last executing test programs:

539.050104ms ago: executing program 1 (id=4376):
r0 = socket$tipc(0x1e, 0x5, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10)

490.327304ms ago: executing program 1 (id=4379):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x51, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x8, 0x1, ').)\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010)

408.630507ms ago: executing program 1 (id=4383):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)='>n', 0x2)

329.614746ms ago: executing program 1 (id=4385):
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8902, &(0x7f0000000040))
close(r0)

329.384414ms ago: executing program 2 (id=4386):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x20000004)

242.988481ms ago: executing program 2 (id=4387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x14, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080)

242.772413ms ago: executing program 1 (id=4388):
r0 = socket$inet(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10)

242.586027ms ago: executing program 2 (id=4389):
r0 = socket(0x22, 0x2, 0x4)
ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0)

239.966212ms ago: executing program 1 (id=4390):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
pselect6(0x42, &(0x7f0000000400)={0x0, 0x3, 0x2, 0xffffffff, 0x10001, 0xa, 0x3, 0x100000000}, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002840)={[0x81]}, 0x8})

167.958531ms ago: executing program 0 (id=4391):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000280)=0xd, 0x12)

167.704272ms ago: executing program 2 (id=4392):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0x3, 0xc}}, [@filter_kind_options=@f_flow={{0x21}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf2ff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x9, 0x9, 0x7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

167.476155ms ago: executing program 0 (id=4393):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x6338, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0)

77.915053ms ago: executing program 0 (id=4394):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
close(r0)

77.7331ms ago: executing program 0 (id=4395):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
mmap$xdp(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x2000007, 0x13, r0, 0x80000000)

76.425624ms ago: executing program 2 (id=4396):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)

507.425µs ago: executing program 0 (id=4397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)

156.231µs ago: executing program 2 (id=4398):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

0s ago: executing program 0 (id=4399):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0)

kernel console output (not intermixed with test programs):

packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.626030][ T5903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.638327][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.640922][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.650302][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.713174][ T5903] hsr_slave_0: entered promiscuous mode
[   71.716081][ T5903] hsr_slave_1: entered promiscuous mode
[   71.736376][ T5900] hsr_slave_0: entered promiscuous mode
[   71.741151][ T5900] hsr_slave_1: entered promiscuous mode
[   71.743933][ T5900] debugfs: 'hsr0' already exists in 'hsr'
[   71.746780][ T5900] Cannot create hsr debugfs directory
[   71.808084][ T5907] hsr_slave_0: entered promiscuous mode
[   71.811220][ T5907] hsr_slave_1: entered promiscuous mode
[   71.814034][ T5907] debugfs: 'hsr0' already exists in 'hsr'
[   71.816408][ T5907] Cannot create hsr debugfs directory
[   72.115112][ T5903] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   72.126638][ T5903] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   72.142355][ T5903] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.150684][ T5903] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.215636][ T5900] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.225832][ T5900] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.249845][ T5900] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.255970][ T5900] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.335159][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.344317][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.354428][ T5903] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.360246][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.368797][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.398125][ T5906] Bluetooth: hci0: command tx timeout
[   72.400718][ T5901] Bluetooth: hci1: command tx timeout
[   72.420611][ T5903] 8021q: adding VLAN 0 to HW filter on device team0
[   72.447625][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.450290][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.458421][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.460972][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.524008][ T5903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.548206][ T5901] Bluetooth: hci2: command tx timeout
[   72.560527][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.591905][ T5900] 8021q: adding VLAN 0 to HW filter on device team0
[   72.606701][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.609425][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.625459][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.628365][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.663782][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.700086][ T5907] 8021q: adding VLAN 0 to HW filter on device team0
[   72.710821][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.713612][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.730063][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.732743][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.794632][ T5903] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.892252][ T5903] veth0_vlan: entered promiscuous mode
[   72.914062][ T5903] veth1_vlan: entered promiscuous mode
[   72.922781][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.974392][ T5903] veth0_macvtap: entered promiscuous mode
[   72.998527][ T5903] veth1_macvtap: entered promiscuous mode
[   73.021422][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.039241][ T5900] veth0_vlan: entered promiscuous mode
[   73.046123][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.063792][ T5900] veth1_vlan: entered promiscuous mode
[   73.068536][ T5903] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.093007][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.096886][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.103384][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.106195][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.162092][ T5907] veth0_vlan: entered promiscuous mode
[   73.184306][ T5900] veth0_macvtap: entered promiscuous mode
[   73.195069][ T5907] veth1_vlan: entered promiscuous mode
[   73.211309][ T5900] veth1_macvtap: entered promiscuous mode
[   73.238135][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.241183][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.259980][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.280337][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.309598][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.315517][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.315562][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.323637][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.327501][ T5741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.330733][ T5741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.334344][ T5907] veth0_macvtap: entered promiscuous mode
[   73.346567][ T5907] veth1_macvtap: entered promiscuous mode
[   73.391198][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.406333][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.455483][ T5741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.460598][ T5741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.464262][ T5741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.480827][ T5741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.514943][ T3605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.532608][ T3605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.589138][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.592165][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.640503][ T3605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.643557][ T3605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.708659][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.712408][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.795190][ T5981] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET)
[   73.890006][ T5987] netlink: 96 bytes leftover after parsing attributes in process `syz.0.34'.
[   73.893593][ T5987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.34'.
[   74.329670][ T6005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.411710][ T6007] netlink: 'syz.2.45': attribute type 1 has an invalid length.
[   74.415319][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'.
[   74.442498][ T6007] netlink: 'syz.2.45': attribute type 1 has an invalid length.
[   74.469108][ T5901] Bluetooth: hci1: command tx timeout
[   74.471211][ T5901] Bluetooth: hci0: command tx timeout
[   74.543466][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'.
[   74.630181][ T5906] Bluetooth: hci2: command tx timeout
[   74.856676][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.890913][ T6038] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   74.925131][ T6040] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   74.967157][ T6038] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   74.977095][ T6038] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   74.984846][ T6038] Zero length message leads to an empty skb
[   75.107712][ T6040] nbd0: detected capacity change from 0 to 127
[   75.120748][   T56] block nbd0: Receive control failed (result -104)
[   75.395579][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.0.67'.
[   75.418144][ T6063] Bluetooth: MGMT ver 1.23
[   75.821070][ T6084] netlink: 72 bytes leftover after parsing attributes in process `syz.0.79'.
[   76.304811][ T6117] warning: `syz.2.95' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.504562][ T6132] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[   76.547566][ T5906] Bluetooth: hci0: command tx timeout
[   76.550464][ T5901] Bluetooth: hci1: command tx timeout
[   76.620581][ T6134] nbd1: detected capacity change from 0 to 127
[   76.642118][   T56] block nbd1: Receive control failed (result -104)
[   76.708040][ T5906] Bluetooth: hci2: command tx timeout
[   76.727862][ T6146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'.
[   77.638638][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'.
[   77.756452][ T6219] ieee802154 phy0 wpan0: encryption failed: -22
[   78.084082][ T6249] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.112660][ T6249] bond_slave_0: entered promiscuous mode
[   78.114792][ T6249] bond_slave_1: entered promiscuous mode
[   78.120370][ T6249] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   78.124995][ T6249] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   78.163695][ T6249] bridge_slave_0: left allmulticast mode
[   78.165378][ T6249] bridge_slave_0: left promiscuous mode
[   78.168869][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.180690][ T6249] bridge_slave_1: left allmulticast mode
[   78.183296][ T6249] bridge_slave_1: left promiscuous mode
[   78.186185][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.204638][ T6249] bond0: (slave bond_slave_0): Releasing backup interface
[   78.211906][ T6249] bond_slave_0: left promiscuous mode
[   78.219355][ T6249] bond0: (slave bond_slave_1): Releasing backup interface
[   78.225038][ T6249] bond_slave_1: left promiscuous mode
[   78.245630][ T6249] team0: Port device team_slave_0 removed
[   78.262539][ T6249] team0: Port device team_slave_1 removed
[   78.265621][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.269022][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.276187][ T6249] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.281851][ T6249] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.298909][ T6249] bond1: (slave macvlan2): Removing an active aggregator
[   78.306370][ T6249] bond1: (slave macvlan2): Releasing backup interface
[   78.627872][ T5906] Bluetooth: hci0: command tx timeout
[   78.630043][ T5901] Bluetooth: hci1: command tx timeout
[   78.793490][ T5906] Bluetooth: hci2: command tx timeout
[   78.974235][ T6292] batman_adv: batadv0: Adding interface: vxlan0
[   78.976777][ T6292] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.992762][ T6292] batman_adv: batadv0: Interface activated: vxlan0
[   79.020274][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.024017][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.035599][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.043296][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.143278][ T6300] Illegal XDP return value 4294967274 on prog  (id 34) dev N/A, expect packet loss!
[   79.397838][ T6316] ieee802154 phy0 wpan0: encryption failed: -22
[   79.507650][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.511264][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.514603][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.652114][ T6325] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.713361][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.720475][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.724560][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.729134][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.732998][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   79.736902][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'.
[   80.350597][   T95] cfg80211: failed to load regulatory.db
[   80.654813][ T6341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.699556][ T6333] syz.1.190: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   81.711930][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT(full) 
[   81.711952][ T6333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.711961][ T6333] Call Trace:
[   81.711968][ T6333]  <TASK>
[   81.711976][ T6333]  dump_stack_lvl+0x189/0x250
[   81.711999][ T6333]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[   81.712021][ T6333]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.712038][ T6333]  ? __pfx__printk+0x10/0x10
[   81.712058][ T6333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.712105][ T6333]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   81.712127][ T6333]  warn_alloc+0x214/0x310
[   81.712153][ T6333]  ? __pfx_warn_alloc+0x10/0x10
[   81.712180][ T6333]  ? __get_vm_area_node+0x28f/0x300
[   81.712199][ T6333]  ? hash_netport4_resize+0x235/0x1b60
[   81.712221][ T6333]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   81.712265][ T6333]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   81.712291][ T6333]  ? rcu_is_watching+0x15/0xb0
[   81.712306][ T6333]  ? hash_netport4_resize+0x235/0x1b60
[   81.712322][ T6333]  ? hash_netport4_resize+0x235/0x1b60
[   81.712336][ T6333]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   81.712357][ T6333]  ? hash_netport4_resize+0x235/0x1b60
[   81.712380][ T6333]  hash_netport4_resize+0x235/0x1b60
[   81.712396][ T6333]  ? hash_netport4_uadt+0xc97/0xf30
[   81.712417][ T6333]  ? __pfx_hash_netport4_add+0x10/0x10
[   81.712434][ T6333]  ? __pfx_hash_netport4_uadt+0x10/0x10
[   81.712459][ T6333]  ? __pfx___local_bh_enable_ip+0x10/0x10
[   81.712483][ T6333]  call_ad+0x44e/0xb00
[   81.712510][ T6333]  ? __pfx_call_ad+0x10/0x10
[   81.712542][ T6333]  ? __nla_parse+0x40/0x60
[   81.712558][ T6333]  ip_set_ad+0x791/0x930
[   81.712586][ T6333]  ? __pfx_ip_set_ad+0x10/0x10
[   81.712636][ T6333]  nfnetlink_rcv_msg+0xb4d/0x1130
[   81.712660][ T6333]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   81.712695][ T6333]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   81.712713][ T6333]  ? kasan_save_free_info+0x46/0x50
[   81.712766][ T6333]  netlink_rcv_skb+0x208/0x470
[   81.712781][ T6333]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   81.712802][ T6333]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   81.712823][ T6333]  ? bpf_lsm_capable+0x9/0x20
[   81.712841][ T6333]  ? security_capable+0x7e/0x2e0
[   81.712868][ T6333]  nfnetlink_rcv+0x26a/0x2520
[   81.712911][ T6333]  ? __dev_queue_xmit+0x1d79/0x3b50
[   81.712946][ T6333]  ? __dev_queue_xmit+0x27b/0x3b50
[   81.712974][ T6333]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   81.712994][ T6333]  ? __pfx___dev_queue_xmit+0x10/0x10
[   81.713022][ T6333]  ? ref_tracker_free+0x63a/0x7d0
[   81.713043][ T6333]  ? __asan_memcpy+0x40/0x70
[   81.713059][ T6333]  ? __pfx_ref_tracker_free+0x10/0x10
[   81.713102][ T6333]  ? __skb_clone+0x63/0x7a0
[   81.713125][ T6333]  ? __skb_clone+0x483/0x7a0
[   81.713147][ T6333]  ? skb_clone+0x246/0x3a0
[   81.713167][ T6333]  ? __netlink_deliver_tap+0x807/0x850
[   81.713180][ T6333]  ? netlink_deliver_tap+0x2e/0x1b0
[   81.713200][ T6333]  ? netlink_deliver_tap+0x2e/0x1b0
[   81.713221][ T6333]  netlink_unicast+0x82f/0x9e0
[   81.713250][ T6333]  ? __pfx_netlink_unicast+0x10/0x10
[   81.713272][ T6333]  ? netlink_sendmsg+0x642/0xb30
[   81.713284][ T6333]  ? skb_put+0x11b/0x210
[   81.713301][ T6333]  netlink_sendmsg+0x805/0xb30
[   81.713324][ T6333]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.713341][ T6333]  ? aa_sock_msg_perm+0xf1/0x1d0
[   81.713358][ T6333]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   81.713372][ T6333]  ? __pfx_netlink_sendmsg+0x10/0x10
[   81.713388][ T6333]  __sock_sendmsg+0x21c/0x270
[   81.713411][ T6333]  ____sys_sendmsg+0x505/0x830
[   81.713433][ T6333]  ? __pfx_____sys_sendmsg+0x10/0x10
[   81.713456][ T6333]  ? import_iovec+0x74/0xa0
[   81.713476][ T6333]  ___sys_sendmsg+0x21f/0x2a0
[   81.713495][ T6333]  ? __pfx____sys_sendmsg+0x10/0x10
[   81.713540][ T6333]  ? __fget_files+0x2a/0x420
[   81.713553][ T6333]  ? __fget_files+0x3a0/0x420
[   81.713573][ T6333]  __x64_sys_sendmsg+0x19b/0x260
[   81.713593][ T6333]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   81.713618][ T6333]  ? rcu_is_watching+0x15/0xb0
[   81.713635][ T6333]  ? do_syscall_64+0xbe/0x3b0
[   81.713655][ T6333]  do_syscall_64+0xfa/0x3b0
[   81.713669][ T6333]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.713683][ T6333]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.713696][ T6333]  ? exc_page_fault+0x9f/0xf0
[   81.713713][ T6333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.713727][ T6333] RIP: 0033:0x7fbc0fb8ebe9
[   81.713741][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.713752][ T6333] RSP: 002b:00007fbc109ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   81.713768][ T6333] RAX: ffffffffffffffda RBX: 00007fbc0fdc5fa0 RCX: 00007fbc0fb8ebe9
[   81.713777][ T6333] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005
[   81.713786][ T6333] RBP: 00007fbc0fc11e19 R08: 0000000000000000 R09: 0000000000000000
[   81.713794][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.713802][ T6333] R13: 00007fbc0fdc6038 R14: 00007fbc0fdc5fa0 R15: 00007ffc54595608
[   81.713826][ T6333]  </TASK>
[   81.713960][ T6333] Mem-Info:
[   81.914782][ T6333] active_anon:5525 inactive_anon:0 isolated_anon:0
[   81.914782][ T6333]  active_file:1222 inactive_file:38243 isolated_file:0
[   81.914782][ T6333]  unevictable:1768 dirty:1493 writeback:0
[   81.914782][ T6333]  slab_reclaimable:9566 slab_unreclaimable:55135
[   81.914782][ T6333]  mapped:18125 shmem:2433 pagetables:974
[   81.914782][ T6333]  sec_pagetables:0 bounce:0
[   81.914782][ T6333]  kernel_misc_reclaimable:0
[   81.914782][ T6333]  free:293216 free_pcp:20137 free_cma:0
[   81.933178][ T6333] Node 0 active_anon:10716kB inactive_anon:0kB active_file:3340kB inactive_file:21992kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48560kB dirty:5596kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4976kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.945493][ T6333] Node 1 active_anon:11384kB inactive_anon:0kB active_file:1548kB inactive_file:130980kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:23940kB dirty:376kB writeback:0kB shmem:4944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6492kB pagetables:1760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   81.957364][ T6333] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.968662][ T6333] lowmem_reserve[]: 0 811 811 811 811
[   81.971078][ T6333] Node 0 DMA32 free:359728kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10716kB inactive_anon:0kB active_file:3340kB inactive_file:21992kB unevictable:3536kB writepending:5596kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:45124kB local_pcp:27588kB free_cma:0kB
