last executing test programs:

1.177675256s ago: executing program 0 (id=3363):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)

1.118621681s ago: executing program 0 (id=3365):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040)
recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$AUDIT_USER_TTY(r8, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r9, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

419.626905ms ago: executing program 2 (id=3374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4}}}}, 0x30}}, 0x2c040090)

307.117781ms ago: executing program 2 (id=3376):
r0 = socket(0x1, 0x803, 0x0)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0)

307.00258ms ago: executing program 1 (id=3377):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x4000100)
listen(r0, 0x8)

306.614838ms ago: executing program 2 (id=3378):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=@ipv6_newroute={0x2c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x6}, [@RTA_EXPIRES={0x8, 0x17, 0x7}, @RTA_PRIORITY={0x8, 0x6, 0x4}]}, 0x2c}}, 0x0)

229.500371ms ago: executing program 2 (id=3379):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x3fff, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x68}}, 0x20040000)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000111401a78cbd68edbe2f500008"], 0x20}}, 0x0)

229.329691ms ago: executing program 1 (id=3380):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="89000000150081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

229.09044ms ago: executing program 2 (id=3381):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000cc0)=@framed, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0xfffffffd, 0x0, 0x200}, 0x10}, 0x94)

224.895196ms ago: executing program 0 (id=3382):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000000009140007800800114000080000050015000c000000050005000a000000050001000700000005000400000000000900020073797a320000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0)

177.089959ms ago: executing program 2 (id=3383):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x20050800)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r4, &(0x7f00000000c0), 0x9)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})
sendfile(r4, r3, 0x0, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000008540000022000000850000008b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_int(r3, &(0x7f0000000140)='net_cls.classid\x00', 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x74}}}, 0x90)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=<r9=>0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r9, 0x0, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x8, 0x7, {0x20, 0x8, 0x2, 0xff, 0x1263eb7}, [0x9, 0x3, 0x5, 0x7ff, 0x309, 0x9]}}, @name="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"})
ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f00000006c0)={<r10=>0x0, "2c1a2c3c689e1c386c681447aeaf524e"})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f00000016c0)={{r8}, r9, 0x16, @unused=[0xfffffffffffffff7, 0x5, 0x8, 0x8], @devid=r10})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000006c0)={<r11=>0x0, 0x7, 0x4a2, 0x1})
ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000ac0)={{r0}, r9, 0x8, @unused=[0x54, 0xffffffffffffff04, 0xb73d, 0xfffffffffffffffb], @devid=r11})
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x3)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8000)
socket$kcm(0x2, 0x3, 0x2)
r12 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

176.888086ms ago: executing program 1 (id=3384):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="96f5aa72", 0x4}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x0)

109.53175ms ago: executing program 1 (id=3385):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x1000)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)

109.249307ms ago: executing program 0 (id=3386):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0)

49.264745ms ago: executing program 1 (id=3387):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113700000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
unshare(0x400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90)

49.085515ms ago: executing program 0 (id=3388):
unshare(0x6020480)
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, 0x0, 0x0, 0x0)

48.815661ms ago: executing program 0 (id=3389):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e80)={'ip_vti0\x00', &(0x7f0000000dc0)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x2, 0x5, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x68, 0x0, 0xa, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3d}}}}})

