last executing test programs:

440.971676ms ago: executing program 1 (id=3606):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00'}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0}, 0x38)

301.608236ms ago: executing program 1 (id=3610):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000)

287.50303ms ago: executing program 1 (id=3613):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x50, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

219.975705ms ago: executing program 2 (id=3614):
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={0x28, r0, 0x7, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
r2 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=@newqdisc={0x1048, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x101c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xfffff65f, 0x6, 0xfffffff8, 0x8000, 0x3, 0x401, 0x1, 0x3ff, 0x6, 0x1, 0x6, 0x3, 0x2bffd616, 0x1af9, 0x5, 0x5, 0xe, 0x3, 0x10, 0x4, 0x7fffffff, 0xeb, 0xffff, 0x40, 0x7fff, 0x9, 0x2, 0x2, 0x0, 0x7, 0x2, 0x5, 0x0, 0x0, 0x6, 0x9, 0x9, 0x6, 0x0, 0x2, 0x4, 0x4, 0x8, 0xf21, 0x27, 0x6, 0xff, 0x4, 0x0, 0x8, 0x7f, 0x7, 0x8, 0x7, 0x7, 0x8fcb, 0x2, 0x8, 0x5, 0x40, 0x0, 0x2, 0x2, 0x80f, 0x4, 0x4, 0x0, 0x5, 0x0, 0x821, 0x8, 0x9, 0x3, 0x101, 0x80000001, 0x8, 0xb, 0x9, 0xc, 0xfff, 0x8, 0x101, 0x9a90, 0xff, 0x0, 0xf42b, 0x1, 0x68, 0x1, 0x7f, 0x7, 0x3, 0x1, 0xf, 0x482f, 0x0, 0x3ff, 0x8, 0x4, 0x40, 0x55dd7b13, 0x3ff, 0xffffffff, 0x7fffffff, 0x7, 0x2, 0x5, 0xfffffda6, 0x7fff, 0x4, 0x1, 0x8, 0x4, 0x4, 0x3, 0x4, 0xda, 0xac8, 0x0, 0x4, 0x15, 0x2, 0x7f, 0x1000, 0x7fff, 0x3, 0xffff6393, 0xa, 0x9, 0xffffffff, 0x1, 0x1, 0xe9f1, 0xfffffffa, 0x6, 0x2, 0x1f0f, 0x1, 0x8, 0x1, 0x1, 0x5, 0x1ff, 0xd, 0x457, 0x1, 0x6, 0x4dd, 0x8, 0x80, 0x10001, 0x7, 0x6, 0x9, 0x95d, 0x1d6, 0x8, 0x0, 0x8, 0x6, 0x14, 0x6ebbc166, 0x7, 0x7fff, 0x8, 0x6, 0x3, 0x42, 0x8, 0xff, 0x9, 0x2, 0x200, 0x4, 0x3, 0xa, 0x8, 0x0, 0xb, 0x6, 0xa, 0xfffffa8d, 0x800, 0x7f, 0x626a3099, 0x8, 0x0, 0x2, 0x7, 0xf4000000, 0x9, 0x4, 0x9, 0x5, 0x3, 0x7, 0x8, 0x0, 0x0, 0x3, 0x5, 0x81, 0x1000, 0x3, 0x5, 0x1, 0x6, 0x8, 0x8, 0xe, 0x2e5e0000, 0x5, 0xf220, 0x3, 0x2, 0x7, 0x1, 0x3, 0x1, 0x4, 0xe92d, 0xe, 0x3, 0x7, 0x7, 0x4, 0x5, 0x7e2, 0x5fa28553, 0x400, 0xa26, 0x4, 0x7, 0x2, 0x80000001, 0x31a, 0x5, 0x1, 0x5, 0x6, 0x4, 0x8, 0x0, 0x6, 0x5, 0x5, 0x7, 0x2, 0xffffff01, 0x7f4, 0x3, 0x70f, 0x5, 0x6, 0x240, 0x7]}, @TCA_TBF_BURST={0x8, 0x6, 0xc806}, @TCA_TBF_PTAB={0x404, 0x3, [0x8000, 0x3, 0x3, 0x8, 0x920d, 0x9, 0x1c, 0x4c, 0x0, 0x6, 0x2, 0x3, 0x4, 0x689a, 0x800, 0x1, 0xfff, 0x4, 0x8001, 0x5, 0x7c7b6d21, 0x4d, 0x9a, 0x9, 0x3, 0xfffffff8, 0xfffffffd, 0x7, 0x0, 0x0, 0x6, 0x0, 0x3, 0x9, 0x0, 0x10001, 0xfffffff8, 0x85, 0x6, 0x436, 0xe5, 0x7fff, 0x2, 0x7c7510b0, 0x3, 0x5, 0x1ffe, 0x7, 0xff, 0x7f, 0xffff, 0xe5, 0x1, 0x2, 0x2, 0xffffffff, 0x80000001, 0x5, 0x3, 0x6, 0x0, 0x6, 0x0, 0x6, 0x9, 0x2, 0x400, 0xfffffe00, 0x7, 0x4, 0x8, 0x7, 0x2, 0x5, 0x0, 0x0, 0xffffffeb, 0x9, 0xfffffffa, 0xfffffffe, 0x8, 0x5, 0x9, 0x9, 0x3ff, 0x1, 0x0, 0x2, 0xe76d, 0x2, 0x1, 0x0, 0xa, 0x8, 0x8000, 0x95, 0x800, 0x4, 0x562, 0x7, 0x1ff, 0x4, 0x1, 0x7, 0xbb9, 0x3, 0x197, 0x4, 0x0, 0x0, 0x5, 0x9, 0x7ff, 0x1, 0xffffff80, 0x7, 0x9, 0x8, 0x9, 0xffffc259, 0x94d4, 0x0, 0xffffffff, 0x6, 0x81, 0x2, 0x4, 0x9, 0x1d0faf2c, 0x1, 0xb66f, 0x6, 0x2, 0x9, 0x99c, 0x0, 0x6, 0x9, 0x2, 0x7f, 0x5, 0x3, 0xb91, 0x1, 0x4, 0x400, 0x59, 0x4, 0x6, 0x2, 0x82, 0xa, 0x2, 0x4, 0x7, 0x80, 0x6e, 0x5, 0x2d, 0x9, 0x200, 0xfff, 0x8000, 0x6, 0x7, 0x6, 0x0, 0xc57f, 0x2, 0x0, 0xf, 0x4a55, 0x3, 0x9, 0x3, 0x8, 0x6, 0x1, 0x4, 0x3, 0x7, 0x2de4, 0xf4, 0x0, 0x6dd, 0x4, 0x80000000, 0x3, 0xc4af, 0x0, 0xffff, 0x66d04ec2, 0xffff, 0x2, 0xc0000, 0x401, 0x2, 0x0, 0x8, 0xa, 0x6, 0xffffffff, 0xfffffffd, 0x0, 0xbc1, 0x2, 0x1, 0x400, 0x4, 0x20000, 0x58ac, 0x7, 0x308c, 0x401, 0x2, 0x2, 0x1, 0x0, 