last executing test programs:

518.217139ms ago: executing program 2 (id=3002):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x80000001, @mcast1, 0x848b3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x18}}], 0x1, 0x400c000)

449.53606ms ago: executing program 2 (id=3003):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006800010000001000000000000a000000000000000600070008000000100008800c0001"], 0x38}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x0)
connect$caif(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf251800000008000300", @ANYRES32=r3, @ANYBLOB="400030803c0001"], 0x5c}}, 0x20000000)

449.277891ms ago: executing program 0 (id=3004):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x23)

422.022968ms ago: executing program 1 (id=3005):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

409.561241ms ago: executing program 0 (id=3006):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}}]}, 0x50}}, 0x10)

340.033317ms ago: executing program 0 (id=3007):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockname(r0, 0x0, 0x0)

339.87434ms ago: executing program 1 (id=3008):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0)

273.788863ms ago: executing program 1 (id=3009):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)

273.306116ms ago: executing program 2 (id=3010):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000780)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x84}}, 0x0)

272.386575ms ago: executing program 0 (id=3011):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000540)="7d457b90")

209.254332ms ago: executing program 1 (id=3012):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15615, 0xef}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x40}}, 0x0)

208.985835ms ago: executing program 0 (id=3013):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)

208.760897ms ago: executing program 2 (id=3014):
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14)
r1 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002400000002"], 0x0)

144.404027ms ago: executing program 0 (id=3015):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x2, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

127.932016ms ago: executing program 1 (id=3016):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20)

125.52417ms ago: executing program 2 (id=3017):
r0 = socket$kcm(0x10, 0x2, 0x10)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000980)=""/70, 0x46}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000c40)=""/4109, 0x100d}, {&(0x7f0000000680)=""/194, 0xc2}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000040)=""/7, 0x7}], 0x6}, 0x40002102)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)

124.260039ms ago: executing program 1 (id=3018):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x17c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @coaddr={0x14, 0xe, @in=@empty}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xfffffff7}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