0s ago: executing program 1 (id=3390):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:47727' (ED25519) to the list of known hosts.
syzkaller login: [   55.980182][ T5829] cgroup: Unknown subsys name 'net'
[   56.088104][ T5829] cgroup: Unknown subsys name 'cpuset'
[   56.091960][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.425883][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.404412][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.408660][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.412240][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.427337][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.435745][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.435920][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.446339][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.464273][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.468246][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.471755][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.472205][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.477521][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.487099][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.489694][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.492325][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.724228][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   61.848202][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   61.887576][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   61.916724][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.919834][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.924103][ T5853] bridge_slave_0: entered allmulticast mode
[   61.928741][ T5853] bridge_slave_0: entered promiscuous mode
[   61.955047][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.957834][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.960482][ T5853] bridge_slave_1: entered allmulticast mode
[   61.964251][ T5853] bridge_slave_1: entered promiscuous mode
[   62.027532][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.066522][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.070193][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.072845][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.076272][ T5844] bridge_slave_0: entered allmulticast mode
[   62.079828][ T5844] bridge_slave_0: entered promiscuous mode
[   62.083623][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.086169][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.088452][ T5844] bridge_slave_1: entered allmulticast mode
[   62.091235][ T5844] bridge_slave_1: entered promiscuous mode
[   62.104870][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.107896][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.110675][ T5848] bridge_slave_0: entered allmulticast mode
[   62.113473][ T5848] bridge_slave_0: entered promiscuous mode
[   62.150211][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.152559][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.155833][ T5848] bridge_slave_1: entered allmulticast mode
[   62.158777][ T5848] bridge_slave_1: entered promiscuous mode
[   62.173487][ T5853] team0: Port device team_slave_0 added
[   62.190864][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.204592][ T5853] team0: Port device team_slave_1 added
[   62.220475][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.227667][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.265688][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.270486][ T5844] team0: Port device team_slave_0 added
[   62.286661][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.289469][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.299916][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.306408][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.308934][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.319399][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.326134][ T5844] team0: Port device team_slave_1 added
[   62.339719][ T5848] team0: Port device team_slave_0 added
[   62.357704][ T5848] team0: Port device team_slave_1 added
[   62.397995][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.400683][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.411991][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.417692][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.420378][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.429256][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.443580][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.446396][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.458033][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.462983][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.465935][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.475632][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.483340][ T5853] hsr_slave_0: entered promiscuous mode
[   62.486670][ T5853] hsr_slave_1: entered promiscuous mode
[   62.565224][ T5844] hsr_slave_0: entered promiscuous mode
[   62.567494][ T5844] hsr_slave_1: entered promiscuous mode
[   62.569639][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   62.571801][ T5844] Cannot create hsr debugfs directory
[   62.591744][ T5848] hsr_slave_0: entered promiscuous mode
[   62.594126][ T5848] hsr_slave_1: entered promiscuous mode
[   62.596400][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   62.598688][ T5848] Cannot create hsr debugfs directory
[   62.849795][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.859127][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.867309][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.887672][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.931439][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.951265][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.957641][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.963751][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.023016][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.039023][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.051312][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.061782][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.144642][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.171836][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.187855][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   63.198522][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.201114][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.221005][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   63.233602][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.236531][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.242166][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.244839][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.257324][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.260258][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.268174][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.282159][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.286471][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.320124][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   63.336255][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.339182][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.359730][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.362713][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.448967][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.517521][ T5851] Bluetooth: hci0: command tx timeout
[   63.520663][ T5236] Bluetooth: hci2: command tx timeout
[   63.522972][ T5236] Bluetooth: hci1: command tx timeout
[   63.529180][ T5853] veth0_vlan: entered promiscuous mode
[   63.555507][ T5853] veth1_vlan: entered promiscuous mode
[   63.608814][ T5853] veth0_macvtap: entered promiscuous mode
[   63.617768][ T5853] veth1_macvtap: entered promiscuous mode
[   63.622649][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.630091][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.649350][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.660041][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.682717][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.688173][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.691675][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.708099][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.721313][ T5848] veth0_vlan: entered promiscuous mode
[   63.751421][ T5844] veth0_vlan: entered promiscuous mode
[   63.758546][ T5848] veth1_vlan: entered promiscuous mode
[   63.771789][ T5844] veth1_vlan: entered promiscuous mode
[   63.835842][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.839155][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.839697][ T5844] veth0_macvtap: entered promiscuous mode
[   63.854802][ T5844] veth1_macvtap: entered promiscuous mode
[   63.859985][ T5848] veth0_macvtap: entered promiscuous mode
[   63.876826][ T5848] veth1_macvtap: entered promiscuous mode
[   63.889484][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.892717][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.897277][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.904719][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.909862][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.916847][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.927509][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.930499][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.939149][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.968702][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.978291][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.982237][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.994038][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.006995][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.010531][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.103390][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.110594][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.150125][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.152986][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.214162][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.222352][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.260257][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.266813][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.530601][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'.
[   64.546174][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'.
[   64.724403][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   64.728697][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'.
[   64.856937][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.912081][ T5953] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   64.917576][ T5953] netlink: 128 bytes leftover after parsing attributes in process `syz.2.22'.
[   64.921196][ T5953] netlink: 'syz.2.22': attribute type 2 has an invalid length.
[   64.925977][ T5953] netlink: 'syz.2.22': attribute type 1 has an invalid length.
[   65.287801][ T5970] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.599148][ T5236] Bluetooth: hci1: command tx timeout
[   65.601419][ T5851] Bluetooth: hci0: command tx timeout
[   65.603636][ T5851] Bluetooth: hci2: command tx timeout
[   65.844838][ T6012] IPv6: addrconf: prefix option has invalid lifetime
[   65.848057][ T6012] IPv6: addrconf: prefix option has invalid lifetime
[   65.850741][ T6012] IPv6: addrconf: prefix option has invalid lifetime
[   65.992781][ T6025] netlink: 'syz.0.52': attribute type 5 has an invalid length.
[   66.039670][ T6027] netlink: 'syz.1.51': attribute type 6 has an invalid length.
[   66.291532][ T6042] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[   66.462927][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'.
[   66.468917][ T6055] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   66.474185][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.624266][ T6066] netlink: 'syz.2.68': attribute type 4 has an invalid length.
[   66.641348][ T6066] netlink: 'syz.2.68': attribute type 4 has an invalid length.
[   66.701426][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'.
[   66.794366][ T6076] ieee802154 phy0 wpan0: encryption failed: -22
[   67.389130][ T6104] syz.0.84 uses obsolete (PF_INET,SOCK_PACKET)
[   67.455417][ T6104] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.463557][ T6104] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.675917][ T5851] Bluetooth: hci2: command tx timeout
[   67.678193][ T5851] Bluetooth: hci1: command tx timeout
[   67.680481][ T5851] Bluetooth: hci0: command tx timeout
[   68.579148][ T5911] IPVS: starting estimator thread 0...
[   68.686498][ T6164] IPVS: using max 57 ests per chain, 136800 per kthread
[   69.757610][ T5236] Bluetooth: hci0: command tx timeout
[   69.759933][ T5236] Bluetooth: hci1: command tx timeout
[   69.762136][ T5236] Bluetooth: hci2: command tx timeout
[   69.919724][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.142'.
[   70.064262][ T6257] netlink: 'syz.0.145': attribute type 31 has an invalid length.
[   71.280080][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.282744][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.407800][ T6364] sctp: [Deprecated]: syz.0.196 (pid 6364) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.407800][ T6364] Use struct sctp_sack_info instead
[   71.576743][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'.
[   71.702328][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'.
[   71.833747][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'.
[   71.850738][ T6386] pim6reg: entered allmulticast mode
[   71.855973][ T6386] pim6reg: left allmulticast mode
[   72.180830][ T6404] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   72.227255][ T6408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.217'.
[   72.577816][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.226'.
[   72.749882][ T6436] netlink: 172 bytes leftover after parsing attributes in process `syz.0.230'.
[   72.848121][ T6443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.851574][ T6443] IPv6: NLM_F_CREATE should be set when creating new route
[   72.885170][ T6443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   72.959615][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.236'.
[   73.139072][ T6462] netlink: 'syz.2.242': attribute type 10 has an invalid length.