0x8, 0x2, 0x5, 0x64d9, 0x400, 0x5, 0x5, 0xf27, 0x1, 0x6, 0x3, 0x9, 0xc21, 0x101, 0x64d7da5b, 0x6, 0x1, 0xa84f, 0x2, 0x2, 0x9, 0xffffff09, 0x0, 0x9, 0x0, 0x4615, 0xad, 0x1, 0x7fff, 0x200, 0x636, 0x2, 0xbb, 0x4, 0xff000000, 0x4, 0xffff, 0x6]}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x58a, 0x3, 0x8, 0x0, 0x2, 0x0, 0x1ff, 0x7, 0x10001, 0xda7, 0x6, 0x3, 0x5, 0x9, 0x8001, 0x8, 0xf7c6, 0x10, 0x80, 0x8, 0x9, 0xfffffffc, 0x405, 0x101, 0xfffffff5, 0x1, 0x74, 0x7f, 0x5, 0x9, 0x0, 0x0, 0xfffffffd, 0x23d5d65a, 0x2, 0x6, 0xc, 0x2, 0x7, 0x73, 0xfffffff9, 0x40, 0xfffffff8, 0x51, 0x6, 0x7, 0x3ff, 0x7f, 0x6, 0x80000000, 0x857, 0x0, 0x3ff, 0x800003, 0x3, 0x6, 0x0, 0x8001, 0x6a371e88, 0x1, 0x8, 0x0, 0x2, 0x8001, 0x2de5, 0x7, 0x9, 0x81, 0x0, 0x2, 0x3, 0x6, 0x7, 0xfff, 0x88c4, 0x8, 0x6, 0x7, 0x7, 0x1, 0x5, 0x0, 0x10, 0x2, 0x8, 0x1c1c, 0x6, 0x1, 0x101, 0x1c00000, 0x3, 0x3ff, 0x0, 0x1000, 0x3, 0x401, 0x3ff, 0x9, 0x8, 0x5bc8, 0x0, 0x4, 0x5, 0x9, 0x1, 0x0, 0x6, 0x523, 0xfffc, 0x6, 0x9, 0x7, 0x8a, 0x4, 0xbeb0, 0x7bb, 0xfffffffd, 0x100, 0x7, 0xfffffe94, 0x4, 0x0, 0x3, 0x7, 0x40000000, 0x6, 0x9, 0x4, 0x5, 0x9, 0x9, 0x0, 0x1ff, 0x40, 0x7, 0xfd, 0x4, 0x8, 0x800, 0xff, 0x1, 0x2, 0x3, 0x30a044eb, 0x2, 0x9, 0x4, 0x1, 0xb, 0xe80, 0x7, 0x1, 0x7, 0x9, 0x6, 0xab3, 0x7fffffff, 0x2, 0xfffffff8, 0x401, 0x8, 0x5, 0x0, 0xf, 0x4e29, 0xfffffff9, 0x5d5, 0x0, 0x1, 0x3, 0x6, 0x3, 0x3, 0x200, 0x4, 0x7, 0x5, 0x4, 0x7fff, 0x3, 0x3, 0x4, 0x6, 0x7, 0x5, 0xd, 0x9, 0x7ff, 0x1, 0x4, 0x5, 0x2, 0xc, 0x8, 0x0, 0x6, 0x6000, 0x3, 0x8ef, 0x6, 0x6, 0x4, 0x9, 0x8, 0x10, 0xf53, 0x6, 0xd, 0x10, 0x67, 0x1, 0x3, 0x7, 0x8, 0x7fffffff, 0xffffffff, 0x8, 0x10000, 0x2c84, 0x7, 0x4, 0x1, 0x715, 0xe8, 0x4, 0xc, 0x5, 0x40, 0x7, 0x5, 0x72f, 0x97, 0xadc0, 0x7, 0x3, 0x5, 0x5, 0x0, 0x7b, 0x496, 0x1, 0x7, 0x10, 0x72, 0x91ec, 0x2, 0x7, 0xd7, 0x5, 0x0, 0x7, 0x44c6, 0x2e5d, 0x10001, 0xe]}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x46, 0x1, 0x6, 0x6, 0xff, 0x8000, 0x5, 0xc0000000, 0x2, 0x0, 0xb, 0x0, 0xffffe3db, 0x10001, 0x4, 0x6, 0x6, 0x100, 0x1000, 0x9, 0x2, 0xff, 0x7, 0x40, 0x6, 0x5, 0x4, 0x7e0016f1, 0x7bb, 0x8, 0x0, 0x8, 0xde46, 0x6, 0x2, 0x3, 0x0, 0x0, 0x1000, 0x10001, 0x8, 0x2, 0x0, 0x2, 0x6, 0x2, 0x6, 0x200, 0x6, 0x7f, 0x8, 0x7fffffff, 0x5, 0xffff8001, 0x5, 0x4, 0x6, 0x0, 0x7fff, 0x0, 0x5, 0x6, 0xb1b9, 0x0, 0xff, 0x5, 0x401, 0x4, 0x80, 0x4, 0x1, 0xf0, 0xf744, 0x9, 0xb, 0x1, 0x7, 0xffff7fff, 0x4, 0x80000001, 0x4b80, 0x8, 0x3, 0x3, 0x3, 0x800, 0x6, 0x3, 0x1000, 0x7, 0x14, 0x9, 0xffffff8d, 0x100, 0x8, 0x4, 0x8, 0x6, 0x8, 0x5, 0xd3b58049, 0x40, 0xfffffff7, 0x0, 0xffffffff, 0x4, 0x6, 0xa9a8, 0x0, 0x0, 0x80000000, 0x4, 0xffff1235, 0x0, 0x80000001, 0x4, 0x9, 0x1, 0xff, 0x9, 0x5, 0x1, 0x3, 0x7, 0x4, 0x3, 0x2, 0x7, 0x1, 0xe, 0xfff, 0x76d3e383, 0x5, 0x2d37, 0x80000000, 0x800, 0x1, 0xe, 0x0, 0x4, 0x7ff, 0x6, 0x100, 0xfffffffa, 0x2, 0x80000000, 0xf34, 0xfff, 0x3, 0xffff, 0x2, 0x4bf8000, 0xf, 0x400, 0x5, 0x2c75, 0x7, 0x27c2, 0x6, 0x7, 0x3800000, 0x9, 0x3290684c, 0xfffffffe, 0x6, 0x5, 0x1, 0x8, 0x1, 0x4, 0x8000, 0x69f, 0x37, 0x7, 0xe, 0xffffffff, 0x13, 0x5, 0x6, 0x7, 0xc0, 0x101, 0x4, 0xe, 0x5, 0x9, 0x5e540270, 0x401, 0x5, 0x81, 0x7, 0xd5, 0x4, 0x1, 0x0, 0x5, 0x7fffffff, 0x8, 0x85, 0x10000, 0x4, 0x1, 0x0, 0x8, 0x7, 0x8, 0x1, 0x9826, 0x6, 0x8, 0x0, 0x3852, 0x7, 0xb, 0x7, 0xd, 0xffff, 0x9, 0x5, 0x672, 0x2, 0x8, 0x10, 0xc, 0x10001, 0x58, 0x9, 0x5, 0x713, 0x3, 0x8000, 0x6, 0xfff, 0x9, 0x3, 0x9, 0x5, 0xfffffffb, 0x2, 0x6, 0x0, 0x315c, 0x7f, 0x6, 0x6, 0xfffffff7, 0xbfb2, 0xfffffffb, 0x7f, 0x8, 0x4, 0x2, 0x4, 0x5, 0x9]}]}}]}, 0x1048}}, 0x0)
connect$pppl2tp(r2, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x4, {0xa, 0x4e23, 0x3, @empty, 0xa40b}}}, 0x32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000540)={0x5}, 0x4)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x40040080)