[   81.982791][ T6333] lowmem_reserve[]: 0 0 0 0 0
[   81.984379][ T6333] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   81.996824][ T6333] lowmem_reserve[]: 0 0 854 854 854
[   81.999002][ T6333] Node 1 Normal free:339160kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11384kB inactive_anon:0kB active_file:1548kB inactive_file:130980kB unevictable:3536kB writepending:376kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35796kB local_pcp:22724kB free_cma:0kB
[   82.011304][ T6333] lowmem_reserve[]: 0 0 0 0 0
[   82.013265][ T6333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   82.018614][ T6333] Node 0 DMA32: 122*4kB (ME) 51*8kB (ME) 29*16kB (ME) 161*32kB (UM) 55*64kB (UM) 30*128kB (UME) 11*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (ME) 82*4096kB (M) = 359728kB
[   82.025671][ T6333] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   82.032245][ T6333] Node 1 Normal: 920*4kB (UME) 345*8kB (UM) 183*16kB (UME) 42*32kB (UM) 28*64kB (UME) 18*128kB (M) 11*256kB (UME) 10*512kB (UME) 5*1024kB (M) 4*2048kB (UME) 74*4096kB (M) = 339160kB
[   82.039839][ T6333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.043022][ T6333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.046858][ T6333] 41898 total pagecache pages
[   82.051770][ T6333] 0 pages in swap cache
[   82.053360][ T6333] Free swap  = 124996kB
[   82.055013][ T6333] Total swap = 124996kB
[   82.056522][ T6333] 786301 pages RAM
[   82.058277][ T6333] 0 pages HighMem/MovableOnly
[   82.060107][ T6333] 241347 pages reserved
[   82.061441][ T6333] 0 pages cma reserved
[   82.514412][ T6363] netlink: 'syz.1.204': attribute type 14 has an invalid length.
[   82.613549][ T6365] netlink: 'syz.2.205': attribute type 10 has an invalid length.
[   82.645667][ T6365] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   83.578584][ T6419] syzkaller1: entered promiscuous mode
[   83.580735][ T6419] syzkaller1: entered allmulticast mode
[   83.586384][ T6424] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   83.593206][ T6424] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   83.736047][ T6434] netlink: 'syz.2.236': attribute type 39 has an invalid length.
[   83.751513][ T6434] veth0_macvtap: left promiscuous mode
[   83.986405][ T6453] bond0: option xmit_hash_policy: invalid value (8)
[   84.529179][ T6479] __nla_validate_parse: 51 callbacks suppressed
[   84.529195][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'.
[   84.998859][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'.
[   85.915286][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'.
[   85.980252][ T6575] netlink: 56 bytes leftover after parsing attributes in process `syz.2.296'.
[   86.326084][ T6598] netlink: 'syz.0.305': attribute type 2 has an invalid length.
[   86.329408][ T6598] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[   86.332581][ T6598] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[   86.397733][ T6594] geneve2: entered promiscuous mode
[   86.496565][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.307'.
[   86.663933][ T6615] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   87.482634][ T6656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.805336][   T24] IPVS: starting estimator thread 0...
[   87.915188][ T6673] IPVS: using max 39 ests per chain, 93600 per kthread
[   88.305707][ T6700] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   88.351975][ T6706] netlink: 26 bytes leftover after parsing attributes in process `syz.1.350'.
[   88.557124][ T6714] netlink: 200 bytes leftover after parsing attributes in process `syz.2.353'.
[   88.576494][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'.
[   88.780260][ T6733] netlink: 248 bytes leftover after parsing attributes in process `syz.1.363'.
[   89.081104][ T6748] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   89.366200][ T6769] netlink: 'syz.0.376': attribute type 1 has an invalid length.
[   89.430969][ T6769] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.457306][ T6774] veth3: entered promiscuous mode
[   89.470990][ T6774] bond1: (slave veth3): Enslaving as an active interface with an up link
[   90.021987][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'.
[   90.260460][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'.
[   90.718936][ T6841] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.803086][ T6841] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.876979][ T6841] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.975647][ T6841] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.065061][ T5741] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.078448][ T5741] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.094895][ T5741] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.113092][ T5741] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.484177][ T6885] IPVS: length: 209 != 24
[   91.975417][ T6911] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.431'.
[   92.385433][ T6941] tipc: Started in network mode
[   92.390126][ T6941] tipc: Node identity e2778c06bc68, cluster identity 4711
[   92.393231][ T6941] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.459230][ T6941] syzkaller0: entered promiscuous mode
[   92.461464][ T6941] syzkaller0: entered allmulticast mode
[   92.506569][ T6941] tipc: Resetting bearer <eth:syzkaller0>
[   92.522875][ T6940] tipc: Resetting bearer <eth:syzkaller0>
[   92.539913][ T6940] tipc: Disabling bearer <eth:syzkaller0>
[   92.708094][ T5901] Bluetooth: hci2: command 0x0405 tx timeout
[   93.203312][ T6943] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   93.211967][ T6943] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   93.314725][ T6943] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   93.321578][ T6943] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   93.339744][ T6943] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   93.345803][ T6943] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   93.601434][ T6994] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   94.001671][ T7010] lo speed is unknown, defaulting to 1000
[   94.004162][ T7010] lo speed is unknown, defaulting to 1000
[   94.010052][ T7010] lo speed is unknown, defaulting to 1000
[   94.025415][ T7010] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   94.044347][ T7010] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   94.156656][ T7010] lo speed is unknown, defaulting to 1000
[   94.168459][ T7010] lo speed is unknown, defaulting to 1000
[   94.206327][ T7010] lo speed is unknown, defaulting to 1000
[   94.327420][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'.
[   94.442476][ T7048] netlink: 'syz.0.470': attribute type 22 has an invalid length.
[   94.445415][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'.
[   94.488831][ T7050] delete_channel: no stack
[   94.522524][ T7048] netlink: 'syz.0.470': attribute type 22 has an invalid length.
[   94.526004][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'.
[   94.612173][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'.
[   94.615290][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'.
[   94.810556][ T7083] netlink: 'syz.2.482': attribute type 2 has an invalid length.
[   94.854512][ T7088] delete_channel: no stack
[   95.006260][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'.
[   95.010036][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'.
[   95.231024][ T7121] lo speed is unknown, defaulting to 1000
[   96.200671][ T7176] netlink: 'syz.1.522': attribute type 4 has an invalid length.
[   96.413220][ T7187] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.527'.
[   96.629514][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'.
[   96.769588][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   96.773071][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   96.776694][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   96.783811][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   96.787709][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'.
[   96.811682][ T7206] netlink: 'syz.0.535': attribute type 11 has an invalid length.
[   97.609743][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.556'.
[   97.956046][ T7280] netlink: 'syz.1.569': attribute type 11 has an invalid length.
[   98.061644][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.571'.
[   98.210567][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.577'.
[   98.353995][ T7303] IPVS: Scheduler module ip_vs_sip not found
[   98.676686][ T7324] netlink: 'syz.2.588': attribute type 1 has an invalid length.
[   98.735910][ T7324] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   98.756997][ T5741] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   98.759070][ T7324] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.876793][ T7324] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   98.882276][ T7324] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   98.890600][ T7324] bond1 (unregistering): Released all slaves
[   99.158921][ T7362] syzkaller1: entered promiscuous mode
[   99.160827][ T7362] syzkaller1: entered allmulticast mode
[   99.356650][ T7375] lo speed is unknown, defaulting to 1000
[   99.407084][ T7383] netlink: 'syz.2.610': attribute type 13 has an invalid length.
[   99.412799][ T7383] netlink: 'syz.2.610': attribute type 17 has an invalid length.
[   99.480642][ T7383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.486348][ T5961] lo speed is unknown, defaulting to 1000
[  100.275437][ T7438] Bluetooth: MGMT ver 1.23
[  101.400707][ T5961] IPVS: starting estimator thread 0...
[  101.490544][ T7468] IPVS: using max 64 ests per chain, 153600 per kthread
[  101.868441][ T7497] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  102.231537][ T7525] netlink: 'syz.0.670': attribute type 32 has an invalid length.
[  102.637320][ T7555] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.955442][ T7588] __nla_validate_parse: 4 callbacks suppressed
[  102.955460][ T7588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.696'.
[  102.963953][ T7588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'.
[  102.971919][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'.
[  103.705402][ T7623] tipc: Started in network mode
[  103.708859][ T7623] tipc: Node identity 92cc50b4a8e8, cluster identity 4711
[  103.710981][ T7623] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.714198][ T7623] syzkaller0: entered promiscuous mode
[  103.716453][ T7623] syzkaller0: entered allmulticast mode
[  103.731391][ T7623] tipc: Resetting bearer <eth:syzkaller0>
[  103.735865][ T7622] tipc: Resetting bearer <eth:syzkaller0>
[  103.747718][ T7622] tipc: Disabling bearer <eth:syzkaller0>
[  104.785078][ T7667] netlink: 64 bytes leftover after parsing attributes in process `syz.1.729'.
[  105.197390][   T60] block nbd0: Possible stuck request ffff8880215c0000: control (read@0,1024B). Runtime 30 seconds
[  105.201369][   T60] block nbd0: Possible stuck request ffff8880215c0200: control (read@1024,1024B). Runtime 30 seconds
[  105.204958][   T60] block nbd0: Possible stuck request ffff8880215c0400: control (read@2048,1024B). Runtime 30 seconds
[  105.211068][   T60] block nbd0: Possible stuck request ffff8880215c0600: control (read@3072,1024B). Runtime 30 seconds
[  105.651212][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'.
[  106.014553][ T7773] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  106.164416][ T7785] sctp: [Deprecated]: syz.1.784 (pid 7785) Use of int in maxseg socket option.
[  106.164416][ T7785] Use struct sctp_assoc_value instead
[  106.174598][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'.
[  106.183447][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'.
[  106.372760][ T7805] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  106.529145][ T7818] netlink: 'syz.2.799': attribute type 9 has an invalid length.
[  106.926407][ T7850] netlink: 'syz.2.815': attribute type 15 has an invalid length.
[  107.115204][   T60] block nbd1: Possible stuck request ffff8880215f8000: control (read@0,1024B). Runtime 30 seconds
[  107.119625][   T60] block nbd1: Possible stuck request ffff8880215f8200: control (read@1024,1024B). Runtime 30 seconds
[  107.121586][ T7858] macvtap1: entered promiscuous mode
[  107.123946][   T60] block nbd1: Possible stuck request ffff8880215f8400: control (read@2048,1024B). Runtime 30 seconds
[  107.130695][ T7858] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  107.135504][   T60] block nbd1: Possible stuck request ffff8880215f8600: control (read@3072,1024B). Runtime 30 seconds
[  107.140904][ T7858] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  107.311251][ T7868] netlink: 'syz.1.823': attribute type 3 has an invalid length.
[  107.735435][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'.
[  107.801560][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'.
[  108.086673][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'.
[  108.177159][ T7917] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  108.177577][ T5887] bond0: (slave bond_slave_0): interface is now down
[  108.190862][ T5887] bond0: (slave bond_slave_1): interface is now down
[  108.202612][ T5887] bond0: (slave netdevsim0): interface is now down
[  108.220617][ T5887] bond0: (slave bond_slave_0): interface is now down
[  108.230418][ T5887] bond0: (slave bond_slave_1): interface is now down
[  108.233222][ T5887] bond0: (slave netdevsim0): interface is now down
[  108.269083][ T5887] bond0: (slave bond_slave_0): interface is now down
[  108.277429][ T5887] bond0: (slave bond_slave_1): interface is now down
[  108.279928][ T5887] bond0: (slave netdevsim0): interface is now down
[  108.307668][ T5887] bond0: (slave bond_slave_0): interface is now down
[  108.312829][ T7910] netlink: 'syz.2.843': attribute type 3 has an invalid length.
[  108.318200][ T5887] bond0: (slave bond_slave_1): interface is now down
[  108.320904][ T5887] bond0: (slave netdevsim0): interface is now down
[  108.330980][ T7910] netlink: 'syz.2.843': attribute type 1 has an invalid length.
[  108.339770][ T5887] bond0: (slave bond_slave_0): interface is now down
[  108.343738][ T7910] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.843'.
[  108.350023][ T5887] bond0: (slave bond_slave_1): interface is now down
[  108.352680][ T5887] bond0: (slave netdevsim0): interface is now down
[  108.368138][ T5741] bond0: (slave bond_slave_0): interface is now down
[  108.370805][ T5741] bond0: (slave bond_slave_1): interface is now down
[  108.373458][ T5741] bond0: (slave netdevsim0): interface is now down
[  108.392980][ T5741] bond0: (slave bond_slave_0): interface is now down
[  108.395668][ T5741] bond0: (slave bond_slave_1): interface is now down
[  108.410646][ T5741] bond0: (slave netdevsim0): interface is now down
[  108.427799][   T12] bond0: (slave bond_slave_0): interface is now down
[  108.430472][   T12] bond0: (slave bond_slave_1): interface is now down
[  108.442575][   T12] bond0: (slave netdevsim0): interface is now down
[  108.458245][   T12] bond0: (slave bond_slave_0): interface is now down
[  108.467103][   T12] bond0: (slave bond_slave_1): interface is now down
[  108.470032][ T7928] tipc: Started in network mode
[  108.472071][ T7928] tipc: Node identity bae2f11ae42b, cluster identity 4711
[  108.472557][   T12] bond0: (slave netdevsim0): interface is now down
[  108.475077][ T7928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.490949][ T7928] syzkaller0: entered promiscuous mode
[  108.493284][ T7928] syzkaller0: entered allmulticast mode
[  108.497767][ T5741] bond0: (slave bond_slave_0): interface is now down
[  108.500710][ T5741] bond0: (slave bond_slave_1): interface is now down
[  108.503529][ T5741] bond0: (slave netdevsim0): interface is now down
[  108.526452][ T5741] bond0: now running without any active interface!
[  108.573185][ T7928] tipc: Resetting bearer <eth:syzkaller0>
[  108.585929][ T7927] tipc: Resetting bearer <eth:syzkaller0>
[  108.619534][ T7927] tipc: Disabling bearer <eth:syzkaller0>
[  108.644654][ T7935] lo speed is unknown, defaulting to 1000
[  109.376636][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'.
[  109.489864][ T7991] trusted_key: syz.2.877 sent an empty control message without MSG_MORE.
[  109.535063][ T7993] netlink: 'syz.0.878': attribute type 2 has an invalid length.
[  109.540661][ T7993] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.878'.
[  109.670041][ T8002] netlink: 6 bytes leftover after parsing attributes in process `syz.2.881'.
[  109.686330][ T8002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  109.864080][ T8014] ip6tnl0: entered promiscuous mode
[  109.866131][ T8014] ip6tnl0: entered allmulticast mode
[  109.872426][ T8014] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  110.047678][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'.
[  110.093955][ T8032] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  110.372941][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'.
[  110.437386][ T8051] block nbd1: NBD_DISCONNECT
[  110.439849][ T8051] block nbd1: Send disconnect failed -32
[  110.442308][ T8051] block nbd1: shutting down sockets
[  110.448585][    C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.448863][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.906'.
[  110.452528][    C0] Buffer I/O error on dev nbd1, logical block 0, async page read
[  110.459083][    C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.462652][    C0] Buffer I/O error on dev nbd1, logical block 1, async page read
[  110.465833][    C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.469652][    C0] Buffer I/O error on dev nbd1, logical block 2, async page read
[  110.472907][    C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.476529][    C0] Buffer I/O error on dev nbd1, logical block 3, async page read
[  110.487375][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.496097][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  110.510764][ T5881] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.525913][ T5881] Buffer I/O error on dev nbd1, logical block 1, async page read
