last executing test programs:

1.070099209s ago: executing program 0 (id=3905):
r0 = socket(0x2b, 0x4, 0x7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00'})
getsockname$packet(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0xfdef)

925.778725ms ago: executing program 0 (id=3908):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

859.737136ms ago: executing program 0 (id=3911):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4951}, 0x1)

779.732773ms ago: executing program 0 (id=3913):
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvfrom$packet(r4, 0x0, 0x0, 0x40, 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x41)
syz_80211_inject_frame(0x0, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000000c0)={0x100, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast2}}}, 0x108)

489.88917ms ago: executing program 2 (id=3922):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad733642561534f14257b6c5820fae9d", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$can_j1939(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/56, 0x38}], 0x1}, 0x0)
sendmmsg$alg(r1, &(0x7f000000dac0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="42d26a08ee7dc3d9419a8324c20008ffafb26afd3e26a65693ba2ca42042d8439c411bec01e6b594fb39e9b7c3049c6ca072f6446229aa9821", 0x39}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x0)

413.908664ms ago: executing program 2 (id=3925):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, 0x0, 0x0)

358.229171ms ago: executing program 2 (id=3927):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x3}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

358.009075ms ago: executing program 1 (id=3928):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)

357.919209ms ago: executing program 2 (id=3929):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000019000100000000000000000080200140004400050024000008"], 0x24}}, 0x0)

307.372769ms ago: executing program 2 (id=3930):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x5)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x10000000)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000240)=0x3)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x7df6, 0x0, 0xfffffffc}, 0x10)
clock_gettime(0x4, &(0x7f00000001c0))
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000005240)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24)
sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040080}, 0xc1)
close(0x3)

307.097775ms ago: executing program 1 (id=3931):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/56, 0x6a}], 0x300)

306.961971ms ago: executing program 1 (id=3932):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x200000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000240)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20)

269.710985ms ago: executing program 1 (id=3933):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x3d3, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x80000000}], 0x1, 0x40002000, 0x0)

210.279996ms ago: executing program 1 (id=3934):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38)

210.055387ms ago: executing program 1 (id=3935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r1, &(0x7f00000000c0), 0x10)
recvfrom$l2tp(r1, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0xffffffffffffff48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0)

139.959806ms ago: executing program 2 (id=3936):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80)

49.61918ms ago: executing program 0 (id=3937):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x23}, 0x94)