[   73.142374][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.242'.
[   73.147184][ T6462] dummy0: entered promiscuous mode
[   73.149741][ T6462] dummy0: entered allmulticast mode
[   73.154026][ T6462] bridge0: port 3(dummy0) entered blocking state
[   73.158327][ T6462] bridge0: port 3(dummy0) entered disabled state
[   73.163205][ T6462] bridge0: port 3(dummy0) entered blocking state
[   73.166887][ T6462] bridge0: port 3(dummy0) entered forwarding state
[   73.186311][ T6460] netlink: 36 bytes leftover after parsing attributes in process `syz.0.238'.
[   73.476894][ T6475] nbd: couldn't find device at index 536870912
[   73.732806][ T6485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.769707][ T6490] netlink: 'syz.2.255': attribute type 12 has an invalid length.
[   73.817879][ T6485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.910539][ T6485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.969578][ T6494] netlink: 'syz.2.257': attribute type 1 has an invalid length.
[   73.998776][ T6498] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   74.014072][ T6485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.148168][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.171301][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.174361][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.189759][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.213285][ T6514] C: renamed from lo (while UP)
[   74.222472][ T6514] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   74.274370][ T6519] Zero length message leads to an empty skb
[   74.370666][ T6524] tipc: Started in network mode
[   74.372417][ T6524] tipc: Node identity d6a408c7e27d, cluster identity 4711
[   74.377304][ T6524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.385227][ T6524] syzkaller0: entered promiscuous mode
[   74.386983][ T6524] syzkaller0: entered allmulticast mode
[   74.413587][ T6524] tipc: Resetting bearer <eth:syzkaller0>
[   74.425883][ T6523] tipc: Resetting bearer <eth:syzkaller0>
[   74.441022][ T6523] tipc: Disabling bearer <eth:syzkaller0>
[   74.610805][ T6541] vlan0: entered promiscuous mode
[   74.619243][ T6541] team0: Port device vlan0 added
[   74.698623][ T6548] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   74.708800][ T6551] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   75.199228][ T6592] __nla_validate_parse: 4 callbacks suppressed
[   75.199238][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'.
[   75.642060][ T6629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.312'.
[   75.792450][ T6643] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[   75.974780][ T6654] bridge0: port 3(dummy0) entered disabled state
[   75.977732][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.981427][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.165611][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.192777][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.359349][ T6674] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.369663][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.373420][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.390692][ T6674] syz_tun: entered promiscuous mode
[   76.394838][ T6674] syz_tun: left promiscuous mode
[   76.421697][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.429011][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.685383][ T6654] syz.2.319 (6654) used greatest stack depth: 19864 bytes left
[   76.699093][ T6697] netlink: 'syz.0.336': attribute type 83 has an invalid length.
[   76.771438][ T6699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.339'.
[   77.067787][ T6718] netlink: 216 bytes leftover after parsing attributes in process `syz.1.348'.
[   77.071667][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.348'.
[   77.081629][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'.
[   77.101696][ T6718] netlink: 'syz.1.348': attribute type 4 has an invalid length.
[   77.185421][ T6728] Bluetooth: MGMT ver 1.23
[   77.360554][ T6747] veth1_to_team: entered allmulticast mode
[   77.778469][ T6780] netlink: 'syz.2.375': attribute type 2 has an invalid length.
[   77.789877][ T6782] tipc: Started in network mode
[   77.792002][ T6782] tipc: Node identity ac14140f, cluster identity 4711
[   77.796271][ T6782] tipc: New replicast peer: 255.255.255.255
[   77.800000][ T6782] tipc: Enabled bearer <udp:syz2>, priority 10
[   77.993264][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.386'.
[   78.580391][ T6825] syzkaller0: entered promiscuous mode
[   78.582550][ T6825] syzkaller0: entered allmulticast mode
[   78.916752][  T975] tipc: Node number set to 2886997007
[   79.407526][ T6840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.410329][ T6841] syzkaller0: entered promiscuous mode
[   79.413193][ T6841] syzkaller0: entered allmulticast mode
[   79.421327][ T6849] tipc: Resetting bearer <eth:syzkaller0>
[   79.444527][ T6837] tipc: Resetting bearer <eth:syzkaller0>
[   79.461791][ T6837] tipc: Disabling bearer <eth:syzkaller0>
[   80.062428][ T6888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.418'.
[   80.250050][ T6896] netlink: 'syz.1.421': attribute type 32 has an invalid length.
[   80.253296][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'.
[   80.264823][ T6896] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   80.442077][ T6908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.456390][ T6908] syzkaller0: entered promiscuous mode
[   80.458756][ T6908] syzkaller0: entered allmulticast mode
[   80.498141][ T6912] netlink: 'syz.0.429': attribute type 11 has an invalid length.
[   80.506392][ T6908] tipc: Resetting bearer <eth:syzkaller0>
[   80.512560][ T6905] tipc: Resetting bearer <eth:syzkaller0>
[   80.532971][ T6905] tipc: Disabling bearer <eth:syzkaller0>
[   80.619548][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'.
[   80.661029][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'.
[   80.664622][ T6923] netlink: 84 bytes leftover after parsing attributes in process `syz.0.435'.
[   80.693204][ T6924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'.
[   81.044470][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.448'.
[   81.219585][ T6962] pimreg: tun_chr_ioctl cmd 2147767506
[   81.229298][ T6964] tipc: Started in network mode
[   81.231388][ T6964] tipc: Node identity f2aa124e5f93, cluster identity 4711
[   81.234324][ T6964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.248114][ T6964] syzkaller0: entered promiscuous mode
[   81.250485][ T6964] syzkaller0: entered allmulticast mode
[   81.269447][ T6964] tipc: Resetting bearer <eth:syzkaller0>
[   81.276068][ T6963] tipc: Resetting bearer <eth:syzkaller0>
[   81.287807][ T6963] tipc: Disabling bearer <eth:syzkaller0>
[   81.348245][ T6967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.439780][ T6971] bridge0: entered allmulticast mode
[   81.451114][ T6971] pim6reg: entered allmulticast mode
[   81.635404][ T6983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.639530][ T6983] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.644229][ T6983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.649371][ T6983] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.449107][ T7020] netlink: 'syz.1.476': attribute type 1 has an invalid length.
[   82.940969][ T7031] netlink: 'syz.2.481': attribute type 1 has an invalid length.
[   82.944291][ T7034] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   82.952537][ T7034] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   83.183526][ T7050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.300735][ T7058] bridge2: the hash_elasticity option has been deprecated and is always 16
[   83.303716][ T7058] bridge2: entered allmulticast mode
[   83.483054][ T7068] netlink: 27 bytes leftover after parsing attributes in process `syz.1.498'.
[   83.947346][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'.
[   84.395356][   T96] cfg80211: failed to load regulatory.db
[   85.156189][ T7124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.523'.
[   85.333906][ T7141] gretap2: entered promiscuous mode
[   85.345642][ T7141] gretap2: entered allmulticast mode
[   85.423116][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'.
[   85.517758][ T7157] netlink: 27 bytes leftover after parsing attributes in process `syz.0.536'.
[   85.560995][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'.
[   85.673235][ T7175] netlink: 1 bytes leftover after parsing attributes in process `syz.1.544'.
[   85.852721][ T7194] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   85.900624][ T7194] bond2: entered promiscuous mode
[   85.910252][ T7194] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.942097][ T7201] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.946561][ T7201] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   85.950839][ T7201] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   85.959229][ T7201] bond2: (slave vxcan3): making interface the new active one
[   85.962402][ T7201] vxcan3: entered promiscuous mode
[   85.967069][ T7201] bond2: (slave vxcan3): Enslaving as an active interface with an up link
[   86.102754][ T7213] netlink: 'syz.2.559': attribute type 7 has an invalid length.
[   86.107554][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'.
[   86.149880][ T7217] netlink: 156 bytes leftover after parsing attributes in process `syz.1.561'.
[   86.417474][ T7232] netlink: 'syz.0.567': attribute type 1 has an invalid length.
[   86.420768][ T7232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'.
[   86.501494][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'.
[   86.613512][ T7245] netlink: 'syz.2.573': attribute type 3 has an invalid length.
[   86.618342][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'.
[   86.632090][ T7245] netlink: 'syz.2.573': attribute type 3 has an invalid length.
[   86.643055][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'.
[   87.032908][ T7270] erspan0: entered promiscuous mode
[   87.040989][ T7270] erspan0: left promiscuous mode
[   87.170432][ T7278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.173098][ T7278] syzkaller0: entered promiscuous mode
[   87.175889][ T7278] syzkaller0: entered allmulticast mode
[   87.194767][ T7278] tipc: Resetting bearer <eth:syzkaller0>
[   87.199944][ T7277] tipc: Resetting bearer <eth:syzkaller0>
[   87.211725][ T7277] tipc: Disabling bearer <eth:syzkaller0>
[   88.836703][ T7338] "syz.2.602" (7338) uses obsolete ecb(arc4) skcipher
[   89.651478][ T7409] sctp: [Deprecated]: syz.2.618 (pid 7409) Use of int in max_burst socket option deprecated.
[   89.651478][ T7409] Use struct sctp_assoc_value instead
[   89.839599][ T7430] IPv6: sit1: Disabled Multicast RS
[   90.000390][ T7448] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   90.574747][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.579405][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.590675][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.594492][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.704077][ T7508] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   90.798659][ T7511] netlink: set zone limit has 4 unknown bytes
[   90.859974][ T7520] netlink: 'syz.0.662': attribute type 32 has an invalid length.
[   91.022493][ T7540] Bluetooth: MGMT ver 1.23
[   91.527936][ T7568] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[   91.531253][ T7568] __nla_validate_parse: 3 callbacks suppressed
[   91.531264][ T7568] netlink: 224 bytes leftover after parsing attributes in process `syz.2.675'.
[   91.712410][ T7575] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'.
[   92.226299][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'.
[   92.529765][ T7600] netlink: 'syz.2.692': attribute type 62 has an invalid length.
[   92.604734][ T7605] netlink: 'syz.2.694': attribute type 21 has an invalid length.
[   92.609848][ T7605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.694'.
[   92.900606][ T7621] netlink: 40 bytes leftover after parsing attributes in process `syz.2.702'.
[   93.683328][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'.
[   93.799580][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'.
[   93.882325][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.897373][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.905563][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.915141][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.014567][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'.
[   94.228337][ T7708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.741'.
[   94.382575][ T7716] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.745'.
[   94.504486][ T7726] syz_tun: entered allmulticast mode
[   94.509022][ T7725] syz_tun: left allmulticast mode
[   95.437454][ T5908] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.452796][ T5908] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.461321][ T5908] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.471439][ T5908] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.639107][ T7755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.642371][ T7755] syzkaller0: entered promiscuous mode
[   95.644728][ T7755] syzkaller0: entered allmulticast mode
[   95.676391][ T7755] tipc: Resetting bearer <eth:syzkaller0>
[   95.683964][ T7753] tipc: Resetting bearer <eth:syzkaller0>
[   95.702940][ T7753] tipc: Disabling bearer <eth:syzkaller0>
[   96.388483][ T7827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.397707][ T7827] syzkaller0: entered promiscuous mode
[   96.400045][ T7827] syzkaller0: entered allmulticast mode
[   96.423047][ T7827] tipc: Resetting bearer <eth:syzkaller0>
[   96.429730][ T7826] tipc: Resetting bearer <eth:syzkaller0>
[   96.441214][ T7826] tipc: Disabling bearer <eth:syzkaller0>
[   96.619180][ T7835] __nla_validate_parse: 2 callbacks suppressed
[   96.619194][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'.
[   96.850826][ T7853] netlink: 'syz.0.810': attribute type 1 has an invalid length.
[   96.853539][ T7853] netlink: 'syz.0.810': attribute type 3 has an invalid length.
[   96.857204][ T7853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.810'.
[   96.948206][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.815'.
[   96.952114][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.815'.
[   97.277853][ T7886] vlan3: entered promiscuous mode
[   97.280534][ T7886] macvtap0: entered promiscuous mode
[   97.390873][ T7900] netlink: 'syz.2.831': attribute type 3 has an invalid length.