219.492287ms ago: executing program 1 (id=3616):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000000140)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="050000000100", 0x6)
close(0x4)
pipe(0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000214"], 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x20000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="c903e52e000000007b538c7700"/24])
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={r5, 0x1, 0x6, @random="28b5522532a5"}, 0x63)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)

171.178485ms ago: executing program 2 (id=3617):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x8937, &(0x7f0000000140)={0x23a, 0xfffffffe, 0x0, 0x0, 0x3, [0x0, 0xffffffff, 0x4000097]})

170.715255ms ago: executing program 0 (id=3618):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @func={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20)

143.123604ms ago: executing program 0 (id=3619):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x28, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x28}}, 0x20004000)

139.766778ms ago: executing program 1 (id=3620):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp, 0x2}, 0x20)

69.104064ms ago: executing program 2 (id=3621):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100d3"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)

68.806812ms ago: executing program 0 (id=3622):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

67.079987ms ago: executing program 1 (id=3623):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x40004)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r1 = socket(0x14, 0x80000, 0x4)
connect$ax25(r1, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000300)}, {&(0x7f0000000480)="d91197e00f747fc820d9e533b12152b68ad35d567ae53cdee5f5a8747909c8e0f1d6c55d041443d850d904b0108b5d0915", 0x31}, {&(0x7f0000000700)="c3d10be65851562ae15faa03a71b1e3074f3e7d344f57b0700000000000000de691fd6ea136baf2d54eb98705f94742d03a08ac9677061d57f7ee5368237df32b9e46e49c424bc811c039cb9428fd0b9c41d3d3cd12dc4fd9381229699214c4c5bf736df2781db3bc714628dca3fc621b6e9f2cca6b2aaf079a83b2a3b348ab03f761b810777df5daa23e11a0dd20080b08340bd9f966d7dcde298d31f82026758ae4d0118851e", 0xa7}], 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}}, 0x0)
accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000540)=0xfffffffffffffd62)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, 0x0, 0x24000010)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_buf(r5, 0x29, 0x2c, &(0x7f0000000840)=""/218, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

66.697617ms ago: executing program 2 (id=3624):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000))

878.503µs ago: executing program 0 (id=3625):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0)

440.008µs ago: executing program 0 (id=3626):
syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "1264fbafb5ccccbabef3b01a75f92605c12199dc51532c004e26c6e035826277", "b2178e7de115d5a7c714ae55f40f3d74", {"d5b99c296869ad485c67f4fca93d8b5e", "a6fae989bd0adb8b73dcecd5e816e8f9"}}}}}}}, 0x0)

329.609µs ago: executing program 2 (id=3627):
unshare(0x400)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000040), 0x4)

162.188µs ago: executing program 2 (id=3628):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