0s ago: executing program 0 (id=3938):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:53040' (ED25519) to the list of known hosts.
syzkaller login: [   58.689396][ T5840] cgroup: Unknown subsys name 'net'
[   58.795273][ T5840] cgroup: Unknown subsys name 'cpuset'
[   58.799970][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   61.093289][ T5840] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.912050][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.921968][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.925674][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.928765][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.932226][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.938679][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.942788][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.946837][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.954315][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.957753][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.047282][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.052823][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.055893][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.059719][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.063743][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.403188][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   67.423286][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   67.488691][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   67.578993][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.583588][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.586805][ T5856] bridge_slave_0: entered allmulticast mode
[   67.590516][ T5856] bridge_slave_0: entered promiscuous mode
[   67.611465][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.614294][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.617714][ T5852] bridge_slave_0: entered allmulticast mode
[   67.621506][ T5852] bridge_slave_0: entered promiscuous mode
[   67.626746][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.630256][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.633515][ T5856] bridge_slave_1: entered allmulticast mode
[   67.637228][ T5856] bridge_slave_1: entered promiscuous mode
[   67.654314][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.657210][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.660048][ T5852] bridge_slave_1: entered allmulticast mode
[   67.666003][ T5852] bridge_slave_1: entered promiscuous mode
[   67.744700][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.750710][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.770079][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.790402][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.794617][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.797642][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.800599][ T5861] bridge_slave_0: entered allmulticast mode
[   67.807410][ T5861] bridge_slave_0: entered promiscuous mode
[   67.840778][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.846791][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.849689][ T5861] bridge_slave_1: entered allmulticast mode
[   67.853986][ T5861] bridge_slave_1: entered promiscuous mode
[   67.867539][ T5856] team0: Port device team_slave_0 added
[   67.871099][ T5856] team0: Port device team_slave_1 added
[   67.875295][ T5852] team0: Port device team_slave_0 added
[   67.914403][ T5852] team0: Port device team_slave_1 added
[   67.945079][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.947263][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.957173][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.963853][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.966587][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.976910][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.986303][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.989807][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.992402][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.000858][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.006464][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.009080][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.019559][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.033756][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.109218][ T5861] team0: Port device team_slave_0 added
[   68.117245][ T5856] hsr_slave_0: entered promiscuous mode
[   68.121413][ T5856] hsr_slave_1: entered promiscuous mode
[   68.129198][ T5852] hsr_slave_0: entered promiscuous mode
[   68.132925][ T5852] hsr_slave_1: entered promiscuous mode
[   68.135754][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   68.138078][ T5852] Cannot create hsr debugfs directory
[   68.141509][ T5861] team0: Port device team_slave_1 added
[   68.237493][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.240520][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.251429][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.282480][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.285271][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.297479][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.440118][ T5861] hsr_slave_0: entered promiscuous mode
[   68.443741][ T5861] hsr_slave_1: entered promiscuous mode
[   68.446621][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   68.448885][ T5861] Cannot create hsr debugfs directory
[   68.587239][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.597842][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.609107][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.637634][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.706340][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.723689][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.737053][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.755648][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.839693][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.847032][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.866701][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.880823][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.937644][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.962065][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   68.974422][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.983736][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.986968][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.992964][ T5238] Bluetooth: hci1: command tx timeout
[   69.014125][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.016923][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.049958][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   69.072778][ T5238] Bluetooth: hci2: command tx timeout
[   69.072921][ T5858] Bluetooth: hci0: command tx timeout
[   69.085994][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.088922][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.105427][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.108296][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.182918][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.235666][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   69.245515][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.247914][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.276175][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.278336][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.398288][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.443185][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.487129][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.497683][ T5852] veth0_vlan: entered promiscuous mode
[   69.515599][ T5852] veth1_vlan: entered promiscuous mode
[   69.560346][ T5856] veth0_vlan: entered promiscuous mode
[   69.579091][ T5856] veth1_vlan: entered promiscuous mode
[   69.591327][ T5861] veth0_vlan: entered promiscuous mode
[   69.606127][ T5852] veth0_macvtap: entered promiscuous mode
[   69.615567][ T5852] veth1_macvtap: entered promiscuous mode
[   69.621037][ T5861] veth1_vlan: entered promiscuous mode
[   69.644447][ T5856] veth0_macvtap: entered promiscuous mode
[   69.662419][ T5856] veth1_macvtap: entered promiscuous mode
[   69.670550][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.696392][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.715233][ T5861] veth0_macvtap: entered promiscuous mode
[   69.719339][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.728909][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.737572][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.744389][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.748165][ T5861] veth1_macvtap: entered promiscuous mode
[   69.751666][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.767280][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.792840][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.799343][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.824136][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.839379][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.845766][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.875756][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.927200][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.931357][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.935703][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.942121][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.957924][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.968002][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.019799][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.023249][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.066058][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.068518][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.093722][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.103511][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.130523][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   70.140446][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.146568][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.212769][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.215826][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.246943][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   70.322921][ T5927] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4'.
[   70.706304][    T9] IPVS: starting estimator thread 0...
[   70.710989][ T5946] tipc: Started in network mode
[   70.715114][ T5946] tipc: Node identity ac1414aa, cluster identity 4711
[   70.718833][ T5946] tipc: Enabled bearer <udp:s>, priority 10
[   70.792677][ T5947] IPVS: using max 41 ests per chain, 98400 per kthread
[   71.072564][ T5858] Bluetooth: hci1: command tx timeout
[   71.110256][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'.
[   71.152723][ T5858] Bluetooth: hci0: command tx timeout
[   71.153262][ T5238] Bluetooth: hci2: command tx timeout
[   71.240575][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.250395][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.266130][ T5977] openvswitch: netlink: Key type 251 is out of range max 32
[   71.335216][ T5979] pim6reg1: entered promiscuous mode
[   71.337422][ T5979] pim6reg1: entered allmulticast mode
[   71.540169][ T5991] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET)
[   71.853163][ T5891] tipc: Node number set to 2886997162
[   71.982522][ T6021] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   72.025619][ T6024] netlink: 'syz.0.38': attribute type 13 has an invalid length.
[   72.027878][ T6024] netlink: 'syz.0.38': attribute type 17 has an invalid length.
[   72.037185][ T6024] gretap0: refused to change device tx_queue_len
[   72.039842][ T6024] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   72.206600][ T6034] netlink: 'syz.0.42': attribute type 1 has an invalid length.
[   72.210145][ T6034] netlink: 228 bytes leftover after parsing attributes in process `syz.0.42'.
[   72.271486][ T6038] netem: incorrect gi model size
[   72.274734][ T6038] netem: change failed
[   72.385855][   T56] block nbd0: Receive control failed (result -11)
[   72.474779][ T6051] Zero length message leads to an empty skb
[   72.698470][   T33] audit: type=1800 audit(1758572412.153:2): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.52" name="memory.events" dev="tmpfs" ino=104 res=0 errno=0
[   73.066667][ T6082] syzkaller1: entered allmulticast mode
[   73.152199][ T5238] Bluetooth: hci1: command tx timeout
[   73.205445][ T6091] openvswitch: netlink: Multiple metadata blocks provided
[   73.232755][ T5238] Bluetooth: hci2: command tx timeout
[   73.235543][ T5858] Bluetooth: hci0: command tx timeout
[   73.439551][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'.
[   73.504918][ T6105] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.065830][ T5904] IPVS: starting estimator thread 0...
[   74.162350][ T6138] IPVS: using max 62 ests per chain, 148800 per kthread
[   74.354367][ T6160] openvswitch: netlink: Invalid VLAN frame
[   74.647314][ T6176] rdma_op ffff888123ec51f0 conn xmit_rdma 0000000000000000
[   74.703032][ T6178] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   74.706030][ T6178] netlink: 248 bytes leftover after parsing attributes in process `syz.2.104'.
[   74.996494][ T6188] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[   75.216701][ T6200] sctp: [Deprecated]: syz.1.115 (pid 6200) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.216701][ T6200] Use struct sctp_sack_info instead
[   75.234935][ T5238] Bluetooth: hci1: command tx timeout
[   75.323459][ T5858] Bluetooth: hci0: command tx timeout
[   75.326989][ T5238] Bluetooth: hci2: command tx timeout
[   75.385717][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.119'.
[   75.878161][ T6240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.890025][ T6238] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.564730][ T6251] netlink: 'syz.0.139': attribute type 1 has an invalid length.
[   76.567792][ T6251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.139'.
[   76.587065][ T6253] netlink: 348 bytes leftover after parsing attributes in process `syz.2.140'.
[   76.600802][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'.
[   77.185905][ T6289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.150'.
[   77.431271][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'.
[   77.457774][ T6308] warning: `syz.2.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.651976][ T6321] openvswitch: netlink: ct_state flags 7fffffff unsupported
[   77.739893][ T6326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'.
[   77.743961][ T6326] netem: change failed
[   77.958180][ T6338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.087908][ T6338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.211510][ T6338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.339447][ T6338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.364958][ T6361] delete_channel: no stack
[   78.514343][ T5882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.541142][ T5882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.583369][ T5882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.590835][ T5882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.857090][ T6381] netlink: 'syz.2.195': attribute type 3 has an invalid length.
[   78.860455][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'.
[   78.869770][ T6381] netlink: 'syz.2.195': attribute type 3 has an invalid length.
[   78.873745][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'.
[   79.846923][ T6432] netlink: 'syz.1.219': attribute type 4 has an invalid length.
[   80.063516][ T6440] netlink: 'syz.1.223': attribute type 16 has an invalid length.
[   80.066674][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'.
[   80.446176][ T6463] Illegal XDP return value 4294967294 on prog  (id 39) dev N/A, expect packet loss!
[   80.537972][ T6469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.689157][ T6534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.265'.
[   81.817742][ T6544] netlink: 277 bytes leftover after parsing attributes in process `syz.0.271'.
[   82.806059][ T6601] syz_tun: entered allmulticast mode
[   82.810407][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'.
[   82.842694][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'.
[   82.859346][ T6601] syz_tun (unregistering): left allmulticast mode
[   82.887670][ T6605] netlink: 364 bytes leftover after parsing attributes in process `syz.2.297'.
[   82.890658][ T6605] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   82.937975][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.298'.
[   82.940776][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[   83.194370][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'.
[   83.257105][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'.
[   83.473885][ T6644] netlink: 248 bytes leftover after parsing attributes in process `syz.2.316'.
[   83.949774][ T6661] netlink: 'syz.0.322': attribute type 12 has an invalid length.
[   83.986840][ T6661] netlink: 'syz.0.322': attribute type 12 has an invalid length.