0s ago: executing program 2 (id=3019):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000f277"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48226' (ED25519) to the list of known hosts.
syzkaller login: [   56.294582][ T5821] cgroup: Unknown subsys name 'net'
[   56.395623][ T5821] cgroup: Unknown subsys name 'cpuset'
[   56.400560][ T5821] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.135030][ T5821] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   68.415821][ T5867] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.426589][ T5869] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.538469][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.541642][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.544305][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.547341][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.549874][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.687525][ T5876] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.840089][ T5877] chnl_net:caif_netlink_parms(): no params data found
[   68.992939][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.995217][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.997455][ T5877] bridge_slave_0: entered allmulticast mode
[   69.001036][ T5877] bridge_slave_0: entered promiscuous mode
[   69.005460][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.007770][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.010256][ T5877] bridge_slave_1: entered allmulticast mode
[   69.013521][ T5877] bridge_slave_1: entered promiscuous mode
[   69.053979][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.058611][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.080051][ T5877] team0: Port device team_slave_0 added
[   69.083762][ T5877] team0: Port device team_slave_1 added
[   69.102768][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.104957][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.113416][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.118256][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.120396][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.128202][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.158240][ T5877] hsr_slave_0: entered promiscuous mode
[   69.160528][ T5877] hsr_slave_1: entered promiscuous mode
[   69.264816][ T5877] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.270351][ T5877] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.276204][ T5877] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.280302][ T5877] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.298546][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.300863][ T5877] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.303507][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.305853][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.337632][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.348409][  T156] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.351284][  T156] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.360350][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   69.368474][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.370869][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.377881][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.380221][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.476820][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.501111][ T5877] veth0_vlan: entered promiscuous mode
[   69.506719][ T5877] veth1_vlan: entered promiscuous mode
[   69.528272][ T5877] veth0_macvtap: entered promiscuous mode
[   69.533559][ T5877] veth1_macvtap: entered promiscuous mode
[   69.543913][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.550510][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.557870][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.561178][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.564968][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.570572][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.549014][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.563222][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.573126][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.580846][ T5925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.585374][ T5925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.588869][ T5925] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.594088][ T5920] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.596182][ T5925] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.598753][ T5920] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.600048][ T5925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.603509][ T5920] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.609252][ T5920] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.613954][ T5920] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.617081][ T5920] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.622394][ T5920] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.697310][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.802070][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.870338][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.102933][ T5922] chnl_net:caif_netlink_parms(): no params data found
[   71.129000][ T5919] chnl_net:caif_netlink_parms(): no params data found
[   71.178620][ T5917] chnl_net:caif_netlink_parms(): no params data found
[   71.247990][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.250539][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.305516][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.308395][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.310904][ T5922] bridge_slave_0: entered allmulticast mode
[   71.315146][ T5922] bridge_slave_0: entered promiscuous mode
[   71.318532][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.320970][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.324030][ T5922] bridge_slave_1: entered allmulticast mode
[   71.327118][ T5922] bridge_slave_1: entered promiscuous mode
[   71.380310][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.384408][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.387293][ T5919] bridge_slave_0: entered allmulticast mode
[   71.390941][ T5919] bridge_slave_0: entered promiscuous mode
[   71.421751][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.426199][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.428539][ T5917] bridge_slave_0: entered allmulticast mode
[   71.432062][ T5917] bridge_slave_0: entered promiscuous mode
[   71.435246][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.437640][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.440105][ T5919] bridge_slave_1: entered allmulticast mode
[   71.444509][ T5919] bridge_slave_1: entered promiscuous mode
[   71.452615][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.456526][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.459383][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.462074][ T5917] bridge_slave_1: entered allmulticast mode
[   71.467334][ T5917] bridge_slave_1: entered promiscuous mode
[   71.502678][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.508481][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.547069][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.552832][ T5922] team0: Port device team_slave_0 added
[   71.584102][ T5922] team0: Port device team_slave_1 added
[   71.589264][ T5917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.607140][ T5919] team0: Port device team_slave_0 added
[   71.639169][ T5917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.645005][ T5919] team0: Port device team_slave_1 added
[   71.661085][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.664322][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.674255][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.714667][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.717409][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.729809][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.734923][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.737644][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.746899][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.751965][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.754737][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.765084][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.771434][ T5917] team0: Port device team_slave_0 added
[   71.786350][ T5917] team0: Port device team_slave_1 added
[   71.850823][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.854327][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.865067][ T5917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.877201][ T5922] hsr_slave_0: entered promiscuous mode
[   71.880195][ T5922] hsr_slave_1: entered promiscuous mode
[   71.883657][ T5922] debugfs: 'hsr0' already exists in 'hsr'
[   71.885674][ T5922] Cannot create hsr debugfs directory
[   71.896361][ T5917] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.898861][ T5917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.908619][ T5917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.941402][ T5919] hsr_slave_0: entered promiscuous mode
[   71.944480][ T5919] hsr_slave_1: entered promiscuous mode
[   71.947053][ T5919] debugfs: 'hsr0' already exists in 'hsr'
[   71.949055][ T5919] Cannot create hsr debugfs directory
[   72.051347][ T5917] hsr_slave_0: entered promiscuous mode
[   72.055236][ T5917] hsr_slave_1: entered promiscuous mode
[   72.058155][ T5917] debugfs: 'hsr0' already exists in 'hsr'
[   72.060471][ T5917] Cannot create hsr debugfs directory
[   72.232340][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.315335][ T5919] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.322082][ T5919] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.328061][ T5919] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.334069][ T5919] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.400156][ T5922] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   72.410262][ T5922] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   72.418291][ T5922] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   72.427003][ T5922] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   72.536268][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.564933][ T5919] 8021q: adding VLAN 0 to HW filter on device team0
[   72.576102][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.581090][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.583835][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.597157][  T136] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.599964][  T136] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.622737][ T5922] 8021q: adding VLAN 0 to HW filter on device team0
[   72.645141][  T136] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.647928][  T136] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.660117][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.662978][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.683330][ T5878] Bluetooth: hci1: command tx timeout
[   72.683338][ T5235] Bluetooth: hci0: command tx timeout
[   72.688306][ T5920] Bluetooth: hci2: command tx timeout
[   72.833909][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.860622][ T5919] veth0_vlan: entered promiscuous mode
[   72.877894][ T5919] veth1_vlan: entered promiscuous mode
[   72.898967][ T5919] veth0_macvtap: entered promiscuous mode
[   72.908161][ T5919] veth1_macvtap: entered promiscuous mode
[   72.931768][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.944146][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.949263][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.964311][ T5894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.971744][ T5894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.977257][ T5894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.980736][ T5894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.043869][ T5922] veth0_vlan: entered promiscuous mode
[   73.070998][ T5922] veth1_vlan: entered promiscuous mode
[   73.079631][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.090227][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.138089][ T5922] veth0_macvtap: entered promiscuous mode
[   73.146877][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.149101][ T5922] veth1_macvtap: entered promiscuous mode
[   73.152988][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.179438][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.188883][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.201031][ T5947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.211993][ T5947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.218834][ T5894] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.221846][ T5894] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.386242][   T13] bridge_slave_1: left allmulticast mode
[   73.388477][   T13] bridge_slave_1: left promiscuous mode
[   73.391649][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.409156][   T13] bridge_slave_0: left allmulticast mode
[   73.411319][   T13] bridge_slave_0: left promiscuous mode
[   73.415211][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.861529][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.870401][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.877727][   T13] bond0 (unregistering): Released all slaves
[   73.975823][  T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.980750][  T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.076946][   T13] hsr_slave_0: left promiscuous mode
[   74.079981][   T13] hsr_slave_1: left promiscuous mode
[   74.092985][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.095932][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.100113][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.104877][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.120560][   T13] veth1_macvtap: left promiscuous mode
[   74.143152][   T13] veth0_macvtap: left promiscuous mode
[   74.147453][   T13] veth1_vlan: left promiscuous mode
[   74.155765][   T13] veth0_vlan: left promiscuous mode
[   74.597278][   T13] team0 (unregistering): Port device team_slave_1 removed
[   74.635555][   T13] team0 (unregistering): Port device team_slave_0 removed
[   74.766768][ T5920] Bluetooth: hci0: command tx timeout
[   74.769513][ T5878] Bluetooth: hci2: command tx timeout
[   74.773780][ T5235] Bluetooth: hci1: command tx timeout
[   75.024162][  T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.030618][  T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.582963][ T5917] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   75.618046][ T5917] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   75.647956][ T6030] netlink: 'syz.0.40': attribute type 10 has an invalid length.