[  110.538814][ T5881] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.554028][ T5881] Buffer I/O error on dev nbd1, logical block 2, async page read
[  110.563577][ T5881] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.566654][ T5881] Buffer I/O error on dev nbd1, logical block 3, async page read
[  110.570086][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.573016][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  110.576133][ T5881] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  110.581600][ T5881] Buffer I/O error on dev nbd1, logical block 1, async page read
[  110.586359][ T5881] ldm_validate_partition_table(): Disk read failed.
[  110.590561][ T5881] Dev nbd1: unable to read RDB block 0
[  110.593310][ T5881]  nbd1: unable to read partition table
[  110.604065][ T5881] ldm_validate_partition_table(): Disk read failed.
[  110.622441][ T5881] Dev nbd1: unable to read RDB block 0
[  110.625831][ T5881]  nbd1: unable to read partition table
[  110.842327][ T8072] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.912'.
[  111.130412][ T8077] bond0: option arp_validate: invalid value (18446744073491447809)
[  111.130841][ T5887] bond0: (slave bond_slave_0): interface is now down
[  111.138466][ T5887] bond0: (slave bond_slave_1): interface is now down
[  111.143350][ T5887] bond0: now running without any active interface!
[  111.199333][ T8079] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  111.281178][ T8082] netlink: 'syz.0.917': attribute type 21 has an invalid length.
[  111.284332][ T8082] netlink: 128 bytes leftover after parsing attributes in process `syz.0.917'.
[  111.288065][ T8082] netlink: 'syz.0.917': attribute type 4 has an invalid length.
[  111.386774][ T8091] syz.0.921 uses old SIOCAX25GETINFO
[  111.705483][ T8111] netlink: 'syz.0.931': attribute type 1 has an invalid length.
[  112.871235][ T8164] openvswitch: netlink: Missing valid actions attribute.
[  112.873689][ T8164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.703146][ T8191] netlink: 'syz.1.967': attribute type 1 has an invalid length.
[  113.736433][ T8191] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.743886][ T8191] __nla_validate_parse: 2 callbacks suppressed
[  113.743902][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'.
[  113.855272][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'.
[  114.241280][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.981'.
[  114.416325][ T8229] lo speed is unknown, defaulting to 1000
[  114.876311][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'.
[  115.187382][ T8261] hsr_slave_0: left promiscuous mode
[  115.196365][ T8261] hsr_slave_1: left promiscuous mode
[  115.209911][ T5741] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.216617][ T5741] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.227671][ T5741] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.241774][ T5741] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.397989][ T8278] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  115.441677][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1007'.
[  115.649101][ T8300] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  115.742112][ T8304] syzkaller0: entered promiscuous mode
[  115.744026][ T8304] syzkaller0: entered allmulticast mode
[  117.203513][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1024'.
[  117.415291][ T8333] lo speed is unknown, defaulting to 1000
[  117.578861][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'.
[  117.582243][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'.
[  118.001984][ T8371] netlink: 'syz.0.1047': attribute type 9 has an invalid length.
[  118.233262][ T8395] netlink: 'syz.2.1057': attribute type 1 has an invalid length.
[  118.236257][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'.
[  118.501060][ T8415] netlink: 'syz.1.1064': attribute type 4 has an invalid length.
[  118.543156][ T8417] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1065'.
[  118.706815][ T8425] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.711920][ T8425] syzkaller0: entered promiscuous mode
[  118.714244][ T8425] syzkaller0: entered allmulticast mode
[  118.730862][ T8425] tipc: Resetting bearer <eth:syzkaller0>
[  118.736753][ T8424] tipc: Resetting bearer <eth:syzkaller0>
[  118.748160][ T8424] tipc: Disabling bearer <eth:syzkaller0>
[  119.524822][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'.
[  120.017942][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1100'.
[  120.072518][ T8499] netlink: 'syz.1.1102': attribute type 3 has an invalid length.
[  120.571057][ T8525] netlink: 'syz.1.1110': attribute type 4 has an invalid length.
[  120.590565][ T8525] netlink: 'syz.1.1110': attribute type 4 has an invalid length.
[  120.753826][ T8534] netlink: 'syz.0.1112': attribute type 21 has an invalid length.
[  120.810193][ T8538] netlink: 'syz.0.1113': attribute type 4 has an invalid length.
[  122.025256][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'.
[  122.033291][ T8588] netlink: 'syz.2.1136': attribute type 1 has an invalid length.
[  122.091263][ T8591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1137'.
[  122.099294][ T8591] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1137'.
[  122.111056][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1136'.
[  122.119968][ T8588] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  122.694952][ T8645] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  122.852478][ T8657] netlink: 'syz.2.1165': attribute type 3 has an invalid length.
[  123.094001][ T8672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1172'.
[  123.194522][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1175'.
[  123.344516][ T8701] vti0: entered promiscuous mode
[  123.346595][ T8701] vti0: entered allmulticast mode
[  123.369539][ T8700] tun0: tun_chr_ioctl cmd 2147767520
[  124.021701][ T8749] lo speed is unknown, defaulting to 1000
[  124.836425][ T8776] netlink: 'syz.1.1218': attribute type 1 has an invalid length.
[  124.840538][ T8776] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1218'.
[  125.211030][ T8788] netlink: 'syz.1.1224': attribute type 10 has an invalid length.
[  125.215591][ T8788] 8021q: adding VLAN 0 to HW filter on device team0
[  125.220195][ T8788] bond0: (slave team0): Enslaving as an active interface with an up link
[  125.335447][ T8794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.362062][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv1
[  125.369160][ T8797] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  125.372235][ T8797] team0: Failed to send options change via netlink (err -105)
[  125.375189][ T8797] team0: Port device batadv1 added
[  125.439177][ T8794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.514724][ T8794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.585189][ T8794] bond0: (slave netdevsim0): Releasing backup interface
[  125.592859][ T8794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.773909][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'.
[  125.914990][ T8817] netlink: 'syz.0.1236': attribute type 1 has an invalid length.
[  125.928096][ T8815] netlink: 'syz.0.1236': attribute type 1 has an invalid length.
[  126.003730][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.031867][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.064144][ T5887] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.070070][ T5887] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.154324][ T8831] netlink: 'syz.1.1243': attribute type 1 has an invalid length.
[  126.187798][ T8831] 8021q: adding VLAN 0 to HW filter on device bond3
[  126.191561][ T8834] netlink: ct family unspecified
[  126.193603][ T8834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.269210][ T8831] 8021q: adding VLAN 0 to HW filter on device bond3
[  126.272173][ T8831] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  126.285108][ T8831] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  126.326783][ T8841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1243'.
[  126.333655][ T8839] veth5: entered promiscuous mode
[  126.348717][ T8839] bond3: (slave veth5): Enslaving as an active interface with a down link
[  126.408189][ T8841] 8021q: adding VLAN 0 to HW filter on device bond3
[  126.489549][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'.
[  126.554156][ T8849] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1250'.
[  126.568535][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'.
[  126.691350][ T8862] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1256'.
[  126.694495][ T8862] unsupported nlmsg_type 40
[  126.933800][ T8879] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  126.937623][ T8879] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  127.849020][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'.
[  128.063573][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1284'.
[  128.680534][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.683933][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.800884][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.811782][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.991908][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  128.995194][   T24] lo speed is unknown, defaulting to 1000
[  129.003437][   T24] syz1: Port: 1 Link DOWN
[  129.003506][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.003535][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.017105][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.234105][ T8982] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1302'.
[  129.261112][ T8978] lo speed is unknown, defaulting to 1000
[  129.483576][ T8978] IPVS: Unknown mcast interface: hsr0
[  130.680842][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'.
[  131.281944][ T9060] netlink: 'syz.0.1327': attribute type 3 has an invalid length.
[  131.390375][ T9066] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1330'.
[  131.604096][ T9082] pimreg: entered allmulticast mode
[  131.616176][ T9082] dvmrp8: entered allmulticast mode
[  131.642086][ T9082] pimreg: left allmulticast mode
[  131.644392][ T9082] dvmrp8: left allmulticast mode
[  132.274064][ T9118] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1350'.
[  132.647315][ T9135] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  132.711309][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.714033][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.912922][ T9153] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1366'.
[  133.242233][ T9173] netlink: 'syz.1.1375': attribute type 13 has an invalid length.
[  134.054951][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'.
[  134.273524][ T9232] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1402'.
[  134.521814][ T9252] lo speed is unknown, defaulting to 1000
[  134.779235][ T9270] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.833174][ T9270] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  134.837300][ T9270] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  134.858797][ T9270] tipc: Resetting bearer <eth:syzkaller0>
[  135.125560][ T9279] netlink: 'syz.1.1421': attribute type 10 has an invalid length.
[  135.130662][ T9279] bond0: (slave wlan1): Opening slave failed
[  135.283161][   T60] block nbd0: Possible stuck request ffff8880215c0000: control (read@0,1024B). Runtime 60 seconds
[  135.287837][   T60] block nbd0: Possible stuck request ffff8880215c0200: control (read@1024,1024B). Runtime 60 seconds
[  135.292169][   T60] block nbd0: Possible stuck request ffff8880215c0400: control (read@2048,1024B). Runtime 60 seconds
[  135.296523][   T60] block nbd0: Possible stuck request ffff8880215c0600: control (read@3072,1024B). Runtime 60 seconds
[  135.312734][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  135.451840][ T9309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1434'.
[  135.465039][ T9309] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1434'.
[  135.698161][ T9325] syzkaller0: entered promiscuous mode
[  135.703179][ T9325] syzkaller0: entered allmulticast mode
[  135.770001][ T9327] lo speed is unknown, defaulting to 1000
[  135.869158][ T5961] tipc: Node number set to 975458484
[  135.990532][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'.
[  136.532080][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'.
[  136.601273][ T9369] netlink: 'syz.2.1463': attribute type 1 has an invalid length.
[  137.299547][ T9418] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  137.444519][ T9431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1494'.
[  137.450861][ T9431] 8021q: VLANs not supported on ipvlan1
[  137.459790][ T9431] macsec1: entered promiscuous mode
[  137.462659][ T9431] macsec1: entered allmulticast mode
[  137.620090][ T9446] netlink: 'syz.2.1500': attribute type 2 has an invalid length.
[  137.623228][ T9446] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.1500'.
[  137.862056][ T9467] ieee802154 phy0 wpan0: encryption failed: -22
[  137.907994][ T9464] lo speed is unknown, defaulting to 1000
[  138.266777][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1521'.
[  138.297140][ T9493] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  138.301835][ T9489] geneve2: entered promiscuous mode
[  138.303992][ T9489] geneve2: entered allmulticast mode
[  138.456460][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1529'.
[  138.771748][   T24] IPVS: starting estimator thread 0...
[  138.797159][ T9528] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1537'.
[  138.809326][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'.
[  138.867379][ T9526] IPVS: using max 42 ests per chain, 100800 per kthread
[  138.911095][ T9536] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1541'.
[  139.357450][ T9566] openvswitch: netlink: Actions may not be safe on all matching packets
[  139.430180][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'.
[  139.497668][ T9574] vlan2: entered allmulticast mode
[  139.502299][ T9574] batadv0: entered allmulticast mode
[  139.536898][ T9578] macvtap1: entered allmulticast mode
[  139.539281][ T9578] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  139.542863][ T9578] batman_adv: batadv0: Adding interface: macvtap1
[  139.545240][ T9578] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.554951][ T9578] batman_adv: batadv0: Interface activated: macvtap1
[  139.664308][ T9593] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  140.198229][ T9655] : entered promiscuous mode
[  140.244083][ T9661] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.249227][ T9661] syzkaller0: entered promiscuous mode
[  140.250964][ T9661] syzkaller0: entered allmulticast mode
[  140.255570][ T9661] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  140.272021][ T9661] tipc: Resetting bearer <eth:syzkaller0>
[  140.276877][ T9660] tipc: Resetting bearer <eth:syzkaller0>
[  140.291517][ T9660] tipc: Disabling bearer <eth:syzkaller0>
[  141.024459][ T9712] syzkaller0 speed is unknown, defaulting to 1000
[  141.027124][ T9712] syzkaller0 speed is unknown, defaulting to 1000
[  141.041368][ T9712] syzkaller0 speed is unknown, defaulting to 1000
[  141.054954][ T9712] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  141.076631][ T9712] syzkaller0 speed is unknown, defaulting to 1000
[  141.082455][ T9712] syzkaller0 speed is unknown, defaulting to 1000
[  141.086660][ T9712] syzkaller0 speed is unknown, defaulting to 1000
[  141.136896][ T9718] __nla_validate_parse: 3 callbacks suppressed
[  141.136914][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'.
[  141.188879][ T9721] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1625'.
[  141.451463][ T9731] lo speed is unknown, defaulting to 1000
[  141.454815][ T9731] syzkaller0 speed is unknown, defaulting to 1000
[  141.580889][ T9739] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1630'.
[  141.601251][ T9739] netlink: 'syz.0.1630': attribute type 1 has an invalid length.
[  141.634796][ T9739] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.664892][ T9739] bond2: (slave gretap1): making interface the new active one
[  141.677548][ T9739] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  141.713292][ T9739] syz.0.1630 (9739) used greatest stack depth: 19864 bytes left
[  141.786689][ T9745] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1632'.
[  142.280567][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1635'.
[  142.392176][ T9758] netlink: 'syz.1.1637': attribute type 10 has an invalid length.
[  142.395903][ T9758] bond0: (slave wlan1): Opening slave failed
[  142.404180][ T9758] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  142.643604][ T9778] lo speed is unknown, defaulting to 1000
[  142.671114][ T9778] syzkaller0 speed is unknown, defaulting to 1000
[  142.988994][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1655'.
[  143.173412][ T9816] bridge_slave_0: left allmulticast mode
[  143.175907][ T9816] bridge_slave_0: left promiscuous mode
[  143.187833][ T9816] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.196451][ T9816] bridge_slave_1: left allmulticast mode
[  143.201947][ T9816] bridge_slave_1: left promiscuous mode
[  143.204620][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.214848][ T9816] bond0: (slave bond_slave_0): Releasing backup interface
[  143.234227][ T9816] bond0: (slave bond_slave_1): Releasing backup interface
[  143.253468][ T9816] team0: Port device team_slave_0 removed
[  143.266134][ T9816] team0: Port device team_slave_1 removed
[  143.271874][ T9816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.275182][ T9816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.286491][ T9816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.290890][ T9816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.323627][ T9816] batman_adv: batadv0: Interface deactivated: vxlan0
[  143.326435][ T9816] batman_adv: batadv0: Removing interface: vxlan0
[  143.335253][ T9816] bond1: (slave veth3): Releasing backup interface
[  143.362768][ T9816] bond2: (slave gretap1): Releasing active interface
[  143.368703][ T9823] ieee802154 phy0 wpan0: encryption failed: -22