[   83.990082][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.995555][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.015169][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.018575][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   84.126100][ T6663] Bluetooth: MGMT ver 1.23
[   84.789155][ T6690] Bluetooth: MGMT ver 1.23
[   85.601272][ T6733] openvswitch: netlink: Actions may not be safe on all matching packets
[   86.526648][ T6786] netlink: 'syz.1.370': attribute type 13 has an invalid length.
[   86.529988][ T6786] netlink: 'syz.1.370': attribute type 17 has an invalid length.
[   86.589164][ T6786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.608017][   T10] cfg80211: failed to load regulatory.db
[   86.711497][ T6786] __nla_validate_parse: 4 callbacks suppressed
[   86.711512][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[   86.746746][ T6786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   87.232238][ T5238] Bluetooth: hci1: command tx timeout
[   87.284792][ T6828] netlink: 'syz.0.386': attribute type 21 has an invalid length.
[   87.287761][ T6828] netlink: 156 bytes leftover after parsing attributes in process `syz.0.386'.
[   87.365443][ T6832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'.
[   87.612153][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'.
[   87.936321][ T6852] netlink: 6 bytes leftover after parsing attributes in process `syz.1.396'.
[   87.957771][ T6852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   88.342585][ T6867] netlink: 'syz.1.404': attribute type 1 has an invalid length.
[   88.346125][ T6867] netlink: 'syz.1.404': attribute type 2 has an invalid length.
[   88.565980][ T6884] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[   88.620679][ T6884] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.653052][ T6891] bond1: (slave veth3): Enslaving as an active interface with a down link
[   88.703122][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv1
[   88.706251][ T6884] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   89.189398][ T6922] netlink: 'syz.0.427': attribute type 1 has an invalid length.
[   89.199929][ T6922] netlink: 244 bytes leftover after parsing attributes in process `syz.0.427'.
[   89.283338][ T6926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.429'.
[   89.287464][ T6926] openvswitch: netlink: Flow actions attr not present in new flow.
[   89.419191][ T6934] netlink: 'syz.0.433': attribute type 15 has an invalid length.
[   90.208529][ T6967] netlink: 'syz.1.447': attribute type 4 has an invalid length.
[   90.342616][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'.
[   90.496552][ T6981] tipc: Started in network mode
[   90.498544][ T6981] tipc: Node identity 16aaa6209625, cluster identity 4711
[   90.504739][ T6981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.510967][ T6981] syzkaller0: entered promiscuous mode
[   90.517316][ T6981] syzkaller0: entered allmulticast mode
[   90.546062][ T6981] tipc: Resetting bearer <eth:syzkaller0>
[   90.559547][ T6979] tipc: Resetting bearer <eth:syzkaller0>
[   90.606940][ T6979] tipc: Disabling bearer <eth:syzkaller0>
[   90.770260][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.2.461'.
[   91.021960][ T7014] netlink: 'syz.1.469': attribute type 1 has an invalid length.
[   91.062202][ T7014] bond1: (slave geneve2): making interface the new active one
[   91.066295][ T7014] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   91.070860][ T5883] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   91.076765][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   91.080460][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   91.085215][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   91.312214][ T7022] nbd1: detected capacity change from 0 to 127
[   91.317816][   T57] block nbd1: Receive control failed (result -104)
[   91.460325][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.476'.
[   91.509906][ T7033] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[   92.196913][   T33] audit: type=1800 audit(1758572431.653:3): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.486" name="cgroup.controllers" dev="tmpfs" ino=790 res=0 errno=0
[   92.540268][ T7069] netlink: 'syz.0.494': attribute type 12 has an invalid length.
[   92.827647][ T7092] netlink: 'syz.1.503': attribute type 21 has an invalid length.
[   92.830661][ T7092] __nla_validate_parse: 1 callbacks suppressed
[   92.830673][ T7092] netlink: 128 bytes leftover after parsing attributes in process `syz.1.503'.
[   92.846133][ T7092] netlink: 'syz.1.503': attribute type 5 has an invalid length.
[   92.851721][ T7092] netlink: 'syz.1.503': attribute type 6 has an invalid length.
[   92.854773][ T7092] netlink: 3 bytes leftover after parsing attributes in process `syz.1.503'.
[   92.973604][ T7101] delete_channel: no stack
[   93.012390][ T7106] netlink: 'syz.1.510': attribute type 1 has an invalid length.
[   93.015613][ T7106] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.510'.
[   93.397959][ T7131] netlink: 'syz.0.520': attribute type 13 has an invalid length.
[   93.550553][ T7131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.653002][ T7131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.722435][ T7131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.784773][ T7131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.071067][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'.
[   94.276437][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'.
[   94.280414][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.534'.
[   94.290944][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.534'.
[   94.424206][ T7169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.465991][ T7171] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.538'.
[   94.477395][ T7167] netlink: 6 bytes leftover after parsing attributes in process `syz.2.535'.
[   94.484616][ T7167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.604456][ T7175] validate_nla: 1 callbacks suppressed
[   94.604488][ T7175] netlink: 'syz.1.541': attribute type 2 has an invalid length.
[   94.614618][ T7175] netlink: 'syz.1.541': attribute type 1 has an invalid length.
[   94.619650][ T7175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.541'.
[   94.903243][ T7183] netlink: 'syz.2.545': attribute type 1 has an invalid length.
[   95.358796][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.455307][ T7219] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.459047][ T7219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   96.019903][ T7234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.043039][ T7234] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.184467][ T7234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.207671][ T7234] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.328252][ T7234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.350126][ T7234] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.498621][ T7234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.523130][ T7234] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.719225][ T5865] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.728651][ T5865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.732695][ T5865] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.736967][ T5865] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.770761][ T5865] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.774510][ T5865] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.805764][ T5865] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.822311][ T5865] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.300201][ T7297] syzkaller1: entered promiscuous mode
[   97.302927][ T7297] syzkaller1: entered allmulticast mode
[   97.648364][ T7327] smc: net device bond0 applied user defined pnetid SYZ2
[   99.058576][ T7360] __nla_validate_parse: 5 callbacks suppressed
[   99.058598][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'.
[   99.088607][ T7360] ip6gre1: entered allmulticast mode
[   99.177676][ T7362] netlink: 'syz.1.617': attribute type 83 has an invalid length.
[   99.674937][ T7375] netlink: 'syz.2.622': attribute type 4 has an invalid length.
[   99.681807][ T7375] netlink: 17 bytes leftover after parsing attributes in process `syz.2.622'.
[  100.129722][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'.
[  100.285873][ T7399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.634'.
[  100.289894][ T7399] netlink: 88 bytes leftover after parsing attributes in process `syz.2.634'.
[  100.407309][ T7403] netlink: 664 bytes leftover after parsing attributes in process `syz.2.636'.
[  100.411164][ T7403] netlink: 664 bytes leftover after parsing attributes in process `syz.2.636'.
[  100.670294][ T7415] delete_channel: no stack
[  100.980392][ T7437] netlink: 428 bytes leftover after parsing attributes in process `syz.1.653'.
[  100.996867][ T7437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'.
[  101.107624][ T7443] netlink: 'syz.2.655': attribute type 1 has an invalid length.
[  101.356452][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'.
[  101.360227][ T7462] netlink: 'syz.0.663': attribute type 6 has an invalid length.
[  101.465689][ T7471] xt_l2tp: invalid flags combination: 8
[  101.555808][ T7474] netlink: 'syz.0.671': attribute type 13 has an invalid length.
[  101.719865][ T7474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.744395][ T7484] vlan2: entered allmulticast mode
[  101.746629][ T7484] bond2: entered allmulticast mode
[  101.774286][ T7488] tap0: tun_chr_ioctl cmd 1074025677
[  101.776587][ T7488] tap0: linktype set to 0
[  102.509874][ T7532] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  102.774544][ T7550] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  102.778685][ T7550] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  102.999411][ T7566] ieee802154 phy0 wpan0: encryption failed: -90
[  104.305321][   T57] block nbd2: Receive control failed (result -32)
[  104.684949][ T7668] __nla_validate_parse: 11 callbacks suppressed
[  104.684961][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  104.690206][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  104.780275][ T7679] veth0: entered promiscuous mode
[  104.798275][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'.
[  105.077677][ T7708] netlink: 'syz.2.759': attribute type 3 has an invalid length.
[  105.080334][ T7708] netlink: 'syz.2.759': attribute type 1 has an invalid length.
[  105.162537][ T7713] netlink: 144 bytes leftover after parsing attributes in process `syz.1.760'.
[  105.263872][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  105.414545][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'.
[  105.752235][ T7747] netlink: 304 bytes leftover after parsing attributes in process `syz.2.776'.
[  105.840776][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'.
[  105.920288][ T5315] IPVS: starting estimator thread 0...
[  106.013820][ T7761] IPVS: using max 62 ests per chain, 148800 per kthread
[  106.087269][ T7775] netlink: 'syz.1.790': attribute type 1 has an invalid length.
[  106.365819][ T7798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'.
[  106.370276][ T7798] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  106.979501][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'.
[  107.291054][ T7853] netdevsim netdevsim1: Direct firmware load for .
[  107.291054][ T7853]  failed with error -2
[  107.308144][ T7853] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  107.308144][ T7853] 
[  107.418907][ T7861] netlink: 'syz.0.829': attribute type 2 has an invalid length.
[  107.593927][ T7872] netlink: 'syz.2.833': attribute type 1 has an invalid length.
[  108.854452][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.951700][ T5238] Bluetooth: hci2: command tx timeout
[  110.102188][ T7991] __nla_validate_parse: 7 callbacks suppressed
[  110.102203][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'.
[  110.147747][ T7985] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'.
[  110.196316][ T7993] netlink: 'syz.2.871': attribute type 10 has an invalid length.
[  110.205274][ T7993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.871'.
[  110.208880][ T7993] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  110.327630][ T7985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.330962][ T7985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  110.448385][ T7985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.476820][ T7985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  110.514522][ T8009] netlink: 'syz.2.875': attribute type 3 has an invalid length.
[  110.518497][ T8009] netlink: 'syz.2.875': attribute type 1 has an invalid length.
[  110.521277][ T8009] netlink: 220 bytes leftover after parsing attributes in process `syz.2.875'.
[  110.614866][ T7985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.618611][ T7985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  110.714895][ T7985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.718356][ T7985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  110.798736][ T8027] netlink: 'syz.2.881': attribute type 1 has an invalid length.
[  110.801416][ T8027] netlink: 'syz.2.881': attribute type 2 has an invalid length.
[  110.851660][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  110.858430][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  110.930218][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  110.944742][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  110.947584][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  110.950262][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  110.972041][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  110.974693][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  111.025494][ T8041] netlink: 96 bytes leftover after parsing attributes in process `syz.0.885'.
[  111.042223][ T8033] netlink: 72 bytes leftover after parsing attributes in process `syz.2.883'.
[  111.168699][ T8050] syzkaller1: entered promiscuous mode
[  111.170623][ T8050] syzkaller1: entered allmulticast mode
[  111.687357][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'.
[  112.088901][ T8101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.128602][ T8186] ieee802154 phy0 wpan0: encryption failed: -22
[  113.129837][ T8190] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  113.857489][ T8227] netlink: 'syz.2.965': attribute type 29 has an invalid length.
[  113.864686][ T8227] netlink: 'syz.2.965': attribute type 29 has an invalid length.
[  113.871825][ T5238] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  113.874630][ T5858] Bluetooth: hci2: command 0x0401 tx timeout
[  114.319436][ T8251] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  114.415210][ T8255] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  114.654712][ T8279] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.992'.
[  114.668671][ T8283] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  114.701214][ T8285] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  114.711670][ T8285] netlink: 224 bytes leftover after parsing attributes in process `syz.2.994'.
[  114.787678][ T8288] vlan2: entered promiscuous mode
[  114.789755][ T8288] macvtap0: entered promiscuous mode
[  114.876493][ T8297] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1000'.
[  115.327431][ T8337] __nla_validate_parse: 1 callbacks suppressed
[  115.327446][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'.
[  115.642056][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'.
[  116.060068][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.067094][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.217138][ T8403] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1050'.
[  116.282351][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'.
[  116.286168][ T8397] bridge_slave_1: left allmulticast mode
[  116.287936][ T8397] bridge_slave_1: left promiscuous mode
[  116.289823][ T8397] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.314985][ T8397] bridge_slave_0: left allmulticast mode
[  116.317224][ T8397] bridge_slave_0: left promiscuous mode
[  116.319574][ T8397] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.481732][ T8417] netlink: 'syz.1.1056': attribute type 10 has an invalid length.
[  116.507037][ T8417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.515710][ T8417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.523812][ T8417] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  116.573865][ T8419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.582831][ T8419] syzkaller0: entered promiscuous mode
[  116.584970][ T8419] syzkaller0: entered allmulticast mode
[  116.613818][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'.
[  116.617191][ T8419] tipc: Resetting bearer <eth:syzkaller0>
[  116.620224][ T8421] netlink: 'syz.2.1058': attribute type 30 has an invalid length.
[  116.626733][ T8418] tipc: Resetting bearer <eth:syzkaller0>
[  116.630401][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'.
[  116.643476][ T8418] tipc: Disabling bearer <eth:syzkaller0>
[  117.344027][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.346632][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.409129][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.438763][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.449850][ T8489] netlink: zone id is out of range
