloc_userspi+0x70b/0xc90
[  165.857919][T12261]  ? apparmor_capable+0x137/0x1b0
[  165.857934][T12261]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  165.857952][T12261]  ? __nla_parse+0x40/0x60
[  165.857966][T12261]  xfrm_user_rcv_msg+0x7a3/0xab0
[  165.857984][T12261]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  165.858009][T12261]  ? __pfx___mutex_trylock_common+0x10/0x10
[  165.858023][T12261]  ? rcu_is_watching+0x15/0xb0
[  165.858033][T12261]  ? trace_contention_end+0x39/0x120
[  165.858046][T12261]  ? __mutex_lock+0x335/0x1350
[  165.858061][T12261]  netlink_rcv_skb+0x208/0x470
[  165.858074][T12261]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  165.858092][T12261]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  165.858107][T12261]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.858119][T12261]  ? netlink_deliver_tap+0x2e/0x1b0
[  165.858132][T12261]  xfrm_netlink_rcv+0x79/0x90
[  165.858149][T12261]  netlink_unicast+0x82f/0x9e0
[  165.858169][T12261]  ? __pfx_netlink_unicast+0x10/0x10
[  165.858187][T12261]  ? netlink_sendmsg+0x642/0xb30
[  165.858198][T12261]  ? skb_put+0x11b/0x210
[  165.858212][T12261]  netlink_sendmsg+0x805/0xb30
[  165.858227][T12261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.858240][T12261]  ? aa_sock_msg_perm+0xf1/0x1d0
[  165.858252][T12261]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  165.858265][T12261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  165.858278][T12261]  __sock_sendmsg+0x21c/0x270
[  165.858298][T12261]  ____sys_sendmsg+0x505/0x830
[  165.858315][T12261]  ? __pfx_____sys_sendmsg+0x10/0x10
[  165.858332][T12261]  ? import_iovec+0x74/0xa0
[  165.858348][T12261]  ___sys_sendmsg+0x21f/0x2a0
[  165.858362][T12261]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.858385][T12261]  ? __fget_files+0x2a/0x420
[  165.858395][T12261]  ? __fget_files+0x3a0/0x420
[  165.858407][T12261]  __x64_sys_sendmsg+0x19b/0x260
[  165.858421][T12261]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.858438][T12261]  ? rcu_is_watching+0x15/0xb0
[  165.858450][T12261]  ? do_syscall_64+0xbe/0x3b0
[  165.858465][T12261]  do_syscall_64+0xfa/0x3b0
[  165.858477][T12261]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.858488][T12261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.858500][T12261]  ? exc_page_fault+0x9f/0xf0
[  165.858510][T12261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.858521][T12261] RIP: 0033:0x7fe65fd8ec29
[  165.858533][T12261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.858544][T12261] RSP: 002b:00007fe660ce8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.858557][T12261] RAX: ffffffffffffffda RBX: 00007fe65ffd5fa0 RCX: 00007fe65fd8ec29
[  165.858565][T12261] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  165.858573][T12261] RBP: 00007fe65fe11e41 R08: 0000000000000000 R09: 0000000000000000
[  165.858580][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.858586][T12261] R13: 00007fe65ffd6038 R14: 00007fe65ffd5fa0 R15: 00007ffc8f8b1008
[  165.858600][T12261]  </TASK>
[  165.858604][T12261] 
[  166.018060][T12261] Allocated by task 10006:
[  166.020024][T12261]  kasan_save_track+0x3e/0x80
[  166.022112][T12261]  __kasan_slab_alloc+0x6c/0x80
[  166.024242][T12261]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  166.026656][T12261]  xfrm_state_alloc+0x24/0x2f0
[  166.028777][T12261]  __find_acq_core+0x8a7/0x1c00
[  166.030894][T12261]  xfrm_find_acq+0x78/0xa0
[  166.032890][T12261]  xfrm_alloc_userspi+0x6b3/0xc90
[  166.035027][T12261]  xfrm_user_rcv_msg+0x7a3/0xab0
[  166.037162][T12261]  netlink_rcv_skb+0x208/0x470