0s ago: executing program 0 (id=3629):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0})
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:18339' (ED25519) to the list of known hosts.
syzkaller login: [   47.542057][ T5802] cgroup: Unknown subsys name 'net'
[   47.643761][ T5802] cgroup: Unknown subsys name 'cpuset'
[   47.647280][ T5802] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.047527][ T5802] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.469875][ T5854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.203870][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.207031][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.212737][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.216077][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.216752][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.222405][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.225417][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.228884][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.233022][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.233155][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.242816][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.245746][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.248730][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.265485][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.270002][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.486022][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   60.512440][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   60.542679][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   60.601932][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.604478][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.607029][ T5873] bridge_slave_0: entered allmulticast mode
[   60.609870][ T5873] bridge_slave_0: entered promiscuous mode
[   60.618843][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.621556][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.624075][ T5873] bridge_slave_1: entered allmulticast mode
[   60.626436][ T5873] bridge_slave_1: entered promiscuous mode
[   60.648158][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.650473][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.654044][ T5869] bridge_slave_0: entered allmulticast mode
[   60.657180][ T5869] bridge_slave_0: entered promiscuous mode
[   60.676309][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.678891][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.681924][ T5869] bridge_slave_1: entered allmulticast mode
[   60.684571][ T5869] bridge_slave_1: entered promiscuous mode
[   60.699658][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.707995][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.710421][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.713013][ T5868] bridge_slave_0: entered allmulticast mode
[   60.715761][ T5868] bridge_slave_0: entered promiscuous mode
[   60.719070][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.731799][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.735302][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.737865][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.740276][ T5868] bridge_slave_1: entered allmulticast mode
[   60.743895][ T5868] bridge_slave_1: entered promiscuous mode
[   60.757473][ T5873] team0: Port device team_slave_0 added
[   60.763131][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.780350][ T5873] team0: Port device team_slave_1 added
[   60.797266][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.806694][ T5869] team0: Port device team_slave_0 added
[   60.810108][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.814041][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.816606][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.825955][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.830330][ T5869] team0: Port device team_slave_1 added
[   60.846132][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.848862][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.858244][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.868293][ T5868] team0: Port device team_slave_0 added
[   60.875014][ T5868] team0: Port device team_slave_1 added
[   60.884212][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.886467][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.896103][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.913658][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.915980][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.924550][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.943781][ T5873] hsr_slave_0: entered promiscuous mode
[   60.946407][ T5873] hsr_slave_1: entered promiscuous mode
[   60.955644][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.958242][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.968057][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.973038][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.975455][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.984304][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.037741][ T5869] hsr_slave_0: entered promiscuous mode
[   61.040664][ T5869] hsr_slave_1: entered promiscuous mode
[   61.043699][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   61.045949][ T5869] Cannot create hsr debugfs directory
[   61.060976][ T5868] hsr_slave_0: entered promiscuous mode
[   61.064240][ T5868] hsr_slave_1: entered promiscuous mode
[   61.066419][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   61.068398][ T5868] Cannot create hsr debugfs directory
[   61.231863][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.237149][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.250761][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.255832][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.263821][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.268449][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.278241][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.287789][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.316922][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.321920][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.329042][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.331776][ T5873] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.334290][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.336944][ T5873] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.344272][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.353741][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.356379][ T5869] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.359124][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.361901][ T5869] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.366175][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.410251][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.413008][ T5868] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.415572][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.418141][ T5868] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.438784][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.457377][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.460815][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.464890][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.468399][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.472383][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.475975][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.489366][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   61.506829][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.514323][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.517041][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.521164][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.523838][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.538495][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   61.563151][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.565672][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.574118][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.579158][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.582044][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.609104][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   61.622453][  T920] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.625073][  T920] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.630588][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.643541][  T920] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.646146][  T920] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.746080][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.790971][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.798666][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.807054][ T5873] veth0_vlan: entered promiscuous mode