[   75.659405][ T6030] team0: Device dummy0 is up. Set it down before adding it as a team port
[   75.672559][ T5917] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   75.694389][ T5917] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   75.730270][ T6033] netlink: 1 bytes leftover after parsing attributes in process `syz.2.41'.
[   75.820040][ T5917] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.841472][ T5917] 8021q: adding VLAN 0 to HW filter on device team0
[   75.858153][  T156] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.860839][  T156] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.887487][  T156] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.890206][  T156] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.896222][ T6049] Zero length message leads to an empty skb
[   75.966155][ T5917] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   75.971232][ T5917] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   76.844027][ T5878] Bluetooth: hci0: command tx timeout
[   76.855155][ T5235] Bluetooth: hci1: command tx timeout
[   76.857294][ T5878] Bluetooth: hci2: command tx timeout
[   77.383004][ T6074] netlink: 72 bytes leftover after parsing attributes in process `syz.2.56'.
[   77.396865][ T5917] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.460316][ T5917] veth0_vlan: entered promiscuous mode
[   77.476372][ T5917] veth1_vlan: entered promiscuous mode
[   77.487751][ T6078] netlink: 'syz.0.58': attribute type 9 has an invalid length.
[   77.491534][ T6078] netlink: 'syz.0.58': attribute type 7 has an invalid length.
[   77.495112][ T6078] netlink: 'syz.0.58': attribute type 8 has an invalid length.
[   77.525414][ T5917] veth0_macvtap: entered promiscuous mode
[   77.531194][ T5917] veth1_macvtap: entered promiscuous mode
[   77.537410][ T6076] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET)
[   77.564111][ T6076] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   77.570370][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.586461][ T5917] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.595228][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.603781][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.610479][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.615485][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.682777][ T6076] nbd0: detected capacity change from 0 to 127
[   77.690460][   T55] block nbd0: Receive control failed (result -104)
[   77.760594][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.775525][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.847361][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.850368][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.037670][ T6102] netlink: 104 bytes leftover after parsing attributes in process `syz.0.67'.
[   78.409710][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'.
[   78.699625][ T6140] netlink: 'syz.0.85': attribute type 3 has an invalid length.
[   78.704360][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[   78.922894][ T5878] Bluetooth: hci2: command tx timeout
[   78.925176][ T5878] Bluetooth: hci1: command tx timeout
[   78.927290][ T5878] Bluetooth: hci0: command tx timeout
[   79.070927][ T6162] netlink: 17 bytes leftover after parsing attributes in process `syz.1.95'.
[   79.605603][ T6197] batman_adv: batadv0: Adding interface: vxlan0
[   79.608070][ T6197] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.619001][ T6197] batman_adv: batadv0: Interface activated: vxlan0
[   79.624497][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.628443][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.633453][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.636273][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.728053][ T6201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.732120][ T6201] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.760787][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   79.765835][ T6202] netlink: 'syz.2.110': attribute type 5 has an invalid length.
[   79.769126][ T6202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.110'.
[   79.778804][ T6202] geneve2: entered promiscuous mode
[   79.781257][ T6202] geneve2: entered allmulticast mode
[   79.786268][ T5894] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   79.790997][ T5894] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   79.810090][ T6201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   79.814528][ T6201] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.277766][ T6225] ieee802154 phy0 wpan0: encryption failed: -90
[   80.324486][ T6227] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.354073][ T6227] bond_slave_0: entered promiscuous mode
[   80.356660][ T6227] bond_slave_1: entered promiscuous mode
[   80.359259][ T6232] Illegal XDP return value 4294967274 on prog  (id 26) dev N/A, expect packet loss!
[   80.359962][ T6227] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   80.369708][ T6227] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   80.398680][ T6227] bridge_slave_0: left allmulticast mode
[   80.405938][ T6227] bridge_slave_0: left promiscuous mode
[   80.408497][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.416989][ T6227] bridge_slave_1: left allmulticast mode
[   80.418814][ T6227] bridge_slave_1: left promiscuous mode
[   80.421794][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.430053][ T6227] bond0: (slave bond_slave_0): Releasing backup interface
[   80.435549][ T6227] bond_slave_0: left promiscuous mode
[   80.440606][ T6227] bond0: (slave bond_slave_1): Releasing backup interface
[   80.447358][ T6227] bond_slave_1: left promiscuous mode
[   80.458525][ T6227] team0: Port device team_slave_0 removed
[   80.466016][ T6227] team0: Port device team_slave_1 removed
[   80.469028][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.471932][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.476716][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.479589][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.494194][ T6227] bond1: (slave macvlan2): Removing an active aggregator
[   80.497896][ T6227] bond1: (slave macvlan2): Releasing backup interface
[   80.619877][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.125'.
[   80.623808][ T6238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.628256][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'.
[   80.676304][ T6242] ieee802154 phy0 wpan0: encryption failed: -22
[   80.818410][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[   81.039897][ T6262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'.
[   81.218835][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'.
[   81.224901][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'.
[   81.569041][ T6201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.575907][ T6201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.580210][ T6201] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   81.595453][ T6295] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   81.643832][ T6201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   81.647969][ T6201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.655944][ T6201] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   81.783335][ T5930] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.787363][ T5930] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   81.790589][ T5930] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   81.810267][ T5930] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.814659][ T5930] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   81.817979][ T5930] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   81.834053][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.838577][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   81.841780][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   81.862023][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.874137][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'.
[   81.874286][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   81.880965][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   81.935350][ T6306] netlink: 'syz.0.157': attribute type 4 has an invalid length.
[   81.996626][ T6310] netlink: 'syz.2.159': attribute type 8 has an invalid length.
[   82.410774][ T6314] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.161'.
[   82.496874][ T6332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.166'.
[   82.816856][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[   82.836524][ T6350] gtp0: entered promiscuous mode
[   82.838589][ T6350] gtp0: entered allmulticast mode
[   82.970273][ T6361] pim6reg1: entered promiscuous mode
[   82.972641][ T6361] pim6reg1: entered allmulticast mode
[   83.317213][ T6380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'.
[   83.370428][ T6380] netlink: 'syz.0.188': attribute type 10 has an invalid length.
[   83.388051][ T6380] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   83.393790][ T6382] netlink: 96 bytes leftover after parsing attributes in process `syz.1.189'.
[   83.658804][ T6391] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[   83.725250][ T6391] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.758198][ T6395] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   83.805126][ T6391] vlan2: entered allmulticast mode
[   83.807118][ T6391] veth1: entered allmulticast mode
[   83.809752][ T6391] veth1: entered promiscuous mode
[   83.814166][ T6391] veth1: left promiscuous mode
[   83.819560][ T6391] bond1: (slave vlan2): making interface the new active one
[   83.822933][ T6391] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   83.829904][ T6391] veth1: entered promiscuous mode
[   83.832830][ T6391] vlan2: entered promiscuous mode
[   83.835557][ T6391] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   85.532652][ T6435] geneve2: entered promiscuous mode
[   85.680047][ T6439] netlink: 'syz.0.211': attribute type 2 has an invalid length.
[   85.684478][ T6439] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   85.687909][ T6439] netlink: 'syz.0.211': attribute type 1 has an invalid length.
[   85.843159][ T6445] tun0: tun_chr_ioctl cmd 2148045848
[   85.846225][ T6445] tun0: tun_chr_ioctl cmd 21731
[   86.097000][ T6459] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   86.101781][ T6459] batman_adv: batadv0: Adding interface: gretap1
[   86.114338][ T6459] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.144148][ T6459] batman_adv: batadv0: Interface activated: gretap1
[   86.228051][ T6466] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   86.402893][ T6474] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   86.405867][ T6474] netlink: 'syz.0.219': attribute type 1 has an invalid length.
[   86.408972][ T6474] __nla_validate_parse: 3 callbacks suppressed
[   86.408980][ T6474] netlink: 224 bytes leftover after parsing attributes in process `syz.0.219'.
[   86.441278][ T6477] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   86.449745][ T6477] netlink: 92 bytes leftover after parsing attributes in process `syz.1.227'.
[   86.579090][ T6485] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.230'.
[   86.585353][ T6485] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   86.590850][ T6485] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   86.608357][   T47] cfg80211: failed to load regulatory.db
[   86.698481][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[   86.871845][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'.
[   86.970299][ T6520] warning: `syz.1.247' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   86.975481][ T6517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.981396][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[   86.995234][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[   87.103224][ T6525] syzkaller0: entered promiscuous mode
[   87.105393][ T6525] syzkaller0: entered allmulticast mode
[   87.182828][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'.
[   87.436734][ T6549] netlink: 200 bytes leftover after parsing attributes in process `syz.2.260'.
[   87.456941][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'.
[   88.915197][ T6592] netlink: 'syz.2.278': attribute type 10 has an invalid length.
[   88.921248][ T6592] team0: Device ipvlan1 failed to register rx_handler
[   89.231785][ T6614] netlink: 'syz.2.287': attribute type 1 has an invalid length.
[   89.261699][ T6614] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.301390][ T6614] veth3: entered promiscuous mode
[   89.307769][ T6614] bond1: (slave veth3): Enslaving as an active interface with an up link
[   89.386066][ T6623] tipc: Started in network mode
[   89.387994][ T6623] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711
[   89.391148][ T6623] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   89.647544][ T6648] Bluetooth: MGMT ver 1.23
[   89.732962][ T6631] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   90.280418][ T6680] veth0_virt_wifi: renamed from macvlan0
[   91.155832][ T6725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.239642][ T6733] IPVS: length: 209 != 24
[   92.302379][ T6788] __nla_validate_parse: 6 callbacks suppressed
[   92.302391][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'.
[   92.498608][ T5910] IPVS: starting estimator thread 0...
[   92.604680][ T6794] IPVS: using max 64 ests per chain, 153600 per kthread
[   92.710460][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'.
[   93.741572][ T6866] netlink: 'syz.0.394': attribute type 3 has an invalid length.
[   94.351892][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'.
[   94.853485][ T6926] delete_channel: no stack
[   95.051084][ T6943] netlink: 'syz.2.425': attribute type 37 has an invalid length.
[   95.222553][ T5930] vlan2: left promiscuous mode
[   95.506980][ T6967] netlink: 'syz.0.436': attribute type 1 has an invalid length.
[   95.509997][ T6967] netlink: 'syz.0.436': attribute type 2 has an invalid length.
[   95.684803][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'.
[   95.803279][ T6997] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.449'.
[   96.009114][ T7012] : renamed from vlan1 (while UP)
[   96.049134][ T7015] netlink: 'syz.1.459': attribute type 22 has an invalid length.
[   96.059492][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[   96.076412][ T7015] netlink: 'syz.1.459': attribute type 22 has an invalid length.