[  166.039263][T12261]  xfrm_netlink_rcv+0x79/0x90
[  166.041281][T12261]  netlink_unicast+0x82f/0x9e0
[  166.043362][T12261]  netlink_sendmsg+0x805/0xb30
[  166.045473][T12261]  __sock_sendmsg+0x21c/0x270
[  166.047507][T12261]  ____sys_sendmsg+0x505/0x830
[  166.049579][T12261]  ___sys_sendmsg+0x21f/0x2a0
[  166.051658][T12261]  __x64_sys_sendmsg+0x19b/0x260
[  166.053812][T12261]  do_syscall_64+0xfa/0x3b0
[  166.055804][T12261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.058385][T12261] 
[  166.059452][T12261] Freed by task 2203:
[  166.061173][T12261]  kasan_save_track+0x3e/0x80
[  166.063226][T12261]  kasan_save_free_info+0x46/0x50
[  166.065443][T12261]  __kasan_slab_free+0x5b/0x80
[  166.067457][T12261]  kmem_cache_free+0x18f/0x400
[  166.069558][T12261]  xfrm_state_gc_task+0x52d/0x6b0
[  166.071722][T12261]  process_scheduled_works+0xae1/0x17b0
[  166.074411][T12261]  worker_thread+0x8a0/0xda0
[  166.076464][T12261]  kthread+0x711/0x8a0
[  166.078266][T12261]  ret_from_fork+0x439/0x7d0
[  166.080305][T12261]  ret_from_fork_asm+0x1a/0x30
[  166.082438][T12261] 
[  166.083499][T12261] The buggy address belongs to the object at ffff888039f74000
[  166.083499][T12261]  which belongs to the cache xfrm_state of size 928
[  166.089235][T12261] The buggy address is located 196 bytes inside of
[  166.089235][T12261]  freed 928-byte region [ffff888039f74000, ffff888039f743a0)
[  166.094811][T12261] 
[  166.095852][T12261] The buggy address belongs to the physical page:
[  166.098541][T12261] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888039f74000 pfn:0x39f74
[  166.102599][T12261] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  166.105988][T12261] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  166.109113][T12261] page_type: f5(slab)
[  166.110794][T12261] raw: 00fff00000000040 ffff888104a85c80 dead000000000122 0000000000000000
[  166.114236][T12261] raw: ffff888039f74000 00000000800e000a 00000000f5000000 0000000000000000
[  166.117672][T12261] head: 00fff00000000040 ffff888104a85c80 dead000000000122 0000000000000000
[  166.121096][T12261] head: ffff888039f74000 00000000800e000a 00000000f5000000 0000000000000000
[  166.124829][T12261] head: 00fff00000000002 ffffea0000e7dd01 00000000ffffffff 00000000ffffffff
[  166.128485][T12261] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  166.132195][T12261] page dumped because: kasan: bad access detected
[  166.134994][T12261] page_owner tracks the page as allocated
[  166.137447][T12261] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5923, tgid 5921 (syz.2.3), ts 63329581542, free_ts 63320855143
[  166.145109][T12261]  post_alloc_hook+0x240/0x2a0
[  166.147120][T12261]  get_page_from_freelist+0x21e4/0x22c0
[  166.149403][T12261]  __alloc_frozen_pages_noprof+0x181/0x370
[  166.151781][T12261]  alloc_pages_mpol+0x232/0x4a0
[  166.153770][T12261]  allocate_slab+0x8a/0x370
[  166.155687][T12261]  ___slab_alloc+0xbeb/0x1420
[  166.157637][T12261]  kmem_cache_alloc_noprof+0x283/0x3c0
[  166.159967][T12261]  xfrm_state_alloc+0x24/0x2f0
[  166.161996][T12261]  xfrm_state_find+0x37d4/0x5400
[  166.164072][T12261]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  166.166671][T12261]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  166.168942][T12261]  xfrm_lookup_route+0x3c/0x1c0
[  166.170939][T12261]  __ip4_datagram_connect+0x9a5/0x1270
[  166.172802][T12261]  __ip6_datagram_connect+0x9f0/0x1150
[  166.174522][T12261]  ip6_datagram_connect_v6_only+0x63/0xa0
[  166.176347][T12261]  __sys_connect+0x316/0x440
[  166.177981][T12261] page last free pid 5922 tgid 5922 stack trace:
[  166.180247][T12261]  __free_frozen_pages+0xbc4/0xd30
[  166.182059][T12261]  __put_partials+0x156/0x1a0
[  166.183986][T12261]  put_cpu_partial+0x17c/0x250
[  166.185463][T12261]  __slab_free+0x2d5/0x3c0
[  166.187163][T12261]  qlist_free_all+0x97/0x140
[  166.189062][T12261]  kasan_quarantine_reduce+0x148/0x160
[  166.191595][T12261]  __kasan_slab_alloc+0x22/0x80
[  166.193593][T12261]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  166.195844][T12261]  getname_flags+0xb8/0x540
[  166.197731][T12261]  vfs_fstatat+0x43/0x170
[  166.199407][T12261]  __x64_sys_newfstatat+0x116/0x190
[  166.201355][T12261]  do_syscall_64+0xfa/0x3b0
[  166.202961][T12261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.205164][T12261] 
[  166.206082][T12261] Memory state around the buggy address:
[  166.207915][T12261]  ffff888039f73f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  166.210664][T12261]  ffff888039f74000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.213728][T12261] >ffff888039f74080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.216470][T12261]                                            ^
[  166.218583][T12261]  ffff888039f74100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.221075][T12261]  ffff888039f74180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  166.224107][T12261] ==================================================================
[  166.227102][T12261] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  166.229870][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.1.2716 Not tainted syzkaller #0 PREEMPT(full) 
[  166.233481][T12261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.236916][T12261] Call Trace:
[  166.238117][T12261]  <TASK>
[  166.239315][T12261]  dump_stack_lvl+0x99/0x250
[  166.241040][T12261]  ? __asan_memcpy+0x40/0x70
[  166.242821][T12261]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.244801][T12261]  ? __pfx__printk+0x10/0x10
[  166.246715][T12261]  vpanic+0x281/0x750
[  166.248461][T12261]  ? __pfx_vpanic+0x10/0x10
[  166.250457][T12261]  ? irqentry_exit+0x74/0x90
[  166.252462][T12261]  panic+0xb9/0xc0
[  166.254117][T12261]  ? __pfx_panic+0x10/0x10
[  166.256086][T12261]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  166.258658][T12261]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  166.261279][T12261]  ? xfrm_alloc_spi+0x570/0xf30
[  166.263433][T12261]  check_panic_on_warn+0x89/0xb0
[  166.265589][T12261]  ? xfrm_alloc_spi+0x570/0xf30
[  166.267663][T12261]  end_report+0x78/0x160
[  166.269518][T12261]  kasan_report+0x129/0x150
[  166.271510][T12261]  ? xfrm_alloc_spi+0x570/0xf30
[  166.273556][T12261]  xfrm_alloc_spi+0x570/0xf30
[  166.275631][T12261]  ? xfrm_alloc_spi+0x2a0/0xf30
[  166.277839][T12261]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  166.280068][T12261]  ? xfrm_find_acq+0x87/0xa0
[  166.282101][T12261]  xfrm_alloc_userspi+0x70b/0xc90
[  166.284327][T12261]  ? apparmor_capable+0x137/0x1b0
[  166.286558][T12261]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  166.288903][T12261]  ? __nla_parse+0x40/0x60
[  166.290891][T12261]  xfrm_user_rcv_msg+0x7a3/0xab0
[  166.293053][T12261]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  166.295487][T12261]  ? __pfx___mutex_trylock_common+0x10/0x10
[  166.298097][T12261]  ? rcu_is_watching+0x15/0xb0
[  166.300195][T12261]  ? trace_contention_end+0x39/0x120
[  166.302515][T12261]  ? __mutex_lock+0x335/0x1350
[  166.304612][T12261]  netlink_rcv_skb+0x208/0x470
[  166.306656][T12261]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  166.309043][T12261]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  166.311331][T12261]  ? netlink_deliver_tap+0x2e/0x1b0