[   61.817586][ T5873] veth1_vlan: entered promiscuous mode
[   61.848150][ T5873] veth0_macvtap: entered promiscuous mode
[   61.857125][ T5873] veth1_macvtap: entered promiscuous mode
[   61.876745][ T5868] veth0_vlan: entered promiscuous mode
[   61.882353][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.890902][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.897042][ T5869] veth0_vlan: entered promiscuous mode
[   61.902626][ T5868] veth1_vlan: entered promiscuous mode
[   61.909501][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.914826][ T5869] veth1_vlan: entered promiscuous mode
[   61.918404][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.924286][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.933733][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.977397][ T5869] veth0_macvtap: entered promiscuous mode
[   61.988965][ T5869] veth1_macvtap: entered promiscuous mode
[   61.995554][  T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.995810][ T5868] veth0_macvtap: entered promiscuous mode
[   61.998232][  T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.016664][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.019595][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.024582][ T5868] veth1_macvtap: entered promiscuous mode
[   62.029078][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.038080][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.039508][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.055414][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.067206][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.078354][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.090907][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.108498][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.113713][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.146105][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.182556][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.195178][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.199073][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.204565][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.207773][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.238181][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.244153][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.261985][ T5870] Bluetooth: hci1: command tx timeout
[   62.284794][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.295074][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.317357][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.321000][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.341607][ T5870] Bluetooth: hci2: command tx timeout
[   62.343693][ T5870] Bluetooth: hci0: command tx timeout
[   62.605193][    C0] Unknown status report in ack skb
[   62.639418][ T5970] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[   62.689051][ T5976] Zero length message leads to an empty skb
[   62.691682][ T5974] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   62.694486][ T5974] netlink: 'syz.2.32': attribute type 2 has an invalid length.
[   62.707900][ T5974] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   62.710360][ T5974] netlink: 'syz.2.32': attribute type 2 has an invalid length.
[   63.080041][ T6011] tipc: Started in network mode
[   63.082771][ T6011] tipc: Node identity 9a0dedd3b6c7, cluster identity 4711
[   63.085710][ T6011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.088739][ T6011] syzkaller0: entered promiscuous mode
[   63.090871][ T6011] syzkaller0: entered allmulticast mode
[   63.116938][ T6011] tipc: Resetting bearer <eth:syzkaller0>
[   63.124401][ T6010] tipc: Resetting bearer <eth:syzkaller0>
[   63.134733][ T6010] tipc: Disabling bearer <eth:syzkaller0>
[   63.177497][ T6018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.53'.
[   63.180479][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'.
[   63.405891][ T6046] netlink: 'syz.2.62': attribute type 2 has an invalid length.
[   63.408299][ T6046] netlink: 244 bytes leftover after parsing attributes in process `syz.2.62'.
[   63.429676][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'.
[   63.433526][ T6048] netlink: 'syz.1.63': attribute type 7 has an invalid length.
[   63.436003][ T6048] netlink: 'syz.1.63': attribute type 8 has an invalid length.
[   63.438432][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   63.506385][ T6056] netlink: 'syz.1.67': attribute type 1 has an invalid length.
[   63.509448][ T6056] netlink: 244 bytes leftover after parsing attributes in process `syz.1.67'.
[   63.660055][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'.
[   63.664963][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.73'.
[   63.712206][ T6070] syz.2.74 uses obsolete (PF_INET,SOCK_PACKET)
[   64.094088][ T6113] netlink: 'syz.0.94': attribute type 13 has an invalid length.
[   64.097081][ T6113] netlink: 'syz.0.94': attribute type 17 has an invalid length.
[   64.109484][ T6114] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   64.196956][ T6113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   64.344055][ T5870] Bluetooth: hci1: command tx timeout
[   64.420091][ T6150] syz.2.102 (6150) used greatest stack depth: 20552 bytes left
[   64.423255][ T5870] Bluetooth: hci0: command tx timeout
[   64.431315][ T5870] Bluetooth: hci2: command tx timeout
[   64.523751][ T6168] warning: `syz.2.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.725743][ T6192] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.115'.
[   64.815597][ T6201] delete_channel: no stack
[   65.310792][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.121'.
[   65.349466][ T6213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   65.714887][ T6225] erspan0: entered promiscuous mode
[   65.717227][ T6225] gretap0: entered promiscuous mode
[   66.423177][ T5870] Bluetooth: hci1: command tx timeout
[   66.501418][ T5870] Bluetooth: hci2: command tx timeout
[   66.503839][ T5870] Bluetooth: hci0: command tx timeout
[   66.594834][ T6309] syzkaller1: tun_chr_ioctl cmd 1074025677
[   66.597279][ T6309] syzkaller1: linktype set to 778
[   66.826341][ T6332] macvlan2: entered promiscuous mode
[   66.833476][ T6332] macvlan2: entered allmulticast mode
[   66.842616][ T6332] bond1: (slave macvlan2): Opening slave failed
[   67.243565][ T6378] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   68.167378][ T6403] validate_nla: 4 callbacks suppressed
[   68.167410][ T6403] netlink: 'syz.2.192': attribute type 39 has an invalid length.
[   68.203757][ T6405] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   68.211858][ T6405] __nla_validate_parse: 8 callbacks suppressed
[   68.211875][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'.
[   68.230658][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'.
[   68.278995][ T6411] bridge_slave_0: left allmulticast mode
[   68.286704][ T6411] bridge_slave_0: left promiscuous mode
[   68.289140][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.303328][ T6411] bridge_slave_1: left allmulticast mode
[   68.306043][ T6411] bridge_slave_1: left promiscuous mode
[   68.308341][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.319461][ T6411] bond0: (slave bond_slave_0): Releasing backup interface
[   68.327037][ T6411] bond0: (slave bond_slave_1): Releasing backup interface
[   68.339390][ T6411] team0: Port device team_slave_0 removed
[   68.347723][ T6411] team0: Port device team_slave_1 removed
[   68.350703][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.354722][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.359191][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.362493][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.373222][ T6413] netlink: 96 bytes leftover after parsing attributes in process `syz.0.196'.