[   97.401134][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'.
[   97.420660][ T7902] netlink: 'syz.0.832': attribute type 1 has an invalid length.
[   97.423266][ T7902] netlink: 228 bytes leftover after parsing attributes in process `syz.0.832'.
[   97.530064][ T7916] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   97.612189][ T7928] netlink: 87 bytes leftover after parsing attributes in process `syz.0.845'.
[   97.827490][ T7951] netlink: 96 bytes leftover after parsing attributes in process `syz.0.855'.
[   97.928706][ T7963] team0: entered promiscuous mode
[   97.930903][ T7963] team_slave_0: entered promiscuous mode
[   97.933321][ T7963] team_slave_1: entered promiscuous mode
[   97.936631][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'.
[   98.017719][ T7963] team0 (unregistering): left promiscuous mode
[   98.020521][ T7963] team_slave_0: left promiscuous mode
[   98.022882][ T7963] team_slave_1: left promiscuous mode
[   98.031616][ T7963] team0 (unregistering): Port device team_slave_0 removed
[   98.036102][ T7963] team0 (unregistering): Port device team_slave_1 removed
[   98.040459][ T7963] team0 (unregistering): Port device vlan0 removed
[   98.820564][ T7979] IPv6: NLM_F_CREATE should be specified when creating new route
[   99.057540][ T7988] netlink: 'syz.2.870': attribute type 10 has an invalid length.
[   99.061260][ T7988] dummy0: left allmulticast mode
[   99.072262][ T7988] dummy0: left promiscuous mode
[   99.074171][ T7988] bridge0: port 3(dummy0) entered disabled state
[   99.081252][ T7988] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   99.222447][ T8002] erspan0: entered promiscuous mode
[   99.260724][ T8006] netlink: 'syz.0.881': attribute type 6 has an invalid length.
[   99.263458][ T8006] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.881'.
[   99.320177][ T8012] netlink: 'syz.1.884': attribute type 28 has an invalid length.
[   99.333519][ T8014] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   99.343526][ T8014] bridge_slave_0: left allmulticast mode
[   99.346191][ T8014] bridge_slave_0: left promiscuous mode
[   99.348896][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.354842][ T8014] bridge_slave_1: left allmulticast mode
[   99.358023][ T8014] bridge_slave_1: left promiscuous mode
[   99.360613][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.369217][ T8014] bond0: (slave bond_slave_0): Releasing backup interface
[   99.374360][ T8014] bond0: (slave bond_slave_1): Releasing backup interface
[   99.447716][ T8022] netlink: 'syz.0.885': attribute type 10 has an invalid length.
[   99.451009][ T8022] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   99.458042][ T8022] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   99.472409][ T8014] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.476879][ T8014] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.535656][ T8026] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.538469][ T8026] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.607537][ T8026] veth1_to_team: left allmulticast mode
[   99.620171][ T8026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.627637][ T8026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.716973][ T8026] bridge2: left allmulticast mode
[   99.719590][ T8026] gretap2: left promiscuous mode
[   99.721643][ T8026] gretap2: left allmulticast mode
[   99.730586][ T8026] bond2: left promiscuous mode
[   99.732643][ T8026] vxcan3: left promiscuous mode
[   99.759718][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.763210][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.768808][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.772417][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.882791][ T8036] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  100.201819][ T8014] syz.0.885 (8014) used greatest stack depth: 19128 bytes left
[  100.310781][ T8077] netlink: 'syz.0.913': attribute type 4 has an invalid length.
[  100.739528][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.743092][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.748247][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.751255][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.043365][ T8111] trusted_key: syz.2.927 sent an empty control message without MSG_MORE.
[  101.202791][ T8117] netlink: 'syz.1.930': attribute type 1 has an invalid length.
[  101.236710][ T8117] nbd: socks must be embedded in a SOCK_ITEM attr
[  101.240232][ T8117] block nbd1: shutting down sockets
[  101.699959][ T8156] __nla_validate_parse: 9 callbacks suppressed
[  101.699976][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'.
[  101.717528][ T8158] netlink: 596 bytes leftover after parsing attributes in process `syz.0.950'.
[  101.727041][ T8156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.046350][ T8181] netlink: 248 bytes leftover after parsing attributes in process `syz.0.958'.
[  102.063081][ T8181] netlink: 48 bytes leftover after parsing attributes in process `syz.0.958'.
[  102.078145][ T8181] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.085886][ T8181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.228143][ T8197] validate_nla: 1 callbacks suppressed
[  102.228155][ T8197] netlink: 'syz.0.967': attribute type 1 has an invalid length.
[  102.258230][ T8197] 8021q: adding VLAN 0 to HW filter on device bond1
[  102.287670][ T8197] bond1: (slave gretap1): making interface the new active one
[  102.295482][ T8197] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  102.339904][ T8197] syz.0.967 (8197) used greatest stack depth: 18896 bytes left
[  102.472022][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.976'.
[  102.542244][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.980'.
[  102.568049][ T8227] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[  102.588573][ T8227] gretap2: entered promiscuous mode
[  102.592200][ T8227] bond2: (slave gretap2): making interface the new active one
[  102.596072][ T8227] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  102.607539][ T8230] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.611519][ T8230] syzkaller0: entered promiscuous mode
[  102.613604][ T8230] syzkaller0: entered allmulticast mode
[  102.617856][ T8227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'.
[  102.629099][ T8227] 8021q: adding VLAN 0 to HW filter on device bond2
[  102.634799][ T8230] tipc: Resetting bearer <eth:syzkaller0>
[  102.641922][ T8229] tipc: Resetting bearer <eth:syzkaller0>
[  102.661551][ T8229] tipc: Disabling bearer <eth:syzkaller0>
[  102.740579][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'.
[  102.749568][ T8238] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.986'.
[  102.788764][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.0.988'.
[  102.808783][ T8244] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  102.812401][ T8244] batadv_slave_0: entered promiscuous mode
[  102.818201][ T8244] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  102.821535][ T8244] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  102.829065][ T8244] hsr1: entered promiscuous mode
[  103.798137][   T24] IPVS: starting estimator thread 0...
[  103.885142][ T8279] IPVS: using max 44 ests per chain, 105600 per kthread
[  104.106778][ T5908] IPVS: stop unused estimator thread 0...
[  105.019042][ T8311] netlink: 'syz.2.1015': attribute type 8 has an invalid length.
[  105.222821][ T8321] bond0: invalid ARP target 0.0.0.0 specified for addition
[  105.225391][ T8321] bond0: option arp_ip_target: invalid value (0)
[  105.303133][ T8333] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  105.423162][ T8347] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  105.642612][ T8376] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  105.864868][ T8387] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.295114][ T5894] tipc: Node number set to 886638791
[  106.492560][ T8420] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  106.983341][ T8447] delete_channel: no stack
[  107.097971][ T8458] __nla_validate_parse: 10 callbacks suppressed
[  107.097987][ T8458] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1082'.
[  107.179634][ T8458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.185505][ T8458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.190389][ T8458] bond0 (unregistering): Released all slaves
[  107.214381][ T8461] tipc: Enabled bearer <ib:caif0>, priority 14
[  107.789959][ T8516] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.1111'.
[  107.832235][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1113'.
[  107.837761][ T8520] 8021q: VLANs not supported on ip_vti0
[  108.912298][ T8565] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1135'.
[  108.919391][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1135'.
[  108.925112][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1135'.
[  108.942325][ T8565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1135'.
[  109.022070][ T8574] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1138'.
[  110.095117][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1161'.
[  110.213052][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1167'.
[  111.282808][ T8698] sctp: [Deprecated]: syz.2.1196 (pid 8698) Use of int in maxseg socket option.
[  111.282808][ T8698] Use struct sctp_assoc_value instead
[  111.435388][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  111.621786][ T8736] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.710133][ T8736] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.789590][ T8736] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.816444][ T8755] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  111.819572][ T8755] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  111.836941][ T8736] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.919705][ T5859] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.942649][ T5859] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.946796][ T5859] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.957525][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.011765][ T8763] sctp: [Deprecated]: syz.2.1227 (pid 8763) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.011765][ T8763] Use struct sctp_sack_info instead
[  112.459998][ T8785] __nla_validate_parse: 4 callbacks suppressed
[  112.460016][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'.
[  113.031181][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  113.046314][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  113.054596][ T8818] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1239'.
[  113.103220][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'.
[  113.353442][ T8855] syzkaller1: tun_chr_ioctl cmd 1074025677
[  113.361243][ T8855] syzkaller1: linktype set to 6
[  113.379986][ T8857] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  113.408896][ T8857] vlan2: entered promiscuous mode
[  113.411123][ T8857] gretap0: entered promiscuous mode
[  113.417936][ T8857] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1255'.
[  114.053008][ T8922] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.062867][ T8922] syzkaller0: entered promiscuous mode
[  114.064855][ T8922] syzkaller0: entered allmulticast mode
[  114.099172][ T8922] tipc: Resetting bearer <eth:syzkaller0>
[  114.106368][ T8920] tipc: Resetting bearer <eth:syzkaller0>
[  114.121047][ T8920] tipc: Disabling bearer <eth:syzkaller0>
[  114.209670][ T8940] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1287'.
[  114.291671][ T5859] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  115.549187][ T9013] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1310'.
[  116.221725][ T9056] netlink: 'syz.0.1327': attribute type 3 has an invalid length.
[  116.447774][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.450496][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.914663][ T9107] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1349'.
[  117.841253][ T9151] netlink: 'syz.2.1358': attribute type 26 has an invalid length.
[  118.709478][ T9190] netlink: 'syz.0.1377': attribute type 1 has an invalid length.
[  119.448227][ T9243] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1401'.
[  119.486757][ T9245] netlink: 'syz.2.1402': attribute type 1 has an invalid length.
[  119.506683][ T9245] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.528989][ T9245] bond1: (slave geneve4): making interface the new active one
[  119.533694][ T9245] bond1: (slave geneve4): Enslaving as an active interface with an up link
[  119.705383][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'.
[  119.731978][ T9257] netlink: 'syz.2.1407': attribute type 3 has an invalid length.
[  119.736661][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'.
[  119.899048][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'.
[  120.392797][ T5859] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.397825][ T5859] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.418571][ T5859] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.424991][ T5859] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.463642][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1432'.
[  120.748967][ T9343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.761060][ T9343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1445'.
[  121.013907][ T9356] dummy0: entered promiscuous mode
[  121.018607][ T9356] vlan2: entered promiscuous mode
[  121.336271][ T9374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.343708][ T9374] syzkaller0: entered promiscuous mode
[  121.347461][ T9374] syzkaller0: entered allmulticast mode
[  121.356148][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.359744][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.372245][ T9374] tipc: Resetting bearer <eth:syzkaller0>
[  121.375670][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.379159][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.386175][ T9373] tipc: Resetting bearer <eth:syzkaller0>
[  121.397885][ T9373] tipc: Disabling bearer <eth:syzkaller0>
[  121.451864][ T9380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.456191][ T9380] syzkaller0: entered promiscuous mode
[  121.458803][ T9380] syzkaller0: entered allmulticast mode
[  121.489375][ T9380] tipc: Resetting bearer <eth:syzkaller0>
[  121.494236][ T9379] tipc: Resetting bearer <eth:syzkaller0>
[  121.507860][ T9379] tipc: Disabling bearer <eth:syzkaller0>
[  121.747120][ T9400] netlink: 'syz.1.1470': attribute type 1 has an invalid length.