[  143.416096][ T9823] team0: Mode changed to "loadbalance"
[  143.467430][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1665'.
[  143.799978][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1674'.
[  143.823484][ T9855] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1675'.
[  143.832991][ T9853] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  143.906129][ T9859] netlink: 'syz.2.1677': attribute type 4 has an invalid length.
[  144.126524][ T9885] vlan2: entered promiscuous mode
[  144.130850][ T9885] bond0: entered promiscuous mode
[  144.133094][ T9885] team0: entered promiscuous mode
[  144.285962][ T9900] lo speed is unknown, defaulting to 1000
[  144.293303][ T9904] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  144.301137][ T9900] syzkaller0 speed is unknown, defaulting to 1000
[  144.355933][ T9907] netlink: 'syz.2.1698': attribute type 1 has an invalid length.
[  144.813948][ T9947] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1716'.
[  146.668968][T10010] ieee802154 phy0 wpan0: encryption failed: -22
[  147.339728][T10022] __nla_validate_parse: 2 callbacks suppressed
[  147.339744][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'.
[  147.351602][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'.
[  147.358850][T10022] netlink: 'syz.2.1750': attribute type 12 has an invalid length.
[  147.362480][T10022] netlink: 'syz.2.1750': attribute type 14 has an invalid length.
[  147.447061][T10031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1753'.
[  147.496470][T10038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1757'.
[  147.568721][T10046] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1759'.
[  148.037447][ T5294] udevd[5294]: worker [5848] /devices/virtual/block/nbd0 is taking a long time
[  148.089343][T10071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1771'.
[  148.092413][T10071] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1771'.
[  148.752304][T10113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.789613][T10113] syzkaller0: entered promiscuous mode
[  148.792014][T10113] syzkaller0: entered allmulticast mode
[  148.794841][T10113] tipc: Resetting bearer <eth:syzkaller0>
[  148.811462][T10111] tipc: Resetting bearer <eth:syzkaller0>
[  149.036325][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'.
[  149.787418][ T5962] tipc: Node number set to 1590292762
[  150.259610][T10111] tipc: Disabling bearer <eth:syzkaller0>
[  150.833625][T10174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1815'.
[  150.984917][T10181] team0: Unable to change to the same mode the team is in
[  151.202825][T10208] netlink: 'syz.0.1831': attribute type 15 has an invalid length.
[  151.218662][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1829'.
[  151.416644][T10221] netlink: 'syz.0.1837': attribute type 25 has an invalid length.
[  151.486724][T10227] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  151.719213][T10244] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.049227][T10271] tipc: Enabled bearer <eth:vlan0>, priority 10
[  152.105261][T10273] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  152.409006][T10287] __nla_validate_parse: 3 callbacks suppressed
[  152.409021][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1865'.
[  152.793025][T10299] sctp: [Deprecated]: syz.1.1871 (pid 10299) Use of int in max_burst socket option deprecated.
[  152.793025][T10299] Use struct sctp_assoc_value instead
[  153.095234][T10312] ip6tnl0: left promiscuous mode
[  153.106677][T10312] ip6tnl0: left allmulticast mode
[  153.353760][T10312] tipc: Resetting bearer <eth:vlan0>
[  153.425091][T10312] veth3: left promiscuous mode
[  153.429170][T10312] vti0: left promiscuous mode
[  153.431027][T10312] vti0: left allmulticast mode
[  153.442973][T10312] macsec1: left promiscuous mode
[  153.444672][T10312] macsec1: left allmulticast mode
[  153.448622][T10312] geneve2: left promiscuous mode
[  153.450570][T10312] geneve2: left allmulticast mode
[  153.459975][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.469771][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.473055][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.475926][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.479358][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.483233][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.486930][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  153.490037][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.601779][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'.
[  153.941200][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'.
[  154.229767][T10372] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1904'.
[  154.424062][T10384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1911'.
[  154.810414][T10418] IPv6: sit1: Disabled Multicast RS
[  154.853144][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'.
[  154.886270][T10422] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1926'.
[  155.007658][T10428] netlink: 'syz.0.1929': attribute type 1 has an invalid length.
[  155.110646][T10432] netlink: 'syz.0.1931': attribute type 1 has an invalid length.
[  155.384772][T10455] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1942'.
[  155.526796][T10468] syzkaller1: entered promiscuous mode
[  155.530014][T10468] syzkaller1: entered allmulticast mode
[  155.890774][T10488] netlink: 'syz.2.1958': attribute type 4 has an invalid length.
[  156.311877][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1962'.
[  156.855962][T10515] syzkaller0: entered promiscuous mode
[  156.860417][T10515] syzkaller0: entered allmulticast mode
[  157.131658][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1977'.
[  158.375990][T10611] netlink: 'syz.1.2011': attribute type 28 has an invalid length.
[  158.406683][T10613] netem: change failed
[  158.687516][T10637] __nla_validate_parse: 1 callbacks suppressed
[  158.687533][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'.
[  158.692870][T10637] openvswitch: netlink: Missing key (keys=40, expected=100)
[  158.873312][T10652] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  158.930565][T10660] netlink: 'syz.1.2034': attribute type 21 has an invalid length.
[  159.343583][T10686] lo speed is unknown, defaulting to 1000
[  159.351892][T10686] syzkaller0 speed is unknown, defaulting to 1000
[  160.398420][T10750] netlink: 'syz.0.2074': attribute type 1 has an invalid length.
[  161.242475][T10800] syzkaller1: entered promiscuous mode
[  161.245069][T10800] syzkaller1: entered allmulticast mode
[  161.501649][T10817] netlink: 'syz.0.2105': attribute type 10 has an invalid length.
[  161.505314][T10817] 8021q: adding VLAN 0 to HW filter on device team0
[  161.513769][T10817] bond0: (slave team0): Enslaving as an active interface with a down link
[  161.533080][T10821] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2107'.
[  161.636466][T10832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.796241][T10849] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  161.827037][T10849] 8021q: adding VLAN 0 to HW filter on device bond3
[  161.855272][T10849] vlan2: entered promiscuous mode
[  161.858502][T10849] bond3: entered promiscuous mode
[  161.860905][T10849] vlan2: entered allmulticast mode
[  161.863098][T10849] bond3: entered allmulticast mode
[  161.885409][T10849] bond3: (slave gretap2): making interface the new active one
[  161.890438][T10849] gretap2: entered promiscuous mode
[  161.893396][T10849] gretap2: entered allmulticast mode
[  161.898853][T10849] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  161.912743][T10849] syz.0.2121 (10849) used greatest stack depth: 18792 bytes left
[  161.974358][T10861] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2126'.
[  161.992488][T10863] netlink: 'syz.0.2127': attribute type 1 has an invalid length.
[  161.995750][T10863] netlink: 'syz.0.2127': attribute type 2 has an invalid length.
[  162.344683][T10889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2140'.
[  162.793867][T10907] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2148'.
[  162.800410][T10907] ..0: renamed from hsr0
[  162.804181][T10907] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.808264][T10907] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.812411][T10907] ..0: entered allmulticast mode
[  162.814393][T10907] hsr_slave_0: entered allmulticast mode
[  162.816415][T10907] hsr_slave_1: entered allmulticast mode
[  162.821021][T10907] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  163.314860][T10927] netlink: 'syz.2.2158': attribute type 13 has an invalid length.
[  163.317751][T10927] netlink: 'syz.2.2158': attribute type 17 has an invalid length.
[  163.400602][T10927] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.405577][T10927] 8021q: adding VLAN 0 to HW filter on device team0
[  163.416235][T10927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.441312][ T5962] lo speed is unknown, defaulting to 1000
[  163.443602][ T5962] syz1: Port: 1 Link ACTIVE
[  163.515367][T10927] lo speed is unknown, defaulting to 1000
[  163.526954][T10927] syzkaller0 speed is unknown, defaulting to 1000
[  163.717558][T10943] lo speed is unknown, defaulting to 1000
[  163.719734][T10943] lo speed is unknown, defaulting to 1000
[  163.722046][T10943] lo speed is unknown, defaulting to 1000
[  163.742597][T10943] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  163.760252][T10943] lo speed is unknown, defaulting to 1000
[  163.772244][T10943] lo speed is unknown, defaulting to 1000
[  163.775974][T10943] lo speed is unknown, defaulting to 1000
[  163.779175][T10943] lo speed is unknown, defaulting to 1000
[  164.265020][T10977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2179'.
[  164.486275][T10995] syzkaller1: entered promiscuous mode
[  164.489121][T10995] syzkaller1: entered allmulticast mode
[  164.735914][T11006] pim6reg1: entered promiscuous mode
[  164.738351][T11006] pim6reg1: entered allmulticast mode
[  164.881418][T11010] lo speed is unknown, defaulting to 1000
[  164.885396][T11010] syzkaller0 speed is unknown, defaulting to 1000
[  164.889950][T11010] lo speed is unknown, defaulting to 1000
[  164.983049][T11015] GUP no longer grows the stack in syz.1.2197 (11015): 200000006000-20000000a000 (200000005000)
[  164.987822][T11015] CPU: 0 UID: 0 PID: 11015 Comm: syz.1.2197 Not tainted syzkaller #0 PREEMPT(full) 
[  164.987842][T11015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.987851][T11015] Call Trace:
[  164.987857][T11015]  <TASK>
[  164.987864][T11015]  dump_stack_lvl+0x189/0x250
[  164.987889][T11015]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.987906][T11015]  ? __pfx__printk+0x10/0x10
[  164.987923][T11015]  ? find_vma+0xe7/0x160
[  164.987954][T11015]  __get_user_pages+0x24d0/0x2ce0
[  164.987969][T11015]  ? __lock_acquire+0xab9/0xd20
[  164.988007][T11015]  ? __gup_longterm_locked+0xc68/0x1660
[  164.988028][T11015]  __gup_longterm_locked+0xde9/0x1660
[  164.988050][T11015]  ? try_grab_folio_fast+0x1be/0x4f0
[  164.988073][T11015]  ? gup_fast_fallback+0x195f/0x2010
[  164.988094][T11015]  gup_fast_fallback+0x1e6a/0x2010
[  164.988134][T11015]  ? __pfx_gup_fast_fallback+0x10/0x10
[  164.988148][T11015]  ? __mutex_lock+0x335/0x1350
[  164.988166][T11015]  ? futex_unqueue+0x22/0x240
[  164.988181][T11015]  ? futex_unqueue+0x22/0x240
[  164.988195][T11015]  ? futex_unqueue+0x22/0x240
[  164.988209][T11015]  ? is_valid_gup_args+0x11f/0x200
[  164.988227][T11015]  ? get_user_pages_fast+0x4d/0xb0
[  164.988245][T11015]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  164.988266][T11015]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  164.988286][T11015]  ? wait_for_space+0x24d/0x2d0
[  164.988318][T11015]  iov_iter_get_pages2+0x5e/0xa0
[  164.988338][T11015]  __se_sys_vmsplice+0x548/0x10d0
[  164.988373][T11015]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  164.988392][T11015]  ? __pfx_futex_wait+0x10/0x10
[  164.988420][T11015]  ? __lock_acquire+0xab9/0xd20
[  164.988466][T11015]  ? do_pipe2+0xf7/0x170
[  164.988480][T11015]  ? rcu_is_watching+0x15/0xb0
[  164.988498][T11015]  ? do_syscall_64+0xbe/0x3b0
[  164.988546][T11015]  do_syscall_64+0xfa/0x3b0
[  164.988561][T11015]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.988575][T11015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.988589][T11015]  ? exc_page_fault+0x9f/0xf0
[  164.988604][T11015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.988617][T11015] RIP: 0033:0x7fbc0fb8ebe9
[  164.988631][T11015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.988642][T11015] RSP: 002b:00007fbc109ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  164.988657][T11015] RAX: ffffffffffffffda RBX: 00007fbc0fdc5fa0 RCX: 00007fbc0fb8ebe9
[  164.988667][T11015] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  164.988675][T11015] RBP: 00007fbc0fc11e19 R08: 0000000000000000 R09: 0000000000000000
[  164.988683][T11015] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  164.988690][T11015] R13: 00007fbc0fdc6038 R14: 00007fbc0fdc5fa0 R15: 00007ffc54595608
[  164.988713][T11015]  </TASK>
[  165.350306][   T60] block nbd0: Possible stuck request ffff8880215c0000: control (read@0,1024B). Runtime 90 seconds
[  165.357318][   T60] block nbd0: Possible stuck request ffff8880215c0200: control (read@1024,1024B). Runtime 90 seconds
[  165.361506][   T60] block nbd0: Possible stuck request ffff8880215c0400: control (read@2048,1024B). Runtime 90 seconds
[  165.365551][   T60] block nbd0: Possible stuck request ffff8880215c0600: control (read@3072,1024B). Runtime 90 seconds
[  165.374766][T11031] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  165.450314][T11033] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  165.542829][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2210'.
[  165.607550][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'.
[  165.610943][T11047] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  165.614062][T11047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.831013][T11068] netlink: 'syz.2.2223': attribute type 1 has an invalid length.
[  166.342525][T11106] netlink: 'syz.1.2241': attribute type 1 has an invalid length.
[  166.344998][T11106] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2241'.
[  166.491745][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'.
[  166.499827][T11120] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2247'.
[  166.621233][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2252'.
[  166.624994][T11129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2252'.
[  166.632558][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2252'.
[  166.636001][T11129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2252'.
[  166.690195][T11130] syzkaller1: entered promiscuous mode
[  166.692386][T11130] syzkaller1: entered allmulticast mode
[  166.980637][T11158] bridge_slave_0: left allmulticast mode
[  166.982510][T11158] bridge_slave_0: left promiscuous mode
[  166.984680][T11158] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.995051][T11158] bridge_slave_1: left allmulticast mode
[  166.997046][T11158] bridge_slave_1: left promiscuous mode
[  167.005382][T11158] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.014170][T11158] bond0: (slave bond_slave_0): Releasing backup interface
[  167.019768][T11158] bond0: (slave bond_slave_1): Releasing backup interface
[  167.030005][T11158] team0: Port device team_slave_0 removed
[  167.034258][T11158] team0: Port device team_slave_1 removed
[  167.036845][T11158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.040966][T11158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.046537][T11158] team0: Port device batadv1 removed
[  167.244019][T11179] netlink: 'syz.0.2275': attribute type 3 has an invalid length.
[  168.086382][T11255] netlink: 'syz.0.2309': attribute type 1 has an invalid length.
[  168.119858][T11255] 8021q: adding VLAN 0 to HW filter on device bond4
[  168.346280][T11284] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  168.692524][T11312] bond0: (slave team0): Releasing backup interface
[  168.702801][T11312] bond3: (slave gretap2): Releasing active interface
[  168.705681][T11312] gretap2: left promiscuous mode
[  168.708244][T11312] gretap2: left allmulticast mode
[  169.194876][T11359] IPv6: sit2: Disabled Multicast RS
[  169.202943][T11359] sit2: entered allmulticast mode
[  169.339959][T11373] __nla_validate_parse: 18 callbacks suppressed
[  169.339976][T11373] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2361'.
[  169.978330][T11412] openvswitch: netlink: Message has 4 unknown bytes.
[  169.981074][T11412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.041757][T11418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2382'.
[  170.124473][T11423] netlink: 'syz.2.2384': attribute type 1 has an invalid length.
[  170.176412][T11428] lo speed is unknown, defaulting to 1000
[  170.180755][T11428] syzkaller0 speed is unknown, defaulting to 1000
[  170.186413][T11428] lo speed is unknown, defaulting to 1000
[  170.272021][T11435] netlink: 'syz.2.2390': attribute type 1 has an invalid length.
[  170.323718][T11442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2391'.
[  170.326748][T11442] tc_dump_action: action bad kind
[  170.429388][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2393'.
[  170.616670][T11460] netlink: 'syz.2.2399': attribute type 21 has an invalid length.
[  170.623386][T11460] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2399'.
[  170.817111][T11477] netlink: 'syz.0.2407': attribute type 1 has an invalid length.
[  170.828506][T11477] netlink: 'syz.0.2407': attribute type 3 has an invalid length.
[  170.835315][T11477] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2407'.
[  170.840490][T11477] NCSI netlink: No device for ifindex 246
[  170.973490][T11491] netlink: 'syz.2.2414': attribute type 13 has an invalid length.
[  171.023738][T11497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2418'.
[  171.081037][T11503] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2421'.
[  171.404219][T11524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2430'.