[   68.501191][ T5874] Bluetooth: hci1: command tx timeout
[   68.581635][ T5874] Bluetooth: hci0: command tx timeout
[   68.583667][ T5874] Bluetooth: hci2: command tx timeout
[   68.688573][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'.
[   68.767760][ T6449] sctp: [Deprecated]: syz.2.213 (pid 6449) Use of int in maxseg socket option.
[   68.767760][ T6449] Use struct sctp_assoc_value instead
[   68.887939][ T6467] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[   69.639104][ T6487] netlink: 'syz.0.230': attribute type 1 has an invalid length.
[   69.644782][ T6487] netlink: 128 bytes leftover after parsing attributes in process `syz.0.230'.
[   69.648309][ T6487] netlink: 'syz.0.230': attribute type 2 has an invalid length.
[   69.652009][ T6487] netlink: 'syz.0.230': attribute type 1 has an invalid length.
[   69.689945][ T6491] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   69.693306][ T6491] macsec1: entered promiscuous mode
[   69.695291][ T6491] macsec1: entered allmulticast mode
[   69.697540][ T6491] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   69.777671][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'.
[   69.875421][ T6514] batadv_slave_0: entered promiscuous mode
[   69.877786][ T6513] batadv_slave_0: left promiscuous mode
[   70.080032][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'.
[   70.167567][ T6544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.258'.
[   70.184198][ T6540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[   70.200911][ T6546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.358512][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'.
[   70.375992][ T6568] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.501488][ T6576] tipc: Started in network mode
[   70.503511][ T6576] tipc: Node identity 7e1542f050ce, cluster identity 4711
[   70.509784][ T6576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.518418][ T6576] syzkaller0: entered promiscuous mode
[   70.520982][ T6576] syzkaller0: entered allmulticast mode
[   70.564236][ T6576] tipc: Resetting bearer <eth:syzkaller0>
[   70.568213][ T6573] tipc: Resetting bearer <eth:syzkaller0>
[   70.591796][ T6573] tipc: Disabling bearer <eth:syzkaller0>
[   70.600596][ T6583] vlan0: entered promiscuous mode
[   70.650767][ T6590] netlink: 'syz.1.279': attribute type 32 has an invalid length.
[   70.783433][ T6604] syz.0.283 uses old SIOCAX25GETINFO
[   70.926886][ T6624] netlink: 'syz.1.292': attribute type 1 has an invalid length.
[   71.070607][ T5867] IPVS: starting estimator thread 0...
[   71.117330][   T33] audit: type=1800 audit(1756371836.966:2): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.295" name="blkio.bfq.time_recursive" dev="tmpfs" ino=548 res=0 errno=0
[   71.181185][ T6631] IPVS: using max 92 ests per chain, 220800 per kthread
[   71.243403][ T6645] netlink: 'syz.1.300': attribute type 6 has an invalid length.
[   71.382798][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   71.386492][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.505155][ T6663] Illegal XDP return value 4294967289 on prog  (id 51) dev N/A, expect packet loss!
[   71.727782][ T6675] netlink: 'syz.0.315': attribute type 10 has an invalid length.
[   71.737209][ T6675] team0: Port device dummy0 added
[   71.754420][ T6675] netlink: 'syz.0.315': attribute type 10 has an invalid length.
[   71.763608][ T6675] team0: Port device dummy0 removed
[   71.773907][ T6675] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   71.818898][ T6675] syz.0.315 (6675) used greatest stack depth: 19920 bytes left
[   71.937861][ T6687] team0: Mode changed to "loadbalance"
[   72.036271][ T6707] netlink: 'syz.0.331': attribute type 39 has an invalid length.
[   72.212826][ T6716] geneve2: entered promiscuous mode
[   72.224102][ T5710] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   72.227383][ T5710] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   72.236163][ T5710] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   72.242899][ T5710] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   72.245889][ T6726] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   72.496307][ T6762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.647326][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.284784][ T6818] pim6reg1: entered promiscuous mode
[   73.286482][ T6818] pim6reg1: entered allmulticast mode
[   73.305596][ T6820] validate_nla: 3 callbacks suppressed
[   73.305614][ T6820] netlink: 'syz.0.379': attribute type 1 has an invalid length.
[   73.310686][ T6820] __nla_validate_parse: 9 callbacks suppressed
[   73.310701][ T6820] netlink: 224 bytes leftover after parsing attributes in process `syz.0.379'.
[   73.467056][ T6834] syzkaller0: entered promiscuous mode
[   73.469214][ T6834] syzkaller0: entered allmulticast mode
[   73.474808][ T6834] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.482220][ T6834] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   73.487922][ T6834] tipc: Resetting bearer <eth:syzkaller0>
[   73.493960][ T6833] tipc: Resetting bearer <eth:syzkaller0>
[   73.501343][ T6833] tipc: Disabling bearer <eth:syzkaller0>
[   73.910531][ T6886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.914670][ T6886] syzkaller0: entered promiscuous mode
[   73.916445][ T6886] syzkaller0: entered allmulticast mode
[   74.241575][ T6890] tipc: Resetting bearer <eth:syzkaller0>
[   74.245334][ T6885] tipc: Resetting bearer <eth:syzkaller0>
[   74.276258][ T6885] tipc: Disabling bearer <eth:syzkaller0>
[   74.340817][ T6901] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[   74.349817][ T6901] netlink: 144 bytes leftover after parsing attributes in process `syz.0.415'.
[   74.370159][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.415'.
[   74.453593][ T6915] netlink: 'syz.1.420': attribute type 13 has an invalid length.
[   74.456534][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'.
[   74.470404][ T6915] netlink: 'syz.1.420': attribute type 13 has an invalid length.
[   74.471316][ T5881] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.476061][ T5881] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.476424][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'.
[   74.481574][ T5881] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.488318][ T5881] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.500178][ T6919] netlink: 'syz.2.423': attribute type 11 has an invalid length.
[   74.506505][ T6919] netlink: 'syz.2.423': attribute type 4 has an invalid length.
[   74.509820][ T6919] netlink: 224 bytes leftover after parsing attributes in process `syz.2.423'.
[   74.575467][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'.
[   74.578960][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'.
[   74.616399][ T6933] Bluetooth: MGMT ver 1.23
[   74.693491][ T6942] netlink: 'syz.1.434': attribute type 1 has an invalid length.
[   74.696726][ T6942] netlink: 144 bytes leftover after parsing attributes in process `syz.1.434'.
[   74.700160][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'.
[   74.774957][ T6950] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   75.197248][ T6991] rdma_op ffff88801f57f1f0 conn xmit_rdma 0000000000000000
[   75.564426][ T5931] IPVS: starting estimator thread 0...
[   75.661664][ T7011] IPVS: using max 92 ests per chain, 220800 per kthread
[   75.986035][   T46] cfg80211: failed to load regulatory.db
[   76.339709][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.384666][ T7138] tipc: Started in network mode
[   77.386586][ T7138] tipc: Node identity 7e73b356e0b1, cluster identity 4711
[   77.389461][ T7138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.394621][ T7138] syzkaller0: entered promiscuous mode
[   77.396837][ T7138] syzkaller0: entered allmulticast mode
[   77.408489][ T7138] tipc: Resetting bearer <eth:syzkaller0>
[   77.412422][ T7137] tipc: Resetting bearer <eth:syzkaller0>
[   77.417306][ T7137] tipc: Disabling bearer <eth:syzkaller0>
[   77.554072][ T7144] netlink: 'syz.1.523': attribute type 3 has an invalid length.
[   77.598307][ T7146] syzkaller0: entered promiscuous mode
[   77.600517][ T7146] syzkaller0: entered allmulticast mode
[   77.605508][ T7146] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.609465][ T7146] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   77.616490][ T7146] tipc: Resetting bearer <eth:syzkaller0>