[   96.081280][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[   96.084414][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.088992][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.097255][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.103681][ T7017] syzkaller1: entered promiscuous mode
[   96.105932][ T7017] syzkaller1: entered allmulticast mode
[   96.109515][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   96.503260][ T7049] netlink: 'syz.1.473': attribute type 7 has an invalid length.
[   96.724241][ T7061] netlink: 'syz.1.478': attribute type 4 has an invalid length.
[   97.216834][ T7037] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   98.165712][ T7118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.504'.
[   98.220186][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'.
[   98.229205][ T7122] netlink: 48 bytes leftover after parsing attributes in process `syz.1.507'.
[   98.258860][ T7125] openvswitch: netlink: Missing valid actions attribute.
[   98.262297][ T7125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.442829][ T5235] Bluetooth: hci0: command 0x0c20 tx timeout
[   98.588551][   T33] audit: type=1800 audit(1757103965.727:2): pid=7135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.506" name="memory.events" dev="tmpfs" ino=976 res=0 errno=0
[   98.768976][ T7158] netlink: 'syz.1.522': attribute type 11 has an invalid length.
[   98.920594][ T7168] tun0: tun_chr_ioctl cmd 2147767521
[   99.728227][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'.
[   99.731757][ T7206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.546'.
[   99.833318][ T7217] geneve3: entered promiscuous mode
[   99.837010][ T5930] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[   99.841266][ T5930] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[   99.846917][ T5930] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[   99.850157][ T5930] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  101.074125][ T7280] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  101.197530][ T7283] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.202911][ T7283] syzkaller0: entered promiscuous mode
[  101.205456][ T7283] syzkaller0: entered allmulticast mode
[  101.240206][ T7283] tipc: Resetting bearer <eth:syzkaller0>
[  101.246779][ T7282] tipc: Resetting bearer <eth:syzkaller0>
[  101.285511][ T7282] tipc: Disabling bearer <eth:syzkaller0>
[  101.340728][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'.
[  101.376536][ T7288] netlink: 'syz.0.583': attribute type 11 has an invalid length.
[  101.408617][ T7291] netlink: 'syz.2.584': attribute type 1 has an invalid length.
[  101.489184][ T7291] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  101.506813][   T13] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  101.508114][ T7291] 8021q: adding VLAN 0 to HW filter on device bond2
[  101.634410][ T7291] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  101.639267][ T7291] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface
[  101.648148][ T7291] bond2 (unregistering): Released all slaves
[  102.168794][ T7347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.607'.
[  102.221878][ T7352] netlink: 64 bytes leftover after parsing attributes in process `syz.0.609'.
[  104.488876][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'.
[  104.662829][ T7465] syzkaller1: entered promiscuous mode
[  104.665078][ T7465] syzkaller1: entered allmulticast mode
[  104.674723][ T7465] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  104.710027][ T7470] netlink: 64 bytes leftover after parsing attributes in process `syz.0.654'.
[  105.392345][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[  105.395728][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.674'.
[  107.203915][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'.
[  107.571855][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'.
[  107.651054][ T7619] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  107.658314][ T5930] bond0: (slave bond_slave_0): interface is now down
[  107.661171][ T5930] bond0: (slave bond_slave_1): interface is now down
[  107.704942][ T5930] bond0: (slave bond_slave_0): interface is now down
[  107.712389][ T5930] bond0: (slave bond_slave_1): interface is now down
[  107.723410][  T126] block nbd0: Possible stuck request ffff888021e18000: control (read@0,1024B). Runtime 30 seconds
[  107.728118][  T126] block nbd0: Possible stuck request ffff888021e18200: control (read@1024,1024B). Runtime 30 seconds
[  107.732512][  T126] block nbd0: Possible stuck request ffff888021e18400: control (read@2048,1024B). Runtime 30 seconds
[  107.736734][  T126] block nbd0: Possible stuck request ffff888021e18600: control (read@3072,1024B). Runtime 30 seconds
[  107.743690][ T5930] bond0: now running without any active interface!
[  107.848175][ T7619] netlink: 'syz.2.714': attribute type 3 has an invalid length.
[  107.851258][ T7619] netlink: 'syz.2.714': attribute type 1 has an invalid length.
[  107.872277][ T7619] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.714'.
[  108.265313][ T7661] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  108.268812][ T7661] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  109.340436][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'.
[  109.496426][ T7714] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  109.909931][ T7733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.274274][ T7760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.773'.
[  110.502364][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'.
[  110.505695][ T7773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.780'.
[  110.727705][ T7796] bond0: option arp_validate: invalid value (18446744073491447809)
[  110.835871][ T7805] netlink: 'syz.2.792': attribute type 1 has an invalid length.
[  110.842914][ T7805] netlink: 'syz.2.792': attribute type 4 has an invalid length.
[  110.845746][ T7805] netlink: 212 bytes leftover after parsing attributes in process `syz.2.792'.
[  110.977705][ T7813] netlink: 'syz.2.797': attribute type 1 has an invalid length.
[  111.199779][ T7834] tipc: Started in network mode
[  111.201381][ T7834] tipc: Node identity 2a9ce69f66f9, cluster identity 4711
[  111.204629][ T7834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.207481][ T7834] syzkaller0: entered promiscuous mode
[  111.209638][ T7834] syzkaller0: entered allmulticast mode
[  111.226975][ T7834] tipc: Resetting bearer <eth:syzkaller0>
[  111.231124][ T7833] tipc: Resetting bearer <eth:syzkaller0>
[  111.262479][ T7833] tipc: Disabling bearer <eth:syzkaller0>
[  111.270001][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'.
[  111.575589][ T7851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.815'.
[  111.883923][ T7876] syz.2.826 uses old SIOCAX25GETINFO
[  112.338497][ T7904] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.837'.
[  112.861747][ T7935] netlink: 'syz.2.852': attribute type 1 has an invalid length.
[  112.868125][ T7935] netlink: 76 bytes leftover after parsing attributes in process `syz.2.852'.
[  112.917066][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.853'.
[  113.572777][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'.
[  114.152757][ T8014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.378406][ T8034] netlink: 'syz.1.891': attribute type 1 has an invalid length.
[  114.411428][ T8034] 8021q: adding VLAN 0 to HW filter on device bond2
[  114.854132][ T8058] netlink: 'syz.1.902': attribute type 1 has an invalid length.
[  114.936298][ T8062] syzkaller0: entered promiscuous mode
[  114.938732][ T8062] syzkaller0: entered allmulticast mode
[  115.454952][ T8085] vlan2: entered allmulticast mode
[  115.652560][ T8095] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  116.895006][ T8140] __nla_validate_parse: 5 callbacks suppressed
[  116.895017][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'.
[  117.340803][ T8161] nbd: must specify at least one socket
[  118.080743][ T8183] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  118.421559][ T8194] netlink: 'syz.0.962': attribute type 4 has an invalid length.
[  118.782116][ T8222] netlink: 'syz.2.976': attribute type 21 has an invalid length.
[  119.755057][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1014'.
[  120.031841][ T8331] netlink: 'syz.1.1022': attribute type 4 has an invalid length.
[  120.211735][ T8344] netlink: 'syz.0.1029': attribute type 4 has an invalid length.
[  120.215254][ T8344] netlink: 'syz.0.1029': attribute type 4 has an invalid length.
[  120.425388][ T8353] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1032'.
[  120.639997][ T8361] syzkaller0: entered promiscuous mode
[  120.642578][ T8361] syzkaller0: entered allmulticast mode
[  120.658124][ T8361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.661884][ T8360] tipc: Resetting bearer <eth:syzkaller0>
[  121.784410][ T5910] tipc: Node number set to 1281746591
[  122.033986][ T8360] tipc: Disabling bearer <eth:syzkaller0>
[  122.050174][ T8372] tun0: tun_chr_ioctl cmd 2147767520
[  122.354774][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  123.710018][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.713380][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.007544][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'.
[  124.055479][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.173768][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.374743][ T8446] batman_adv: batadv0: Interface deactivated: vxlan0
[  124.384443][ T8446] geneve2: left promiscuous mode
[  124.386417][ T8446] geneve2: left allmulticast mode
[  124.394358][ T8446] gtp0: left promiscuous mode
[  124.396083][ T8446] gtp0: left allmulticast mode
[  124.400412][ T8446] batman_adv: batadv0: Interface deactivated: gretap1
[  124.416948][ T8446] veth3: left promiscuous mode
[  124.421006][ T8446] geneve3: left promiscuous mode
[  124.860613][ T8453] hsr_slave_0: left promiscuous mode
[  124.865075][ T8453] hsr_slave_1: left promiscuous mode
[  124.884682][ T5947] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.888333][ T5947] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  124.891557][ T5947] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  124.895962][ T5947] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  124.900535][ T5947] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.904490][ T5947] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  124.907915][ T5947] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  124.911538][ T5947] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  124.916338][ T8458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1069'.
[  124.919970][ T8458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1069'.
[  124.930414][ T5947] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.940321][ T5947] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  124.950817][ T5947] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  124.962098][ T5947] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  124.966330][ T5947] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  124.969507][ T5947] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  124.983712][ T5947] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  124.987000][ T5947] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  125.001871][ T5947] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.012565][ T5947] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.015738][ T5947] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.024433][ T5947] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.035345][ T5947] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.038331][ T5947] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.050485][ T5947] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.054223][ T5947] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.060809][ T8468] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  125.064718][ T8468] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.918276][ T8508] netlink: 'syz.0.1085': attribute type 10 has an invalid length.
[  125.935861][ T8508] 8021q: adding VLAN 0 to HW filter on device team0
[  125.942044][ T8508] bond0: (slave team0): Enslaving as an active interface with an up link
[  126.008766][ T8512] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1086'.
[  126.012958][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'.
[  126.106305][ T8515] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1089'.
[  126.109390][ T8515] unsupported nlmsg_type 40
[  126.127839][ T8518] netlink: ct family unspecified
[  126.130080][ T8518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.800247][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv2
[  126.805908][ T8547] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  126.809652][ T8547] team0: Failed to send options change via netlink (err -105)
[  126.812930][ T8547] team0: Port device batadv2 added
[  127.447844][ T5235] Bluetooth: hci2: link tx timeout
[  127.450225][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  127.455464][ T5235] Bluetooth: hci2: link tx timeout
[  127.457500][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  127.460708][ T5235] Bluetooth: hci2: link tx timeout
[  127.463097][ T5235] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  128.078047][ T8595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1124'.
[  128.293596][ T8610] netlink: 'syz.1.1130': attribute type 1 has an invalid length.
[  128.302612][ T8610] netlink: 'syz.1.1130': attribute type 1 has an invalid length.
[  128.305624][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'.
[  128.310997][ T8610] block nbd1: shutting down sockets
[  128.413905][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'.
[  128.454637][ T8627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1136'.
[  128.950304][ T8663] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  129.030814][ T8650] IPVS: Unknown mcast interface: hsr0
[  129.219395][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'.
[  129.249055][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1153'.
[  129.493626][ T5878] Bluetooth: hci2: command 0x0406 tx timeout
[  129.646221][ T8699] tipc: Started in network mode
[  129.649191][ T8699] tipc: Node identity 080211, cluster identity 4711
[  129.655080][ T8699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.661487][ T8699] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  129.670272][ T8699] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  129.675735][ T8699] tipc: Resetting bearer <eth:syzkaller0>
[  129.679732][ T1092] tipc: Resetting bearer <eth:syzkaller0>
[  129.721219][ T8699] tipc: Resetting bearer <eth:syzkaller0>