[  117.454442][ T8489] netlink: zone id is out of range
[  117.458955][ T8489] netlink: zone id is out of range
[  117.466164][ T8489] netlink: zone id is out of range
[  117.469608][ T8489] netlink: zone id is out of range
[  117.478819][ T8489] netlink: zone id is out of range
[  117.481691][ T8489] netlink: zone id is out of range
[  117.491431][ T8489] netlink: zone id is out of range
[  117.494039][ T8489] netlink: zone id is out of range
[  117.496050][ T8489] netlink: zone id is out of range
[  117.578344][ T5865] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.580814][ T5865] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.593271][ T5865] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.596072][ T5865] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.598650][ T5865] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.602100][ T5865] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.629632][ T5865] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  117.633041][ T5865] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.696413][ T8500] netlink: 'syz.2.1096': attribute type 1 has an invalid length.
[  117.699420][ T8500] netlink: 'syz.2.1096': attribute type 1 has an invalid length.
[  117.723912][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'.
[  117.906335][ T8511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1101'.
[  117.910285][ T8511] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1101'.
[  117.916170][ T8511] netlink: 'syz.2.1101': attribute type 5 has an invalid length.
[  117.919333][ T8511] netlink: 'syz.2.1101': attribute type 6 has an invalid length.
[  117.924791][ T8511] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1101'.
[  118.234727][ T8524] netlink: 'syz.2.1107': attribute type 1 has an invalid length.
[  118.415688][ T8535] sctp: [Deprecated]: syz.2.1111 (pid 8535) Use of struct sctp_assoc_value in delayed_ack socket option.
[  118.415688][ T8535] Use struct sctp_sack_info instead
[  120.411273][ T8648] netlink: 'syz.0.1164': attribute type 9 has an invalid length.
[  120.708282][ T8678] netlink: 'syz.0.1177': attribute type 11 has an invalid length.
[  120.711496][ T8678] __nla_validate_parse: 6 callbacks suppressed
[  120.711513][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1177'.
[  121.066795][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1196'.
[  121.406078][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1213'.
[  121.800844][ T1118] block nbd1: Possible stuck request ffff8880224e8000: control (read@0,1024B). Runtime 30 seconds
[  121.805794][ T1118] block nbd1: Possible stuck request ffff8880224e8200: control (read@1024,1024B). Runtime 30 seconds
[  121.809964][ T1118] block nbd1: Possible stuck request ffff8880224e8400: control (read@2048,1024B). Runtime 30 seconds
[  121.814386][ T1118] block nbd1: Possible stuck request ffff8880224e8600: control (read@3072,1024B). Runtime 30 seconds
[  122.036018][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'.
[  122.055330][ T8798] syzkaller0: entered promiscuous mode
[  122.058329][ T8798] syzkaller0: entered allmulticast mode
[  123.404666][ T8825] netlink: 'syz.2.1240': attribute type 13 has an invalid length.
[  123.407866][ T8825] netlink: 'syz.2.1240': attribute type 17 has an invalid length.
[  123.467356][ T8825] net_ratelimit: 1 callbacks suppressed
[  123.467374][ T8825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.487117][ T8819] xfrm0: entered promiscuous mode
[  123.502732][ T8819] xfrm0: entered allmulticast mode
[  123.591406][ T8818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.635506][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'.
[  123.649330][ T8848] erspan0: entered promiscuous mode
[  123.656139][ T8848] erspan0: left promiscuous mode
[  123.959541][ T8864] IPVS: set_ctl: invalid protocol: 48500 127.0.0.1:20000
[  125.774445][ T8945] team0: Device macvtap1 is already an upper device of the team interface
[  126.293411][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'.
[  126.337798][ T8953] netlink: 'syz.1.1300': attribute type 1 has an invalid length.
[  126.360344][ T8953] 8021q: adding VLAN 0 to HW filter on device bond4
[  126.377234][ T8953] bond4: (slave gretap1): making interface the new active one
[  126.382454][ T8953] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  126.775158][ T8977] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  126.870439][ T8982] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  127.789369][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1322'.
[  127.797919][ T9009] netdevsim0: renamed from gre0 (while UP)
[  127.808624][ T9009] netdevsim0: entered promiscuous mode
[  128.329181][ T9036] netlink: 'syz.2.1329': attribute type 6 has an invalid length.
[  128.427389][ T9041] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1334'.
[  128.847447][ T5238] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  128.850394][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout
[  128.993136][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1336'.
[  129.111025][ T9054] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  129.388605][ T9064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1342'.
[  129.668724][ T9087] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1352'.
[  129.769069][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1357'.
[  130.830615][ T9137] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1374'.
[  131.196055][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'.
[  131.200111][ T9153] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  131.304523][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'.
[  131.357807][ T9163] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1385'.
[  131.780978][ T9196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.785535][ T9197] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1401'.
[  132.316201][ T9218] syzkaller0: entered promiscuous mode
[  132.318589][ T9218] syzkaller0: entered allmulticast mode
[  132.589513][ T9233] netlink: 'syz.1.1418': attribute type 21 has an invalid length.
[  132.593968][ T9233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1418'.
[  132.597548][ T9233] netlink: 'syz.1.1418': attribute type 4 has an invalid length.
[  132.600467][ T9233] netlink: 'syz.1.1418': attribute type 5 has an invalid length.
[  132.603776][ T9233] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1418'.
[  132.953353][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1429'.
[  133.368597][ T9284] netlink: 'syz.1.1443': attribute type 1 has an invalid length.
[  133.374266][ T9284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1443'.
[  133.733885][ T9307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1454'.
[  134.228429][ T9348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.233538][ T9348] syzkaller0: entered promiscuous mode
[  134.235237][ T9348] syzkaller0: entered allmulticast mode
[  134.262404][ T9348] tipc: Resetting bearer <eth:syzkaller0>
[  134.267694][ T9346] tipc: Resetting bearer <eth:syzkaller0>
[  134.284083][ T9346] tipc: Disabling bearer <eth:syzkaller0>
[  134.470130][ T9370] batman_adv: batadv0: Adding interface: dummy0
[  134.473145][ T9370] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.483764][ T9370] batman_adv: batadv0: Interface activated: dummy0
[  134.498322][ T9370] batadv0: mtu less than device minimum
[  134.502048][ T9370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  134.507414][ T9370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  134.512607][ T9370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  134.517763][ T9370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  134.523064][ T9370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  134.528038][ T9370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  134.533278][ T9370] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  134.543269][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'.
[  134.731864][ T9390] vxcan2: entered promiscuous mode
[  134.823915][ T9396] netlink: 'syz.2.1498': attribute type 1 has an invalid length.
[  134.827088][ T9396] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1498'.
[  134.830548][ T9396] netlink: 'syz.2.1498': attribute type 1 has an invalid length.
[  135.344041][ T9427] netlink: 'syz.2.1514': attribute type 10 has an invalid length.
[  135.426030][ T9434] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  135.695540][ T9455] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  136.070919][ T9481] 8021q: adding VLAN 0 to HW filter on device bond5
[  136.080527][ T9481] bridge0: port 3(bond5) entered blocking state
[  136.084939][ T9481] bridge0: port 3(bond5) entered disabled state
[  136.087745][ T9481] bond5: entered allmulticast mode
[  136.093760][ T9481] bond5: entered promiscuous mode
[  136.096674][ T9481] bridge0: port 3(bond5) entered blocking state
[  136.099406][ T9481] bridge0: port 3(bond5) entered forwarding state
[  136.425907][   T83] bridge0: port 3(bond5) entered disabled state
[  137.128450][ T9556] __nla_validate_parse: 4 callbacks suppressed
[  137.128468][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'.
[  137.148713][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1572'.
[  137.367560][ T9574] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1580'.
[  137.497373][ T9580] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1583'.
[  138.025081][ T9592] netlink: 8168 bytes leftover after parsing attributes in process `syz.0.1589'.
[  138.507951][ T9608] block nbd1: NBD_DISCONNECT
[  138.510348][ T9608] block nbd1: Send disconnect failed -32
[  138.518682][ T9608] block nbd1: shutting down sockets
[  138.532677][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.536578][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.539525][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.543101][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.546179][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.549490][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  138.552576][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.556032][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  138.572107][ T5860] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.575883][ T5860] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.579037][ T5860] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.596903][ T5860] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.600154][ T5860] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.604227][ T5860] Buffer I/O error on dev nbd1, logical block 2, async page read
[  138.607408][ T5860] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.610918][ T5860] Buffer I/O error on dev nbd1, logical block 3, async page read
[  138.615271][ T5860] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.618902][ T5860] Buffer I/O error on dev nbd1, logical block 0, async page read
[  138.623180][ T5860] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  138.626777][ T5860] Buffer I/O error on dev nbd1, logical block 1, async page read
[  138.635980][ T5860] ldm_validate_partition_table(): Disk read failed.
[  138.652679][ T5860] Dev nbd1: unable to read RDB block 0
[  138.663065][ T5860]  nbd1: unable to read partition table
[  138.677302][ T5860] ldm_validate_partition_table(): Disk read failed.
[  138.683972][ T5860] Dev nbd1: unable to read RDB block 0
[  138.687909][ T5860]  nbd1: unable to read partition table
[  138.848291][ T9629] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1607'.
[  138.859530][ T9629] netlink: 'syz.0.1607': attribute type 2 has an invalid length.
[  138.967026][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'.
[  138.971092][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'.
[  138.975211][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'.
[  138.978662][ T9638] netlink: 'syz.2.1612': attribute type 14 has an invalid length.
[  138.981819][ T9638] netlink: 'syz.2.1612': attribute type 13 has an invalid length.
[  138.998139][ T9635] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.018820][ T9635] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.021446][ T9635] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  139.027855][ T9635] bond1: (slave wireguard0): Error -95 calling set_mac_address
[  139.112437][ T9647] syzkaller1: entered promiscuous mode
[  139.114589][ T9647] syzkaller1: entered allmulticast mode
[  139.556414][ T9683] netlink: 'syz.1.1630': attribute type 11 has an invalid length.
[  139.559590][ T9683] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1630'.
[  139.621165][ T9687] pim6reg1: entered promiscuous mode
[  139.625200][ T9687] pim6reg1: entered allmulticast mode
[  139.726982][ T9691] netlink: 'syz.1.1634': attribute type 99 has an invalid length.
[  139.859658][ T9697] pimreg3: entered allmulticast mode
[  141.340769][ T9750] tipc: Started in network mode
[  141.344441][ T9750] tipc: Node identity 120ba6a8adf6, cluster identity 4711
[  141.347335][ T9750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.351894][ T9752] netlink: 'syz.2.1660': attribute type 25 has an invalid length.
[  141.352795][ T9750] syzkaller0: entered promiscuous mode
[  141.357891][ T9750] syzkaller0: entered allmulticast mode
[  141.367851][ T9752] netlink: 'syz.2.1660': attribute type 10 has an invalid length.
[  141.401169][ T9752] team0: Port device geneve0 added
[  141.414787][ T9750] tipc: Resetting bearer <eth:syzkaller0>
[  141.425172][ T9749] tipc: Resetting bearer <eth:syzkaller0>
[  141.442229][ T9749] tipc: Disabling bearer <eth:syzkaller0>
[  142.225820][ T9798] __nla_validate_parse: 6 callbacks suppressed
[  142.225840][ T9798] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1682'.
[  142.556262][ T9825] netlink: 'syz.1.1694': attribute type 1 has an invalid length.
[  142.559506][ T9825] netlink: 'syz.1.1694': attribute type 6 has an invalid length.
[  142.564797][ T9825] netlink: 'syz.1.1694': attribute type 3 has an invalid length.
[  142.736915][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'.
[  142.876382][ T9851] net_ratelimit: 13 callbacks suppressed
[  142.876403][ T9851] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  143.083259][ T9861] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1712'.
[  143.086891][ T9861] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1712'.
[  143.090537][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'.
[  143.138920][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'.
[  143.282174][ T9867] nbd3: detected capacity change from 0 to 127
[  143.287672][   T57] block nbd3: Receive control failed (result -104)
[  143.429462][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1718'.
[  143.430569][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1716'.
[  143.435524][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1718'.
[  143.471120][ T9871] ip6tnl1: entered promiscuous mode
[  143.474304][ T9871] ip6tnl1: entered allmulticast mode
[  143.477332][ T9871] team0: Device ip6tnl1 is of different type
[  143.938925][ T9884] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.944537][ T9884] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.101079][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1729'.
[  145.265863][ T9965] validate_nla: 2 callbacks suppressed
[  145.265883][ T9965] netlink: 'syz.2.1756': attribute type 1 has an invalid length.
[  145.584081][ T9973] netlink: 'syz.2.1758': attribute type 2 has an invalid length.
[  145.718429][ T9971] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  146.197630][T10014] netlink: 'syz.0.1773': attribute type 5 has an invalid length.
[  147.028493][T10077] bridge_slave_0: left allmulticast mode
[  147.035292][T10077] bridge_slave_0: left promiscuous mode
[  147.037759][T10077] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.050348][T10077] bridge_slave_1: left allmulticast mode
[  147.055322][T10077] bridge_slave_1: left promiscuous mode
[  147.057843][T10077] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.076371][T10077] bond0: (slave bond_slave_0): Releasing backup interface
[  147.085202][T10077] bond0: (slave bond_slave_1): Releasing backup interface
[  147.099966][T10077] team0: Failed to send options change via netlink (err -105)
[  147.106337][T10077] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  147.110236][T10077] team0: Port device team_slave_0 removed
[  147.118501][T10077] team0: Failed to send options change via netlink (err -105)
[  147.122312][T10077] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  147.126544][T10077] team0: Port device team_slave_1 removed
[  147.133848][T10077] bond0: (slave batadv_slave_0): Releasing backup interface
[  147.140674][T10077] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.144079][T10077] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.155186][T10077] bond1: (slave geneve2): Releasing active interface
[  147.163861][T10077] bond4: (slave gretap1): Releasing active interface
[  147.171058][T10077] bond5: left allmulticast mode
[  147.178215][T10077] bond5: left promiscuous mode
[  147.180379][T10077] bridge0: port 3(bond5) entered disabled state