[  171.523039][T11530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'.
[  171.567963][T11532] macvlan3: entered allmulticast mode
[  171.570264][T11532] bond0: entered allmulticast mode
[  171.573631][T11532] bond0: left allmulticast mode
[  171.890706][T11542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.443874][T11560] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  172.462612][T11560] veth5: left promiscuous mode
[  172.464772][T11560] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  172.478420][T11560] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  172.541857][T11560] batman_adv: batadv0: Interface deactivated: macvtap1
[  172.554259][T11560] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  172.558802][T11560] macvtap1: left allmulticast mode
[  172.692367][T11589] netlink: 'syz.0.2460': attribute type 18 has an invalid length.
[  173.351221][T11629] netlink: 'syz.1.2478': attribute type 1 has an invalid length.
[  173.647613][T11655] lo speed is unknown, defaulting to 1000
[  173.651991][T11655] syzkaller0 speed is unknown, defaulting to 1000
[  173.655859][T11655] lo speed is unknown, defaulting to 1000
[  174.001513][T11684] netlink: 'syz.2.2504': attribute type 2 has an invalid length.
[  174.066255][T11688] ip6erspan0: entered allmulticast mode
[  174.564431][T11723] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.581043][T11723] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  174.910908][T11744] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  174.917061][T11744] Bluetooth: MGMT ver 1.23
[  174.921800][T11744] __nla_validate_parse: 7 callbacks suppressed
[  174.921814][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2530'.
[  174.928578][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2530'.
[  175.102756][T11752] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2534'.
[  175.106617][T11752] netlink: zone id is out of range
[  175.109975][T11752] netlink: zone id is out of range
[  175.111992][T11752] netlink: zone id is out of range
[  175.114011][T11752] netlink: zone id is out of range
[  175.116068][T11752] netlink: zone id is out of range
[  175.118692][T11752] netlink: zone id is out of range
[  175.120857][T11752] netlink: zone id is out of range
[  175.122846][T11752] netlink: zone id is out of range
[  175.959620][T11799] IPv6: sit2: Disabled Multicast RS
[  176.204526][T11807] lo speed is unknown, defaulting to 1000
[  176.218650][T11807] syzkaller0 speed is unknown, defaulting to 1000
[  176.223285][T11807] lo speed is unknown, defaulting to 1000
[  176.257998][T11808] netlink: 'syz.2.2560': attribute type 1 has an invalid length.
[  176.261011][T11808] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2560'.
[  176.682956][T11827] netlink: 'syz.2.2564': attribute type 13 has an invalid length.
[  176.686060][T11827] netlink: 'syz.2.2564': attribute type 17 has an invalid length.
[  176.711869][T11827] 8021q: adding VLAN 0 to HW filter on device team0
[  176.775004][T11827] lo speed is unknown, defaulting to 1000
[  176.783428][T11827] syzkaller0 speed is unknown, defaulting to 1000
[  176.792275][T11827] lo speed is unknown, defaulting to 1000
[  177.354201][T11857] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2579'.
[  177.384952][T11861] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2581'.
[  177.532394][T11873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2586'.
[  177.585368][T11878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2589'.
[  177.663400][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'.
[  177.672516][T11886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2593'.
[  178.076737][T11916] tun0: tun_chr_ioctl cmd 2148553947
[  179.005307][T11983] ..0: left allmulticast mode
[  179.008363][T11983] hsr_slave_0: left allmulticast mode
[  179.010581][T11983] hsr_slave_1: left allmulticast mode
[  179.041351][T11983] ip6erspan0: left allmulticast mode
[  179.077655][ T5312] lo speed is unknown, defaulting to 1000
[  179.079942][ T5312] syz1: Port: 1 Link DOWN
[  179.605420][T12025] lo speed is unknown, defaulting to 1000
[  179.609441][T12025] syzkaller0 speed is unknown, defaulting to 1000
[  179.612337][T12025] lo speed is unknown, defaulting to 1000
[  179.694670][T12035] netlink: 'syz.1.2662': attribute type 1 has an invalid length.
[  180.026815][T12053] net_ratelimit: 7 callbacks suppressed
[  180.026842][T12053] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  180.031626][T12053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.196115][T12059] netlink: 'syz.1.2674': attribute type 3 has an invalid length.
[  180.345833][T12066] __nla_validate_parse: 2 callbacks suppressed
[  180.345848][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'.
[  180.362701][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.362765][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'.
[  180.365877][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.365910][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.365959][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.494540][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2678'.
[  180.527831][T12074] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2678'.
[  180.843673][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2692'.
[  180.920576][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2696'.
[  180.967394][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2695'.
[  180.970827][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2695'.
[  180.981653][T12109] netlink: 'syz.1.2695': attribute type 4 has an invalid length.
[  181.010330][T12109] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2695'.
[  181.183052][T12125] netlink: 'syz.0.2703': attribute type 5 has an invalid length.
[  181.219536][T12127] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  181.296770][T12135] netlink: 'syz.0.2706': attribute type 1 has an invalid length.
[  181.324544][T12135] 8021q: adding VLAN 0 to HW filter on device bond5
[  181.350666][T12135] 8021q: adding VLAN 0 to HW filter on device bond5
[  181.353717][T12135] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  181.360037][T12135] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  181.425016][T12142] veth5: entered promiscuous mode
[  181.432602][T12142] bond5: (slave veth5): Enslaving as an active interface with a down link
[  181.772260][T12172] lo speed is unknown, defaulting to 1000
[  181.782185][T12172] syzkaller0 speed is unknown, defaulting to 1000
[  181.786150][T12172] lo speed is unknown, defaulting to 1000
[  181.936586][T12183] lo speed is unknown, defaulting to 1000
[  181.947465][T12183] syzkaller0 speed is unknown, defaulting to 1000
[  181.955422][T12183] lo speed is unknown, defaulting to 1000
[  182.473050][T12201] syzkaller1: entered promiscuous mode
[  182.475051][T12201] syzkaller1: entered allmulticast mode
[  182.835973][T12209] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2737'.
[  183.405748][T12249] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.461559][T12249] siw: device registration error -23
[  183.645313][T11730] tipc: Subscription rejected, illegal request
[  185.066800][T12317] netlink: 'syz.2.2787': attribute type 4 has an invalid length.
[  185.476530][T12336] tipc: Enabled bearer <eth:team0>, priority 0
[  185.792569][T12355] __nla_validate_parse: 6 callbacks suppressed
[  185.792586][T12355] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2802'.
[  185.981539][T12369] pimreg: tun_chr_ioctl cmd 1074025677
[  185.983858][T12369] pimreg: linktype set to 1
[  186.607451][ T5312] tipc: Node number set to 1579125766
[  186.781046][T12408] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2828'.
[  187.092136][T12438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2841'.
[  187.249923][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2846'.
[  187.255259][T12451] team0: invalid flags given to default FDB implementation
[  187.540760][T12472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2857'.
[  187.620742][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'.
[  187.689512][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'.
[  187.692449][T12485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'.
[  187.794461][T12494] lo speed is unknown, defaulting to 1000
[  187.799009][T12494] syzkaller0 speed is unknown, defaulting to 1000
[  187.802326][T12494] lo speed is unknown, defaulting to 1000
[  187.851031][T12499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2867'.
[  188.197730][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2878'.
[  188.214709][T12521] macvtap0: entered promiscuous mode
[  188.217094][T12521] erspan0: entered promiscuous mode
[  188.227453][T12521] macvtap0: entered allmulticast mode
[  188.230029][T12521] erspan0: entered allmulticast mode
[  188.612624][T12546] openvswitch: netlink: Multiple metadata blocks provided
[  188.790779][T12554] netlink: 'syz.1.2891': attribute type 1 has an invalid length.
[  189.134539][T12584] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.137899][T12584] syzkaller0: entered promiscuous mode
[  189.140273][T12584] syzkaller0: entered allmulticast mode
[  189.168870][T12584] tipc: Resetting bearer <eth:syzkaller0>
[  189.172488][T12583] tipc: Resetting bearer <eth:syzkaller0>
[  189.199069][T12583] tipc: Disabling bearer <eth:syzkaller0>
[  189.734540][T12643] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.857681][T12654] delete_channel: no stack
[  190.432838][T12676] lo speed is unknown, defaulting to 1000
[  190.437156][T12676] syzkaller0 speed is unknown, defaulting to 1000
[  190.442001][T12676] lo speed is unknown, defaulting to 1000
[  190.532572][T12681] netlink: 'syz.1.2948': attribute type 1 has an invalid length.
[  190.827066][T12686] 8021q: adding VLAN 0 to HW filter on device bond4
[  191.000454][T12698] netlink: 'syz.2.2955': attribute type 5 has an invalid length.
[  191.730009][T12746] __nla_validate_parse: 8 callbacks suppressed
[  191.730021][T12746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2978'.
[  191.903525][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2986'.
[  191.962085][T12768] netlink: 'syz.2.2987': attribute type 2 has an invalid length.
[  192.185817][T12788] !: renamed from dummy0
[  192.238793][T12788] lo speed is unknown, defaulting to 1000
[  192.242051][T12788] syzkaller0 speed is unknown, defaulting to 1000
[  192.245528][T12788] lo speed is unknown, defaulting to 1000
[  192.349727][T12802] tipc: Failed to remove unknown binding: 66,1,1/1590292762:3887152853/3887152855
[  192.356068][T12802] tipc: Failed to remove unknown binding: 66,1,1/1590292762:3887152853/3887152855
[  192.395992][T12800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3003'.
[  192.534164][T12815] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3010'.
[  192.624426][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'.
[  192.834032][T12830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3016'.
[  192.911868][T12836] netlink: 'syz.1.3019': attribute type 49 has an invalid length.
[  193.466127][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'.
[  193.472530][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'.
[  193.482083][T12848] macvlan2: entered promiscuous mode
[  193.524402][T12850] netlink: 'syz.2.3026': attribute type 21 has an invalid length.
[  195.078267][T12903] bridge0: port 1(erspan0) entered blocking state
[  195.082082][T12903] bridge0: port 1(erspan0) entered disabled state
[  195.084816][T12903] erspan0: entered allmulticast mode
[  195.091083][T12903] erspan0: entered promiscuous mode
[  195.099601][T12903] erspan0: left allmulticast mode
[  195.101700][T12903] erspan0: left promiscuous mode
[  195.105202][T12903] bridge0: port 1(erspan0) entered disabled state
[  195.325985][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'.
[  195.427457][   T60] block nbd0: Possible stuck request ffff8880215c0000: control (read@0,1024B). Runtime 120 seconds
[  195.431199][   T60] block nbd0: Possible stuck request ffff8880215c0200: control (read@1024,1024B). Runtime 120 seconds
[  195.435369][   T60] block nbd0: Possible stuck request ffff8880215c0400: control (read@2048,1024B). Runtime 120 seconds
[  195.439732][   T60] block nbd0: Possible stuck request ffff8880215c0600: control (read@3072,1024B). Runtime 120 seconds
[  195.673618][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3055'.
[  196.238359][T12933] openvswitch: netlink: IP tunnel dst address not specified
[  196.399655][T12949] veth11: entered promiscuous mode
[  196.496945][T12960] netlink: 'syz.1.3076': attribute type 1 has an invalid length.
[  196.724344][T12988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.729912][T12988] syzkaller0: entered promiscuous mode
[  196.731906][T12988] syzkaller0: entered allmulticast mode
[  196.764477][T12988] tipc: Resetting bearer <eth:syzkaller0>
[  196.777441][T12987] tipc: Resetting bearer <eth:syzkaller0>
[  196.792796][T12987] tipc: Disabling bearer <eth:syzkaller0>
[  196.827054][T12993] __nla_validate_parse: 3 callbacks suppressed
[  196.827064][T12993] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3086'.
[  196.833322][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'.
[  196.836995][T12993] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3086'.
[  196.842106][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'.
[  196.845632][T12993] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3086'.
[  197.886693][T13039] sch_fq: defrate 0 ignored.
[  198.002973][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'.
[  198.120208][T13059] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3119'.
[  198.210216][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3122'.
[  198.219049][T13059] bond0 (unregistering): Released all slaves
[  198.341900][T13073] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3123'.
[  198.440552][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3126'.
[  198.660350][T13096] syzkaller0: entered promiscuous mode
[  198.662515][T13096] syzkaller0: entered allmulticast mode
[  198.903514][T13109] tipc: Invalid UDP bearer configuration
[  198.903560][T13109] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  199.252369][T13134] netlink: 'syz.1.3151': attribute type 7 has an invalid length.
[  199.282602][T13134] bridge0: port 1(bond6) entered blocking state
[  199.284811][T13134] bridge0: port 1(bond6) entered disabled state
[  199.288334][T13134] bond6: entered allmulticast mode
[  199.430791][T13147] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.471305][T13149] netlink: 'syz.1.3158': attribute type 15 has an invalid length.
[  199.478883][T13151] netlink: 'syz.0.3159': attribute type 8 has an invalid length.
[  199.764450][T13176] vcan0: tx drop: invalid da for name 0x0000000000000002
[  199.796265][T13180] netlink: 'syz.1.3172': attribute type 8 has an invalid length.
[  199.933574][T13189] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  199.940521][T13189] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  199.943558][T13189] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  200.005489][T13194] netlink: 'syz.1.3175': attribute type 1 has an invalid length.
[  200.013218][T13194] netlink: 'syz.1.3175': attribute type 1 has an invalid length.
[  201.551587][T13333] sctp: [Deprecated]: syz.1.3216 (pid 13333) Use of struct sctp_assoc_value in delayed_ack socket option.
[  201.551587][T13333] Use struct sctp_sack_info instead
[  202.113376][T13349] unknown channel width for channel at 909000KHz?
[  202.116045][T13349] unknown channel width for channel at 909000KHz?
[  202.120519][T13349] unknown channel width for channel at 909000KHz?
[  202.720897][T13372] __nla_validate_parse: 10 callbacks suppressed
[  202.720908][T13372] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3234'.
[  203.907358][T13423] netlink: 'syz.2.3256': attribute type 1 has an invalid length.
[  203.911111][T13423] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3256'.
[  203.915031][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3256'.
[  204.012083][T13437] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3264'.
[  204.015572][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3264'.
[  204.027295][T13437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3264'.
[  204.170159][T13456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.174314][T13456] netlink: 'syz.0.3273': attribute type 1 has an invalid length.
[  204.176737][T13456] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3273'.
[  204.200906][T13458] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3274'.
[  204.492626][T13478] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3281'.
[  204.495708][T13478] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3281'.
[  204.500191][T13478] netlink: 'syz.0.3281': attribute type 5 has an invalid length.
[  204.516367][T13478] netlink: 'syz.0.3281': attribute type 6 has an invalid length.
[  204.633777][T13488] IPVS: Error connecting to the multicast addr
[  205.170601][T13529] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  205.220781][T13533] netlink: 'syz.1.3309': attribute type 1 has an invalid length.
[  205.294123][T13540] netlink: 'syz.2.3312': attribute type 1 has an invalid length.
[  205.375751][T13548] netlink: 'syz.2.3315': attribute type 10 has an invalid length.
[  205.673298][T13583] netlink: 'syz.0.3333': attribute type 2 has an invalid length.
[  205.786476][T13593] netlink: 'syz.2.3335': attribute type 29 has an invalid length.
[  205.965713][T13609] 8021q: adding VLAN 0 to HW filter on device bond7
[  205.981536][T13609] bond7: (slave erspan1): Enslaving as an active interface with an up link
[  206.015423][T13616] netlink: 'syz.1.3347': attribute type 10 has an invalid length.
[  206.976596][T13683] IPVS: stopping backup sync thread 9904 ...
[  207.788243][T13720] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.056758][T13750] __nla_validate_parse: 6 callbacks suppressed
[  208.056769][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'.
[  208.835278][T13782] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3421'.
[  209.099209][   T56] block nbd1: Receive control failed (result -107)