[  130.300940][ T8731] netlink: 'syz.0.1172': attribute type 1 has an invalid length.
[  130.722866][ T5910] tipc: Node number set to 134353152
[  130.762874][ T8767] veth1_macvtap: left promiscuous mode
[  130.764801][ T8767] macsec0: entered promiscuous mode
[  130.766809][ T8767] macsec0: entered allmulticast mode
[  130.774944][ T8769] veth1_macvtap: entered promiscuous mode
[  130.780283][ T8769] veth1_macvtap: entered allmulticast mode
[  130.792560][ T8769] macsec0: left promiscuous mode
[  130.797085][ T8769] macsec0: left allmulticast mode
[  130.798933][ T8769] veth1_macvtap: left allmulticast mode
[  131.131607][ T8776] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.134998][ T8776] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.287810][ T8776] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.301020][ T8776] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.565140][ T5714] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.573113][ T5714] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.576597][ T5714] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.580244][ T5714] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.745243][ T8796] netlink: 'syz.1.1201': attribute type 3 has an invalid length.
[  131.780872][ T8800] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1203'.
[  131.807922][ T8802] netlink: 'syz.0.1202': attribute type 4 has an invalid length.
[  131.871937][ T8804] IPVS: persistence engine module ip_vs_pe_ not found
[  132.089340][ T8827] netlink: 'syz.2.1214': attribute type 28 has an invalid length.
[  132.375627][ T8853] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  132.688710][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.995335][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'.
[  133.003980][ T8906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1249'.
[  133.056541][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'.
[  133.169400][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1254'.
[  133.262055][ T8927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.267639][ T8927] syzkaller0: entered promiscuous mode
[  133.269415][ T8927] syzkaller0: entered allmulticast mode
[  133.294994][ T8927] tipc: Resetting bearer <eth:syzkaller0>
[  133.300719][ T8924] tipc: Resetting bearer <eth:syzkaller0>
[  133.306789][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1261'.
[  133.320072][ T8924] tipc: Disabling bearer <eth:syzkaller0>
[  133.328139][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1261'.
[  133.412395][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  133.476239][ T8946] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  133.935635][ T8976] netlink: 'syz.2.1279': attribute type 1 has an invalid length.
[  133.971748][ T8976] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.004204][ T8976] bond2: (slave geneve4): making interface the new active one
[  134.011418][ T8976] bond2: (slave geneve4): Enslaving as an active interface with an up link
[  134.022457][ T5894] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.042671][ T5894] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.045972][ T5894] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.049200][ T5894] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.468445][ T9021] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  136.212439][ T9148] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  136.220831][ T9145] netlink: 'syz.2.1358': attribute type 10 has an invalid length.
[  136.228986][ T9145] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  136.264498][ T9150] __nla_validate_parse: 3 callbacks suppressed
[  136.264510][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'.
[  136.310011][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1364'.
[  136.347592][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'.
[  136.391044][ T9164] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1367'.
[  136.794717][ T9197] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1379'.
[  136.854910][ T9202] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  136.941777][ T9207] syzkaller0: entered promiscuous mode
[  136.945058][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1385'.
[  136.948578][ T9207] syzkaller0: entered allmulticast mode
[  137.025406][ T9213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1387'.
[  137.029382][ T9213] 8021q: VLANs not supported on ipvlan1
[  137.044414][ T9213] macsec1: entered promiscuous mode
[  137.047197][ T9213] macsec1: entered allmulticast mode
[  137.131029][ T9218] netlink: 'syz.1.1391': attribute type 1 has an invalid length.
[  137.261895][ T9227] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1392'.
[  137.311010][ T9231] netlink: 'syz.2.1394': attribute type 9 has an invalid length.
[  137.323812][ T9231] netlink: 'syz.2.1394': attribute type 6 has an invalid length.
[  137.326178][ T9231] netlink: 'syz.2.1394': attribute type 7 has an invalid length.
[  137.328561][ T9231] netlink: 'syz.2.1394': attribute type 8 has an invalid length.
[  137.486020][ T9245] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1401'.
[  137.544616][ T9247] syzkaller1: entered promiscuous mode
[  137.546958][ T9247] syzkaller1: entered allmulticast mode
[  137.807108][  T126] block nbd0: Possible stuck request ffff888021e18000: control (read@0,1024B). Runtime 60 seconds
[  137.812132][  T126] block nbd0: Possible stuck request ffff888021e18200: control (read@1024,1024B). Runtime 60 seconds
[  137.819166][  T126] block nbd0: Possible stuck request ffff888021e18400: control (read@2048,1024B). Runtime 60 seconds
[  137.823517][  T126] block nbd0: Possible stuck request ffff888021e18600: control (read@3072,1024B). Runtime 60 seconds
[  138.118151][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'.
[  138.138772][ T9280] geneve2: entered promiscuous mode
[  138.140778][ T9280] geneve2: entered allmulticast mode
[  138.154036][ T5714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.157829][ T5714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.174119][ T5714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.177506][ T5714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.410995][ T9290] netlink: 'syz.1.1424': attribute type 2 has an invalid length.
[  138.436716][ T5294] udevd[5294]: worker [5927] /devices/virtual/block/nbd0 is taking a long time
[  138.513206][   T33] audit: type=1800 audit(1757104005.657:3): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1427" name="@" dev="tmpfs" ino=2603 res=0 errno=0
[  139.328725][ T9352] vlan2: entered allmulticast mode
[  139.330503][ T9352] batadv0: entered allmulticast mode
[  140.828468][ T9396] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  141.482733][ T9431] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  141.501121][ T9431] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98
[  141.534761][ T9433] __nla_validate_parse: 6 callbacks suppressed
[  141.534777][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1483'.
[  141.680864][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'.
[  142.066933][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'.
[  142.087833][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'.
[  142.508643][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'.
[  142.590338][ T9510] netlink: 'syz.2.1516': attribute type 3 has an invalid length.
[  142.715054][ T9517] vlan2: entered promiscuous mode
[  142.717118][ T9517] bond0: entered promiscuous mode
[  142.719278][ T9517] bond_slave_0: entered promiscuous mode
[  142.721681][ T9517] bond_slave_1: entered promiscuous mode
[  142.727758][ T9517] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  144.364676][ T9530] macsec2: entered promiscuous mode
[  144.366731][ T9530] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  144.373907][ T9530] macsec2: entered allmulticast mode
[  144.375787][ T9530] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  144.576903][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'.
[  144.899309][ T9588] netlink: 'syz.0.1553': attribute type 1 has an invalid length.
[  145.268892][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1565'.
[  145.733791][ T9623] netlink: 'syz.1.1568': attribute type 12 has an invalid length.
[  145.794802][ T9629] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1571'.
[  145.921220][ T9635] bridge3: entered allmulticast mode
[  146.651464][ T9666] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  146.716026][ T9670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.719583][ T9670] syzkaller0: entered promiscuous mode
[  146.721823][ T9670] syzkaller0: entered allmulticast mode
[  146.745415][ T9670] tipc: Resetting bearer <eth:syzkaller0>
[  146.919858][ T9678] netlink: 'syz.0.1593': attribute type 178 has an invalid length.
[  147.043873][ T9683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1595'.
[  147.232279][ T9699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.271010][ T9699] syzkaller0: entered promiscuous mode
[  147.274191][ T9699] syzkaller0: entered allmulticast mode
[  147.276608][ T9699] tipc: Resetting bearer <eth:syzkaller0>
[  147.291028][ T9696] tipc: Resetting bearer <eth:syzkaller0>
[  147.299643][ T9703] nbd: must specify an index to disconnect
[  147.772364][    T9] tipc: Node number set to 754974721
[  148.685894][ T9696] tipc: Disabling bearer <eth:syzkaller0>
[  148.748749][ T9722] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1613'.
[  148.912809][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'.
[  148.917137][ T9738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1621'.
[  148.941691][ T9738] gretap0: entered promiscuous mode
[  148.948013][ T9738] gretap0: left promiscuous mode
[  149.164281][ T9764] tipc: Resetting bearer <eth:syzkaller0>
[  149.185102][ T9764] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  149.187449][ T9764] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  149.205069][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.208526][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.218531][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.229789][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  149.397308][ T9792] sctp: [Deprecated]: syz.1.1644 (pid 9792) Use of int in max_burst socket option deprecated.
[  149.397308][ T9792] Use struct sctp_assoc_value instead
[  149.620717][ T9818] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.778135][ T9874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1681'.
[  150.836971][ T9878] vlan2: entered promiscuous mode
[  150.839190][ T9878] bridge0: entered promiscuous mode
[  150.879771][ T9878] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1683'.
[  151.061979][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'.
[  151.067624][ T9890] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1689'.
[  151.198654][ T9902] netlink: 'syz.1.1695': attribute type 15 has an invalid length.
[  151.350192][ T9916] netlink: 'syz.2.1701': attribute type 25 has an invalid length.
[  151.392861][ T9920] netlink: 'syz.2.1703': attribute type 10 has an invalid length.
[  151.396124][ T9920] veth0_vlan: left promiscuous mode
[  151.398963][ T9920] veth0_vlan: entered promiscuous mode
[  151.405807][ T9920] team0: Device veth0_vlan failed to register rx_handler
[  151.558851][ T9933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1710'.
[  151.628113][ T9939] tipc: Enabled bearer <eth:vlan0>, priority 10
[  151.771894][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'.
[  151.916714][ T9956] bridge_slave_1: left allmulticast mode
[  151.919235][ T9956] bridge_slave_1: left promiscuous mode
[  151.922319][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.933123][ T9956] bridge_slave_0: left promiscuous mode
[  151.935713][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.092442][ T9960] __nla_validate_parse: 2 callbacks suppressed
[  152.092458][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'.
[  152.715092][ T9990] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  152.945530][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1741'.
[  152.974227][T10000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1741'.
[  153.178554][T10020] netem: incorrect ge model size
[  153.180314][T10020] netem: change failed
[  153.202998][T10023] tipc: Resetting bearer <eth:syzkaller0>
[  153.256505][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'.
[  154.212784][T10057] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1764'.
[  154.258522][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'.
[  154.480545][T10072] vlan2: left allmulticast mode
[  154.487906][T10072] veth1: left allmulticast mode
[  154.629891][T10085] netlink: 'syz.1.1777': attribute type 2 has an invalid length.
[  154.634147][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1777'.
[  154.637544][T10085] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  154.853912][T10099] netlink: 'syz.2.1784': attribute type 1 has an invalid length.
[  155.917136][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'.
[  156.116494][    T9] IPVS: starting estimator thread 0...
[  156.166312][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'.
[  156.175197][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'.
[  156.199190][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  156.205136][T10149] IPVS: using max 64 ests per chain, 153600 per kthread
[  156.208006][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  156.211472][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  156.223968][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  156.894120][T10195] netlink: 'syz.2.1826': attribute type 1 has an invalid length.
[  156.896515][T10195] netlink: 'syz.2.1826': attribute type 2 has an invalid length.
[  156.948035][T10200] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  157.084314][ T5878] Bluetooth: hci2: command 0x0406 tx timeout
[  157.240412][T10226] __nla_validate_parse: 8 callbacks suppressed
[  157.240428][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'.
[  157.340563][T10233] bond0: entered promiscuous mode
[  157.343520][T10233] bond_slave_0: entered promiscuous mode
[  157.346124][T10233] bond_slave_1: entered promiscuous mode
[  157.349012][T10233] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  157.357286][T10233] team0: entered promiscuous mode
[  157.361272][T10233] team_slave_0: entered promiscuous mode
[  157.364028][T10233] team_slave_1: entered promiscuous mode
[  157.370998][T10233] bond0: left promiscuous mode
[  157.373791][T10233] bond_slave_0: left promiscuous mode
[  157.376633][T10233] bond_slave_1: left promiscuous mode