[   77.620322][ T7145] tipc: Resetting bearer <eth:syzkaller0>
[   77.627330][ T7145] tipc: Disabling bearer <eth:syzkaller0>
[   77.782802][ T7152] veth3: entered promiscuous mode
[   77.857626][ T7156] block nbd0: not configured, cannot reconfigure
[   77.888097][ T7158] sit0: entered promiscuous mode
[   77.896280][ T7158] netlink: 'syz.1.530': attribute type 1 has an invalid length.
[   78.064820][ T7177] syzkaller1: entered promiscuous mode
[   78.067000][ T7177] syzkaller1: entered allmulticast mode
[   78.068339][ T7179] netlink: 'syz.0.540': attribute type 20 has an invalid length.
[   78.180565][ T7191] syzkaller0: entered promiscuous mode
[   78.183688][ T7191] syzkaller0: entered allmulticast mode
[   78.297204][ T7195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.300735][ T7195] syzkaller0: entered promiscuous mode
[   78.304788][ T7195] syzkaller0: entered allmulticast mode
[   78.313095][ T7195] tipc: Resetting bearer <eth:syzkaller0>
[   78.318028][ T7194] tipc: Resetting bearer <eth:syzkaller0>
[   78.323350][ T7194] tipc: Disabling bearer <eth:syzkaller0>
[   78.529639][ T7209] __nla_validate_parse: 15 callbacks suppressed
[   78.529656][ T7209] netlink: 9 bytes leftover after parsing attributes in process `syz.0.555'.
[   78.541846][ T7209] gretap0: entered promiscuous mode
[   78.577156][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.556'.
[   79.161119][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'.
[   79.186841][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'.
[   79.199267][ T7266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'.
[   79.223481][ T7267] geneve2: entered promiscuous mode
[   79.225233][ T7267] geneve2: entered allmulticast mode
[   79.227938][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 33291 - 0
[   79.231977][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 51465 - 0
[   79.235491][ T5881] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 33291 - 0
[   79.238656][ T5881] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 51465 - 0
[   79.243237][ T5881] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 33291 - 0
[   79.246532][ T5881] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 51465 - 0
[   79.253290][ T5881] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 33291 - 0
[   79.261292][ T5881] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 51465 - 0
[   79.288279][ T7274] netlink: 56 bytes leftover after parsing attributes in process `syz.2.586'.
[   79.737370][ T7328] netlink: 'syz.0.609': attribute type 1 has an invalid length.
[   79.868348][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'.
[   79.947207][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.615'.
[   80.003119][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.006197][ T7343] batadv_slave_0: entered promiscuous mode
[   80.371675][ T5710] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   81.196674][ T7365] bond0: (slave dummy0): Releasing backup interface
[   81.218917][ T7365] batman_adv: batadv0: Adding interface: dummy0
[   81.233286][ T7365] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.244214][ T7365] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   81.293749][ T7377] netlink: 'syz.1.628': attribute type 1 has an invalid length.
[   81.296771][ T7377] netlink: 'syz.1.628': attribute type 4 has an invalid length.
[   81.299745][ T7377] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.628'.
[   81.309670][ T7379] netlink: 'syz.0.629': attribute type 21 has an invalid length.
[   81.312674][ T7377] netlink: 'syz.1.628': attribute type 1 has an invalid length.
[   81.316817][ T7377] netlink: 'syz.1.628': attribute type 4 has an invalid length.
[   81.319825][ T7377] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.628'.
[   81.463325][ T7396] netlink: 'syz.2.637': attribute type 1 has an invalid length.
[   81.611454][ T7421] geneve3: entered promiscuous mode
[   81.730039][ T7440] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   81.735239][ T7440] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.017124][ T7468] netlink: 'syz.2.670': attribute type 21 has an invalid length.
[   82.025259][ T7468] netlink: 'syz.2.670': attribute type 5 has an invalid length.
[   82.094047][ T7476] netlink: 'syz.2.674': attribute type 3 has an invalid length.
[   82.268395][ T7495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   82.553994][ T7440] syz.0.657 (7440) used greatest stack depth: 19816 bytes left
[   83.411405][ T7569] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   83.571440][ T7575] __nla_validate_parse: 11 callbacks suppressed
[   83.571454][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'.
[   83.610241][ T7575] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.720'.
[   83.833921][ T7602] unknown channel width for channel at 909000KHz?
[   83.934366][ T7614] syz_tun: entered promiscuous mode
[   83.939033][ T7614] debugfs: 'hsr1' already exists in 'hsr'
[   83.940946][ T7614] Cannot create hsr debugfs directory
[   83.943327][ T5870] Bluetooth: hci0: command tx timeout
[   83.945903][ T7614] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   83.950254][ T7614] hsr1: entered allmulticast mode
[   83.952817][ T7614] syz_tun: entered allmulticast mode
[   83.954730][ T7614] batadv_slave_0: entered allmulticast mode
[   84.126415][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.751'.
[   84.153983][ T7645] IPv6: sit1: Disabled Multicast RS
[   84.156588][ T7645] sit1: entered allmulticast mode
[   84.610737][ T7696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.615693][ T7696] syzkaller0: entered promiscuous mode
[   84.617888][ T7696] syzkaller0: entered allmulticast mode
[   84.626380][ T7696] tipc: Resetting bearer <eth:syzkaller0>
[   84.630297][ T7693] tipc: Resetting bearer <eth:syzkaller0>
[   84.635482][ T7693] tipc: Disabling bearer <eth:syzkaller0>
[   84.728903][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'.
[   84.836447][ T7715] netlink: 92 bytes leftover after parsing attributes in process `syz.2.783'.
[   84.882866][ T7721] validate_nla: 4 callbacks suppressed
[   84.882878][ T7721] netlink: 'syz.0.786': attribute type 1 has an invalid length.
[   84.898810][ T7721] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.915297][ T7721] bond1: (slave gretap1): making interface the new active one
[   84.919271][ T7721] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   84.931930][ T7728] syzkaller1: entered promiscuous mode
[   84.934180][ T7728] syzkaller1: entered allmulticast mode
[   84.965286][ T7732] batadv_slave_1: entered promiscuous mode
[   84.979461][ T7731] batadv_slave_1: left promiscuous mode
[   85.097288][ T7747] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.798'.
[   85.391960][ T7758] netlink: 424 bytes leftover after parsing attributes in process `syz.0.803'.
[   86.182188][ T7782] nbd0: detected capacity change from 0 to 127
[   86.192735][   T56] block nbd0: Receive control failed (result -104)
[   86.192904][ T7788] block nbd0: Receive control failed (result -32)
[   86.324326][ T7799] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.820'.
[   86.372368][ T7807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.823'.
[   86.400912][ T7809] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.405167][ T7809] syzkaller0: entered promiscuous mode
[   86.407554][ T7809] syzkaller0: entered allmulticast mode
[   86.416590][ T7809] tipc: Resetting bearer <eth:syzkaller0>
[   86.420609][ T7808] tipc: Resetting bearer <eth:syzkaller0>
[   86.428018][ T7808] tipc: Disabling bearer <eth:syzkaller0>
[   86.454735][ T7815] netlink: 'syz.2.827': attribute type 2 has an invalid length.
[   86.457761][ T7815] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.827'.
[   86.645497][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811025c400: rx timeout, send abort
[   86.690776][ T7841] netlink: 'syz.0.839': attribute type 1 has an invalid length.
[   86.750829][ T7841] bond0: (slave bond_slave_1): Releasing backup interface
[   86.879192][ T7852] netlink: 'syz.0.843': attribute type 1 has an invalid length.
[   86.956002][ T7852] nbd: socks must be embedded in a SOCK_ITEM attr
[   86.958184][ T7852] block nbd1: shutting down sockets
[   87.123064][ T7866] netlink: 'syz.0.849': attribute type 1 has an invalid length.
[   87.148542][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811025c400: abort rx timeout. Force session deactivation