[  121.750556][ T9400] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1470'.
[  121.928093][ T9414] team0: Device gtp0 is of different type
[  122.092667][ T9421] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1477'.
[  122.394809][ T9442] netlink: 'syz.1.1487': attribute type 1 has an invalid length.
[  122.768799][ T9467] netlink: 'syz.0.1499': attribute type 3 has an invalid length.
[  122.771723][ T9467] netlink: 'syz.0.1499': attribute type 1 has an invalid length.
[  122.775402][ T9467] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1499'.
[  122.939913][ T9486] syzkaller1: entered promiscuous mode
[  122.942970][ T9486] syzkaller1: entered allmulticast mode
[  123.249929][ T9509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.769123][ T9527] ip6gre2: entered allmulticast mode
[  124.047454][ T9548] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1535'.
[  124.744837][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'.
[  124.799322][ T9567] vlan0: left promiscuous mode
[  124.804427][ T9567] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  124.813701][ T9567] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  124.848192][ T9567] gretap2: left promiscuous mode
[  124.853430][ T9567] vlan2: left promiscuous mode
[  124.855745][ T9567] gretap0: left promiscuous mode
[  124.943827][ T9573] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.949645][ T9573] syzkaller0: entered promiscuous mode
[  124.952611][ T9573] syzkaller0: entered allmulticast mode
[  124.970208][ T9573] tipc: Resetting bearer <eth:syzkaller0>
[  124.974787][ T9572] tipc: Resetting bearer <eth:syzkaller0>
[  124.984624][ T9572] tipc: Disabling bearer <eth:syzkaller0>
[  125.183284][ T9584] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1550'.
[  125.191444][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1551'.
[  125.217370][ T9588] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1552'.
[  125.220548][ T9588] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1552'.
[  125.223685][ T9588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1552'.
[  125.231045][ T9588] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1552'.
[  125.235444][ T9588] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1552'.
[  125.239265][ T9588] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1552'.
[  125.308069][ T9596] netlink: 'syz.1.1556': attribute type 1 has an invalid length.
[  125.343294][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'.
[  125.776375][ T5851] Bluetooth: hci2: link tx timeout
[  125.779416][ T5851] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  125.899586][ T9631] netlink: 'syz.0.1569': attribute type 17 has an invalid length.
[  125.904366][ T9631] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  126.079335][ T9641] syzkaller1: entered promiscuous mode
[  126.081261][ T9641] syzkaller1: entered allmulticast mode
[  126.111847][ T9642] netlink: 'syz.1.1574': attribute type 4 has an invalid length.
[  126.302222][ T9652] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  126.340244][ T9654] netlink: 'syz.2.1581': attribute type 1 has an invalid length.
[  126.343551][ T9654] netlink: 'syz.2.1581': attribute type 4 has an invalid length.
[  126.610445][ T9685] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  127.293828][ T9670] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  127.494822][ T9713] tun0: tun_chr_ioctl cmd 1074025672
[  127.497722][ T9713] tun0: ignored: set checksum disabled
[  127.524837][ T9715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.732276][ T9727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.771696][ T9729] unsupported nlmsg_type 40
[  127.836209][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  128.021651][ T9752] netlink: 'syz.2.1625': attribute type 10 has an invalid length.
[  128.038514][ T9752] bond0: (slave dummy0): Releasing backup interface
[  128.059013][ T9752] team0: Port device dummy0 added
[  128.072453][ T9757] netlink: 'syz.2.1625': attribute type 10 has an invalid length.
[  128.092896][ T9757] team0: Port device dummy0 removed
[  128.106259][ T9757] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  128.919106][ T9807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.922363][ T9807] syzkaller0: entered promiscuous mode
[  128.924749][ T9807] syzkaller0: entered allmulticast mode
[  128.942288][ T9807] tipc: Resetting bearer <eth:syzkaller0>
[  128.948604][ T9806] tipc: Resetting bearer <eth:syzkaller0>
[  128.961250][ T9806] tipc: Disabling bearer <eth:syzkaller0>
[  129.005910][ T9811] netlink: 'syz.0.1654': attribute type 6 has an invalid length.
[  129.241244][ T9830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.246900][ T9830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.679143][ T9857] netlink: 'syz.0.1674': attribute type 10 has an invalid length.
[  129.688808][ T9857] bridge0 (unregistering): left allmulticast mode
[  130.066944][ T9899] delete_channel: no stack
[  130.114009][ T9904] __nla_validate_parse: 48 callbacks suppressed
[  130.114025][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'.
[  131.055326][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'.
[  131.230012][ T9954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.259637][ T9956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1715'.
[  131.407498][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1720'.
[  131.412488][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1720'.
[  131.813632][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'.
[  132.001216][ T9991] openvswitch: netlink: Flow key attribute not present in set flow.
[  132.015503][ T9993] batadv1: entered allmulticast mode
[  132.019090][ T9993] 8021q: adding VLAN 0 to HW filter on device batadv1
[  132.727126][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.954367][T10026] netlink: 'syz.0.1747': attribute type 10 has an invalid length.
[  132.958647][T10026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1747'.
[  132.964708][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'.
[  132.970901][T10028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.977947][T10026] dummy0: entered promiscuous mode
[  132.983301][T10026] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  132.991741][T10030] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1749'.
[  133.148244][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1757'.
[  133.279401][T10060] netlink: 'syz.1.1764': attribute type 1 has an invalid length.
[  133.307834][T10060] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.338000][T10060] vlan3: entered allmulticast mode
[  133.339858][T10060] veth1: entered allmulticast mode
[  133.342261][T10060] bond0: (slave vlan3): Opening slave failed
[  133.651876][T10081] veth0_vlan: left promiscuous mode
[  133.660663][T10081] veth0_vlan: entered promiscuous mode
[  134.740923][T10143] syzkaller1: tun_chr_ioctl cmd 1074025673
[  135.876850][T10168] __nla_validate_parse: 1 callbacks suppressed
[  135.876862][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'.
[  136.030561][T10181] netlink: 'syz.2.1813': attribute type 1 has an invalid length.
[  136.070244][T10181] 8021q: adding VLAN 0 to HW filter on device bond2
[  136.111200][T10181] bond2: (slave veth5): Enslaving as an active interface with a down link
[  136.139828][T10181] 8021q: adding VLAN 0 to HW filter on device batadv2
[  136.144516][T10181] bond2: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  137.040916][T10227] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  137.151949][T10230] netlink: 'syz.1.1833': attribute type 13 has an invalid length.
[  137.154749][T10230] netlink: 'syz.1.1833': attribute type 17 has an invalid length.
[  137.171667][T10230] erspan0: left promiscuous mode
[  137.230641][T10230] 8021q: adding VLAN 0 to HW filter on device team0
[  137.242324][T10230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.422382][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1833'.
[  137.448299][T10230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.998189][T10265] bond0: (slave bond_slave_1): Releasing backup interface
[  138.154844][T10273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.196254][T10275] netlink: 'syz.2.1854': attribute type 2 has an invalid length.
[  138.209610][T10275] : entered promiscuous mode
[  138.301412][T10281] netlink: 'syz.2.1857': attribute type 1 has an invalid length.
[  138.557002][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'.
[  138.835483][T10322] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1874'.
[  139.069122][T10345] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1882'.
[  139.590464][T10379] netlink: 'syz.2.1894': attribute type 3 has an invalid length.
[  140.036824][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1904'.
[  140.081426][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'.
[  140.085781][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'.
[  140.095265][T10409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.098807][T10409] syzkaller0: entered promiscuous mode
[  140.101174][T10409] syzkaller0: entered allmulticast mode
[  140.119915][T10409] tipc: Resetting bearer <eth:syzkaller0>
[  140.126556][T10408] tipc: Resetting bearer <eth:syzkaller0>
[  140.136255][T10408] tipc: Disabling bearer <eth:syzkaller0>
[  140.408733][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1917'.
[  140.412820][T10430] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1917'.
[  140.583036][T10435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.676596][T10451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.679678][T10451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  140.941696][T10477] netlink: 'syz.2.1936': attribute type 10 has an invalid length.
[  141.158013][T10490] __nla_validate_parse: 2 callbacks suppressed
[  141.158026][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1942'.
[  141.562394][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1957'.
[  141.792268][T10543] bridge0: entered promiscuous mode
[  141.794848][T10543] vlan3: entered promiscuous mode
[  141.942007][T10556] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  142.130241][T10572] netlink: 'syz.1.1971': attribute type 7 has an invalid length.
[  142.380258][T10595] netlink: 'syz.1.1978': attribute type 10 has an invalid length.
[  142.401257][T10595] team0: Port device dummy0 added
[  142.417604][T10595] netlink: 'syz.1.1978': attribute type 10 has an invalid length.
[  142.426017][T10595] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  142.452558][T10595] team0: Failed to send options change via netlink (err -105)
[  142.463428][T10595] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  142.467518][T10595] team0: Port device dummy0 removed
[  142.497868][T10602] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  142.511085][T10602] hsr1: left promiscuous mode
[  142.521049][T10602] batadv1: left allmulticast mode
[  142.534524][T10606] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1983'.
[  142.540246][ T5908] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.549498][ T5908] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.552829][ T5908] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.577857][ T5908] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.623840][T10616] netlink: 'syz.0.1988': attribute type 10 has an invalid length.
[  142.671413][T10622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1989'.
[  142.701625][T10622] xfrm2: entered promiscuous mode
[  142.703727][T10622] xfrm2: entered allmulticast mode
[  143.141954][T10668] GUP no longer grows the stack in syz.0.2012 (10668): 200000006000-20000000a000 (200000005000)
[  143.150770][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.0.2012 Not tainted syzkaller #0 PREEMPT(full) 
[  143.150789][T10668] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  143.150797][T10668] Call Trace:
[  143.150803][T10668]  <TASK>
[  143.150809][T10668]  dump_stack_lvl+0x189/0x250
[  143.150834][T10668]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.150850][T10668]  ? __pfx__printk+0x10/0x10
[  143.150866][T10668]  ? find_vma+0xe7/0x160
[  143.150896][T10668]  __get_user_pages+0x24d0/0x2ce0
[  143.150910][T10668]  ? __lock_acquire+0xab9/0xd20
[  143.150952][T10668]  ? __gup_longterm_locked+0xc68/0x1660
[  143.150972][T10668]  __gup_longterm_locked+0xde9/0x1660
[  143.150995][T10668]  ? try_grab_folio_fast+0x1be/0x4f0
[  143.151019][T10668]  ? gup_fast_fallback+0x195f/0x2010
[  143.151038][T10668]  gup_fast_fallback+0x1e6a/0x2010
[  143.151078][T10668]  ? __pfx_gup_fast_fallback+0x10/0x10
[  143.151093][T10668]  ? __mutex_lock+0x335/0x1360
[  143.151113][T10668]  ? futex_unqueue+0x22/0x240
[  143.151128][T10668]  ? futex_unqueue+0x22/0x240
[  143.151139][T10668]  ? futex_unqueue+0x22/0x240
[  143.151151][T10668]  ? is_valid_gup_args+0x11f/0x200
[  143.151166][T10668]  ? get_user_pages_fast+0x4d/0xb0
[  143.151182][T10668]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  143.151201][T10668]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  143.151221][T10668]  ? wait_for_space+0x24d/0x2d0
[  143.151242][T10668]  iov_iter_get_pages2+0x5e/0xa0
[  143.151260][T10668]  __se_sys_vmsplice+0x548/0x10d0
[  143.151291][T10668]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  143.151309][T10668]  ? __pfx_futex_wait+0x10/0x10
[  143.151366][T10668]  ? __lock_acquire+0xab9/0xd20
[  143.151416][T10668]  ? do_pipe2+0xf7/0x170
[  143.151438][T10668]  ? rcu_is_watching+0x15/0xb0
[  143.151455][T10668]  ? do_syscall_64+0xbe/0x3b0
[  143.151476][T10668]  do_syscall_64+0xfa/0x3b0
[  143.151493][T10668]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.151508][T10668]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.151520][T10668]  ? exc_page_fault+0x9f/0xf0
[  143.151547][T10668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.151560][T10668] RIP: 0033:0x7f7ccbd8ebe9
[  143.151575][T10668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  143.151586][T10668] RSP: 002b:00007f7cccc5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  143.151601][T10668] RAX: ffffffffffffffda RBX: 00007f7ccbfb5fa0 RCX: 00007f7ccbd8ebe9
[  143.151612][T10668] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  143.151620][T10668] RBP: 00007f7ccbe11e19 R08: 0000000000000000 R09: 0000000000000000
[  143.151628][T10668] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  143.151637][T10668] R13: 00007f7ccbfb6038 R14: 00007f7ccbfb5fa0 R15: 00007ffd8d062f58
[  143.151660][T10668]  </TASK>