[  157.379536][T10233] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  157.383076][T10233] team0: left promiscuous mode
[  157.385191][T10233] team_slave_0: left promiscuous mode
[  157.387757][T10233] team_slave_1: left promiscuous mode
[  157.844861][T10271] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1863'.
[  158.183289][T10306] netlink: 'syz.2.1880': attribute type 28 has an invalid length.
[  158.188051][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'.
[  158.263874][T10316] netem: change failed
[  158.365227][T10328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'.
[  158.372436][T10328] openvswitch: netlink: Missing key (keys=40, expected=100)
[  158.537108][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1899'.
[  159.750297][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.318292][T10454] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  160.363566][T10456] netlink: ct family unspecified
[  160.365093][T10456] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.938945][T10504] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1971'.
[  160.965387][T10505] netlink: 'syz.2.1973': attribute type 1 has an invalid length.
[  161.418630][T10531] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1986'.
[  162.164879][T10587] netlink: 'syz.2.2012': attribute type 10 has an invalid length.
[  162.169783][T10587] 8021q: adding VLAN 0 to HW filter on device team0
[  162.174474][T10587] team0: entered promiscuous mode
[  162.176482][T10587] team_slave_0: entered promiscuous mode
[  162.179010][T10587] team_slave_1: entered promiscuous mode
[  162.181584][T10587] batadv2: entered promiscuous mode
[  162.184554][T10587] bond0: (slave team0): Enslaving as an active interface with an up link
[  162.292554][T10594] netlink: 'syz.2.2013': attribute type 13 has an invalid length.
[  162.300341][T10594] netlink: 'syz.2.2013': attribute type 17 has an invalid length.
[  162.386455][   T13] bond0: (slave wlan1): interface is now down
[  162.389042][   T13] bond0: (slave team0): interface is now down
[  162.391145][T10594] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.402819][   T13] bond0: (slave wlan1): interface is now down
[  162.405404][   T13] bond0: (slave team0): interface is now down
[  162.414960][T10594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.423112][   T13] bond0: (slave wlan1): interface is now down
[  162.425958][   T13] bond0: (slave team0): interface is now down
[  162.442559][ T5894] bond0: (slave wlan1): interface is now down
[  162.444759][ T5894] bond0: (slave team0): interface is now down
[  162.462699][   T13] bond0: (slave wlan1): interface is now down
[  162.464891][   T13] bond0: (slave team0): interface is now down
[  162.482468][   T13] bond0: (slave wlan1): interface is now down
[  162.485745][   T13] bond0: (slave team0): interface is now down
[  162.503090][ T5894] bond0: (slave wlan1): interface is now down
[  162.506208][ T5894] bond0: (slave team0): interface is now down
[  162.523575][   T13] bond0: (slave wlan1): interface is now down
[  162.528080][   T13] bond0: (slave team0): interface is now down
[  162.537937][   T13] bond0: now running without any active interface!
[  162.601065][T10589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.638494][T10606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.824386][T10621] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  162.896044][T10624] netlink: 'syz.0.2024': attribute type 1 has an invalid length.
[  162.899078][T10624] netlink: 'syz.0.2024': attribute type 2 has an invalid length.
[  163.008619][T10637] netlink: 'syz.0.2030': attribute type 21 has an invalid length.
[  163.011924][T10637] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2030'.
[  163.091220][T10644] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.097151][T10644] tipc: Resetting bearer <eth:syzkaller0>
[  163.267567][T10653] lo speed is unknown, defaulting to 1000
[  163.270055][T10653] lo speed is unknown, defaulting to 1000
[  163.274612][T10653] lo speed is unknown, defaulting to 1000
[  163.311493][T10653] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  163.352134][T10653] lo speed is unknown, defaulting to 1000
[  163.360978][T10653] lo speed is unknown, defaulting to 1000
[  163.366488][T10653] lo speed is unknown, defaulting to 1000
[  163.370881][T10653] lo speed is unknown, defaulting to 1000
[  163.485380][T10668] bond0: (slave team0): Releasing backup interface
[  163.492959][T10668] bridge_slave_0: left allmulticast mode
[  163.496787][T10668] bridge_slave_0: left promiscuous mode
[  163.499306][T10668] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.506397][T10668] bridge_slave_1: left allmulticast mode
[  163.508875][T10668] bridge_slave_1: left promiscuous mode
[  163.511738][T10668] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.522657][T10668] bond0: (slave bond_slave_0): Releasing backup interface
[  163.527903][T10668] bond0: (slave bond_slave_1): Releasing backup interface
[  163.534495][T10668] team0: Port device team_slave_0 removed
[  163.538721][T10668] team0: Port device team_slave_1 removed
[  163.541676][T10668] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.558650][T10668] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.566655][T10668] bond0: (slave netdevsim0): Releasing backup interface
[  163.575128][T10668] bond1: (slave wlan0): Releasing active interface
[  163.577272][T10668] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  163.592668][T10668] vlan2: entered promiscuous mode
[  163.597155][T10668] bond1: (slave vlan2): Releasing active interface
[  163.599695][T10668] vlan2: left promiscuous mode
[  163.623486][T10671] netlink: 'syz.2.2047': attribute type 10 has an invalid length.
[  163.626920][T10671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.641563][T10671] batadv_slave_0: entered promiscuous mode
[  163.644692][T10671] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  163.959778][T10704] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2061'.
[  164.216632][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2069'.
[  164.408209][T10731] syzkaller1: entered promiscuous mode
[  164.410300][T10731] syzkaller1: entered allmulticast mode
[  164.698378][T10749] GUP no longer grows the stack in syz.2.2083 (10749): 200000006000-20000000a000 (200000005000)
[  164.704133][T10749] CPU: 1 UID: 0 PID: 10749 Comm: syz.2.2083 Not tainted syzkaller #0 PREEMPT(full) 
[  164.704155][T10749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.704165][T10749] Call Trace:
[  164.704172][T10749]  <TASK>
[  164.704179][T10749]  dump_stack_lvl+0x189/0x250
[  164.704205][T10749]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.704222][T10749]  ? __pfx__printk+0x10/0x10
[  164.704239][T10749]  ? find_vma+0xe7/0x160
[  164.704259][T10749]  ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0
[  164.704289][T10749]  __get_user_pages+0x24d0/0x2ce0
[  164.704305][T10749]  ? __lock_acquire+0xab9/0xd20
[  164.704348][T10749]  ? __gup_longterm_locked+0xc68/0x1660
[  164.704374][T10749]  __gup_longterm_locked+0xde9/0x1660
[  164.704396][T10749]  ? try_grab_folio_fast+0x1be/0x4f0
[  164.704423][T10749]  ? gup_fast_fallback+0x195f/0x2010
[  164.704445][T10749]  gup_fast_fallback+0x1e6a/0x2010
[  164.704492][T10749]  ? __pfx_gup_fast_fallback+0x10/0x10
[  164.704510][T10749]  ? __mutex_lock+0x335/0x1350
[  164.704535][T10749]  ? is_valid_gup_args+0x11f/0x200
[  164.704556][T10749]  ? get_user_pages_fast+0x4d/0xb0
[  164.704576][T10749]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  164.704601][T10749]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  164.704621][T10749]  ? wait_for_space+0x24d/0x2d0
[  164.704641][T10749]  iov_iter_get_pages2+0x5e/0xa0
[  164.704658][T10749]  __se_sys_vmsplice+0x548/0x10d0
[  164.704682][T10749]  ? futex_private_hash_put+0x4b/0x280
[  164.704697][T10751] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  164.704702][T10749]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  164.704723][T10749]  ? __pfx_futex_wake+0x10/0x10
[  164.704757][T10749]  ? __lock_acquire+0xab9/0xd20
[  164.704803][T10749]  ? do_pipe2+0xf7/0x170
[  164.704820][T10749]  ? rcu_is_watching+0x15/0xb0
[  164.704837][T10749]  ? do_syscall_64+0xbe/0x3b0
[  164.704855][T10749]  do_syscall_64+0xfa/0x3b0
[  164.704871][T10749]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.704885][T10749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.704899][T10749]  ? exc_page_fault+0x9f/0xf0
[  164.704914][T10749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.704928][T10749] RIP: 0033:0x7fea8b38ebe9
[  164.704942][T10749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.704981][T10749] RSP: 002b:00007fea8c12e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  164.704997][T10749] RAX: ffffffffffffffda RBX: 00007fea8b5c5fa0 RCX: 00007fea8b38ebe9
[  164.705008][T10749] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  164.705018][T10749] RBP: 00007fea8b411e19 R08: 0000000000000000 R09: 0000000000000000
[  164.705026][T10749] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  164.705034][T10749] R13: 00007fea8b5c6038 R14: 00007fea8b5c5fa0 R15: 00007ffc0d17d8a8
[  164.705059][T10749]  </TASK>
[  164.920858][T10761] netlink: 'syz.2.2088': attribute type 1 has an invalid length.
[  164.929990][T10761] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2088'.
[  165.015586][T10771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2094'.
[  165.204820][T10777] netlink: 'syz.0.2096': attribute type 10 has an invalid length.
[  165.216652][T10777] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  165.822037][T10823] syzkaller1: entered promiscuous mode
[  165.824899][T10823] syzkaller1: entered allmulticast mode
[  166.029845][T10826] bond0: (slave wlan1): Releasing backup interface
[  166.584696][T10855] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.246944][T10862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2134'.
[  167.250794][T10862] syz_tun: entered allmulticast mode
[  167.259505][T10862] tipc: Resetting bearer <eth:syzkaller0>
[  167.276345][T10862] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  167.279077][T10862] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  167.283822][T10862] macsec1: left promiscuous mode
[  167.285643][T10862] macsec1: left allmulticast mode
[  167.287761][T10862] geneve2: left promiscuous mode
[  167.289709][T10862] geneve2: left allmulticast mode
[  167.291753][T10862] macsec2: left promiscuous mode
[  167.293819][T10862] macsec2: left allmulticast mode
[  167.295972][T10862] bridge3: left allmulticast mode
[  167.469051][T10878] syzkaller1: entered promiscuous mode
[  167.471183][T10878] syzkaller1: entered allmulticast mode
[  167.546943][T10885] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2144'.
[  167.628702][T10893] netlink: 'syz.0.2148': attribute type 3 has an invalid length.
[  167.894735][  T126] block nbd0: Possible stuck request ffff888021e18000: control (read@0,1024B). Runtime 90 seconds
[  167.899123][  T126] block nbd0: Possible stuck request ffff888021e18200: control (read@1024,1024B). Runtime 90 seconds
[  167.906144][  T126] block nbd0: Possible stuck request ffff888021e18400: control (read@2048,1024B). Runtime 90 seconds
[  167.909783][  T126] block nbd0: Possible stuck request ffff888021e18600: control (read@3072,1024B). Runtime 90 seconds
[  167.950977][T10923] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2160'.
[  168.743399][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'.
[  168.908282][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'.
[  169.081394][T10982] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.087171][T10982] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  169.090145][T10982] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  169.094826][T10982] tipc: Resetting bearer <eth:syzkaller0>
[  169.269793][T10991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2191'.
[  169.273522][T10991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2191'.
[  169.896104][T11003] netlink: 'syz.0.2197': attribute type 21 has an invalid length.
[  169.899488][T11003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2197'.
[  170.331629][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2209'.
[  170.817249][T11061] rdma_op ffff8881109609f0 conn xmit_rdma 0000000000000000
[  171.011414][T11077] netlink: 'syz.2.2233': attribute type 13 has an invalid length.
[  171.018257][T11079] netlink: 'syz.0.2234': attribute type 21 has an invalid length.
[  171.021019][T11079] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2234'.
[  171.091026][T11075] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  171.281451][T11101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2244'.
[  172.222116][T11175] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.288057][T11181] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2284'.
[  172.297024][T11181] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2284'.
[  172.972148][T11227] netlink: 'syz.1.2303': attribute type 1 has an invalid length.
[  173.470934][T11262] lo speed is unknown, defaulting to 1000
[  173.905248][T11288] netlink: 'syz.0.2328': attribute type 13 has an invalid length.
[  173.908908][T11288] netlink: 'syz.0.2328': attribute type 17 has an invalid length.
[  174.052898][T11288] 8021q: adding VLAN 0 to HW filter on device team0
[  174.074247][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.147568][T11305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  174.186594][T11288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.226442][T11292] lo speed is unknown, defaulting to 1000
[  174.335536][T11315] xt_limit: Overflow, try lower: 604147548/4200216962
[  174.393677][T11321] __nla_validate_parse: 5 callbacks suppressed
[  174.393693][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'.
[  174.609449][T11325] lo speed is unknown, defaulting to 1000
[  174.887197][T11337] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2350'.
[  174.890166][T11337] netlink: zone id is out of range
[  174.891857][T11337] netlink: zone id is out of range
[  174.893745][T11337] netlink: zone id is out of range
[  174.895428][T11337] netlink: zone id is out of range
[  174.897107][T11337] netlink: zone id is out of range
[  174.898662][T11337] netlink: zone id is out of range
[  174.900650][T11337] netlink: zone id is out of range
[  175.087664][T11348] syzkaller1: entered promiscuous mode
[  175.089989][T11348] syzkaller1: entered allmulticast mode
[  175.521462][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'.
[  175.763655][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'.
[  176.033324][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2382'.