[  147.195595][T10081] team0: Failed to send options change via netlink (err -105)
[  147.198761][T10081] team0: Mode changed to "activebackup"
[  147.220280][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  147.229640][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  147.234670][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  147.237728][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  147.822299][T10132] netlink: 'syz.0.1812': attribute type 12 has an invalid length.
[  148.274679][T10169] __nla_validate_parse: 9 callbacks suppressed
[  148.274698][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1829'.
[  148.361325][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  149.250028][T10237] netlink: 'syz.0.1843': attribute type 1 has an invalid length.
[  149.266803][T10237] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.316455][T10244] xt_time: invalid argument - start or stop time greater than 23:59:59
[  149.590949][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'.
[  150.016362][T10303] tun0: tun_chr_ioctl cmd 1074025672
[  150.018389][T10303] tun0: ignored: set checksum disabled
[  151.042397][T10337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.192536][T10343] team0: Mode changed to "loadbalance"
[  151.197209][T10343] netlink: 'syz.1.1881': attribute type 10 has an invalid length.
[  151.211268][T10343] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.217143][T10343] team0: Port device bond0 added
[  151.221202][T10343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'.
[  151.327274][T10343] team0 (unregistering): Port device bond0 removed
[  151.433033][T10360] netlink: 'syz.1.1887': attribute type 7 has an invalid length.
[  151.451045][T10360] : entered promiscuous mode
[  151.486304][T10363] netlink: 'syz.0.1890': attribute type 1 has an invalid length.
[  151.488835][T10363] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1890'.
[  151.492838][T10363] netlink: 'syz.0.1890': attribute type 1 has an invalid length.
[  151.634443][T10376] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  151.861818][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1901'.
[  151.864425][T10390] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1902'.
[  151.869053][T10390] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1902'.
[  152.064080][T10400] IPv6: addrconf: prefix option has invalid lifetime
[  152.097772][T10404] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1909'.
[  152.235750][T10414] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1913'.
[  152.431228][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'.
[  152.491474][T10435] netlink: 'syz.2.1922': attribute type 13 has an invalid length.
[  152.571860][T10435] batman_adv: batadv0: Interface deactivated: dummy0
[  152.626454][T10435] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.633818][T10435] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.742141][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.754206][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.763538][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.766885][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.999591][T10461] 8021q: adding VLAN 0 to HW filter on device bond6
[  153.237088][T10479] delete_channel: no stack
[  153.414253][T10494] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1946'.
[  153.419211][T10494] tc_dump_action: action bad kind
[  153.671438][T10510] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  154.037000][T10537] IPVS: lc: FWM 3 0x00000003 - no destination available
[  154.160171][T10543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1968'.
[  154.318384][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1972'.
[  154.721449][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1984'.
[  154.860978][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'.
[  154.871161][T10589] netlink: 'syz.2.1987': attribute type 1 has an invalid length.
[  154.874767][T10589] netlink: 'syz.2.1987': attribute type 2 has an invalid length.
[  154.933990][T10598] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1991'.
[  154.937076][T10598] netlink: 245 bytes leftover after parsing attributes in process `syz.1.1991'.
[  154.977567][T10603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1994'.
[  155.136809][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2002'.
[  155.139589][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2002'.
[  155.167216][T10623] netlink: 'syz.1.2003': attribute type 21 has an invalid length.
[  155.457304][T10643] netlink: 'syz.0.2012': attribute type 9 has an invalid length.
[  155.460857][T10643] netlink: 'syz.0.2012': attribute type 7 has an invalid length.
[  157.014503][T10737] validate_nla: 3 callbacks suppressed
[  157.014515][T10737] netlink: 'syz.0.2052': attribute type 11 has an invalid length.
[  159.055037][T10834] netlink: 'syz.2.2090': attribute type 1 has an invalid length.
[  159.075361][T10834] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.097783][T10834] veth11: entered promiscuous mode
[  159.105927][T10834] bond3: (slave veth11): Enslaving as an active interface with an up link
[  159.456822][T10851] __nla_validate_parse: 12 callbacks suppressed
[  159.456840][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'.
[  159.464290][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'.
[  160.262805][T10895] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.733505][T10931] netlink: 'syz.2.2130': attribute type 15 has an invalid length.
[  161.022112][T10945] netlink: 'syz.2.2136': attribute type 13 has an invalid length.
[  161.025460][T10945] netlink: 'syz.2.2136': attribute type 17 has an invalid length.
[  161.110059][T10945] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.115067][T10945] 8021q: adding VLAN 0 to HW filter on device team0
[  161.120088][T10945] batman_adv: batadv0: Interface activated: dummy0
[  161.124861][T10945] batadv0: mtu less than device minimum
[  161.128586][T10945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.134624][T10945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.140629][T10945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.146076][T10945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.151376][T10945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.156796][T10945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.162209][T10945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.167547][T10945] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.420656][T10962] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2140'.
[  161.508315][T10966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2143'.
[  161.513197][T10966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2143'.
[  161.979883][T11002] dummy0: entered promiscuous mode
[  161.986963][T11002] batadv_slave_0: entered promiscuous mode
[  161.990458][T11002] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  161.995590][T11002] hsr1: entered allmulticast mode
[  161.997595][T11002] dummy0: entered allmulticast mode
[  161.999793][T11002] batadv_slave_0: entered allmulticast mode
[  162.713038][T11040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2171'.
[  163.139541][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2184'.
[  163.280727][T11081] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2190'.
[  163.370967][T11092] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.2195'.
[  164.272934][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2215'.
[  164.400716][T11141] macvlan3: entered promiscuous mode
[  164.636601][T11150] __nla_validate_parse: 2 callbacks suppressed
[  164.636620][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2221'.
[  164.805468][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2224'.
[  164.808807][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2224'.
[  164.811997][T11161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2224'.
[  164.834184][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2223'.
[  164.972469][T11174] syzkaller0: entered promiscuous mode
[  164.974957][T11174] syzkaller0: entered allmulticast mode
[  165.173457][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2232'.
[  165.176950][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'.
[  165.180594][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2232'.
[  165.186445][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'.
[  165.556445][T11205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'.
[  165.817903][T11221] netlink: 'syz.0.2250': attribute type 1 has an invalid length.
[  166.831967][ T5238] Bluetooth: hci2: command 0x0401 tx timeout
[  167.693757][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.696578][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.074689][T11365] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  169.280712][T11383] netlink: 'syz.1.2324': attribute type 30 has an invalid length.
[  169.417082][T11393] netlink: 'syz.0.2329': attribute type 1 has an invalid length.
[  169.440814][T11393] bond2 (unregistering): Released all slaves
[  169.664241][T11409] netlink: 'syz.1.2334': attribute type 4 has an invalid length.
[  171.877175][T11513] ip6gretap0: entered promiscuous mode
[  171.879140][T11513] macsec1: entered promiscuous mode
[  171.885136][T11513] ip6gretap0: left promiscuous mode
[  172.527275][T11557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  172.947756][T11565] __nla_validate_parse: 7 callbacks suppressed
[  172.947772][T11565] netlink: 164548 bytes leftover after parsing attributes in process `syz.0.2406'.
[  173.562495][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'.
[  173.641725][   T11] block nbd3: Possible stuck request ffff888022558000: control (read@0,1024B). Runtime 30 seconds
[  173.645798][   T11] block nbd3: Possible stuck request ffff888022558200: control (read@1024,1024B). Runtime 30 seconds
[  173.649836][   T11] block nbd3: Possible stuck request ffff888022558400: control (read@2048,1024B). Runtime 30 seconds
[  173.654640][   T11] block nbd3: Possible stuck request ffff888022558600: control (read@3072,1024B). Runtime 30 seconds
[  174.684135][T11629] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  174.684460][T11628] IPVS: stopping backup sync thread 11629 ...
[  175.065829][T11670] netlink: 'syz.0.2452': attribute type 6 has an invalid length.
[  175.186568][T11680] macvtap1: entered promiscuous mode
[  175.188329][T11680] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  175.198996][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'.
[  175.202610][T11680] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[  176.266129][   T33] audit: type=1107 audit(1758572515.723:4): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  176.519159][T11728] dvmrp8: entered allmulticast mode
[  176.674017][T11727] dvmrp8: left allmulticast mode
[  177.037533][T11763] netlink: 'syz.1.2492': attribute type 10 has an invalid length.
[  177.040390][T11763] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2492'.
[  177.047891][T11763] batman_adv: batadv0: Adding interface: virt_wifi0
[  177.049999][T11763] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.058449][T11763] batman_adv: batadv0: Interface activated: virt_wifi0
[  177.217294][T11782] netlink: 'syz.0.2500': attribute type 10 has an invalid length.
[  177.222919][T11782] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  177.445301][T11800] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2508'.
[  177.641986][T11814] netlink: 'syz.1.2514': attribute type 1 has an invalid length.
[  177.645153][T11814] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.2514'.
[  178.118574][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2534'.
[  178.338333][T11877] netlink: 'syz.0.2543': attribute type 1 has an invalid length.
[  178.363718][T11877] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.376666][T11877] 8021q: adding VLAN 0 to HW filter on device batadv1
[  178.381345][T11877] bond2: (slave batadv1): making interface the new active one
[  178.385400][T11877] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  178.389960][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'.
[  178.477263][T11877] bond2 (unregistering): (slave batadv1): Releasing active interface
[  178.484514][T11877] bond2 (unregistering): Released all slaves
[  178.499216][T11882] netlink: 'syz.2.2545': attribute type 5 has an invalid length.
[  178.659341][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2552'.
[  178.681790][T11899] netlink: 'syz.0.2552': attribute type 2 has an invalid length.
[  178.754840][ T5858] Bluetooth: hci2: command 0x0401 tx timeout
[  178.894872][T11917] net_ratelimit: 13 callbacks suppressed
[  178.894893][T11917] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  179.165574][T11946] veth2: entered promiscuous mode
[  179.167552][T11946] veth2: entered allmulticast mode
[  179.208905][T11950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2575'.
[  179.221721][T11950] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2575'.
[  179.248655][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'.
[  181.177058][T12004] netlink: 'syz.0.2598': attribute type 1 has an invalid length.
[  181.249439][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.252748][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.326800][T12009] netlink: 'syz.0.2601': attribute type 1 has an invalid length.
[  181.595645][T12030] IPVS: Error connecting to the multicast addr
[  182.271040][T12093] netlink: 'syz.1.2640': attribute type 10 has an invalid length.
[  182.293572][T12093] bridge6: entered promiscuous mode
[  182.295647][T12093] bridge6: entered allmulticast mode
[  182.365703][T12093] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  182.677454][T12124] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2652'.
[  182.686257][T12125] raw_sendmsg: syz.1.2649 forgot to set AF_INET. Fix it!
[  183.862850][T12211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2689'.
[  183.875460][T12211] netlink: 'syz.1.2689': attribute type 4 has an invalid length.
[  183.878797][T12211] netlink: 'syz.1.2689': attribute type 4 has an invalid length.
[  183.980490][T12221] !: renamed from dummy0
[  184.206238][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'.
[  184.209240][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'.
[  184.291295][T12247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2707'.
[  184.295488][T12247] tipc: Enabled bearer <eth:vlan0>, priority 18
[  184.350161][T12255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2709'.
[  184.370863][T12255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2709'.
[  184.378210][T12258] netlink: 'syz.1.2710': attribute type 8 has an invalid length.
[  184.380831][T12255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2709'.
[  184.389838][T12260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2711'.
[  184.392113][T12255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2709'.
[  184.396099][T12255] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2709'.
[  184.439578][T12260] netlink: 'syz.0.2711': attribute type 10 has an invalid length.
[  184.474969][T12266] gretap1: entered promiscuous mode
[  184.977204][T12325] netlink: 'syz.1.2742': attribute type 12 has an invalid length.
[  185.113230][T12333] trusted_key: syz.0.2746 sent an empty control message without MSG_MORE.
[  185.442074][   T47] tipc: Node number set to 3221071528
[  185.771205][T12397] netlink: 'syz.2.2774': attribute type 4 has an invalid length.
[  185.774968][T12397] : renamed from bond0
[  186.368951][T12444] netdevsim0: left promiscuous mode
[  186.414336][T12444] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.424014][T12444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  186.768158][T12470] netlink: 'syz.0.2806': attribute type 10 has an invalid length.
[  186.789938][T12470] team0: Device hsr_slave_0 failed to register rx_handler
[  187.020947][T12482] TCP: TCP_TX_DELAY enabled
[  189.334285][T12546] __nla_validate_parse: 33 callbacks suppressed
[  189.334719][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'.
[  189.589651][T12568] syz_tun: entered promiscuous mode
[  189.592781][T12568] vlan2: entered promiscuous mode
[  189.639979][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'.
[  189.660319][T12573] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  190.267083][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2865'.
[  191.083805][ T5859] Bluetooth: hci1: command 0x0406 tx timeout
[  191.083863][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout
[  191.088046][ T5858] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  191.167750][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'.
[  191.180750][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2883'.
[  191.184347][T12654] netlink: 'syz.0.2883': attribute type 12 has an invalid length.
[  191.187805][T12654] netlink: 'syz.0.2883': attribute type 14 has an invalid length.
[  191.428451][T12679] netlink: 'syz.0.2896': attribute type 3 has an invalid length.
[  191.475048][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'.
[  191.740279][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2910'.
[  191.745332][T12710] unsupported nlmsg_type 40
[  192.245690][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'.