[  143.265961][   T33] audit: type=1800 audit(1755599166.493:2): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2009" name="memory.events" dev="tmpfs" ino=3486 res=0 errno=0
[  143.586391][T10700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.592939][T10700] syzkaller0: entered promiscuous mode
[  143.597213][T10700] syzkaller0: entered allmulticast mode
[  143.622602][T10700] tipc: Resetting bearer <eth:syzkaller0>
[  143.635620][T10697] tipc: Resetting bearer <eth:syzkaller0>
[  143.656689][T10697] tipc: Disabling bearer <eth:syzkaller0>
[  143.865465][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2037'.
[  144.145299][T10728] block nbd1: server does not support multiple connections per device.
[  144.149024][T10728] block nbd1: shutting down sockets
[  144.437283][T10749] netlink: 'syz.2.2050': attribute type 4 has an invalid length.
[  145.335583][T10779] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2063'.
[  145.470070][T10791] netlink: 'syz.0.2070': attribute type 21 has an invalid length.
[  145.561202][T10801] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  145.599088][T10803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.687049][T10813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2081'.
[  146.557470][T10864] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2102'.
[  146.561093][T10864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'.
[  146.730981][T10874] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2107'.
[  146.734584][T10874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2107'.
[  147.217782][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2129'.
[  147.306786][T10937] vlan3: entered promiscuous mode
[  147.308795][T10937] vlan3: entered allmulticast mode
[  147.312632][T10937] hsr_slave_1: entered allmulticast mode
[  147.367121][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'.
[  147.493835][T10947] netlink: 'syz.2.2139': attribute type 1 has an invalid length.
[  147.504063][T10947] netlink: 'syz.2.2139': attribute type 1 has an invalid length.
[  147.596403][T10947] netlink: 'syz.2.2139': attribute type 1 has an invalid length.
[  147.619750][T10947] 8021q: adding VLAN 0 to HW filter on device bond3
[  147.636552][T10947] vlan2: entered allmulticast mode
[  147.638819][T10947] veth1: entered allmulticast mode
[  147.641204][T10947] bond3: (slave vlan2): Opening slave failed
[  148.163812][   T24] IPVS: starting estimator thread 0...
[  148.256520][T10984] IPVS: using max 51 ests per chain, 122400 per kthread
[  148.348433][T10994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2157'.
[  148.352334][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'.
[  148.377962][T10996] netlink: 'syz.2.2159': attribute type 30 has an invalid length.
[  148.666685][T11023] netlink: 'syz.0.2172': attribute type 1 has an invalid length.
[  148.717983][T11023] vlan3: entered allmulticast mode
[  148.719919][T11023] bond3: entered allmulticast mode
[  149.030025][T11058] netlink: 'syz.0.2187': attribute type 1 has an invalid length.
[  149.033604][T11058] netlink: 'syz.0.2187': attribute type 1 has an invalid length.
[  149.250435][T11078] netlink: 'syz.1.2197': attribute type 5 has an invalid length.
[  149.275622][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2199'.
[  149.296813][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'.
[  150.069423][T11138] bridge: RTM_NEWNEIGH with invalid state 0x8
[  152.029228][T11202] __nla_validate_parse: 3 callbacks suppressed
[  152.029238][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'.
[  152.327076][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'.
[  152.395933][T11239] netlink: 'syz.1.2271': attribute type 35 has an invalid length.
[  152.491354][T11247] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2276'.
[  153.913949][T11336] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  153.943437][T11340] netlink: 'syz.2.2309': attribute type 1 has an invalid length.
[  153.974447][T11344] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  154.002572][T11346] smc: net device bond0 applied user defined pnetid SYZ0
[  154.007072][T11346] smc: net device bond0 erased user defined pnetid SYZ0
[  154.096653][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'.
[  155.393923][T11416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2345'.
[  155.405147][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  155.788648][T11457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.792289][T11457] syzkaller0: entered promiscuous mode
[  155.794712][T11457] syzkaller0: entered allmulticast mode
[  155.824199][T11457] tipc: Resetting bearer <eth:syzkaller0>
[  155.832910][T11456] tipc: Resetting bearer <eth:syzkaller0>
[  155.854170][T11456] tipc: Disabling bearer <eth:syzkaller0>
[  156.108791][T11479] netlink: 'syz.0.2370': attribute type 3 has an invalid length.
[  156.111489][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2370'.
[  156.314828][T11496] netlink: 'syz.2.2377': attribute type 15 has an invalid length.
[  156.411806][T11501] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  156.519865][T11512] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.583979][T11512] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.677545][T11530] netlink: 'syz.0.2390': attribute type 1 has an invalid length.
[  156.680241][T11512] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.681267][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'.
[  156.752408][T11512] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  156.768145][T11534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.777875][T11534] syzkaller0: entered promiscuous mode
[  156.780279][T11534] syzkaller0: entered allmulticast mode
[  156.788445][T11534] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  156.809424][T11534] tipc: Resetting bearer <eth:syzkaller0>
[  156.840246][ T5908] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  156.849896][T11533] tipc: Resetting bearer <eth:syzkaller0>
[  156.865706][T11533] tipc: Disabling bearer <eth:syzkaller0>
[  156.907903][ T5874] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  156.911415][ T5874] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  156.939045][ T5874] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.277158][T11551] bridge0: port 3(erspan0) entered blocking state
[  157.280046][T11551] bridge0: port 3(erspan0) entered disabled state
[  157.283147][T11551] erspan0: entered allmulticast mode
[  157.290776][T11551] erspan0: entered promiscuous mode
[  157.297251][T11551] erspan0: left allmulticast mode
[  157.299400][T11551] erspan0: left promiscuous mode
[  157.302810][T11551] bridge0: port 3(erspan0) entered disabled state
[  157.384288][T11556] pim6reg0: tun_chr_ioctl cmd 1074025677
[  157.389332][T11556] pim6reg0: linktype set to 774
[  157.458520][T11564] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  157.627556][T11576] syzkaller1: entered promiscuous mode
[  157.629926][T11576] syzkaller1: entered allmulticast mode
[  157.735165][T11585] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.327881][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2436'.
[  158.987682][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'.
[  159.052925][T11698] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  159.525276][ T5236] Bluetooth: hci0: command tx timeout
[  159.553136][T11727] netlink: 'syz.2.2478': attribute type 1 has an invalid length.
[  159.556512][T11727] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2478'.
[  159.560212][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2478'.
[  159.872593][T11744] netlink: 'syz.2.2486': attribute type 8 has an invalid length.
[  159.876832][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2486'.
[  159.890121][T11744] bond0: entered promiscuous mode
[  159.891910][T11744] bond_slave_0: entered promiscuous mode
[  159.896928][T11744] bond0: left promiscuous mode
[  159.903853][T11744] bond_slave_0: left promiscuous mode
[  160.017428][T11756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2492'.
[  160.142025][T11770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.195618][T11775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2499'.
[  160.327867][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2505'.
[  160.402955][T11795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2509'.
[  160.733127][T11826] ieee802154 phy1 wpan1: encryption failed: -90
[  160.942705][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'.
[  161.681726][T11867] netlink: 'syz.1.2542': attribute type 12 has an invalid length.
[  161.947066][T11876] batadv_slave_1: entered promiscuous mode
[  161.950142][T11875] batadv_slave_1: left promiscuous mode
[  162.042764][   T33] audit: type=1107 audit(1755599185.263:3): pid=11883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  162.092931][T11890] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  162.508779][T11923] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.546430][T11923] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.603393][T11923] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.642202][T11923] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  162.701463][ T5874] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.722205][ T5874] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.738199][ T5874] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.749607][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.197811][ T5236] Bluetooth: hci2: command 0x0405 tx timeout
[  163.399145][T12001] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  163.514118][T12013] __nla_validate_parse: 3 callbacks suppressed
[  163.514136][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2610'.
[  163.550776][T12013] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  163.608432][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'.
[  163.791113][T12040] netlink: 'syz.1.2621': attribute type 21 has an invalid length.
[  163.794678][T12040] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2621'.
[  163.798953][T12040] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2621'.
[  163.903110][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2626'.
[  164.014038][T12061] tipc: Can't bind to reserved service type 1
[  164.087527][T12067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2634'.
[  164.091181][T12067] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2634'.
[  164.131300][T12071] netlink: 164548 bytes leftover after parsing attributes in process `syz.2.2636'.
[  164.176566][T12074] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2637'.
[  164.180806][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'.
[  164.468367][T12093] tc_dump_action: action bad kind
[  164.810362][T12104] pimreg: entered allmulticast mode
[  165.163875][T12118] bridge3: entered allmulticast mode
[  165.486305][T12136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.514808][T12136] syzkaller0: entered promiscuous mode
[  165.517210][T12136] syzkaller0: entered allmulticast mode
[  165.519755][T12136] tipc: Resetting bearer <eth:syzkaller0>
[  165.531396][T12135] tipc: Resetting bearer <eth:syzkaller0>
[  166.530772][T12135] tipc: Disabling bearer <eth:syzkaller0>
[  166.692071][T12169] netlink: 'syz.1.2679': attribute type 1 has an invalid length.
[  166.859572][T12192] netlink: 'syz.2.2690': attribute type 1 has an invalid length.
[  166.862884][T12192] netlink: 'syz.2.2690': attribute type 4 has an invalid length.
[  167.371976][T12240] geneve2: entered promiscuous mode
[  167.375678][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.379405][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.383039][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.395061][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.533978][T12252] IPVS: Error connecting to the multicast addr
[  168.080771][T12294] netlink: 'syz.1.2738': attribute type 303 has an invalid length.
[  168.086221][T12294] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.090577][T12294] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  169.293903][T12347] __nla_validate_parse: 11 callbacks suppressed
[  169.293921][T12347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2761'.
[  169.848617][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2779'.
[  169.951684][T12392] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  170.001878][T12392] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2782'.
[  170.092379][T12345] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  170.139735][T12404] wg0 speed is unknown, defaulting to 1000
[  170.146354][T12404] wg0 speed is unknown, defaulting to 1000
[  170.150456][T12404] wg0 speed is unknown, defaulting to 1000
[  170.322618][    T9] wg0 speed is unknown, defaulting to 1000
[  170.324849][T12404] infiniband syz2: set down
[  170.327738][T12404] infiniband syz2: added wg0
[  170.394401][T12404] RDS/IB: syz2: added
[  170.399962][T12404] smc: adding ib device syz2 with port count 1
[  170.402127][T12404] smc:    ib device syz2 port 1 has pnetid 
[  170.406394][ T5894] wg0 speed is unknown, defaulting to 1000
[  170.411078][T12404] wg0 speed is unknown, defaulting to 1000
[  170.578371][T12404] wg0 speed is unknown, defaulting to 1000
[  170.662188][T12431] delete_channel: no stack
[  170.770125][T12438] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[  170.782360][T12404] wg0 speed is unknown, defaulting to 1000
[  170.873571][T12445] netlink: 'syz.1.2804': attribute type 2 has an invalid length.
[  170.875905][ T4650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.879899][ T4650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  171.002702][T12451] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  171.190331][T12463] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2811'.
[  171.536218][T12498] syzkaller1: entered promiscuous mode
[  171.538622][T12498] syzkaller1: entered allmulticast mode
[  171.724126][T12511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.732353][T12511] syzkaller0: entered promiscuous mode
[  171.734734][T12511] syzkaller0: entered allmulticast mode
[  171.755874][T12511] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  171.762301][T12511] tipc: Resetting bearer <eth:syzkaller0>
[  171.773415][T12510] tipc: Resetting bearer <eth:syzkaller0>
[  171.800860][T12510] tipc: Disabling bearer <eth:syzkaller0>
[  171.845467][T12526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2839'.
[  171.893807][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'.