[  176.477050][T11456] netlink: 'syz.0.2401': attribute type 2 has an invalid length.
[  176.480032][T11456] netlink: 'syz.0.2401': attribute type 1 has an invalid length.
[  176.940215][T11488] lo speed is unknown, defaulting to 1000
[  177.076778][T11489] netlink: 'syz.2.2417': attribute type 1 has an invalid length.
[  177.079903][T11489] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2417'.
[  177.379273][T11509] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2425'.
[  177.612053][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2434'.
[  177.618472][T11528] netlink: 'syz.2.2434': attribute type 1 has an invalid length.
[  177.705314][T11536] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2438'.
[  177.711165][T11535] lo speed is unknown, defaulting to 1000
[  178.542406][T11550] netlink: 'syz.1.2441': attribute type 1 has an invalid length.
[  178.637785][T11550] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  178.647919][ T5714] net_ratelimit: 6 callbacks suppressed
[  178.647943][ T5714] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  178.657637][T11550] 8021q: adding VLAN 0 to HW filter on device bond3
[  178.697643][T11550] veth3: entered promiscuous mode
[  178.705086][T11550] bond3: (slave veth3): Enslaving as a backup interface with a down link
[  178.734335][T11550] tipc: Resetting bearer <eth:syzkaller0>
[  178.740186][T11550] bond3: (slave ip6gretap1): Removing an active aggregator
[  178.749156][T11550] bond3: (slave ip6gretap1): Releasing backup interface
[  178.761926][T11550] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 2e:6f:43:7d:58:87 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  178.782008][T11550] bond3: (slave veth3): Releasing backup interface
[  178.809766][T11561] netlink: 'syz.2.2444': attribute type 1 has an invalid length.
[  178.820557][T11561] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2444'.
[  178.907726][T11566] TC_ACT_REPEAT abuse ?
[  178.910322][    C0] TC_ACT_REPEAT abuse ?
[  179.115553][T11578] netlink: 'syz.2.2452': attribute type 1 has an invalid length.
[  179.402619][    C0] TC_ACT_REPEAT abuse ?
[  179.404848][    C0] TC_ACT_REPEAT abuse ?
[  179.407214][    C0] TC_ACT_REPEAT abuse ?
[  179.409305][    C0] TC_ACT_REPEAT abuse ?
[  179.411122][    C0] TC_ACT_REPEAT abuse ?
[  179.413010][    C0] TC_ACT_REPEAT abuse ?
[  179.414791][    C0] TC_ACT_REPEAT abuse ?
[  179.700160][T11607] __nla_validate_parse: 4 callbacks suppressed
[  179.700176][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2464'.
[  179.703388][T11609] : entered promiscuous mode
[  179.718829][T11607] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2464'.
[  179.875784][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2466'.
[  179.879278][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2466'.
[  179.891829][T11618] netlink: 'syz.0.2466': attribute type 4 has an invalid length.
[  179.914582][T11618] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2466'.
[  180.455875][T11652] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.520697][T11652] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.551062][T11660] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2488'.
[  180.571245][T11652] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.620099][T11652] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.701867][ T5714] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.720065][ T5930] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.737699][ T5930] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.755216][ T5930] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.765161][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'.
[  181.926171][T11756] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2533'.
[  182.281066][T11787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2548'.
[  182.287515][T11787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2548'.
[  182.607848][T11801] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  183.124364][T11842] syzkaller1: entered promiscuous mode
[  183.126770][T11842] syzkaller1: entered allmulticast mode
[  183.580515][   T13] tipc: Subscription rejected, illegal request
[  183.624955][T11873] !: renamed from dummy0
[  183.701245][T11881] net_ratelimit: 18 callbacks suppressed
[  183.701261][T11881] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  183.736959][T11880] lo speed is unknown, defaulting to 1000
[  184.927836][T11993] netlink: 'syz.0.2614': attribute type 1 has an invalid length.
[  184.930218][T11993] __nla_validate_parse: 7 callbacks suppressed
[  184.930226][T11993] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2614'.
[  185.292123][T12023] TC_ACT_REPEAT abuse ?
[  185.294298][    C0] TC_ACT_REPEAT abuse ?
[  185.605302][T12054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2644'.
[  185.608419][T12054] netlink: 560 bytes leftover after parsing attributes in process `syz.0.2644'.
[  185.758303][T12068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2651'.
[  186.151439][T12100] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2667'.
[  186.375923][T12119] tc_dump_action: action bad kind
[  186.791757][T12146] pimreg: tun_chr_ioctl cmd 1074025677
[  186.796891][T12146] pimreg: linktype set to 1
[  186.820518][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'.
[  187.251961][T12201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2714'.
[  187.293196][T12208] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.359530][T12208] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.380858][T12215] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  187.424397][T12208] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.485840][T12208] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.567386][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.580036][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.590917][ T5947] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.604895][ T5947] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.836957][T12227] bond0: (slave team0): Releasing backup interface
[  187.841829][T12227] team0: left promiscuous mode
[  187.843890][T12227] team_slave_0: left promiscuous mode
[  187.846467][T12227] team_slave_1: left promiscuous mode
[  187.848910][T12227] batadv2: left promiscuous mode
[  187.855277][T12227] bond0: (slave bond_slave_0): Releasing backup interface
[  187.859220][T12227] bond_slave_0: left promiscuous mode
[  187.864598][T12227] bond0: (slave bond_slave_1): Releasing backup interface
[  187.868885][T12227] bond_slave_1: left promiscuous mode
[  187.873391][T12227] team0: Port device team_slave_0 removed
[  187.878531][T12227] team0: Port device team_slave_1 removed
[  187.885058][T12227] bond0: (slave batadv_slave_0): Releasing backup interface
[  187.889216][T12227] batadv_slave_0: left promiscuous mode
[  187.896967][T12227] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.903138][T12227] bond0: (slave wlan1): Releasing backup interface
[  187.906859][T12227] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  187.923948][T12227] batman_adv: batadv0: Removing interface: vxlan0
[  187.928148][T12227] batman_adv: batadv0: Removing interface: gretap1
[  187.934533][T12227] bond1: (slave veth3): Releasing backup interface
[  187.956301][T12227] team0: Port device batadv2 removed
[  187.961950][T12227] bond2: (slave geneve4): Releasing active interface
[  187.977193][ T8461] lo speed is unknown, defaulting to 1000
[  187.980023][T12228] team0: Mode changed to "broadcast"
[  187.988977][T12229] vlan0: entered promiscuous mode
[  187.996482][ T5947] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.002488][ T5947] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.010116][ T5947] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.017692][ T5947] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  188.035369][T12227] tipc: Enabled bearer <eth:team0>, priority 0
[  188.300638][T12242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'.
[  188.304784][T12244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2733'.
[  188.308466][T12244] team0: invalid flags given to default FDB implementation
[  188.360224][T12242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2732'.
[  190.137180][T12288] 8021q: adding VLAN 0 to HW filter on device bond4
[  190.152065][T12291] __nla_validate_parse: 1 callbacks suppressed
[  190.152075][T12291] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2751'.
[  190.170744][T12291] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2751'.
[  190.265721][T12300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2756'.
[  190.338558][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'.
[  190.411948][T12313] trusted_key: syz.1.2762 sent an empty control message without MSG_MORE.
[  191.495333][T12342] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2775'.
[  191.530337][T12348] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  191.540604][T12348] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  191.729204][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'.
[  192.081247][T12383] lo speed is unknown, defaulting to 1000
[  192.703265][T12416] syz_tun: entered promiscuous mode
[  192.741094][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2805'.
[  193.730693][T12451] netlink: 'syz.2.2820': attribute type 1 has an invalid length.
[  194.186665][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2834'.
[  194.190283][T12478] tc_dump_action: action bad kind
[  194.457618][T12503] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  194.607687][T12517] netlink: 'syz.1.2853': attribute type 32 has an invalid length.
[  194.651965][T12520] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2854'.
[  194.917076][T12532] netlink: 'syz.1.2859': attribute type 21 has an invalid length.
[  194.990133][T12535] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2860'.
[  195.667280][T12563] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2873'.
[  195.782635][T12575] netlink: 'syz.2.2879': attribute type 1 has an invalid length.
[  195.859548][T12581] netlink: 'syz.0.2882': attribute type 2 has an invalid length.
[  195.931630][T12587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.935727][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2886'.
[  195.942480][T12587] syzkaller0: entered promiscuous mode
[  195.944219][T12587] syzkaller0: entered allmulticast mode
[  195.976489][T12587] tipc: Resetting bearer <eth:syzkaller0>
[  195.990971][T12585] tipc: Resetting bearer <eth:syzkaller0>
[  196.008567][T12585] tipc: Disabling bearer <eth:syzkaller0>
[  196.040284][T12595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2889'.
[  196.120348][   T47] IPVS: starting estimator thread 0...
[  196.181712][T12604] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2890'.
[  196.202354][ T5235] Bluetooth: hci1: command 0x0406 tx timeout
[  196.212334][T12601] IPVS: using max 64 ests per chain, 153600 per kthread
[  197.107447][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'.
[  197.309094][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'.
[  197.489171][T12670] sch_fq: defrate 0 ignored.
[  197.962736][  T126] block nbd0: Possible stuck request ffff888021e18000: control (read@0,1024B). Runtime 120 seconds
[  197.966867][  T126] block nbd0: Possible stuck request ffff888021e18200: control (read@1024,1024B). Runtime 120 seconds
[  197.971108][  T126] block nbd0: Possible stuck request ffff888021e18400: control (read@2048,1024B). Runtime 120 seconds
[  197.976221][  T126] block nbd0: Possible stuck request ffff888021e18600: control (read@3072,1024B). Runtime 120 seconds
[  198.376337][T12698] veth5: entered promiscuous mode
[  198.776387][T12717] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  198.929922][T12725] : entered promiscuous mode
[  199.105097][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2952'.
[  199.184893][T12736] openvswitch: netlink: IPv6 tunnel dst address is zero
[  200.119279][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2989'.
[  200.181170][T12816] TC_ACT_REPEAT abuse ?
[  200.183534][    C0] TC_ACT_REPEAT abuse ?
[  200.188864][T12816] TC_ACT_REPEAT abuse ?
[  200.190903][    C0] TC_ACT_REPEAT abuse ?
[  200.194851][T12816] TC_ACT_REPEAT abuse ?
[  200.196796][    C0] TC_ACT_REPEAT abuse ?
[  200.198824][T12816] TC_ACT_REPEAT abuse ?
[  200.200828][    C0] TC_ACT_REPEAT abuse ?
[  200.212139][T12816] TC_ACT_REPEAT abuse ?
[  200.229409][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2992'.
[  200.266227][T12821] bridge0: port 1(erspan0) entered blocking state
[  200.269125][T12821] bridge0: port 1(erspan0) entered disabled state
[  200.273410][T12821] erspan0: entered allmulticast mode
[  200.276938][T12821] erspan0: entered promiscuous mode
[  200.280798][T12821] bridge0: port 1(erspan0) entered blocking state
[  200.284566][T12821] bridge0: port 1(erspan0) entered forwarding state
[  200.318497][T12822] erspan0: left allmulticast mode
[  200.329288][T12822] erspan0: left promiscuous mode
[  200.338198][T12822] bridge0: port 1(erspan0) entered disabled state
[  200.352952][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2994'.
[  200.514403][T12834] netlink: 'syz.1.2998': attribute type 8 has an invalid length.
[  201.488637][T12877] ==================================================================
[  201.491885][T12877] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  201.495146][T12877] Read of size 2 at addr ffff888107d82e42 by task syz.1.3018/12877
[  201.498535][T12877] 
[  201.500449][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.1.3018 Not tainted syzkaller #0 PREEMPT(full) 
[  201.500468][T12877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.500478][T12877] Call Trace:
[  201.500484][T12877]  <TASK>
[  201.500492][T12877]  dump_stack_lvl+0x189/0x250
[  201.500515][T12877]  ? __kasan_check_byte+0x12/0x40
[  201.500535][T12877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.500551][T12877]  ? lock_release+0x4b/0x3e0
[  201.500574][T12877]  ? __virt_addr_valid+0x4a5/0x5c0
[  201.500592][T12877]  print_report+0xca/0x240
[  201.500605][T12877]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  201.500621][T12877]  kasan_report+0x118/0x150
[  201.500640][T12877]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  201.500659][T12877]  __xfrm_state_lookup+0x6ad/0x8d0
[  201.500677][T12877]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  201.500696][T12877]  xfrm_state_add+0x27d/0xc40
[  201.500715][T12877]  xfrm_add_sa+0x35a1/0x4070
[  201.500736][T12877]  ? __pfx_xfrm_add_sa+0x10/0x10
[  201.500752][T12877]  ? apparmor_capable+0x137/0x1b0
[  201.500770][T12877]  ? __nla_parse+0x40/0x60