[  192.249354][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'.
[  192.257464][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'.
[  192.287431][T12737] C: renamed from team_slave_0
[  192.304233][T12737] netlink: 'syz.1.2921': attribute type 1 has an invalid length.
[  192.308749][T12737] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  193.151801][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout
[  193.617826][T12817] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.624887][T12817] syzkaller0: entered promiscuous mode
[  193.626997][T12817] syzkaller0: entered allmulticast mode
[  193.654296][T12817] tipc: Resetting bearer <eth:syzkaller0>
[  193.670277][T12816] tipc: Resetting bearer <eth:syzkaller0>
[  193.683908][T12816] tipc: Disabling bearer <eth:syzkaller0>
[  195.208924][T12886] netlink: 'syz.1.2977': attribute type 2 has an invalid length.
[  195.245219][ T1088] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  195.570851][T12924] veth1_virt_wifi: entered promiscuous mode
[  195.574727][T12924] __nla_validate_parse: 3 callbacks suppressed
[  195.574742][T12924] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2994'.
[  195.579663][T12924] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  195.706473][T12939] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2999'.
[  195.794975][T12949] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3004'.
[  196.111269][T12978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3016'.
[  196.164877][T12982] dvmrp0: entered allmulticast mode
[  196.214418][T12986] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3020'.
[  196.218175][T12986] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3020'.
[  196.757265][T13006] IPVS: lc: FWM 3 0x00000003 - no destination available
[  197.009776][T13023] bond0: (slave erspan0): Opening slave failed
[  197.229424][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3048'.
[  197.749509][T13089] netlink: 'syz.1.3063': attribute type 10 has an invalid length.
[  197.770067][T13091] netlink: 'syz.0.3065': attribute type 1 has an invalid length.
[  197.775043][T13091] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3065'.
[  197.800488][T13092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3063'.
[  197.899634][T13089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  198.230255][T13093] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  198.245256][T13093] tipc: Resetting bearer <eth:vlan0>
[  198.476672][ T5865] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  198.483191][ T5865] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  198.486567][ T5865] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  198.491154][ T5865] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  198.538915][T13106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.564938][T13104] tipc: Disabling bearer <eth:syzkaller0>
[  198.706780][T13117] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3075'.
[  198.906533][T13135] netlink: 'syz.0.3082': attribute type 12 has an invalid length.
[  198.909719][T13135] netlink: 'syz.0.3082': attribute type 29 has an invalid length.
[  198.919190][T13135] netlink: 'syz.0.3082': attribute type 1 has an invalid length.
[  200.220525][T13193] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20004
[  200.221390][T13181] tipc: Disabling bearer <eth:vlan0>
[  200.324028][T13200] bridge0: port 3(batadv2) entered blocking state
[  200.326929][T13200] bridge0: port 3(batadv2) entered disabled state
[  200.329756][T13200] batadv2: entered allmulticast mode
[  200.334088][T13200] batadv2: entered promiscuous mode
[  200.822372][ T5865] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled
[  200.826182][ T5865] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled
[  201.144615][T13251] __nla_validate_parse: 4 callbacks suppressed
[  201.144627][T13251] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3131'.
[  201.725137][T13289] netlink: 'syz.0.3147': attribute type 15 has an invalid length.
[  201.727683][T13289] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3147'.
[  201.787404][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3150'.
[  201.968888][T13316] netlink: 'syz.1.3159': attribute type 1 has an invalid length.
[  201.973164][T13316] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3159'.
[  202.365890][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'.
[  202.369058][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3181'.
[  202.843798][T13388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3192'.
[  202.950499][T13393] netlink: 'syz.0.3193': attribute type 6 has an invalid length.
[  203.378773][T13395] netlink: 'syz.0.3193': attribute type 12 has an invalid length.
[  203.382021][T13395] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3193'.
[  203.712310][   T11] block nbd3: Possible stuck request ffff888022558000: control (read@0,1024B). Runtime 60 seconds
[  203.716471][   T11] block nbd3: Possible stuck request ffff888022558200: control (read@1024,1024B). Runtime 60 seconds
[  203.720646][   T11] block nbd3: Possible stuck request ffff888022558400: control (read@2048,1024B). Runtime 60 seconds
[  203.727819][   T11] block nbd3: Possible stuck request ffff888022558600: control (read@3072,1024B). Runtime 60 seconds
[  204.040823][T13463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.048961][T13463] syzkaller0: entered promiscuous mode
[  204.050878][T13463] syzkaller0: entered allmulticast mode
[  204.065557][T13463] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3224'.
[  204.070267][T13463] tipc: Resetting bearer <eth:syzkaller0>
[  204.079512][T13461] tipc: Resetting bearer <eth:syzkaller0>
[  204.092663][T13461] tipc: Disabling bearer <eth:syzkaller0>
[  204.228173][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'.
[  205.477811][T13581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  205.723646][T13601] 8021q: adding VLAN 0 to HW filter on device bond0
[  205.728394][T13601] 8021q: adding VLAN 0 to HW filter on device team0
[  205.734680][T13601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  205.956363][T13623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  205.959664][T13623] syzkaller0: entered promiscuous mode
[  205.966359][T13623] syzkaller0: entered allmulticast mode
[  205.984332][T13623] tipc: Resetting bearer <eth:syzkaller0>
[  205.988473][T13622] tipc: Resetting bearer <eth:syzkaller0>
[  206.000272][T13622] tipc: Disabling bearer <eth:syzkaller0>
[  206.009262][T13627] netlink: 'syz.0.3294': attribute type 3 has an invalid length.
[  206.277436][T13648] __nla_validate_parse: 19 callbacks suppressed
[  206.277452][T13648] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3304'.
[  206.680075][T13683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3321'.
[  206.944191][T13701] syz.1.3329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  206.950442][T13701] CPU: 0 UID: 0 PID: 13701 Comm: syz.1.3329 Not tainted syzkaller #0 PREEMPT(full) 
[  206.950461][T13701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.950469][T13701] Call Trace:
[  206.950476][T13701]  <TASK>
[  206.950483][T13701]  dump_stack_lvl+0x189/0x250
[  206.950511][T13701]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.950530][T13701]  ? __pfx__printk+0x10/0x10
[  206.950552][T13701]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  206.950571][T13701]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  206.950589][T13701]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  206.950609][T13701]  warn_alloc+0x214/0x310
[  206.950634][T13701]  ? stack_depot_save_flags+0x40/0x860
[  206.950659][T13701]  ? __pfx_warn_alloc+0x10/0x10
[  206.950683][T13701]  ? kasan_save_track+0x4f/0x80
[  206.950731][T13701]  ? xskq_create+0x56/0x170
[  206.950745][T13701]  ? xsk_init_queue+0xb0/0x110
[  206.950757][T13701]  ? xsk_setsockopt+0x4dc/0x8d0
[  206.950778][T13701]  ? do_sock_setsockopt+0x17c/0x1b0
[  206.950796][T13701]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  206.950814][T13701]  ? do_syscall_64+0xfa/0x3b0
[  206.950829][T13701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.950851][T13701]  __vmalloc_node_range_noprof+0x125/0x12f0
[  206.950897][T13701]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  206.950924][T13701]  ? __kasan_kmalloc+0x93/0xb0
[  206.950946][T13701]  vmalloc_user_noprof+0xad/0xf0
[  206.950968][T13701]  ? xskq_create+0xbf/0x170
[  206.950982][T13701]  xskq_create+0xbf/0x170
[  206.950999][T13701]  xsk_init_queue+0xb0/0x110
[  206.951015][T13701]  xsk_setsockopt+0x4dc/0x8d0
[  206.951039][T13701]  ? __pfx_xsk_setsockopt+0x10/0x10
[  206.951060][T13701]  ? __pfx_aa_sk_perm+0x10/0x10
[  206.951087][T13701]  ? aa_sock_opt_perm+0xff/0x1b0
[  206.951104][T13701]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  206.951128][T13701]  ? __pfx_xsk_setsockopt+0x10/0x10
[  206.951152][T13701]  do_sock_setsockopt+0x17c/0x1b0
[  206.951174][T13701]  __x64_sys_setsockopt+0x13f/0x1b0
[  206.951197][T13701]  do_syscall_64+0xfa/0x3b0
[  206.951213][T13701]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.951227][T13701]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.951242][T13701]  ? exc_page_fault+0x9f/0xf0
[  206.951259][T13701]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.951273][T13701] RIP: 0033:0x7f9189d8ec29
[  206.951288][T13701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.951300][T13701] RSP: 002b:00007f918aca4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  206.951315][T13701] RAX: ffffffffffffffda RBX: 00007f9189fd5fa0 RCX: 00007f9189d8ec29
[  206.951325][T13701] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  206.951334][T13701] RBP: 00007f9189e11e41 R08: 0000000000000004 R09: 0000000000000000
[  206.951343][T13701] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.951352][T13701] R13: 00007f9189fd6038 R14: 00007f9189fd5fa0 R15: 00007ffc21956758
[  206.951376][T13701]  </TASK>
[  206.951382][T13701] Mem-Info:
[  207.073629][T13701] active_anon:9630 inactive_anon:0 isolated_anon:0
[  207.073629][T13701]  active_file:1360 inactive_file:38297 isolated_file:0
[  207.073629][T13701]  unevictable:1768 dirty:154 writeback:0
[  207.073629][T13701]  slab_reclaimable:10234 slab_unreclaimable:101497
[  207.073629][T13701]  mapped:18219 shmem:2420 pagetables:1042
[  207.073629][T13701]  sec_pagetables:0 bounce:0
[  207.073629][T13701]  kernel_misc_reclaimable:0
[  207.073629][T13701]  free:242024 free_pcp:21687 free_cma:0
[  207.093971][T13701] Node 0 active_anon:22244kB inactive_anon:0kB active_file:4672kB inactive_file:24416kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30164kB dirty:528kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6812kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  207.106372][T13701] Node 1 active_anon:16208kB inactive_anon:0kB active_file:768kB inactive_file:128772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42712kB dirty:88kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4912kB pagetables:1892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  207.118704][T13701] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  207.162089][T13701] lowmem_reserve[]: 0 811 811 811 811
[  207.165256][T13701] Node 0 DMA32 free:359984kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22244kB inactive_anon:0kB active_file:4672kB inactive_file:24416kB unevictable:3536kB writepending:528kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:34108kB local_pcp:19548kB free_cma:0kB
[  207.194929][T13701] lowmem_reserve[]: 0 0 0 0 0
[  207.197108][T13701] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  207.211453][T13701] lowmem_reserve[]: 0 0 854 854 854
[  207.213824][T13701] Node 1 Normal free:142136kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16072kB inactive_anon:0kB active_file:768kB inactive_file:128772kB unevictable:3536kB writepending:88kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:45392kB local_pcp:30572kB free_cma:0kB
[  207.227061][T13701] lowmem_reserve[]: 0 0 0 0 0
[  207.228700][T13701] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  207.239509][T13701] Node 0 DMA32: 4*4kB (UE) 298*8kB (U) 243*16kB (UME) 120*32kB (UM) 136*64kB (UME) 71*128kB (UME) 31*256kB (UME) 17*512kB (UM) 8*1024kB (UME) 6*2048kB (M) 72*4096kB (UM) = 359952kB
[  207.255579][T13701] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  207.260688][T13701] Node 1 Normal: 1340*4kB (UME) 859*8kB (UME) 517*16kB (UM) 91*32kB (UM) 121*64kB (UME) 101*128kB (UME) 31*256kB (UM) 12*512kB (UM) 4*1024kB (UME) 3*2048kB (UM) 18*4096kB (UM) = 142136kB
[  207.266918][T13701] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  207.269738][T13701] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  207.272913][T13701] 42077 total pagecache pages
[  207.274530][T13701] 0 pages in swap cache
[  207.276155][T13701] Free swap  = 124996kB
[  207.277828][T13701] Total swap = 124996kB
[  207.279453][T13701] 786301 pages RAM
[  207.280823][T13701] 0 pages HighMem/MovableOnly
[  207.289639][T13701] 241346 pages reserved
[  207.293032][T13701] 0 pages cma reserved
[  207.417086][T13730] C: renamed from lo (while UP)
[  207.420021][T13730] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  207.548764][T13742] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3349'.
[  207.552839][T13742] netlink: 'syz.0.3349': attribute type 7 has an invalid length.
[  207.555787][T13742] netlink: 'syz.0.3349': attribute type 8 has an invalid length.
[  207.559189][T13742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'.
[  207.628694][T13752] netlink: 'syz.0.3354': attribute type 6 has an invalid length.
[  207.689067][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3356'.
[  209.186457][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3383'.
[  209.189999][T13817] IPVS: Unknown mcast interface: vcan0
[  209.672334][T13860] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3401'.
[  209.679652][T13860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.890153][T13935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.892975][T13935] syzkaller0: entered promiscuous mode
[  210.894853][T13935] syzkaller0: entered allmulticast mode
[  210.908052][T13935] tipc: Resetting bearer <eth:syzkaller0>
[  210.922471][T13934] tipc: Resetting bearer <eth:syzkaller0>
[  210.943164][T13934] tipc: Disabling bearer <eth:syzkaller0>
[  210.955547][T13941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3435'.
[  211.126530][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3440'.
[  211.511772][T13968] hsr1: left allmulticast mode
[  211.514073][T13968] dummy0: left allmulticast mode
[  211.516219][T13968] batadv_slave_0: left allmulticast mode
[  211.519649][T13968] veth2: left promiscuous mode
[  211.522929][T13968] veth2: left allmulticast mode
[  211.525628][T13968] bridge6: left promiscuous mode
[  211.527753][T13968] bridge6: left allmulticast mode
[  211.979004][T13978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.988967][T13978] syzkaller0: entered promiscuous mode
[  211.991165][T13978] syzkaller0: entered allmulticast mode
[  211.995289][T13980] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3751117398/3751117400
[  212.001897][T13980] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3751117398/3751117400
[  212.024634][T13978] tipc: Resetting bearer <eth:syzkaller0>
[  212.028353][T13977] tipc: Resetting bearer <eth:syzkaller0>
[  212.039651][T13977] tipc: Disabling bearer <eth:syzkaller0>
[  212.139022][T13986] tipc: Cannot configure node identity twice
[  212.143074][T13988] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3455'.
[  212.497834][T14016] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3469'.
[  212.501268][T14016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3469'.
[  212.508483][T14016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3469'.
[  212.585779][T14026] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  212.691489][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3478'.
[  212.806292][ T5297] udevd[5297]: worker [7644] /devices/virtual/block/nbd3 is taking a long time
[  213.089077][T14062] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma?
[  213.278808][T14075] batman_adv: batadv0: Adding interface: ip6gretap1
[  213.281243][T14075] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.290048][T14075] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  213.555405][T14093] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  213.565779][T14093] vlan2: entered allmulticast mode
[  213.567827][T14093] batadv0: entered allmulticast mode
[  213.810202][T14108] netlink: 'syz.2.3512': attribute type 3 has an invalid length.
[  214.463662][ T5858] Bluetooth: hci2: link tx timeout
[  214.466270][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  214.508711][ T5858] Bluetooth: hci2: link tx timeout
[  214.510807][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  214.543721][ T5858] Bluetooth: hci2: link tx timeout
[  214.545812][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  214.562839][ T5858] Bluetooth: hci2: link tx timeout
[  214.564912][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  214.632913][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3531'.
[  214.636509][T14160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3531'.