[  171.948049][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'.
[  172.127132][T12556] netlink: 'syz.1.2855': attribute type 23 has an invalid length.
[  172.163671][T12559] netlink: 'syz.0.2854': attribute type 1 has an invalid length.
[  172.208384][T12559] bond4: (slave gretap3): making interface the new active one
[  172.211669][T12559] bond4: (slave gretap3): Enslaving as an active interface with an up link
[  172.298323][T12572] netlink: 'syz.2.2861': attribute type 10 has an invalid length.
[  172.301882][T12572] veth1_macvtap: left promiscuous mode
[  172.305437][T12572] team0: Port device veth1_macvtap added
[  172.344146][T12577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2864'.
[  172.348056][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'.
[  172.427758][T12587] netlink: 'syz.1.2867': attribute type 1 has an invalid length.
[  172.467478][T12591] openvswitch: netlink: Actions may not be safe on all matching packets
[  172.584106][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2875'.
[  172.638701][T12613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.272441][T12672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.275383][T12672] syzkaller0: entered promiscuous mode
[  173.277426][T12672] syzkaller0: entered allmulticast mode
[  173.290815][T12672] tipc: Resetting bearer <eth:syzkaller0>
[  173.303039][T12670] tipc: Resetting bearer <eth:syzkaller0>
[  173.312933][T12670] tipc: Disabling bearer <eth:syzkaller0>
[  173.355454][T12679] delete_channel: no stack
[  173.399906][T12684] netlink: 'syz.2.2910': attribute type 15 has an invalid length.
[  173.402622][T12684] netlink: 'syz.2.2910': attribute type 18 has an invalid length.
[  173.798094][T12728] netlink: 'syz.1.2932': attribute type 4 has an invalid length.
[  173.907808][T12739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.910848][T12739] syzkaller0: entered promiscuous mode
[  173.912895][T12739] syzkaller0: entered allmulticast mode
[  173.946942][T12739] tipc: Resetting bearer <eth:syzkaller0>
[  173.951241][T12738] tipc: Resetting bearer <eth:syzkaller0>
[  173.965532][T12738] tipc: Disabling bearer <eth:syzkaller0>
[  174.443074][T12772] vlan0: entered promiscuous mode
[  174.609665][T12786] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf
[  174.651995][ T5874] bond0: (slave bond_slave_0): interface is now down
[  174.652514][T12786] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.655612][ T5874] bond0: (slave dummy0): interface is now down
[  174.658931][T12786] 8021q: adding VLAN 0 to HW filter on device team0
[  174.666277][T12786] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  174.677297][ T5874] bond0: (slave bond_slave_0): interface is now down
[  174.680044][ T5874] bond0: (slave dummy0): interface is now down
[  174.684821][ T5874] bond0: now running without any active interface!
[  174.822217][T12802] __nla_validate_parse: 11 callbacks suppressed
[  174.822234][T12802] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2967'.
[  174.841979][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'.
[  174.852380][T12802] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2967'.
[  174.856946][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'.
[  174.860712][T12802] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2967'.
[  174.891678][T12806] netlink: 'syz.0.2969': attribute type 31 has an invalid length.
[  175.059106][T12822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2977'.
[  175.126978][T12826] netlink: 'syz.2.2978': attribute type 96 has an invalid length.
[  175.387194][T12857] netlink: 'syz.1.2992': attribute type 1 has an invalid length.
[  175.389975][T12857] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2992'.
[  175.393242][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'.
[  175.447033][T12864] bond0: Master is either lo or non-ether device
[  175.463152][T12862] wg0 speed is unknown, defaulting to 1000
[  175.636380][T12869] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2994'.
[  175.715871][T12886] wg0 speed is unknown, defaulting to 1000
[  175.848610][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3009'.
[  176.643228][T12952] syzkaller1: entered promiscuous mode
[  176.645191][T12952] syzkaller1: entered allmulticast mode
[  177.906410][T13005] gtp0: entered promiscuous mode
[  178.118273][T13017] validate_nla: 2 callbacks suppressed
[  178.118283][T13017] netlink: 'syz.2.3062': attribute type 13 has an invalid length.
[  178.248688][T13025] syzkaller1: entered promiscuous mode
[  178.250510][T13025] syzkaller1: entered allmulticast mode
[  178.378679][T13041] netlink: 'syz.1.3071': attribute type 1 has an invalid length.
[  178.537486][T13058] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  179.065837][T13104] batman_adv: batadv0: Adding interface: ipvlan2
[  179.068429][T13104] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.100053][T13104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.103987][T13104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.117225][T13104] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  179.324319][T13126] unsupported nla_type 52263
[  179.463275][T13131] wg0 speed is unknown, defaulting to 1000
[  179.799314][T13151] netlink: set zone limit has 8 unknown bytes
[  180.404262][T13164] bridge_slave_0: left allmulticast mode
[  180.408091][T13164] bridge_slave_0: left promiscuous mode
[  180.410222][T13164] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.422059][T13164] bridge_slave_1: left allmulticast mode
[  180.424437][T13164] bridge_slave_1: left promiscuous mode
[  180.435538][T13164] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.463645][T13164] team0: Port device team_slave_0 removed
[  180.471743][T13164] team0: Port device team_slave_1 removed
[  180.486542][T13164] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.498683][T13164] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.524157][T13164] bond2: (slave vxcan3): Releasing backup interface
[  181.106244][T13192] __nla_validate_parse: 7 callbacks suppressed
[  181.106256][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'.
[  181.322692][T13200] openvswitch: netlink: Message has 16 unknown bytes.
[  181.516722][ T9569] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  181.531674][T13222] netlink: 'syz.1.3142': attribute type 1 has an invalid length.
[  181.551711][T13222] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.566223][T13222] 8021q: adding VLAN 0 to HW filter on device bond3
[  181.569716][T13222] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  181.576727][T13222] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  181.624141][T13226] bond3: (slave bridge7): Enslaving as an active interface with a down link
[  182.497256][T13271] netlink: 'syz.1.3164': attribute type 5 has an invalid length.
[  182.570551][T13276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3167'.
[  182.651872][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'.
[  182.794384][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3174'.
[  182.840559][T13290] wg0 speed is unknown, defaulting to 1000
[  182.867115][T13298] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3173'.
[  182.880132][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3173'.
[  182.961805][T13298] netlink: 'syz.0.3173': attribute type 2 has an invalid length.
[  183.090832][T13309] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.096840][T13309] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.154642][T13309] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.159393][T13309] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.213249][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3184'.
[  183.262165][T13309] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.271727][T13309] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.366772][T13309] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  183.390854][T13309] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.395620][T13326] netlink: 'syz.0.3189': attribute type 2 has an invalid length.
[  183.569210][ T5874] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.572491][ T5874] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.593195][ T5874] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.599379][ T5874] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.631314][ T5908] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.634669][ T5908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.656146][ T5908] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.659603][ T5908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.682072][T13344] syzkaller1: entered promiscuous mode
[  183.684496][T13344] syzkaller1: entered allmulticast mode
[  183.752412][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3202'.
[  183.823052][T13356] netlink: 'syz.0.3203': attribute type 1 has an invalid length.
[  183.893747][T13365] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  183.899506][T13366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3207'.
[  183.947775][T13368] bond0: (slave dummy0): Releasing backup interface
[  183.952198][T13368] bridge_slave_0: left allmulticast mode
[  183.954640][T13368] bridge_slave_0: left promiscuous mode
[  183.959895][T13368] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.978475][T13368] bridge_slave_1: left allmulticast mode
[  183.980922][T13368] bridge_slave_1: left promiscuous mode
[  183.983494][T13368] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.002478][T13368] bond0: (slave bond_slave_0): Releasing backup interface
[  184.019880][T13368] team0: Port device team_slave_0 removed
[  184.038005][T13368] team0: Port device team_slave_1 removed
[  184.040657][T13368] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.059502][T13368] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.078766][T13368] team0: Port device veth1_macvtap removed
[  184.084424][T13368] bond1: (slave geneve4): Releasing active interface
[  184.090061][T13368] bond2: (slave veth5): Releasing active interface
[  184.093924][T13368] batman_adv: batadv0: Removing interface: ipvlan2
[  184.131664][T13380] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.139001][T13380] 8021q: adding VLAN 0 to HW filter on device team0
[  184.146235][T13380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.290116][T13391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.503680][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3228'.
[  184.743078][T13431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.092237][T13457] netlink: 'syz.1.3252': attribute type 11 has an invalid length.
[  185.097898][T13457] netlink: 'syz.1.3252': attribute type 11 has an invalid length.
[  185.379940][T13460] wg0 speed is unknown, defaulting to 1000
[  185.871599][  T975] IPVS: starting estimator thread 0...
[  185.975428][T13501] IPVS: using max 78 ests per chain, 187200 per kthread
[  186.008418][ T5851] Bluetooth: hci1: command 0x0406 tx timeout
[  186.255268][T13523] netlink: 'syz.0.3279': attribute type 21 has an invalid length.
[  186.258769][T13523] __nla_validate_parse: 3 callbacks suppressed
[  186.258782][T13523] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3279'.
[  186.329938][T13527] bond0: (slave wlan1): Releasing backup interface
[  186.333977][T13527] bond0: Destroying bond
[  186.352560][T13527] bond0 (unregistering): Released all slaves
[  186.628599][T13544] netlink: 'syz.2.3289': attribute type 4 has an invalid length.
[  186.743053][T13551] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3292'.
[  187.309307][T13601] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3313'.
[  187.392338][T13608] netlink: 'syz.2.3317': attribute type 10 has an invalid length.
[  187.400810][T13608] team0: Port device dummy0 added
[  187.407931][T13608] netlink: 'syz.2.3317': attribute type 10 has an invalid length.
[  187.419416][T13608] team0: Port device dummy0 removed
[  187.424622][T13608] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  187.436367][ T9569] bond0: (slave dummy0): interface is now down
[  187.439260][ T9569] bond0: now running without any active interface!
[  187.448736][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'.
[  187.591400][T13631] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  187.641844][T13634] netlink: 'syz.1.3330': attribute type 7 has an invalid length.
[  187.653669][T13634] netlink: 'syz.1.3330': attribute type 8 has an invalid length.
[  187.737872][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'.
[  187.878983][T13661] netlink: 'syz.1.3343': attribute type 1 has an invalid length.
[  188.187623][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'.
[  188.412826][T13710] netlink: 'syz.0.3365': attribute type 10 has an invalid length.
[  188.417948][T13710] dummy0: left promiscuous mode
[  188.423568][T13710] netlink: 'syz.0.3365': attribute type 10 has an invalid length.
[  188.930247][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3370'.
[  189.073357][T13728] netlink: 276 bytes leftover after parsing attributes in process `syz.1.3375'.
[  189.159263][T13734] IPv6: Can't replace route, no match found
[  189.209014][T13738] netlink: 'syz.2.3379': attribute type 7 has an invalid length.
[  189.267528][T13744] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3383'.
[  189.521005][T13765] ==================================================================
[  189.524258][T13765] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  189.527122][T13765] Read of size 4 at addr ffff88801c356dc4 by task syz.1.3392/13765
[  189.530649][T13765] 
[  189.532052][T13765] CPU: 0 UID: 0 PID: 13765 Comm: syz.1.3392 Not tainted syzkaller #0 PREEMPT(full) 
[  189.532066][T13765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.532071][T13765] Call Trace:
[  189.532076][T13765]  <TASK>
[  189.532080][T13765]  dump_stack_lvl+0x189/0x250
[  189.532095][T13765]  ? __kasan_check_byte+0x12/0x40
[  189.532108][T13765]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.532123][T13765]  ? lock_release+0x4b/0x3e0
[  189.532136][T13765]  ? __virt_addr_valid+0x4a5/0x5c0
[  189.532147][T13765]  print_report+0xca/0x240
[  189.532156][T13765]  ? xfrm_alloc_spi+0x570/0xf30
[  189.532164][T13765]  kasan_report+0x118/0x150
[  189.532174][T13765]  ? xfrm_alloc_spi+0x570/0xf30
[  189.532183][T13765]  xfrm_alloc_spi+0x570/0xf30
[  189.532191][T13765]  ? xfrm_alloc_spi+0x2a0/0xf30
[  189.532203][T13765]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  189.532211][T13765]  ? xfrm_find_acq+0x87/0xa0
[  189.532220][T13765]  xfrm_alloc_userspi+0x70b/0xc90