[  166.313437][T12261]  ? netlink_deliver_tap+0x2e/0x1b0
[  166.315727][T12261]  xfrm_netlink_rcv+0x79/0x90
[  166.317848][T12261]  netlink_unicast+0x82f/0x9e0
[  166.319918][T12261]  ? __pfx_netlink_unicast+0x10/0x10
[  166.322196][T12261]  ? netlink_sendmsg+0x642/0xb30
[  166.324297][T12261]  ? skb_put+0x11b/0x210
[  166.326151][T12261]  netlink_sendmsg+0x805/0xb30
[  166.328131][T12261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.330347][T12261]  ? aa_sock_msg_perm+0xf1/0x1d0
[  166.332419][T12261]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  166.334618][T12261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.336920][T12261]  __sock_sendmsg+0x21c/0x270
[  166.338963][T12261]  ____sys_sendmsg+0x505/0x830
[  166.340928][T12261]  ? __pfx_____sys_sendmsg+0x10/0x10
[  166.343087][T12261]  ? import_iovec+0x74/0xa0
[  166.345013][T12261]  ___sys_sendmsg+0x21f/0x2a0
[  166.347048][T12261]  ? __pfx____sys_sendmsg+0x10/0x10
[  166.349319][T12261]  ? __fget_files+0x2a/0x420
[  166.351274][T12261]  ? __fget_files+0x3a0/0x420
[  166.353147][T12261]  __x64_sys_sendmsg+0x19b/0x260
[  166.354970][T12261]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  166.356803][T12261]  ? rcu_is_watching+0x15/0xb0
[  166.358349][T12261]  ? do_syscall_64+0xbe/0x3b0
[  166.360090][T12261]  do_syscall_64+0xfa/0x3b0
[  166.361637][T12261]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.363787][T12261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.366295][T12261]  ? exc_page_fault+0x9f/0xf0
[  166.368352][T12261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.370887][T12261] RIP: 0033:0x7fe65fd8ec29
[  166.372810][T12261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  166.380841][T12261] RSP: 002b:00007fe660ce8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  166.384343][T12261] RAX: ffffffffffffffda RBX: 00007fe65ffd5fa0 RCX: 00007fe65fd8ec29
[  166.387297][T12261] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  166.390657][T12261] RBP: 00007fe65fe11e41 R08: 0000000000000000 R09: 0000000000000000
[  166.394130][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  166.397474][T12261] R13: 00007fe65ffd6038 R14: 00007fe65ffd5fa0 R15: 00007ffc8f8b1008
[  166.400873][T12261]  </TASK>
[  166.402981][T12261] Kernel Offset: disabled
[  166.404840][T12261] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:10:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001261 RDI=0000000000001262 RBP=00000000000003f8 RSP=ffffc90006d169f0
R8 =ffff888107378237 R9 =1ffff11020e6f046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008ef R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe660ce86c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=000000001e4f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe65ffa7498 00007fe65ffa7470 XMM03=00007fe65ffa74a8 00007fe65ffa74a0
XMM04=00007fe660b0d100 00007fe65ffa7460 XMM05=00007fe65ffa7478 00007fe65ffa74c0
XMM06=00007fe65ffa74b8 00007fe65ffa74b0 XMM07=00007fe65ffa74a8 00007fe65ffa74a0
XMM08=0000000000000000 00007fe65fe12f0f XMM09=0000000000000000 00007fe65fe12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4601b RBX=1ffff11009608341 RCX=ffff8881062a5640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000288f7e0 RSP=ffffc9000288f660
R8 =ffffffff8fa3a637 R9 =1ffffffff1f474c6 R10=dffffc0000000000 R11=fffffbfff1f474c7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b46003 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2a541d CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