[  214.796761][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'.
[  214.914691][T14177] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  214.918189][T14177] syzkaller0: entered promiscuous mode
[  214.920568][T14177] syzkaller0: entered allmulticast mode
[  214.936184][T14177] tipc: Resetting bearer <eth:syzkaller0>
[  214.940285][T14176] tipc: Resetting bearer <eth:syzkaller0>
[  214.949957][T14176] tipc: Disabling bearer <eth:syzkaller0>
[  215.144272][T14183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3540'.
[  215.148073][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3540'.
[  215.237076][ T5858] Bluetooth: hci2: link tx timeout
[  215.239202][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  215.470197][ T5858] Bluetooth: hci2: link tx timeout
[  215.472524][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  215.589219][T14220] team0: Port device geneve0 removed
[  215.633982][ T5858] Bluetooth: hci2: link tx timeout
[  215.636055][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  215.639042][ T5858] Bluetooth: hci2: link tx timeout
[  215.640774][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  216.128124][ T5315] hid-generic 0005:16C0:5502.0001: item fetching failed at offset 0/3
[  216.139894][ T5315] hid-generic 0005:16C0:5502.0001: probe with driver hid-generic failed with error -22
[  216.271171][T14255] syzkaller0: entered promiscuous mode
[  216.273647][T14255] syzkaller0: entered allmulticast mode
[  216.509318][T14261] netlink: 'syz.1.3571': attribute type 1 has an invalid length.
[  216.514876][ T5858] Bluetooth: hci2: link tx timeout
[  216.516556][ T5858] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  216.522156][ T5858] Bluetooth: hci2: command 0x0401 tx timeout
[  216.572914][T14262] sch_fq: defrate 0 ignored.
[  217.060802][T14266] netlink: 'syz.2.3573': attribute type 1 has an invalid length.
[  217.106758][T14266] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  217.118307][ T5883] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  217.124340][T14266] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.139516][T14266] veth13: entered promiscuous mode
[  217.147501][T14266] bond0: (slave veth13): Enslaving as a backup interface with a down link
[  217.152227][T14266] batman_adv: batadv0: Interface deactivated: dummy0
[  217.154674][T14266] batman_adv: batadv0: Removing interface: dummy0
[  217.159489][T14266] : (slave bond_slave_0): Releasing backup interface
[  217.169072][T14266] : (slave bond_slave_1): Releasing backup interface
[  217.176599][T14266] team0: Port device team_slave_0 removed
[  217.180769][T14266] team0: Port device team_slave_1 removed
[  217.186800][T14266] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.190638][T14266] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.196408][T14266] bond1: (slave veth3): Releasing active interface
[  217.206175][T14266] bond3: (slave veth11): Releasing backup interface
[  217.213355][T14266] batman_adv: batadv0: Removing interface: ip6gretap1
[  217.218189][T14266] bond0: (slave ip6gretap2): Removing an active aggregator
[  217.224017][T14266] bond0: (slave ip6gretap2): Releasing backup interface
[  217.227138][T14266] bond0: (slave ip6gretap2): the permanent HWaddr of slave - 66:75:58:4c:cb:a4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  217.242732][T14266] bond0: (slave veth13): Releasing backup interface
[  217.251409][T14273] __nla_validate_parse: 7 callbacks suppressed
[  217.251421][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3576'.
[  217.543946][T14289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  218.551034][T14328] netlink: 'syz.1.3599': attribute type 4 has an invalid length.
[  218.553792][T14328] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3599'.
[  218.556866][T14328] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  219.424240][T14362] netlink: 'syz.0.3614': attribute type 10 has an invalid length.
[  219.437802][T14362] team0: Port device 0! added
[  219.442241][T14362] netlink: 'syz.0.3614': attribute type 10 has an invalid length.
[  219.446178][T14362] team0: Failed to send port change of device 0! via netlink (err -105)
[  219.456443][T14362] team0: Failed to send options change via netlink (err -105)
[  219.460516][T14362] team0: Failed to send port change of device 0! via netlink (err -105)
[  219.464736][T14362] team0: Port device 0! removed
[  219.470663][T14362] bond0: (slave 0!): Enslaving as an active interface with an up link
[  219.706931][T14377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3621'.
[  220.169376][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'.
[  220.397009][T14426] syzkaller1: entered promiscuous mode
[  220.399302][T14426] syzkaller1: entered allmulticast mode
[  220.516649][T14434] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  220.997659][T14462] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3658'.
[  222.461279][T14568] batadv_slave_1: entered promiscuous mode
[  222.468927][T14568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3690'.
[  222.473662][T14567] batadv_slave_1: left promiscuous mode
[  222.607859][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3695'.
[  222.961469][T14600] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  222.967480][T14600] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  223.052229][T14610] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  223.079300][T14614] netlink: 'syz.0.3706': attribute type 1 has an invalid length.
[  223.084270][T14614] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3706'.
[  223.087232][T14614] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3706'.
[  223.115675][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'.
[  223.467773][T14644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'.
[  223.555954][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3722'.
[  223.838852][T14669] bond0: (slave 0!): Releasing backup interface
[  223.842620][T14669] bridge_slave_0: left allmulticast mode
[  223.844438][T14669] bridge_slave_0: left promiscuous mode
[  223.846255][T14669] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.860140][T14669] bridge_slave_1: left allmulticast mode
[  223.863123][T14669] bridge_slave_1: left promiscuous mode
[  223.871152][T14669] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.886493][T14669] bond0: (slave bond_slave_0): Releasing backup interface
[  223.891446][T14669] bond0: (slave bond_slave_1): Releasing backup interface
[  223.896428][T14669] team0: Port device team_slave_0 removed
[  223.899853][T14669] team0: Port device team_slave_1 removed
[  223.902635][T14669] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.906133][T14669] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.910843][T14669] batadv2: left allmulticast mode
[  223.913637][T14669] batadv2: left promiscuous mode
[  223.915513][T14669] bridge0: port 3(batadv2) entered disabled state
[  224.037571][T14683] geneve3: entered promiscuous mode
[  224.040614][ T5883] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.046095][ T5883] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.048657][ T5883] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.051215][ T5883] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.077230][T14688] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3741'.
[  224.121411][T14692] veth0_to_bridge: entered promiscuous mode
[  224.126718][T14692] veth0_to_bridge: left promiscuous mode
[  224.536874][T14708] dvmrp0: entered allmulticast mode
[  225.043878][T14700] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  225.249368][T14733] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  225.347964][T14735] 8021q: adding VLAN 0 to HW filter on device bond7
[  225.364379][T14735] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  225.368342][T14735] bond7: (slave macvlan0): Enslaving as a backup interface with an up link
[  225.380192][T14735] batman_adv: batadv0: Removing interface: virt_wifi0
[  225.384370][T14735] bond7: (slave macvlan0): Releasing backup interface
[  225.431310][T14740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  225.900548][T14761] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.916306][T14761] syzkaller0: entered promiscuous mode
[  225.918509][T14761] syzkaller0: entered allmulticast mode
[  225.960276][T14761] tipc: Resetting bearer <eth:syzkaller0>
[  225.976514][T14760] tipc: Resetting bearer <eth:syzkaller0>
[  226.001513][T14760] tipc: Disabling bearer <eth:syzkaller0>
[  226.250303][T14778] dvmrp1: tun_chr_ioctl cmd 1074025677
[  226.252537][T14778] dvmrp1: linktype set to 768
[  226.314909][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3773'.
[  226.318487][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3773'.
[  226.329441][ T5883] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  226.333182][ T5883] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  226.336953][ T5883] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.339687][ T5883] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.819119][T14812] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  228.083184][T14852] __nla_validate_parse: 2 callbacks suppressed
[  228.083200][T14852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'.
[  228.324770][T14876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3814'.
[  228.338767][T14878] sock: sock_set_timeout: `syz.2.3815' (pid 14878) tries to set negative timeout
[  228.363626][T14882] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3817'.
[  228.386278][T14886] netlink: 'syz.2.3818': attribute type 9 has an invalid length.
[  228.389167][T14886] netlink: 'syz.2.3818': attribute type 7 has an invalid length.
[  228.392800][T14886] netlink: 'syz.2.3818': attribute type 8 has an invalid length.
[  228.708606][T14909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3830'.
[  229.648435][T14930] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3838'.
[  229.916060][T14958] sock: sock_timestamping_bind_phc: sock not bind to device
[  230.008320][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.011565][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.049646][T14968] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3853'.
[  230.147656][T14980] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3859'.
[  230.150703][T14980] netlink: 'syz.2.3859': attribute type 1 has an invalid length.
[  230.248599][T14988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.253646][T14988] syzkaller0: entered promiscuous mode
[  230.255578][T14988] syzkaller0: entered allmulticast mode
[  230.305553][T14988] tipc: Resetting bearer <eth:syzkaller0>
[  230.316924][T14987] tipc: Resetting bearer <eth:syzkaller0>
[  230.358223][T14987] tipc: Disabling bearer <eth:syzkaller0>
[  230.394921][T14998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.398174][T14998] syzkaller0: entered promiscuous mode
[  230.400295][T14998] syzkaller0: entered allmulticast mode
[  230.428207][T14998] tipc: Resetting bearer <eth:syzkaller0>
[  230.434947][T14997] tipc: Resetting bearer <eth:syzkaller0>
[  230.449339][T14997] tipc: Disabling bearer <eth:syzkaller0>
[  230.459738][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3870'.
[  230.571266][T15014] netlink: 'syz.0.3876': attribute type 2 has an invalid length.
[  230.578988][T15014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3876'.
[  232.414060][T15103] team0: Device gtp0 is up. Set it down before adding it as a team port
[  232.452390][T15096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.486748][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3915'.
[  233.151836][    C0] ==================================================================
[  233.154521][    C0] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  233.157305][    C0] Read of size 1 at addr ffff88810850d530 by task syz-executor/5852
[  233.161841][    C0] 
[  233.162830][    C0] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  233.162849][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.162859][    C0] Call Trace:
[  233.162866][    C0]  <IRQ>
[  233.162874][    C0]  dump_stack_lvl+0x189/0x250
[  233.162896][    C0]  ? __kasan_check_byte+0x12/0x40
[  233.162919][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.162937][    C0]  ? lock_release+0x4b/0x3e0
[  233.162962][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  233.162982][    C0]  print_report+0xca/0x240
[  233.162996][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  233.163012][    C0]  kasan_report+0x118/0x150
[  233.163032][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  233.163050][    C0]  xfrm_state_find+0x2cf2/0x5400
[  233.163066][    C0]  ? check_noncircular+0xe0/0x160
[  233.163079][    C0]  ? validate_chain+0x897/0x2140
[  233.163092][    C0]  ? xfrm_state_find+0x1da/0x5400
[  233.163109][    C0]  ? __pfx_xfrm_state_find+0x10/0x10
[  233.163162][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  233.163192][    C0]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  233.163214][    C0]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  233.163235][    C0]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  233.163255][    C0]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  233.163286][    C0]  ? xfrm_expand_policies+0x41f/0x6a0
[  233.163306][    C0]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  233.163328][    C0]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  233.163347][    C0]  ? l3mdev_master_ifindex+0x18/0x160
[  233.163363][    C0]  ? l3mdev_master_ifindex+0x18/0x160
[  233.163376][    C0]  ? l3mdev_master_ifindex+0x18/0x160
[  233.163390][    C0]  icmp_route_lookup+0x3ab/0x870
[  233.163403][    C0]  ? __pfx_icmp_route_lookup+0x10/0x10
[  233.163416][    C0]  ? __asan_memset+0x22/0x50
[  233.163432][    C0]  ? __icmp_send+0x7ff/0x12d0
[  233.163443][    C0]  ? __icmp_send+0x7ff/0x12d0
[  233.163455][    C0]  ? __pfx___ip_options_echo+0x10/0x10
[  233.163472][    C0]  ? __icmp_send+0x1b9/0x12d0
[  233.163481][    C0]  __icmp_send+0xd0e/0x12d0
[  233.163495][    C0]  ? __icmp_send+0x1b9/0x12d0
[  233.163510][    C0]  ? __pfx___icmp_send+0x10/0x10
[  233.163530][    C0]  ? __lock_acquire+0xab9/0xd20
[  233.163551][    C0]  ? do_raw_spin_lock+0x121/0x290
[  233.163569][    C0]  ipv4_link_failure+0x64e/0xa30
[  233.163589][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  233.163608][    C0]  ? __pfx_ipv4_link_failure+0x10/0x10
[  233.163631][    C0]  ? __pfx_ipv4_link_failure+0x10/0x10
[  233.163650][    C0]  arp_error_report+0x118/0x160
[  233.163671][    C0]  neigh_invalidate+0x235/0x460
[  233.163691][    C0]  neigh_timer_handler+0x949/0x1150
[  233.163712][    C0]  call_timer_fn+0x17e/0x5f0
[  233.163733][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  233.163749][    C0]  ? call_timer_fn+0xbe/0x5f0
[  233.163768][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  233.163791][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.163812][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.163832][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  233.163850][    C0]  __run_timer_base+0x61a/0x860
[  233.163868][    C0]  ? ktime_get+0x3e/0x1f0
[  233.163889][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  233.163905][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  233.163925][    C0]  run_timer_softirq+0xb7/0x180
[  233.163943][    C0]  handle_softirqs+0x286/0x870
[  233.163957][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  233.163970][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  233.163984][    C0]  __irq_exit_rcu+0xca/0x1f0
[  233.163994][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  233.164009][    C0]  irq_exit_rcu+0x9/0x30
[  233.164020][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  233.164034][    C0]  </IRQ>
[  233.164038][    C0]  <TASK>
[  233.164042][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.164054][    C0] RIP: 0010:lock_release+0x2c5/0x3e0
[  233.164070][    C0] Code: 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 0b 2f 03 11 48 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 5d fd
[  233.164080][    C0] RSP: 0018:ffffc9000320f570 EFLAGS: 00000282
[  233.164092][    C0] RAX: 2cf7a5f543370200 RBX: 0000000000000001 RCX: 2cf7a5f543370200
[  233.164101][    C0] RDX: 0000000000000000 RSI: ffffffff8dba91a8 RDI: ffffffff8be33c00
[  233.164110][    C0] RBP: ffff88810819c470 R08: 0000000000000000 R09: ffffffff823a462d
[  233.164120][    C0] R10: dffffc0000000000 R11: ffffed10221faa7b R12: 0000000000000000
[  233.164159][    C0] R13: 0000000000000000 R14: ffffffff8e13a0e0 R15: ffff88810819b980
[  233.164169][    C0]  ? shrink_kill+0x8d/0x2c0
[  233.164186][    C0]  ? shrink_kill+0x8d/0x2c0
[  233.164199][    C0]  shrink_kill+0x269/0x2c0
[  233.164213][    C0]  shrink_dentry_list+0x2e0/0x5e0
[  233.164228][    C0]  shrink_dcache_parent+0xa1/0x2c0
[  233.164243][    C0]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  233.164259][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  233.164276][    C0]  d_invalidate+0x11b/0x260
[  233.164291][    C0]  ? __pfx_d_invalidate+0x10/0x10
[  233.164304][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  233.164320][    C0]  proc_invalidate_siblings_dcache+0x3d3/0x6c0
[  233.164340][    C0]  ? proc_invalidate_siblings_dcache+0x2b/0x6c0