[  189.532234][T13765]  ? apparmor_capable+0x137/0x1b0
[  189.532243][T13765]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  189.532251][T13765]  ? __nla_parse+0x40/0x60
[  189.532263][T13765]  xfrm_user_rcv_msg+0x7a3/0xab0
[  189.532272][T13765]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  189.532285][T13765]  ? __pfx___mutex_trylock_common+0x10/0x10
[  189.532293][T13765]  ? rcu_is_watching+0x15/0xb0
[  189.532301][T13765]  ? trace_contention_end+0x39/0x120
[  189.532308][T13765]  ? __mutex_lock+0x335/0x1360
[  189.532321][T13765]  netlink_rcv_skb+0x208/0x470
[  189.532333][T13765]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  189.532341][T13765]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  189.532352][T13765]  ? netlink_deliver_tap+0x2e/0x1b0
[  189.532363][T13765]  ? netlink_deliver_tap+0x2e/0x1b0
[  189.532374][T13765]  xfrm_netlink_rcv+0x79/0x90
[  189.532382][T13765]  netlink_unicast+0x82f/0x9e0
[  189.532392][T13765]  ? __pfx_netlink_unicast+0x10/0x10
[  189.532401][T13765]  ? netlink_sendmsg+0x642/0xb30
[  189.532411][T13765]  ? skb_put+0x11b/0x210
[  189.532418][T13765]  netlink_sendmsg+0x805/0xb30
[  189.532430][T13765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.532440][T13765]  ? aa_sock_msg_perm+0xf1/0x1d0
[  189.532450][T13765]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  189.532458][T13765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.532468][T13765]  __sock_sendmsg+0x21c/0x270
[  189.532477][T13765]  ____sys_sendmsg+0x505/0x830
[  189.532485][T13765]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.532494][T13765]  ? import_iovec+0x74/0xa0
[  189.532502][T13765]  ___sys_sendmsg+0x21f/0x2a0
[  189.532509][T13765]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.532522][T13765]  ? __fget_files+0x2a/0x420
[  189.532532][T13765]  ? __fget_files+0x3a0/0x420
[  189.532544][T13765]  __x64_sys_sendmsg+0x19b/0x260
[  189.532551][T13765]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.532559][T13765]  ? rcu_is_watching+0x15/0xb0
[  189.532567][T13765]  ? do_syscall_64+0xbe/0x3b0
[  189.532578][T13765]  do_syscall_64+0xfa/0x3b0
[  189.532587][T13765]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.532596][T13765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.532603][T13765]  ? exc_page_fault+0x9f/0xf0
[  189.532612][T13765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.532619][T13765] RIP: 0033:0x7f5381f8ebe9
[  189.532627][T13765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.532634][T13765] RSP: 002b:00007f5382d3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.532643][T13765] RAX: ffffffffffffffda RBX: 00007f53821b5fa0 RCX: 00007f5381f8ebe9
[  189.532648][T13765] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  189.532652][T13765] RBP: 00007f5382011e19 R08: 0000000000000000 R09: 0000000000000000
[  189.532657][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  189.532661][T13765] R13: 00007f53821b6038 R14: 00007f53821b5fa0 R15: 00007ffc3ffc6268
[  189.532669][T13765]  </TASK>
[  189.532671][T13765] 
[  189.668766][T13765] Allocated by task 13707:
[  189.670380][T13765]  kasan_save_track+0x3e/0x80
[  189.672187][T13765]  __kasan_slab_alloc+0x6c/0x80
[  189.673835][T13765]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  189.676082][T13765]  xfrm_state_alloc+0x24/0x2f0
[  189.678127][T13765]  xfrm_add_sa+0x17d1/0x4070
[  189.679824][T13765]  xfrm_user_rcv_msg+0x7a3/0xab0
[  189.681799][T13765]  netlink_rcv_skb+0x208/0x470
[  189.683605][T13765]  xfrm_netlink_rcv+0x79/0x90
[  189.685044][T13765]  netlink_unicast+0x82f/0x9e0
[  189.686740][T13765]  netlink_sendmsg+0x805/0xb30
[  189.688738][T13765]  __sock_sendmsg+0x21c/0x270
[  189.690743][T13765]  ____sys_sendmsg+0x505/0x830
[  189.692482][T13765]  ___sys_sendmsg+0x21f/0x2a0
[  189.694360][T13765]  __x64_sys_sendmsg+0x19b/0x260
[  189.696419][T13765]  do_syscall_64+0xfa/0x3b0
[  189.698313][T13765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.700111][T13765] 
[  189.700844][T13765] Freed by task 9:
[  189.702347][T13765]  kasan_save_track+0x3e/0x80
[  189.703907][T13765]  kasan_save_free_info+0x46/0x50
[  189.706047][T13765]  __kasan_slab_free+0x5b/0x80
[  189.708016][T13765]  kmem_cache_free+0x18f/0x400
[  189.709974][T13765]  xfrm_state_gc_task+0x52d/0x6b0
[  189.712059][T13765]  process_scheduled_works+0xae1/0x17b0
[  189.714381][T13765]  worker_thread+0x8a0/0xda0
[  189.716058][T13765]  kthread+0x711/0x8a0
[  189.717503][T13765]  ret_from_fork+0x3fc/0x770
[  189.719284][T13765]  ret_from_fork_asm+0x1a/0x30
[  189.721296][T13765] 
[  189.722311][T13765] The buggy address belongs to the object at ffff88801c356d00
[  189.722311][T13765]  which belongs to the cache xfrm_state of size 928
[  189.727970][T13765] The buggy address is located 196 bytes inside of
[  189.727970][T13765]  freed 928-byte region [ffff88801c356d00, ffff88801c3570a0)
[  189.733180][T13765] 
[  189.734092][T13765] The buggy address belongs to the physical page:
[  189.736692][T13765] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c354
[  189.740277][T13765] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  189.742809][T13765] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  189.745589][T13765] page_type: f5(slab)
[  189.748085][T13765] raw: 00fff00000000040 ffff88801cfb33c0 dead000000000122 0000000000000000
[  189.751364][T13765] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  189.754863][T13765] head: 00fff00000000040 ffff88801cfb33c0 dead000000000122 0000000000000000
[  189.758415][T13765] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  189.761817][T13765] head: 00fff00000000002 ffffea000070d501 00000000ffffffff 00000000ffffffff
[  189.764762][T13765] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  189.768139][T13765] page dumped because: kasan: bad access detected
[  189.770395][T13765] page_owner tracks the page as allocated
[  189.772618][T13765] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6226, tgid 6225 (syz.1.133), ts 69540379796, free_ts 69400632718
[  189.778973][T13765]  post_alloc_hook+0x240/0x2a0
[  189.780669][T13765]  get_page_from_freelist+0x21e4/0x22c0
[  189.782942][T13765]  __alloc_frozen_pages_noprof+0x181/0x370
[  189.785279][T13765]  alloc_pages_mpol+0x232/0x4a0
[  189.787138][T13765]  allocate_slab+0x8a/0x370
[  189.788940][T13765]  ___slab_alloc+0xbeb/0x1410
[  189.790800][T13765]  kmem_cache_alloc_noprof+0x283/0x3c0
[  189.793067][T13765]  xfrm_state_alloc+0x24/0x2f0
[  189.794823][T13765]  xfrm_state_find+0x37d4/0x5400
[  189.796965][T13765]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  189.799370][T13765]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  189.801304][T13765]  xfrm_lookup_route+0x3c/0x1c0
[  189.803044][T13765]  __ip4_datagram_connect+0x9a5/0x1270
[  189.804933][T13765]  __ip6_datagram_connect+0x9f0/0x1150
[  189.806814][T13765]  ip6_datagram_connect_v6_only+0x63/0xa0
[  189.808837][T13765]  __sys_connect+0x316/0x440
[  189.810449][T13765] page last free pid 6210 tgid 6210 stack trace:
[  189.812688][T13765]  __free_frozen_pages+0xbc4/0xd30
[  189.814904][T13765]  stack_depot_save_flags+0x436/0x860
[  189.816934][T13765]  kasan_save_track+0x4f/0x80
[  189.818867][T13765]  __kasan_kmalloc+0x93/0xb0
[  189.820791][T13765]  __kmalloc_cache_noprof+0x230/0x3d0
[  189.822853][T13765]  __request_module+0x2b5/0x5e0
[  189.824770][T13765]  crypto_alg_mod_lookup+0xeb/0x5f0
[  189.826853][T13765]  crypto_grab_spawn+0x7d/0x390
[  189.829165][T13765]  crypto_gcm_create_common+0x202/0x850
[  189.831452][T13765]  cryptomgr_probe+0x86/0x220
[  189.833082][T13765]  kthread+0x711/0x8a0
[  189.834523][T13765]  ret_from_fork+0x3fc/0x770
[  189.836299][T13765]  ret_from_fork_asm+0x1a/0x30
[  189.838308][T13765] 
[  189.839297][T13765] Memory state around the buggy address:
[  189.841176][T13765]  ffff88801c356c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  189.844094][T13765]  ffff88801c356d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.847297][T13765] >ffff88801c356d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.850272][T13765]                                            ^
[  189.852791][T13765]  ffff88801c356e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.855490][T13765]  ffff88801c356e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.858242][T13765] ==================================================================
[  189.860858][T13765] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  189.863078][T13765] CPU: 0 UID: 0 PID: 13765 Comm: syz.1.3392 Not tainted syzkaller #0 PREEMPT(full) 
[  189.866018][T13765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.869149][T13765] Call Trace:
[  189.870226][T13765]  <TASK>
[  189.871373][T13765]  dump_stack_lvl+0x99/0x250
[  189.873015][T13765]  ? __asan_memcpy+0x40/0x70
[  189.874822][T13765]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.876789][T13765]  ? __pfx__printk+0x10/0x10
[  189.878462][T13765]  vpanic+0x281/0x750
[  189.879838][T13765]  ? __pfx_vpanic+0x10/0x10
[  189.881753][T13765]  ? irqentry_exit+0x74/0x90
[  189.883750][T13765]  panic+0xb9/0xc0
[  189.885367][T13765]  ? __pfx_panic+0x10/0x10
[  189.887300][T13765]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  189.889808][T13765]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.892365][T13765]  ? xfrm_alloc_spi+0x570/0xf30
[  189.894506][T13765]  check_panic_on_warn+0x89/0xb0
[  189.896660][T13765]  ? xfrm_alloc_spi+0x570/0xf30
[  189.898741][T13765]  end_report+0x78/0x160
[  189.900569][T13765]  kasan_report+0x129/0x150
[  189.902488][T13765]  ? xfrm_alloc_spi+0x570/0xf30
[  189.904593][T13765]  xfrm_alloc_spi+0x570/0xf30
[  189.906637][T13765]  ? xfrm_alloc_spi+0x2a0/0xf30
[  189.908781][T13765]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  189.911038][T13765]  ? xfrm_find_acq+0x87/0xa0
[  189.913054][T13765]  xfrm_alloc_userspi+0x70b/0xc90
[  189.915267][T13765]  ? apparmor_capable+0x137/0x1b0
[  189.917431][T13765]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  189.919654][T13765]  ? __nla_parse+0x40/0x60
[  189.921513][T13765]  xfrm_user_rcv_msg+0x7a3/0xab0
[  189.923622][T13765]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  189.925988][T13765]  ? __pfx___mutex_trylock_common+0x10/0x10
[  189.928528][T13765]  ? rcu_is_watching+0x15/0xb0
[  189.930597][T13765]  ? trace_contention_end+0x39/0x120
[  189.932850][T13765]  ? __mutex_lock+0x335/0x1360
[  189.934880][T13765]  netlink_rcv_skb+0x208/0x470
[  189.936957][T13765]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  189.939262][T13765]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  189.941386][T13765]  ? netlink_deliver_tap+0x2e/0x1b0
[  189.943435][T13765]  ? netlink_deliver_tap+0x2e/0x1b0
[  189.945594][T13765]  xfrm_netlink_rcv+0x79/0x90
[  189.947669][T13765]  netlink_unicast+0x82f/0x9e0
[  189.949757][T13765]  ? __pfx_netlink_unicast+0x10/0x10
[  189.951999][T13765]  ? netlink_sendmsg+0x642/0xb30
[  189.954163][T13765]  ? skb_put+0x11b/0x210
[  189.955907][T13765]  netlink_sendmsg+0x805/0xb30
[  189.958000][T13765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.960388][T13765]  ? aa_sock_msg_perm+0xf1/0x1d0
[  189.962531][T13765]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  189.964702][T13765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.967000][T13765]  __sock_sendmsg+0x21c/0x270
[  189.969030][T13765]  ____sys_sendmsg+0x505/0x830
[  189.971063][T13765]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.973328][T13765]  ? import_iovec+0x74/0xa0
[  189.975258][T13765]  ___sys_sendmsg+0x21f/0x2a0
[  189.977292][T13765]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.979442][T13765]  ? __fget_files+0x2a/0x420
[  189.981367][T13765]  ? __fget_files+0x3a0/0x420
[  189.983322][T13765]  __x64_sys_sendmsg+0x19b/0x260
[  189.985707][T13765]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  189.988040][T13765]  ? rcu_is_watching+0x15/0xb0
[  189.989995][T13765]  ? do_syscall_64+0xbe/0x3b0
[  189.992053][T13765]  do_syscall_64+0xfa/0x3b0
[  189.994021][T13765]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.996256][T13765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.998864][T13765]  ? exc_page_fault+0x9f/0xf0
[  190.000938][T13765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.003459][T13765] RIP: 0033:0x7f5381f8ebe9
[  190.005432][T13765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.013234][T13765] RSP: 002b:00007f5382d3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.016238][T13765] RAX: ffffffffffffffda RBX: 00007f53821b5fa0 RCX: 00007f5381f8ebe9
[  190.019062][T13765] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  190.022163][T13765] RBP: 00007f5382011e19 R08: 0000000000000000 R09: 0000000000000000
[  190.024907][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.027741][T13765] R13: 00007f53821b6038 R14: 00007f53821b5fa0 R15: 00007ffc3ffc6268
[  190.030657][T13765]  </TASK>
[  190.032392][T13765] Kernel Offset: disabled
[  190.033781][T13765] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:26:52  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001198 RDI=0000000000001199 RBP=00000000000003f8 RSP=ffffc900069c69f0
R8 =ffff888020058237 R9 =1ffff1100400b046 R10=dffffc0000000000 R11=ffffffff854eff70
R12=dffffc0000000000 R13=ffffffff99af9916 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5382d3c6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000280 CR3=000000002766c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5382187498 00007f5382187470 XMM03=00007f53821874a8 00007f53821874a0
XMM04=00007f5382ced100 00007f5382187460 XMM05=00007f5382187478 00007f53821874c0
XMM06=00007f53821874b8 00007f53821874b0 XMM07=00007f53821874a8 00007f53821874a0
XMM08=0000000000000000 00007f5382012ee7 XMM09=0000000000000000 00007f5382012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=95c8c1466875c000 RBX=ffffffff90435e01 RCX=95c8c1466875c000 RDX=ffffc90006847401
RSI=ffffffff8be332e0 RDI=ffffffff8be332a0 RBP=dffffc0000000000 RSP=ffffc90006847298
R8 =ffffc90006847cf0 R9 =0000000000000000 R10=ffffc90006847478 R11=fffff52000d08e91
R12=ffffc90006847d00 R13=ffffffff8172c195 R14=ffffffff8e139ea0 R15=ffffffff8172c195
RIP=ffffffff8b797167 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc208ce16c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3231eff8 CR3=000000010f1c0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fc207e12e53
XMM06=0000000000000000 00007fc207e12e4d XMM07=0000000000000000 00007fc207e12e61
XMM08=0000000000000000 00007fc207e12ee7 XMM09=0000000000000000 00007fc207e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