[  201.500784][T12877]  xfrm_user_rcv_msg+0x7a3/0xab0
[  201.500805][T12877]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  201.500835][T12877]  ? __pfx___mutex_trylock_common+0x10/0x10
[  201.500850][T12877]  ? rcu_is_watching+0x15/0xb0
[  201.500865][T12877]  ? trace_contention_end+0x39/0x120
[  201.500878][T12877]  ? __mutex_lock+0x335/0x1350
[  201.500896][T12877]  netlink_rcv_skb+0x208/0x470
[  201.500910][T12877]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  201.500927][T12877]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.500946][T12877]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.500958][T12877]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.500972][T12877]  xfrm_netlink_rcv+0x79/0x90
[  201.500989][T12877]  netlink_unicast+0x82f/0x9e0
[  201.501008][T12877]  ? __pfx_netlink_unicast+0x10/0x10
[  201.501028][T12877]  ? netlink_sendmsg+0x642/0xb30
[  201.501040][T12877]  ? skb_put+0x11b/0x210
[  201.501055][T12877]  netlink_sendmsg+0x805/0xb30
[  201.501071][T12877]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.501087][T12877]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.501100][T12877]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.501116][T12877]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.501129][T12877]  __sock_sendmsg+0x21c/0x270
[  201.501149][T12877]  ____sys_sendmsg+0x505/0x830
[  201.501164][T12877]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.501217][T12877]  ? import_iovec+0x74/0xa0
[  201.501234][T12877]  ___sys_sendmsg+0x21f/0x2a0
[  201.501249][T12877]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.501278][T12877]  ? __fget_files+0x2a/0x420
[  201.501291][T12877]  ? __fget_files+0x3a0/0x420
[  201.501306][T12877]  __x64_sys_sendmsg+0x19b/0x260
[  201.501323][T12877]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.501342][T12877]  ? rcu_is_watching+0x15/0xb0
[  201.501357][T12877]  ? do_syscall_64+0xbe/0x3b0
[  201.501374][T12877]  do_syscall_64+0xfa/0x3b0
[  201.501387][T12877]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.501399][T12877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.501412][T12877]  ? exc_page_fault+0x9f/0xf0
[  201.501426][T12877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.501440][T12877] RIP: 0033:0x7f8eb3b8ebe9
[  201.501453][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.501466][T12877] RSP: 002b:00007f8eb49da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.501481][T12877] RAX: ffffffffffffffda RBX: 00007f8eb3dc5fa0 RCX: 00007f8eb3b8ebe9
[  201.501491][T12877] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  201.501498][T12877] RBP: 00007f8eb3c11e19 R08: 0000000000000000 R09: 0000000000000000
[  201.501506][T12877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.501514][T12877] R13: 00007f8eb3dc6038 R14: 00007f8eb3dc5fa0 R15: 00007ffda88850d8
[  201.501529][T12877]  </TASK>
[  201.501534][T12877] 
[  201.650036][T12877] Allocated by task 10783:
[  201.651837][T12877]  kasan_save_track+0x3e/0x80
[  201.653723][T12877]  __kasan_slab_alloc+0x6c/0x80
[  201.655734][T12877]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  201.657958][T12877]  xfrm_state_alloc+0x24/0x2f0
[  201.659888][T12877]  __find_acq_core+0x8a7/0x1c00
[  201.661846][T12877]  xfrm_find_acq+0x78/0xa0
[  201.663627][T12877]  xfrm_alloc_userspi+0x6b3/0xc90
[  201.665698][T12877]  xfrm_user_rcv_msg+0x7a3/0xab0
[  201.667722][T12877]  netlink_rcv_skb+0x208/0x470
[  201.669598][T12877]  xfrm_netlink_rcv+0x79/0x90
[  201.671433][T12877]  netlink_unicast+0x82f/0x9e0
[  201.673350][T12877]  netlink_sendmsg+0x805/0xb30
[  201.675322][T12877]  __sock_sendmsg+0x21c/0x270
[  201.677235][T12877]  ____sys_sendmsg+0x505/0x830
[  201.679106][T12877]  ___sys_sendmsg+0x21f/0x2a0
[  201.681035][T12877]  __x64_sys_sendmsg+0x19b/0x260
[  201.683017][T12877]  do_syscall_64+0xfa/0x3b0
[  201.684859][T12877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.687267][T12877] 
[  201.688255][T12877] Freed by task 47:
[  201.689788][T12877]  kasan_save_track+0x3e/0x80
[  201.691618][T12877]  kasan_save_free_info+0x46/0x50
[  201.693563][T12877]  __kasan_slab_free+0x5b/0x80
[  201.695521][T12877]  kmem_cache_free+0x18f/0x400
[  201.697421][T12877]  xfrm_state_gc_task+0x52d/0x6b0
[  201.699424][T12877]  process_scheduled_works+0xae1/0x17b0
[  201.701550][T12877]  worker_thread+0x8a0/0xda0
[  201.703447][T12877]  kthread+0x711/0x8a0
[  201.705143][T12877]  ret_from_fork+0x3fc/0x770
[  201.707056][T12877]  ret_from_fork_asm+0x1a/0x30
[  201.708936][T12877] 
[  201.709891][T12877] The buggy address belongs to the object at ffff888107d82d00
[  201.709891][T12877]  which belongs to the cache xfrm_state of size 928
[  201.715301][T12877] The buggy address is located 322 bytes inside of
[  201.715301][T12877]  freed 928-byte region [ffff888107d82d00, ffff888107d830a0)
[  201.720614][T12877] 
[  201.721563][T12877] The buggy address belongs to the physical page:
[  201.724095][T12877] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888107d80900 pfn:0x107d80
[  201.728067][T12877] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  201.731388][T12877] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  201.734444][T12877] page_type: f5(slab)
[  201.735989][T12877] raw: 057ff00000000040 ffff888104c85640 ffffea0004469800 0000000000000003
[  201.739365][T12877] raw: ffff888107d80900 00000000800e0008 00000000f5000000 0000000000000000
[  201.742701][T12877] head: 057ff00000000040 ffff888104c85640 ffffea0004469800 0000000000000003
[  201.746117][T12877] head: ffff888107d80900 00000000800e0008 00000000f5000000 0000000000000000
[  201.749552][T12877] head: 057ff00000000002 ffffea00041f6001 00000000ffffffff 00000000ffffffff
[  201.753012][T12877] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  201.756379][T12877] page dumped because: kasan: bad access detected
[  201.758886][T12877] page_owner tracks the page as allocated
[  201.761222][T12877] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6762, tgid 6761 (syz.2.346), ts 91714615450, free_ts 68774419026
[  201.768705][T12877]  post_alloc_hook+0x240/0x2a0
[  201.770701][T12877]  get_page_from_freelist+0x21e4/0x22c0
[  201.773002][T12877]  __alloc_frozen_pages_noprof+0x181/0x370
[  201.775390][T12877]  alloc_pages_mpol+0x232/0x4a0
[  201.777398][T12877]  allocate_slab+0x8a/0x370
[  201.779229][T12877]  ___slab_alloc+0xbeb/0x1420
[  201.781169][T12877]  kmem_cache_alloc_noprof+0x283/0x3c0
[  201.783351][T12877]  xfrm_state_alloc+0x24/0x2f0
[  201.785289][T12877]  xfrm_state_find+0x37d4/0x5400
[  201.787463][T12877]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  201.789989][T12877]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  201.792220][T12877]  xfrm_lookup_route+0x3c/0x1c0
[  201.794206][T12877]  udp_sendmsg+0x142e/0x2170
[  201.796104][T12877]  __sock_sendmsg+0x19c/0x270
[  201.798009][T12877]  ____sys_sendmsg+0x52d/0x830
[  201.799979][T12877]  ___sys_sendmsg+0x21f/0x2a0
[  201.801946][T12877] page last free pid 5877 tgid 5877 stack trace:
[  201.804486][T12877]  __free_frozen_pages+0xbc4/0xd30
[  201.806545][T12877]  __slab_free+0x303/0x3c0
[  201.808316][T12877]  qlist_free_all+0x97/0x140
[  201.810210][T12877]  kasan_quarantine_reduce+0x148/0x160
[  201.812363][T12877]  __kasan_slab_alloc+0x22/0x80
[  201.814178][T12877]  __kmalloc_cache_noprof+0x1be/0x3d0
[  201.816348][T12877]  ref_tracker_alloc+0x133/0x460
[  201.818388][T12877]  netdev_queue_update_kobjects+0x1d1/0x6c0
[  201.820826][T12877]  netdev_register_kobject+0x258/0x310
[  201.823024][T12877]  register_netdevice+0x126c/0x1ae0
[  201.825081][T12877]  bond_newlink+0x60/0xb0
[  201.826780][T12877]  rtnl_newlink_create+0x310/0xb00
[  201.828778][T12877]  rtnl_newlink+0x16d6/0x1c70
[  201.830652][T12877]  rtnetlink_rcv_msg+0x7cf/0xb70
[  201.832636][T12877]  netlink_rcv_skb+0x208/0x470
[  201.834584][T12877]  netlink_unicast+0x82f/0x9e0
[  201.836590][T12877] 
[  201.837594][T12877] Memory state around the buggy address:
[  201.839864][T12877]  ffff888107d82d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.842982][T12877]  ffff888107d82d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.846169][T12877] >ffff888107d82e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.849420][T12877]                                            ^
[  201.851898][T12877]  ffff888107d82e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.855045][T12877]  ffff888107d82f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  201.858282][T12877] ==================================================================
[  201.861639][T12877] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  201.864658][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.1.3018 Not tainted syzkaller #0 PREEMPT(full) 
[  201.868261][T12877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.872307][T12877] Call Trace:
[  201.873726][T12877]  <TASK>
[  201.874960][T12877]  dump_stack_lvl+0x99/0x250
[  201.876886][T12877]  ? __asan_memcpy+0x40/0x70
[  201.878788][T12877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.880939][T12877]  ? __pfx__printk+0x10/0x10
[  201.882882][T12877]  vpanic+0x281/0x750
[  201.884530][T12877]  ? __pfx_vpanic+0x10/0x10
[  201.886360][T12877]  ? irqentry_exit+0x74/0x90
[  201.888276][T12877]  panic+0xb9/0xc0
[  201.889775][T12877]  ? __pfx_panic+0x10/0x10
[  201.891621][T12877]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  201.893976][T12877]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  201.896397][T12877]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  201.898510][T12877]  check_panic_on_warn+0x89/0xb0
[  201.900522][T12877]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  201.902711][T12877]  end_report+0x78/0x160
[  201.904448][T12877]  kasan_report+0x129/0x150
[  201.906346][T12877]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  201.908423][T12877]  __xfrm_state_lookup+0x6ad/0x8d0
[  201.910415][T12877]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  201.912619][T12877]  xfrm_state_add+0x27d/0xc40
[  201.914501][T12877]  xfrm_add_sa+0x35a1/0x4070
[  201.916397][T12877]  ? __pfx_xfrm_add_sa+0x10/0x10
[  201.918394][T12877]  ? apparmor_capable+0x137/0x1b0
[  201.920323][T12877]  ? __nla_parse+0x40/0x60
[  201.922027][T12877]  xfrm_user_rcv_msg+0x7a3/0xab0
[  201.923931][T12877]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  201.926184][T12877]  ? __pfx___mutex_trylock_common+0x10/0x10
[  201.928594][T12877]  ? rcu_is_watching+0x15/0xb0
[  201.930582][T12877]  ? trace_contention_end+0x39/0x120
[  201.932776][T12877]  ? __mutex_lock+0x335/0x1350
[  201.934783][T12877]  netlink_rcv_skb+0x208/0x470
[  201.936747][T12877]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  201.938921][T12877]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.940951][T12877]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.942953][T12877]  ? netlink_deliver_tap+0x2e/0x1b0
[  201.945018][T12877]  xfrm_netlink_rcv+0x79/0x90
[  201.946890][T12877]  netlink_unicast+0x82f/0x9e0
[  201.948812][T12877]  ? __pfx_netlink_unicast+0x10/0x10
[  201.950953][T12877]  ? netlink_sendmsg+0x642/0xb30
[  201.952873][T12877]  ? skb_put+0x11b/0x210
[  201.954558][T12877]  netlink_sendmsg+0x805/0xb30
[  201.956443][T12877]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.958504][T12877]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.960464][T12877]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.962618][T12877]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.964704][T12877]  __sock_sendmsg+0x21c/0x270
[  201.966617][T12877]  ____sys_sendmsg+0x505/0x830
[  201.968532][T12877]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.970685][T12877]  ? import_iovec+0x74/0xa0
[  201.972546][T12877]  ___sys_sendmsg+0x21f/0x2a0
[  201.974490][T12877]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.976588][T12877]  ? __fget_files+0x2a/0x420
[  201.978444][T12877]  ? __fget_files+0x3a0/0x420
[  201.980295][T12877]  __x64_sys_sendmsg+0x19b/0x260
[  201.982214][T12877]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  201.984359][T12877]  ? rcu_is_watching+0x15/0xb0
[  201.986273][T12877]  ? do_syscall_64+0xbe/0x3b0
[  201.988188][T12877]  do_syscall_64+0xfa/0x3b0
[  201.989932][T12877]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.991971][T12877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.994444][T12877]  ? exc_page_fault+0x9f/0xf0
[  201.996376][T12877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.998747][T12877] RIP: 0033:0x7f8eb3b8ebe9
[  202.000594][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.008275][T12877] RSP: 002b:00007f8eb49da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  202.011575][T12877] RAX: ffffffffffffffda RBX: 00007f8eb3dc5fa0 RCX: 00007f8eb3b8ebe9
[  202.014702][T12877] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  202.017858][T12877] RBP: 00007f8eb3c11e19 R08: 0000000000000000 R09: 0000000000000000
[  202.021004][T12877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.024217][T12877] R13: 00007f8eb3dc6038 R14: 00007f8eb3dc5fa0 R15: 00007ffda88850d8
[  202.027397][T12877]  </TASK>
[  202.029341][T12877] Kernel Offset: disabled
[  202.031083][T12877] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:27:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003465 RDI=0000000000003466 RBP=00000000000003f8 RSP=ffffc900080b69d0
R8 =ffff888020c48237 R9 =1ffff11004189046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018c5 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8eb49da6c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7ca9ca6440 CR3=000000002b3e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=aa001c459a1b1407 a2bca9271912cc93
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f8eb48fd100 00007f8eb3d97460 XMM05=00007f8eb3d97478 00007f8eb3d974c0
XMM06=00007f8eb3d974b8 00007f8eb3d974b0 XMM07=00007f8eb3d974a8 00007f8eb3d974a0
XMM08=0000000000000000 00007f8eb3c12ee7 XMM09=0000000000000000 00007f8eb3c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000002001a RBX=0000000000000002 RCX=000000000006002d RDX=0000000000000002
RSI=0000000000000000 RDI=ffff88810e831cc0 RBP=0000000000000000 RSP=ffffc900081371e8
R8 =0000000000000000 R9 =ffffffff822e691a R10=dffffc0000000000 R11=fffff94000873961
R12=0000000000000001 R13=0000000000000001 R14=ffff88810e832828 R15=0000000000000003
RIP=ffffffff819d6576 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fea8c12e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056048054c7e8 CR3=000000002989c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fea8b412e53
XMM06=0000000000000000 00007fea8b412e4d XMM07=0000000000000000 00007fea8b412e61
XMM08=0000000000000000 00007fea8b412ee7 XMM09=0000000000000000 00007fea8b412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