[  209.159922][T13793] nbd1: detected capacity change from 0 to 32
[  209.168883][ T5881] block nbd1: Dead connection, failed to find a fallback
[  209.175198][ T5881] block nbd1: shutting down sockets
[  209.184711][ T5881] blk_print_req_error: 138 callbacks suppressed
[  209.184728][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.199689][ T5881] buffer_io_error: 138 callbacks suppressed
[  209.199705][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.211438][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.215460][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.220704][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.227435][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.234185][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.240173][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.245252][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.250668][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.260355][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.264311][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.269375][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.272429][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.275824][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.279038][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.281940][ T5881] ldm_validate_partition_table(): Disk read failed.
[  209.284678][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.288038][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.291231][ T5881] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  209.296024][ T5881] Buffer I/O error on dev nbd1, logical block 0, async page read
[  209.302309][ T5881] Dev nbd1: unable to read RDB block 0
[  209.307588][ T5881]  nbd1: unable to read partition table
[  209.314543][ T5881] ldm_validate_partition_table(): Disk read failed.
[  209.318632][ T5881] Dev nbd1: unable to read RDB block 0
[  209.323577][ T5881]  nbd1: unable to read partition table
[  210.140653][T13835] gretap3: entered allmulticast mode
[  210.512010][T13847] bridge4: entered promiscuous mode
[  210.514661][T13847] bridge4: entered allmulticast mode
[  210.523425][T13847] team0: Port device bridge4 added
[  210.561484][T13851] validate_nla: 4 callbacks suppressed
[  210.561514][T13851] netlink: 'syz.0.3454': attribute type 29 has an invalid length.
[  210.566572][T13851] netlink: 'syz.0.3454': attribute type 29 has an invalid length.
[  210.571570][T13851] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3454'.
[  210.818051][T13876] netlink: 'syz.1.3467': attribute type 4 has an invalid length.
[  210.820665][T13876] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3467'.
[  210.835999][T13876] : renamed from bond0 (while UP)
[  211.014182][T13893] netem: change failed
[  211.066849][T13897] netlink: 'syz.1.3476': attribute type 1 has an invalid length.
[  211.072117][T13897] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3476'.
[  211.855503][T13926] 8021q: VLANs not supported on vxcan1
[  212.159938][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'.
[  212.212970][T13940] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  212.216270][T13940] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  212.226158][T13941] block nbd2: Unsupported socket: shutdown callout must be supported.
[  212.324475][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3498'.
[  212.343466][T13949] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3495'.
[  212.346794][T13949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3495'.
[  212.405028][T13953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.662082][T13971] netlink: 'syz.1.3508': attribute type 7 has an invalid length.
[  212.665128][T13971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3508'.
[  212.860805][T13986] netlink: 'syz.1.3515': attribute type 6 has an invalid length.
[  212.863498][T13986] netlink: 'syz.1.3515': attribute type 4 has an invalid length.
[  213.874352][T14037] netlink: 'syz.2.3537': attribute type 2 has an invalid length.
[  214.414812][T14080] __nla_validate_parse: 2 callbacks suppressed
[  214.414823][T14080] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3558'.
[  214.844147][T14121] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3575'.
[  214.902882][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'.
[  214.945745][T14132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.954778][T14134] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  215.023759][T14141] netlink: 'syz.0.3585': attribute type 33 has an invalid length.
[  215.026753][T14141] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3585'.
[  215.045624][T14144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3586'.
[  215.356381][T14169] netlink: 'syz.0.3597': attribute type 1 has an invalid length.
[  215.379057][T14171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3598'.
[  215.787488][T14197] _Z`Ԁ@: entered promiscuous mode
[  215.816324][T14199] syz_tun: entered allmulticast mode
[  215.824812][T14198] syz_tun: left allmulticast mode
[  215.865831][T14201] validate_nla: 1 callbacks suppressed
[  215.865847][T14201] netlink: 'syz.2.3611': attribute type 7 has an invalid length.
[  216.046192][T14215] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3618'.
[  216.202554][T14228] netlink: 'syz.1.3625': attribute type 2 has an invalid length.
[  216.595451][T14258] openvswitch: netlink: Message has 4 unknown bytes.
[  216.601622][T14258] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3637'.
[  216.649763][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3638'.
[  216.763866][T14270] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3643'.
[  216.769473][T14270] netlink: 'syz.1.3643': attribute type 2 has an invalid length.
[  216.945923][T14281] netlink: 'syz.2.3648': attribute type 1 has an invalid length.
[  217.027483][ T5901] Bluetooth: hci0: command tx timeout
[  217.113216][T14289] netlink: 'syz.2.3652': attribute type 10 has an invalid length.
[  217.118070][T14289] bond0: (slave wlan1): Opening slave failed
[  218.400826][T14393] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  218.437824][T14397] netlink: 'syz.1.3702': attribute type 1 has an invalid length.
[  218.462900][T14397] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.280746][T14471] netlink: 'syz.2.3720': attribute type 7 has an invalid length.
[  219.283473][T14471] netlink: 'syz.2.3720': attribute type 8 has an invalid length.
[  219.456823][T14480] netlink: 'syz.2.3724': attribute type 11 has an invalid length.
[  219.654883][T14488] netlink: 'syz.2.3725': attribute type 10 has an invalid length.
[  219.659370][T14488] bond0: (slave wlan1): Opening slave failed
[  220.247029][T14514] __nla_validate_parse: 13 callbacks suppressed
[  220.247045][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3737'.
[  220.264595][T14514] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3737'.
[  220.552581][T14528] bond0 (unregistering): Released all slaves
[  220.685611][T14538] pim6reg1: entered promiscuous mode
[  220.687964][T14538] pim6reg1: entered allmulticast mode
[  220.823414][T14544] syz_tun: entered allmulticast mode
[  220.855754][T14544] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  220.905425][T14544] 8021q: adding VLAN 0 to HW filter on device team0
[  220.909296][T14544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  220.914844][   T24] lo speed is unknown, defaulting to 1000
[  220.916901][   T24] syz2: Port: 1 Link ACTIVE
[  220.924991][T14542] syz_tun: left allmulticast mode
[  221.029202][T14555] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001
[  221.126447][T14556] bond0: (slave gretap0): Opening slave failed
[  221.832629][T14560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3755'.
[  222.074451][T14580] sctp: [Deprecated]: syz.1.3762 (pid 14580) Use of struct sctp_assoc_value in delayed_ack socket option.
[  222.074451][T14580] Use struct sctp_sack_info instead
[  222.253594][T14590] validate_nla: 1 callbacks suppressed
[  222.253606][T14590] netlink: 'syz.2.3769': attribute type 4 has an invalid length.
[  222.324734][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3773'.
[  223.011286][T14656] sctp: [Deprecated]: syz.2.3800 (pid 14656) Use of struct sctp_assoc_value in delayed_ack socket option.
[  223.011286][T14656] Use struct sctp_sack_info instead
[  223.030586][T14658] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3801'.
[  223.196585][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'.
[  223.213854][T14674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3808'.
[  223.245381][T14674] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3808'.
[  223.247992][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3811'.
[  223.316732][T14678] syzkaller0: entered promiscuous mode
[  223.319672][T14678] syzkaller0: entered allmulticast mode
[  223.326165][T14680] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  223.329410][T14680] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  223.333660][T14680] tipc: Resetting bearer <eth:syzkaller0>
[  224.791645][T14697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3820'.
[  225.022486][T14723] netlink: 'syz.2.3833': attribute type 4 has an invalid length.
[  225.029163][T14725] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  225.394377][T14754] __nla_validate_parse: 1 callbacks suppressed
[  225.394387][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3847'.
[  225.518551][   T60] block nbd0: Possible stuck request ffff8880215c0000: control (read@0,1024B). Runtime 150 seconds
[  225.522902][   T60] block nbd0: Possible stuck request ffff8880215c0200: control (read@1024,1024B). Runtime 150 seconds
[  225.527705][   T60] block nbd0: Possible stuck request ffff8880215c0400: control (read@2048,1024B). Runtime 150 seconds
[  225.532451][   T60] block nbd0: Possible stuck request ffff8880215c0600: control (read@3072,1024B). Runtime 150 seconds
[  225.540450][T14763] netlink: 'syz.2.3851': attribute type 12 has an invalid length.
[  225.591427][T14771] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  226.945763][  T792] lo speed is unknown, defaulting to 1000
[  226.949528][  T792] syz2: Port: 1 Link DOWN
[  226.954610][T14814] geneve3: entered promiscuous mode
[  226.956230][T14814] geneve3: entered allmulticast mode
[  226.958984][ T5927] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.967358][ T5927] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  226.970993][ T5927] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.973517][ T5927] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  226.976541][ T5927] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.004246][ T5927] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  227.008824][ T5927] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  227.011581][ T5927] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  227.023303][T14817] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3872'.
[  227.205143][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3881'.
[  227.226288][T14833] lo speed is unknown, defaulting to 1000
[  227.232700][T14833] syzkaller0 speed is unknown, defaulting to 1000
[  227.236174][T14835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3881'.
[  227.237988][T14833] lo speed is unknown, defaulting to 1000
[  227.350082][T14840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'.
[  227.355295][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'.
[  227.360691][T14840] netlink: 'syz.1.3882': attribute type 13 has an invalid length.
[  227.499970][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3885'.
[  227.513368][T14848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3885'.
[  227.903497][T14862] : (slave team0): Releasing backup interface
[  227.906938][T14862] team0: left promiscuous mode
[  227.920538][T14862] bond3: (slave veth5): Releasing active interface
[  227.936432][T14862] batman_adv: batadv0: Removing interface: macvtap1
[  227.960550][T14865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3892'.
[  227.964823][T14862] bond6: left allmulticast mode
[  227.966861][T14862] bridge0: port 1(bond6) entered disabled state
[  227.979303][T14862] bond7: (slave erspan1): Releasing backup interface
[  227.999419][T14865] team0: Failed to send options change via netlink (err -105)
[  228.002343][T14865] team0: Mode changed to "loadbalance"
[  228.168602][T14875] netlink: 'syz.0.3897': attribute type 1 has an invalid length.
[  228.222540][T14875] bond0: (slave geneve4): making interface the new active one
[  228.226162][T14875] bond0: (slave geneve4): Enslaving as an active interface with an up link
[  228.230802][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  228.234056][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  228.242520][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  228.245557][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  228.335921][T14882] lo speed is unknown, defaulting to 1000
[  228.342054][T14882] syzkaller0 speed is unknown, defaulting to 1000
[  228.345997][T14882] lo speed is unknown, defaulting to 1000
[  228.680059][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3910'.
[  228.739180][T14909] netlink: 'syz.0.3911': attribute type 21 has an invalid length.
[  228.742305][T14909] netlink: 'syz.0.3911': attribute type 22 has an invalid length.
[  228.745400][T14909] netlink: 'syz.0.3911': attribute type 23 has an invalid length.
[  228.752416][T14909] netlink: 'syz.0.3911': attribute type 25 has an invalid length.
[  228.839340][T14914] netlink: 'syz.0.3913': attribute type 10 has an invalid length.
[  229.122347][T14925] netlink: 'syz.0.3916': attribute type 1 has an invalid length.
[  229.249382][T14926] lo speed is unknown, defaulting to 1000
[  229.266877][T14926] syzkaller0 speed is unknown, defaulting to 1000
[  229.273262][T14926] lo speed is unknown, defaulting to 1000
[  230.184084][T14978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.187779][T14978] IPv6: NLM_F_CREATE should be set when creating new route
[  230.190513][T14978] IPv6: NLM_F_CREATE should be set when creating new route
[  230.193206][T14978] IPv6: NLM_F_CREATE should be set when creating new route
[  230.204428][T14978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  230.947422][T15028] __nla_validate_parse: 2 callbacks suppressed
[  230.947434][T15028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3962'.
[  231.509856][T15080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3980'.
[  231.531596][T15078] netlink: 'syz.1.3979': attribute type 21 has an invalid length.
[  231.534811][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'.
[  231.538850][T15078] netlink: 'syz.1.3979': attribute type 21 has an invalid length.
[  231.541498][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'.
[  231.896122][T15112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3995'.
[  232.680101][T15140] netlink: 'syz.0.4004': attribute type 13 has an invalid length.
[  232.682896][T15140] netlink: 'syz.0.4004': attribute type 17 has an invalid length.
[  232.751989][T15140] 8021q: adding VLAN 0 to HW filter on device team0
[  232.772962][T15140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  232.780060][ T5962] lo speed is unknown, defaulting to 1000
[  232.784805][T15136] xfrm0: entered promiscuous mode
[  232.786882][T15136] xfrm0: entered allmulticast mode
[  232.789228][ T5962] syz2: Port: 1 Link ACTIVE
[  232.832385][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4007'.
[  232.838912][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4007'.
[  232.873414][T15144] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4007'.
[  232.895742][T15136] lo speed is unknown, defaulting to 1000
[  232.918730][T15136] syzkaller0 speed is unknown, defaulting to 1000
[  232.922660][T15136] lo speed is unknown, defaulting to 1000
[  233.101987][T15155] sctp: [Deprecated]: syz.2.4012 (pid 15155) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.101987][T15155] Use struct sctp_sack_info instead
[  233.590550][T15184] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4026'.
[  234.233821][T15196] syzkaller1: entered promiscuous mode
[  234.236200][T15196] syzkaller1: entered allmulticast mode
[  234.381707][T15198] veth0_virt_wifi: renamed from veth0_macvtap
[  234.529404][T15201] block nbd2: server does not support multiple connections per device.
[  234.534058][T15201] block nbd2: shutting down sockets
[  234.665420][T15213] openvswitch: netlink: IPv4 tun info is not correct
[  234.707687][T15217] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4040'.
[  234.920235][T15239] netlink: 'syz.0.4052': attribute type 13 has an invalid length.
[  234.923563][T15239] netlink: 'syz.0.4052': attribute type 17 has an invalid length.
[  234.934706][T15239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.010634][T15239] lo speed is unknown, defaulting to 1000
[  235.014476][T15239] syzkaller0 speed is unknown, defaulting to 1000
[  235.025596][T15239] lo speed is unknown, defaulting to 1000
[  235.211403][T15256] lo speed is unknown, defaulting to 1000
[  235.220613][T15256] syzkaller0 speed is unknown, defaulting to 1000
[  235.223599][T15256] lo speed is unknown, defaulting to 1000
[  235.604250][T15279] netlink: 'syz.0.4066': attribute type 11 has an invalid length.
[  236.286384][T15329] __nla_validate_parse: 6 callbacks suppressed
[  236.286400][T15329] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4090'.
[  236.464456][T15342] xt_HMARK: spi-set and port-set can't be combined
[  236.555222][T15350] netlink: 452 bytes leftover after parsing attributes in process `syz.2.4099'.
[  236.662354][T15358] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  237.810066][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4124'.
[  237.870605][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'.
[  238.291314][   T33] audit: type=1800 audit(1757104105.587:2): pid=15432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4137" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=6866 res=0 errno=0
[  238.333819][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4138'.