[  233.164360][    C0]  release_task+0x1306/0x17f0
[  233.164384][    C0]  ? wait_consider_task+0x1944/0x2e10
[  233.164405][    C0]  ? __pfx_release_task+0x10/0x10
[  233.164420][    C0]  ? __do_wait+0x153/0x740
[  233.164442][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.164461][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.164475][    C0]  wait_consider_task+0x1944/0x2e10
[  233.164497][    C0]  ? __do_wait+0x153/0x740
[  233.164513][    C0]  ? __pfx_wait_consider_task+0x10/0x10
[  233.164531][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.164545][    C0]  __do_wait+0x153/0x740
[  233.164558][    C0]  do_wait+0x1f8/0x520
[  233.164572][    C0]  ? do_wait+0x18e/0x520
[  233.164584][    C0]  kernel_wait4+0x1af/0x280
[  233.164598][    C0]  ? __pfx_kernel_wait4+0x10/0x10
[  233.164609][    C0]  ? restore_signal_shadow_stack+0x3b7/0x480
[  233.164623][    C0]  ? __pfx_child_wait_callback+0x10/0x10
[  233.164639][    C0]  __x64_sys_wait4+0x133/0x1e0
[  233.164653][    C0]  ? __pfx___x64_sys_wait4+0x10/0x10
[  233.164670][    C0]  ? do_syscall_64+0xbe/0x3b0
[  233.164682][    C0]  do_syscall_64+0xfa/0x3b0
[  233.164692][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.164701][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.164711][    C0]  ? exc_page_fault+0x9f/0xf0
[  233.164721][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.164730][    C0] RIP: 0033:0x7f563e184e97
[  233.164741][    C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 45 1b 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 95 1b 03 00 8b 44
[  233.164750][    C0] RSP: 002b:00007ffd889c6a70 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  233.164760][    C0] RAX: ffffffffffffffda RBX: 0000000000000b35 RCX: 00007f563e184e97
[  233.164767][    C0] RDX: 0000000040000001 RSI: 00007ffd889c6adc RDI: 00000000ffffffff
[  233.164773][    C0] RBP: 00007ffd889c6adc R08: 0000000000000000 R09: 0000000000000000
[  233.164779][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  233.164785][    C0] R13: 00000000000927c0 R14: 0000000000038e44 R15: 00007ffd889c6b30
[  233.164796][    C0]  </TASK>
[  233.164799][    C0] 
[  233.412478][    C0] Allocated by task 10035:
[  233.414241][    C0]  kasan_save_track+0x3e/0x80
[  233.415792][    C0]  __kasan_slab_alloc+0x6c/0x80
[  233.417631][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  233.419727][    C0]  xfrm_state_alloc+0x24/0x2f0
[  233.421617][    C0]  xfrm_add_sa+0x17d1/0x4070
[  233.423447][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  233.425376][    C0]  netlink_rcv_skb+0x208/0x470
[  233.427211][    C0]  xfrm_netlink_rcv+0x79/0x90
[  233.429052][    C0]  netlink_unicast+0x82f/0x9e0
[  233.430870][    C0]  netlink_sendmsg+0x805/0xb30
[  233.432715][    C0]  __sock_sendmsg+0x21c/0x270
[  233.434574][    C0]  ____sys_sendmsg+0x505/0x830
[  233.436246][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  233.437683][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  233.439212][    C0]  do_syscall_64+0xfa/0x3b0
[  233.440653][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.442855][    C0] 
[  233.443566][    C0] Freed by task 47:
[  233.444734][    C0]  kasan_save_track+0x3e/0x80
[  233.446549][    C0]  kasan_save_free_info+0x46/0x50
[  233.448521][    C0]  __kasan_slab_free+0x5b/0x80
[  233.450416][    C0]  kmem_cache_free+0x18f/0x400
[  233.452327][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  233.454355][    C0]  process_scheduled_works+0xae1/0x17b0
[  233.456490][    C0]  worker_thread+0x8a0/0xda0
[  233.458227][    C0]  kthread+0x711/0x8a0
[  233.459821][    C0]  ret_from_fork+0x439/0x7d0
[  233.461368][    C0]  ret_from_fork_asm+0x1a/0x30
[  233.462812][    C0] 
[  233.463541][    C0] The buggy address belongs to the object at ffff88810850d200
[  233.463541][    C0]  which belongs to the cache xfrm_state of size 928
[  233.467865][    C0] The buggy address is located 816 bytes inside of
[  233.467865][    C0]  freed 928-byte region [ffff88810850d200, ffff88810850d5a0)
[  233.472802][    C0] 
[  233.473760][    C0] The buggy address belongs to the physical page:
[  233.476055][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810850ed00 pfn:0x10850c
[  233.479156][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  233.481918][    C0] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  233.484494][    C0] page_type: f5(slab)
[  233.485693][    C0] raw: 057ff00000000240 ffff88801e204280 ffffea00047e7e10 ffffea0004466510
[  233.488301][    C0] raw: ffff88810850ed00 00000000000e0003 00000000f5000000 0000000000000000
[  233.490892][    C0] head: 057ff00000000240 ffff88801e204280 ffffea00047e7e10 ffffea0004466510
[  233.494220][    C0] head: ffff88810850ed00 00000000000e0003 00000000f5000000 0000000000000000
[  233.496828][    C0] head: 057ff00000000002 ffffea0004214301 00000000ffffffff 00000000ffffffff
[  233.499419][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  233.502348][    C0] page dumped because: kasan: bad access detected
[  233.504277][    C0] page_owner tracks the page as allocated
[  233.505939][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6233, tgid 6231 (syz.1.131), ts 75747842160, free_ts 74112925563
[  233.511700][    C0]  post_alloc_hook+0x240/0x2a0
[  233.513535][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  233.515239][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  233.516998][    C0]  alloc_pages_mpol+0x232/0x4a0
[  233.518459][    C0]  allocate_slab+0x8a/0x370
[  233.519812][    C0]  ___slab_alloc+0xbeb/0x1420
[  233.521444][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  233.523085][    C0]  xfrm_state_alloc+0x24/0x2f0
[  233.524513][    C0]  __find_acq_core+0x8a7/0x1c00
[  233.526001][    C0]  xfrm_find_acq+0x78/0xa0
[  233.527380][    C0]  pfkey_getspi+0x65d/0xee0
[  233.528726][    C0]  pfkey_sendmsg+0xbfe/0x1090
[  233.530131][    C0]  __sock_sendmsg+0x21c/0x270
[  233.531927][    C0]  ____sys_sendmsg+0x505/0x830
[  233.533721][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  233.535161][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  233.536670][    C0] page last free pid 1088 tgid 1088 stack trace:
[  233.538576][    C0]  __free_frozen_pages+0xbc4/0xd30
[  233.540145][    C0]  stack_depot_save_flags+0x436/0x860
[  233.542062][    C0]  ref_tracker_free+0xfe/0x7d0
[  233.543524][    C0]  __sk_destruct+0x3c3/0x660
[  233.544941][    C0]  sctp_endpoint_destroy_rcu+0xa1/0xf0
[  233.546675][    C0]  rcu_core+0xcab/0x1770
[  233.547975][    C0]  handle_softirqs+0x286/0x870
[  233.549438][    C0]  do_softirq+0xec/0x180
[  233.550826][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  233.552869][    C0]  nsim_dev_trap_report_work+0x7c7/0xb80
[  233.554689][    C0]  process_scheduled_works+0xae1/0x17b0
[  233.556376][    C0]  worker_thread+0x8a0/0xda0
[  233.557825][    C0]  kthread+0x711/0x8a0
[  233.559078][    C0]  ret_from_fork+0x439/0x7d0
[  233.560568][    C0]  ret_from_fork_asm+0x1a/0x30
[  233.562331][    C0] 
[  233.563069][    C0] Memory state around the buggy address:
[  233.564787][    C0]  ffff88810850d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.567217][    C0]  ffff88810850d480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.569671][    C0] >ffff88810850d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  233.572669][    C0]                                      ^
[  233.574690][    C0]  ffff88810850d580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  233.577149][    C0]  ffff88810850d600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  233.579628][    C0] ==================================================================
[  233.582690][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  233.585381][    C0] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  233.588287][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.591781][    C0] Call Trace:
[  233.593111][    C0]  <IRQ>
[  233.594113][    C0]  dump_stack_lvl+0x99/0x250
[  233.595863][    C0]  ? __asan_memcpy+0x40/0x70
[  233.597603][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.599311][    C0]  ? __pfx__printk+0x10/0x10
[  233.600871][    C0]  vpanic+0x281/0x750
[  233.602340][    C0]  ? __pfx_vpanic+0x10/0x10
[  233.603890][    C0]  ? irqentry_exit+0x74/0x90
[  233.605416][    C0]  panic+0xb9/0xc0
[  233.606821][    C0]  ? __pfx_panic+0x10/0x10
[  233.608580][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  233.610860][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.613210][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  233.615211][    C0]  check_panic_on_warn+0x89/0xb0
[  233.617162][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  233.619141][    C0]  end_report+0x78/0x160
[  233.620834][    C0]  kasan_report+0x129/0x150
[  233.622651][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  233.624668][    C0]  xfrm_state_find+0x2cf2/0x5400
[  233.626551][    C0]  ? check_noncircular+0xe0/0x160
[  233.628542][    C0]  ? validate_chain+0x897/0x2140
[  233.630475][    C0]  ? xfrm_state_find+0x1da/0x5400
[  233.632440][    C0]  ? __pfx_xfrm_state_find+0x10/0x10
[  233.634520][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  233.636866][    C0]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  233.639196][    C0]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  233.641698][    C0]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  233.643980][    C0]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  233.646370][    C0]  ? xfrm_expand_policies+0x41f/0x6a0
[  233.648480][    C0]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  233.650598][    C0]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  233.652879][    C0]  ? l3mdev_master_ifindex+0x18/0x160
[  233.654975][    C0]  ? l3mdev_master_ifindex+0x18/0x160
[  233.657038][    C0]  ? l3mdev_master_ifindex+0x18/0x160
[  233.659177][    C0]  icmp_route_lookup+0x3ab/0x870
[  233.661010][    C0]  ? __pfx_icmp_route_lookup+0x10/0x10
[  233.663068][    C0]  ? __asan_memset+0x22/0x50
[  233.664467][    C0]  ? __icmp_send+0x7ff/0x12d0
[  233.665834][    C0]  ? __icmp_send+0x7ff/0x12d0
[  233.667293][    C0]  ? __pfx___ip_options_echo+0x10/0x10
[  233.668954][    C0]  ? __icmp_send+0x1b9/0x12d0
[  233.670393][    C0]  __icmp_send+0xd0e/0x12d0
[  233.672002][    C0]  ? __icmp_send+0x1b9/0x12d0
[  233.673595][    C0]  ? __pfx___icmp_send+0x10/0x10
[  233.675029][    C0]  ? __lock_acquire+0xab9/0xd20
[  233.676721][    C0]  ? do_raw_spin_lock+0x121/0x290
[  233.678453][    C0]  ipv4_link_failure+0x64e/0xa30
[  233.680001][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  233.681591][    C0]  ? __pfx_ipv4_link_failure+0x10/0x10
[  233.683256][    C0]  ? __pfx_ipv4_link_failure+0x10/0x10
[  233.684909][    C0]  arp_error_report+0x118/0x160
[  233.686416][    C0]  neigh_invalidate+0x235/0x460
[  233.688336][    C0]  neigh_timer_handler+0x949/0x1150
[  233.690295][    C0]  call_timer_fn+0x17e/0x5f0
[  233.691824][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  233.693595][    C0]  ? call_timer_fn+0xbe/0x5f0
[  233.695003][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  233.696538][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.698129][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.699801][    C0]  ? __pfx_neigh_timer_handler+0x10/0x10
[  233.701481][    C0]  __run_timer_base+0x61a/0x860
[  233.703150][    C0]  ? ktime_get+0x3e/0x1f0
[  233.704457][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  233.706115][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  233.708022][    C0]  run_timer_softirq+0xb7/0x180
[  233.709563][    C0]  handle_softirqs+0x286/0x870
[  233.711054][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  233.712535][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  233.714205][    C0]  __irq_exit_rcu+0xca/0x1f0
[  233.715592][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  233.717255][    C0]  irq_exit_rcu+0x9/0x30
[  233.718639][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  233.720383][    C0]  </IRQ>
[  233.721544][    C0]  <TASK>
[  233.722613][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  233.724483][    C0] RIP: 0010:lock_release+0x2c5/0x3e0
[  233.726116][    C0] Code: 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 0b 2f 03 11 48 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 e9 5d fd
[  233.731907][    C0] RSP: 0018:ffffc9000320f570 EFLAGS: 00000282
[  233.733863][    C0] RAX: 2cf7a5f543370200 RBX: 0000000000000001 RCX: 2cf7a5f543370200
[  233.736343][    C0] RDX: 0000000000000000 RSI: ffffffff8dba91a8 RDI: ffffffff8be33c00
[  233.738904][    C0] RBP: ffff88810819c470 R08: 0000000000000000 R09: ffffffff823a462d
[  233.741523][    C0] R10: dffffc0000000000 R11: ffffed10221faa7b R12: 0000000000000000
[  233.744473][    C0] R13: 0000000000000000 R14: ffffffff8e13a0e0 R15: ffff88810819b980
[  233.747475][    C0]  ? shrink_kill+0x8d/0x2c0
[  233.749108][    C0]  ? shrink_kill+0x8d/0x2c0
[  233.750526][    C0]  shrink_kill+0x269/0x2c0
[  233.752193][    C0]  shrink_dentry_list+0x2e0/0x5e0
[  233.754145][    C0]  shrink_dcache_parent+0xa1/0x2c0
[  233.756012][    C0]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  233.758173][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  233.760126][    C0]  d_invalidate+0x11b/0x260
[  233.761913][    C0]  ? __pfx_d_invalidate+0x10/0x10
[  233.763878][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  233.765895][    C0]  proc_invalidate_siblings_dcache+0x3d3/0x6c0
[  233.768285][    C0]  ? proc_invalidate_siblings_dcache+0x2b/0x6c0
[  233.770692][    C0]  release_task+0x1306/0x17f0
[  233.772532][    C0]  ? wait_consider_task+0x1944/0x2e10
[  233.774657][    C0]  ? __pfx_release_task+0x10/0x10
[  233.776649][    C0]  ? __do_wait+0x153/0x740
[  233.778423][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.780460][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.782522][    C0]  wait_consider_task+0x1944/0x2e10
[  233.784578][    C0]  ? __do_wait+0x153/0x740
[  233.786334][    C0]  ? __pfx_wait_consider_task+0x10/0x10
[  233.788467][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.790511][    C0]  __do_wait+0x153/0x740
[  233.792209][    C0]  do_wait+0x1f8/0x520
[  233.793842][    C0]  ? do_wait+0x18e/0x520
[  233.795548][    C0]  kernel_wait4+0x1af/0x280
[  233.797355][    C0]  ? __pfx_kernel_wait4+0x10/0x10
[  233.799324][    C0]  ? restore_signal_shadow_stack+0x3b7/0x480
[  233.801675][    C0]  ? __pfx_child_wait_callback+0x10/0x10
[  233.803848][    C0]  __x64_sys_wait4+0x133/0x1e0
[  233.805766][    C0]  ? __pfx___x64_sys_wait4+0x10/0x10
[  233.807827][    C0]  ? do_syscall_64+0xbe/0x3b0
[  233.809680][    C0]  do_syscall_64+0xfa/0x3b0
[  233.811500][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.813575][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.815955][    C0]  ? exc_page_fault+0x9f/0xf0
[  233.817781][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.820086][    C0] RIP: 0033:0x7f563e184e97
[  233.821852][    C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 45 1b 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 95 1b 03 00 8b 44
[  233.829263][    C0] RSP: 002b:00007ffd889c6a70 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[  233.832519][    C0] RAX: ffffffffffffffda RBX: 0000000000000b35 RCX: 00007f563e184e97
[  233.835614][    C0] RDX: 0000000040000001 RSI: 00007ffd889c6adc RDI: 00000000ffffffff
[  233.838698][    C0] RBP: 00007ffd889c6adc R08: 0000000000000000 R09: 0000000000000000
[  233.841764][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  233.844846][    C0] R13: 00000000000927c0 R14: 0000000000038e44 R15: 00007ffd889c6b30
[  233.847893][    C0]  </TASK>
[  233.849824][    C0] Kernel Offset: disabled
[  233.851559][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:22:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006710
R8 =ffff888021650237 R9 =1ffff110042ca046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008f9 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558eec8500 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558c18a000 CR3=000000010556a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f563e212e7b
XMM06=0000000000000000 00007f563e212e75 XMM07=0000000000000000 00007f563e212e89
XMM08=0000000000000000 00007f563e212f0f XMM09=0000000000000000 00007f563e212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00007f830f6d0348 RBX=00007f830f6a0e10 RCX=ffffffff821105d6 RDX=ffffffff821005c4
RSI=ffffffff82110137 RDI=00007f830f7016c0 RBP=00007f830f663178 RSP=00007ffc05f1cc50
R8 =00007f830f6b2418 R9 =00007f830fbc2000 R10=00007f830f3ff008 R11=0000000000000001
R12=00007f830f663170 R13=000000000000001d R14=00007ffc05f1ce38 R15=00007f830f3ff008
RIP=00007f830f868044 RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555594560500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f83108d6fc8 CR3=000000011f115000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff82110137 ffffffff821100ff XMM01=ffffffff821100ff ffffffff82110137
XMM02=ffffffff823c90b4 ffffffff82110137 XMM03=ffffffff823c9a9d ffffffff823c913c
XMM04=ffffffff823c9c04 ffffffff823c9a9d XMM05=ffffffff823c913c ffffffff823c90b4
XMM06=ffffffff823c8df2 ffffffff823c8d9e XMM07=ffffffff82393675 ffffffff82393628
XMM08=0000000000000000 00007f830fa12f0f XMM09=0000000000000000 00007f830fa12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