[  238.337944][T15436] netlink: 'syz.1.4138': attribute type 2 has an invalid length.
[  238.597499][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4140'.
[  239.550561][T15465] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4150'.
[  239.813864][T15484] lo speed is unknown, defaulting to 1000
[  239.820282][T15484] syzkaller0 speed is unknown, defaulting to 1000
[  239.824252][T15484] lo speed is unknown, defaulting to 1000
[  239.936787][T15501] pimreg: entered allmulticast mode
[  240.414082][T15536] pim6reg: entered allmulticast mode
[  240.419371][T15536] pim6reg: left allmulticast mode
[  240.505796][T15542] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  240.510556][T15542] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  240.520389][T15541] netlink: 'syz.2.4183': attribute type 3 has an invalid length.
[  240.523420][T15541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4183'.
[  240.651025][T15552] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.4188'.
[  240.687614][T15554] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  240.896214][T15567] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4195'.
[  241.456048][T15603] netlink: 'syz.1.4209': attribute type 5 has an invalid length.
[  241.591694][T15617] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4215'.
[  241.594527][T15617] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4215'.
[  241.666541][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4218'.
[  242.223516][T15664] netlink: 'syz.2.4238': attribute type 2 has an invalid length.
[  242.780385][T15708] netlink: 'syz.0.4257': attribute type 1 has an invalid length.
[  242.848061][T15713] netlink: 'syz.1.4259': attribute type 1 has an invalid length.
[  242.888441][T15713] 8021q: adding VLAN 0 to HW filter on device bond8
[  242.894026][T15717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4262'.
[  242.937662][T15713] bond8: (slave veth13): Enslaving as an active interface with a down link
[  242.972141][T15713] 8021q: adding VLAN 0 to HW filter on device batadv1
[  242.974574][T15713] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  243.066424][T15731] netlink: 'syz.2.4269': attribute type 1 has an invalid length.
[  243.069458][T15731] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4269'.
[  243.148048][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4271'.
[  243.321897][T15752] netlink: 'syz.1.4280': attribute type 10 has an invalid length.
[  243.331780][T15752] 8021q: adding VLAN 0 to HW filter on device team0
[  243.336336][T15752] team0: entered promiscuous mode
[  243.347793][T15752] : (slave team0): Enslaving as an active interface with an up link
[  243.443198][T15765] netlink: 'syz.1.4286': attribute type 8 has an invalid length.
[  243.446184][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4286'.
[  243.452966][T15765] bond0: entered promiscuous mode
[  243.455370][T15765] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  243.458305][T15765] ip6gretap0: entered promiscuous mode
[  243.461050][T15765] hsr0: entered promiscuous mode
[  243.563517][T15778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4292'.
[  243.697796][T15788] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.4297'.
[  243.700930][T15788] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.4297'.
[  244.715520][T15890] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  244.813049][T15897] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  244.819980][T15897] netlink: 'syz.0.4347': attribute type 6 has an invalid length.
[  244.974992][T15890] sctp: [Deprecated]: syz.2.4345 (pid 15890) Use of struct sctp_assoc_value in delayed_ack socket option.
[  244.974992][T15890] Use struct sctp_sack_info instead
[  245.084825][   T24] lo speed is unknown, defaulting to 1000
[  245.087142][   T24] syz2: Port: 1 Link DOWN
[  245.118845][T15913] bond0: entered promiscuous mode
[  245.121338][T15913] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.223331][T15913] bond0 (unregistering): Released all slaves
[  245.296070][T15921] netlink: 'syz.0.4356': attribute type 3 has an invalid length.
[  245.576585][T15939] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  245.972674][T15975] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  246.436507][T16018] ==================================================================
[  246.439052][T16018] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  246.441755][T16018] Read of size 4 at addr ffff888111a26dc4 by task syz.2.4401/16018
[  246.446059][T16018] 
[  246.447189][T16018] CPU: 0 UID: 0 PID: 16018 Comm: syz.2.4401 Not tainted syzkaller #0 PREEMPT(full) 
[  246.447209][T16018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  246.447226][T16018] Call Trace:
[  246.447234][T16018]  <TASK>
[  246.447242][T16018]  dump_stack_lvl+0x189/0x250
[  246.447262][T16018]  ? __kasan_check_byte+0x12/0x40
[  246.447281][T16018]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.447299][T16018]  ? lock_release+0x4b/0x3e0
[  246.447322][T16018]  ? __virt_addr_valid+0x4a5/0x5c0
[  246.447337][T16018]  print_report+0xca/0x240
[  246.447351][T16018]  ? xfrm_alloc_spi+0x570/0xf30
[  246.447368][T16018]  kasan_report+0x118/0x150
[  246.447388][T16018]  ? xfrm_alloc_spi+0x570/0xf30
[  246.447404][T16018]  xfrm_alloc_spi+0x570/0xf30
[  246.447418][T16018]  ? xfrm_alloc_spi+0x2a0/0xf30
[  246.447436][T16018]  ? __local_bh_enable_ip+0x133/0x1c0
[  246.447452][T16018]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  246.447468][T16018]  ? xfrm_find_acq+0x87/0xa0
[  246.447486][T16018]  pfkey_getspi+0x7a8/0xee0
[  246.447502][T16018]  pfkey_sendmsg+0xbfe/0x1090
[  246.447515][T16018]  ? trace_sched_exit_tp+0x36/0x110
[  246.447537][T16018]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  246.447555][T16018]  ? aa_sock_msg_perm+0xf1/0x1d0
[  246.447567][T16018]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  246.447581][T16018]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  246.447594][T16018]  __sock_sendmsg+0x21c/0x270
[  246.447613][T16018]  ____sys_sendmsg+0x505/0x830
[  246.447632][T16018]  ? __pfx_____sys_sendmsg+0x10/0x10
[  246.447649][T16018]  ? import_iovec+0x74/0xa0
[  246.447664][T16018]  ___sys_sendmsg+0x21f/0x2a0
[  246.447679][T16018]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.447703][T16018]  ? __fget_files+0x2a/0x420
[  246.447714][T16018]  ? __fget_files+0x3a0/0x420
[  246.447728][T16018]  __x64_sys_sendmsg+0x19b/0x260
[  246.447743][T16018]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  246.447761][T16018]  ? rcu_is_watching+0x15/0xb0
[  246.447777][T16018]  ? do_syscall_64+0xbe/0x3b0
[  246.447794][T16018]  do_syscall_64+0xfa/0x3b0
[  246.447808][T16018]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.447822][T16018]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.447833][T16018]  ? exc_page_fault+0x9f/0xf0
[  246.447845][T16018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.447857][T16018] RIP: 0033:0x7f584a78ebe9
[  246.447870][T16018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.447881][T16018] RSP: 002b:00007f58489f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.447895][T16018] RAX: ffffffffffffffda RBX: 00007f584a9c5fa0 RCX: 00007f584a78ebe9
[  246.447905][T16018] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  246.447913][T16018] RBP: 00007f584a811e19 R08: 0000000000000000 R09: 0000000000000000
[  246.447921][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.447930][T16018] R13: 00007f584a9c6038 R14: 00007f584a9c5fa0 R15: 00007ffd3e88bdd8
[  246.447946][T16018]  </TASK>
[  246.447951][T16018] 
[  246.558916][T16018] Allocated by task 13492:
[  246.560677][T16018]  kasan_save_track+0x3e/0x80
[  246.562577][T16018]  __kasan_slab_alloc+0x6c/0x80
[  246.564532][T16018]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  246.566611][T16018]  xfrm_state_alloc+0x24/0x2f0
[  246.568533][T16018]  __find_acq_core+0x8a7/0x1c00
[  246.570507][T16018]  xfrm_find_acq+0x78/0xa0
[  246.572307][T16018]  xfrm_alloc_userspi+0x6b3/0xc90
[  246.574358][T16018]  xfrm_user_rcv_msg+0x7a3/0xab0
[  246.576364][T16018]  netlink_rcv_skb+0x208/0x470
[  246.578291][T16018]  xfrm_netlink_rcv+0x79/0x90
[  246.580203][T16018]  netlink_unicast+0x82f/0x9e0
[  246.582154][T16018]  netlink_sendmsg+0x805/0xb30
[  246.584126][T16018]  __sock_sendmsg+0x21c/0x270
[  246.586067][T16018]  ____sys_sendmsg+0x505/0x830
[  246.588007][T16018]  ___sys_sendmsg+0x21f/0x2a0
[  246.589879][T16018]  __x64_sys_sendmsg+0x19b/0x260
[  246.591885][T16018]  do_syscall_64+0xfa/0x3b0
[  246.593665][T16018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.595990][T16018] 
[  246.596971][T16018] Freed by task 792:
[  246.598538][T16018]  kasan_save_track+0x3e/0x80
[  246.600398][T16018]  kasan_save_free_info+0x46/0x50
[  246.602356][T16018]  __kasan_slab_free+0x5b/0x80
[  246.604239][T16018]  kmem_cache_free+0x18f/0x400
[  246.606086][T16018]  xfrm_state_gc_task+0x52d/0x6b0
[  246.608010][T16018]  process_scheduled_works+0xae1/0x17b0
[  246.610219][T16018]  worker_thread+0x8a0/0xda0
[  246.612075][T16018]  kthread+0x711/0x8a0
[  246.613711][T16018]  ret_from_fork+0x3fc/0x770
[  246.615597][T16018]  ret_from_fork_asm+0x1a/0x30
[  246.617528][T16018] 
[  246.618493][T16018] The buggy address belongs to the object at ffff888111a26d00
[  246.618493][T16018]  which belongs to the cache xfrm_state of size 928
[  246.623872][T16018] The buggy address is located 196 bytes inside of
[  246.623872][T16018]  freed 928-byte region [ffff888111a26d00, ffff888111a270a0)
[  246.629013][T16018] 
[  246.629974][T16018] The buggy address belongs to the physical page:
[  246.632383][T16018] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111a27600 pfn:0x111a24
[  246.636230][T16018] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  246.639504][T16018] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  246.642465][T16018] page_type: f5(slab)
[  246.644113][T16018] raw: 057ff00000000040 ffff88801bfb4dc0 dead000000000122 0000000000000000
[  246.647502][T16018] raw: ffff888111a27600 00000000800e000c 00000000f5000000 0000000000000000
[  246.650885][T16018] head: 057ff00000000040 ffff88801bfb4dc0 dead000000000122 0000000000000000
[  246.654190][T16018] head: ffff888111a27600 00000000800e000c 00000000f5000000 0000000000000000
[  246.657542][T16018] head: 057ff00000000002 ffffea0004468901 00000000ffffffff 00000000ffffffff
[  246.660824][T16018] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  246.664104][T16018] page dumped because: kasan: bad access detected
[  246.666538][T16018] page_owner tracks the page as allocated
[  246.668646][T16018] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6907, tgid 6906 (syz.1.429), ts 91973075751, free_ts 68844419228
[  246.675829][T16018]  post_alloc_hook+0x240/0x2a0
[  246.677737][T16018]  get_page_from_freelist+0x21e4/0x22c0
[  246.679818][T16018]  __alloc_frozen_pages_noprof+0x181/0x370
[  246.681990][T16018]  alloc_pages_mpol+0x232/0x4a0
[  246.683907][T16018]  allocate_slab+0x8a/0x370
[  246.685729][T16018]  ___slab_alloc+0xbeb/0x1420
[  246.687546][T16018]  kmem_cache_alloc_noprof+0x283/0x3c0
[  246.689615][T16018]  xfrm_state_alloc+0x24/0x2f0
[  246.691449][T16018]  xfrm_state_find+0x37d4/0x5400
[  246.693346][T16018]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  246.695811][T16018]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  246.697952][T16018]  xfrm_lookup_route+0x3c/0x1c0
[  246.699859][T16018]  udp_sendmsg+0x142e/0x2170
[  246.701656][T16018]  __sock_sendmsg+0x19c/0x270
[  246.703505][T16018]  ____sys_sendmsg+0x52d/0x830
[  246.705392][T16018]  ___sys_sendmsg+0x21f/0x2a0
[  246.707309][T16018] page last free pid 5893 tgid 5893 stack trace:
[  246.709771][T16018]  __free_frozen_pages+0xbc4/0xd30
[  246.711769][T16018]  __slab_free+0x303/0x3c0
[  246.713576][T16018]  qlist_free_all+0x97/0x140
[  246.715392][T16018]  kasan_quarantine_reduce+0x148/0x160
[  246.717533][T16018]  __kasan_slab_alloc+0x22/0x80
[  246.719438][T16018]  __kmalloc_cache_noprof+0x1be/0x3d0
[  246.721540][T16018]  ref_tracker_alloc+0x133/0x460
[  246.723478][T16018]  register_netdevice+0x14a3/0x1ae0
[  246.725557][T16018]  __ip_tunnel_create+0x3e7/0x560
[  246.727614][T16018]  ip_tunnel_init_net+0x2ba/0x800
[  246.729601][T16018]  ops_init+0x35c/0x5c0
[  246.731277][T16018]  setup_net+0x10c/0x320
[  246.732948][T16018]  copy_net_ns+0x31b/0x4d0
[  246.734726][T16018]  create_new_namespaces+0x3f3/0x720
[  246.736830][T16018]  unshare_nsproxy_namespaces+0x11c/0x170
[  246.739154][T16018]  ksys_unshare+0x4c8/0x8c0
[  246.740966][T16018] 
[  246.741966][T16018] Memory state around the buggy address:
[  246.744190][T16018]  ffff888111a26c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  246.747337][T16018]  ffff888111a26d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.750898][T16018] >ffff888111a26d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.754350][T16018]                                            ^
[  246.757094][T16018]  ffff888111a26e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.760554][T16018]  ffff888111a26e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  246.764038][T16018] ==================================================================
[  246.767746][T16018] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  246.770867][T16018] CPU: 0 UID: 0 PID: 16018 Comm: syz.2.4401 Not tainted syzkaller #0 PREEMPT(full) 
[  246.774732][T16018] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  246.778742][T16018] Call Trace:
[  246.780089][T16018]  <TASK>
[  246.781329][T16018]  dump_stack_lvl+0x99/0x250
[  246.783178][T16018]  ? __asan_memcpy+0x40/0x70
[  246.785050][T16018]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.787184][T16018]  ? __pfx__printk+0x10/0x10
[  246.789056][T16018]  vpanic+0x281/0x750
[  246.790701][T16018]  ? __pfx_vpanic+0x10/0x10
[  246.792578][T16018]  ? irqentry_exit+0x74/0x90
[  246.794467][T16018]  panic+0xb9/0xc0
[  246.795998][T16018]  ? __pfx_panic+0x10/0x10
[  246.797783][T16018]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  246.800273][T16018]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  246.802683][T16018]  ? xfrm_alloc_spi+0x570/0xf30
[  246.804639][T16018]  check_panic_on_warn+0x89/0xb0
[  246.806683][T16018]  ? xfrm_alloc_spi+0x570/0xf30
[  246.808647][T16018]  end_report+0x78/0x160
[  246.810363][T16018]  kasan_report+0x129/0x150
[  246.812170][T16018]  ? xfrm_alloc_spi+0x570/0xf30
[  246.814100][T16018]  xfrm_alloc_spi+0x570/0xf30
[  246.816050][T16018]  ? xfrm_alloc_spi+0x2a0/0xf30
[  246.817991][T16018]  ? __local_bh_enable_ip+0x133/0x1c0
[  246.820141][T16018]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  246.822171][T16018]  ? xfrm_find_acq+0x87/0xa0
[  246.824000][T16018]  pfkey_getspi+0x7a8/0xee0
[  246.825815][T16018]  pfkey_sendmsg+0xbfe/0x1090
[  246.827723][T16018]  ? trace_sched_exit_tp+0x36/0x110
[  246.829767][T16018]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  246.831815][T16018]  ? aa_sock_msg_perm+0xf1/0x1d0
[  246.833725][T16018]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  246.835743][T16018]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  246.837713][T16018]  __sock_sendmsg+0x21c/0x270
[  246.839630][T16018]  ____sys_sendmsg+0x505/0x830
[  246.841505][T16018]  ? __pfx_____sys_sendmsg+0x10/0x10
[  246.843519][T16018]  ? import_iovec+0x74/0xa0
[  246.845228][T16018]  ___sys_sendmsg+0x21f/0x2a0
[  246.847083][T16018]  ? __pfx____sys_sendmsg+0x10/0x10
[  246.849173][T16018]  ? __fget_files+0x2a/0x420
[  246.851029][T16018]  ? __fget_files+0x3a0/0x420
[  246.852902][T16018]  __x64_sys_sendmsg+0x19b/0x260
[  246.854832][T16018]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  246.856994][T16018]  ? rcu_is_watching+0x15/0xb0
[  246.858888][T16018]  ? do_syscall_64+0xbe/0x3b0
[  246.860748][T16018]  do_syscall_64+0xfa/0x3b0
[  246.862571][T16018]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.864646][T16018]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.867034][T16018]  ? exc_page_fault+0x9f/0xf0
[  246.868990][T16018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.871379][T16018] RIP: 0033:0x7f584a78ebe9
[  246.873127][T16018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.880466][T16018] RSP: 002b:00007f58489f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.883749][T16018] RAX: ffffffffffffffda RBX: 00007f584a9c5fa0 RCX: 00007f584a78ebe9
[  246.886861][T16018] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003
[  246.889998][T16018] RBP: 00007f584a811e19 R08: 0000000000000000 R09: 0000000000000000
[  246.893180][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.896243][T16018] R13: 00007f584a9c6038 R14: 00007f584a9c5fa0 R15: 00007ffd3e88bdd8
[  246.899391][T16018]  </TASK>
[  246.901340][T16018] Kernel Offset: disabled
[  246.903120][T16018] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:28:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000119a RDI=000000000000119b RBP=00000000000003f8 RSP=ffffc9000641eeb0
R8 =ffff888020be0237 R9 =1ffff1100417c046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018fa R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f58489f66c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c278cda CR3=0000000123684000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f584a997498 00007f584a997470 XMM03=00007f584a9974a8 00007f584a9974a0
XMM04=00007f584b4fd100 00007f584a997460 XMM05=00007f584a997478 00007f584a9974c0
XMM06=00007f584a9974b8 00007f584a9974b0 XMM07=00007f584a9974a8 00007f584a9974a0
XMM08=0000000000000000 00007f584a812ee7 XMM09=0000000000000000 00007f584a812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1bc227e RBX=0000000000000000 RCX=ffff88802146d640 RDX=0000000000000100
RSI=ffffffff8be33860 RDI=ffffffff8be33820 RBP=0000000000000001 RSP=ffffc900001df9f0
R8 =0000000000000000 R9 =ffffffff81cea4e6 R10=ffffc900001dfad8 R11=ffffffff81ac3ae0
R12=0000000000000ae0 R13=dffffc0000000000 R14=00007fba7a916bf2 R15=ffffffff8de113f0
RIP=ffffffff81cea5b0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fba7add1800 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555565237808 CR3=00000000278d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