[   87.342910][ T7880] gretap0: left promiscuous mode
[   87.403558][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.407252][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.596671][ T7880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.690409][ T7880] vlan0: left promiscuous mode
[   87.758270][ T7880] hsr1: left allmulticast mode
[   87.762120][ T7880] syz_tun: left allmulticast mode
[   87.764300][ T7880] batadv_slave_0: left allmulticast mode
[   87.779229][ T5881] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.784240][ T5881] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.804582][ T5881] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.807929][ T5881] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.929319][ T7899] syz_tun (unregistering): left promiscuous mode
[   89.463150][ T7988] __nla_validate_parse: 8 callbacks suppressed
[   89.463166][ T7988] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.905'.
[   90.285791][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'.
[   90.338713][ T8015] netlink: 'syz.0.914': attribute type 5 has an invalid length.
[   90.352432][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.914'.
[   90.508524][ T8029] netlink: 308 bytes leftover after parsing attributes in process `syz.2.921'.
[   90.511790][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'.
[   90.515298][ T8029] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   90.643255][ T8043] sit0: left promiscuous mode
[   90.749595][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'.
[   90.844094][ T8043] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   90.880692][ T8043] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   90.884631][ T8043] macsec1: left promiscuous mode
[   90.886889][ T8043] macsec1: left allmulticast mode
[   90.893998][ T8043] veth3: left promiscuous mode
[   90.897377][ T8043] geneve2: left promiscuous mode
[   90.899555][ T8043] geneve2: left allmulticast mode
[   90.919469][ T8055] hsr_slave_0: left promiscuous mode
[   90.927237][ T8055] hsr_slave_1: left promiscuous mode
[   90.949219][ T5710] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.952815][ T5710] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.956398][ T5710] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 33291 - 0
[   90.959847][ T5710] netdevsim netdevsim1 netdevsim0: unset [1, 2] type 2 family 0 port 51465 - 0
[   90.963588][ T5710] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.968676][ T5710] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.972925][ T5710] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 33291 - 0
[   90.977020][ T5710] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 51465 - 0
[   90.984066][ T5710] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.990229][ T5710] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.996306][ T5710] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 33291 - 0
[   90.999632][ T5710] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 51465 - 0
[   91.010601][ T5710] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   91.015592][ T5710] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.019262][ T5710] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 33291 - 0
[   91.023629][ T5710] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 51465 - 0
[   91.146827][ T8074] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[   91.150063][ T8074] netlink: 224 bytes leftover after parsing attributes in process `syz.2.929'.
[   91.179814][ T8076] netlink: 44 bytes leftover after parsing attributes in process `syz.2.930'.
[   91.183625][ T8076] netem: unknown loss type 12
[   91.185269][ T8076] netem: change failed
[   91.237306][ T5912] IPVS: starting estimator thread 0...
[   91.248335][ T8080] tap0: tun_chr_ioctl cmd 1074025675
[   91.250458][ T8080] tap0: persist disabled
[   91.321597][ T8084] IPVS: using max 92 ests per chain, 220800 per kthread
[   91.631958][ T8101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.635801][ T8101] syzkaller0: entered promiscuous mode
[   91.638144][ T8101] syzkaller0: entered allmulticast mode
[   91.648862][ T8101] tipc: Resetting bearer <eth:syzkaller0>
[   91.653883][ T8100] tipc: Resetting bearer <eth:syzkaller0>
[   91.657992][ T8100] tipc: Disabling bearer <eth:syzkaller0>
[   92.175156][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'.
[   92.190918][ T8135] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.205534][ T8135] macvlan2: entered promiscuous mode
[   92.210963][ T8135] macvlan2: entered allmulticast mode
[   92.215733][ T8135] bond1: entered promiscuous mode
[   92.218630][ T8135] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   92.222568][ T8135] bond1: left promiscuous mode
[   92.345267][ T8153] netlink: 'syz.2.962': attribute type 4 has an invalid length.
[   92.526944][ T8173] tipc: Failed to remove unknown binding: 66,1,1/0:302482932/302482934
[   92.530611][ T8173] tipc: Failed to remove unknown binding: 66,1,1/0:302482932/302482934
[   92.536734][ T8173] tipc: Failed to remove unknown binding: 66,1,1/0:302482932/302482934
[   92.987693][ T8214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.992303][ T8214] syzkaller0: entered promiscuous mode
[   92.994402][ T8214] syzkaller0: entered allmulticast mode
[   93.014592][ T8214] tipc: Resetting bearer <eth:syzkaller0>
[   93.027628][ T8213] tipc: Resetting bearer <eth:syzkaller0>
[   93.036341][ T8213] tipc: Disabling bearer <eth:syzkaller0>
[   93.177069][ T8226] netlink: 56 bytes leftover after parsing attributes in process `syz.0.996'.
[   93.435376][ T8238] netlink: 'syz.0.1002': attribute type 12 has an invalid length.
[   93.540300][ T8247] netlink: 'syz.0.1006': attribute type 6 has an invalid length.
[   93.571062][ T8247] netlink: 'syz.0.1006': attribute type 12 has an invalid length.
[   93.676913][ T8252] netlink: 'syz.1.1009': attribute type 21 has an invalid length.
[   93.684857][ T8252] ipvlan1: entered promiscuous mode
[   93.688149][ T8252] bridge0: port 1(ipvlan1) entered blocking state
[   93.690985][ T8252] bridge0: port 1(ipvlan1) entered disabled state
[   93.694991][ T8252] ipvlan1: entered allmulticast mode
[   93.700817][ T8252] gretap0: entered allmulticast mode
[   93.708533][ T8252] ipvlan1: left allmulticast mode
[   93.710106][ T8252] gretap0: left allmulticast mode
[   94.828997][ T8312] __nla_validate_parse: 3 callbacks suppressed
[   94.829014][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'.
[   95.149296][ T8331] netlink: 'syz.1.1045': attribute type 10 has an invalid length.
[   95.183091][ T8331] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   95.183090][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'.
[   95.484033][ T8363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.487219][ T8363] syzkaller0: entered promiscuous mode
[   95.489352][ T8363] syzkaller0: entered allmulticast mode
[   95.507229][ T8363] tipc: Resetting bearer <eth:syzkaller0>
[   95.510870][ T8362] tipc: Resetting bearer <eth:syzkaller0>
[   95.519280][ T8362] tipc: Disabling bearer <eth:syzkaller0>
[   95.569455][ T8373] netlink: 'syz.2.1066': attribute type 11 has an invalid length.
[   95.574972][ T8373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1066'.
[   95.604826][ T8375] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1067'.
[   95.968948][ T8389] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   96.040186][ T8398] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1077'.
[   96.098626][ T8404] bond0: Unable to set down delay as MII monitoring is disabled
[   96.155475][ T8412] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1084'.
[   96.353505][ T8428] sock: sock_timestamping_bind_phc: sock not bind to device
[   96.394629][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'.
[   96.522402][ T8445] netlink: 'syz.2.1099': attribute type 1 has an invalid length.
[   96.527334][ T8447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   96.592579][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1103'.
[   96.689440][ T8466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.699356][ T8466] syzkaller0: entered promiscuous mode
[   96.701040][ T8466] syzkaller0: entered allmulticast mode
[   96.717893][ T8466] tipc: Resetting bearer <eth:syzkaller0>
[   96.732760][ T8465] tipc: Resetting bearer <eth:syzkaller0>
[   96.744148][ T8465] tipc: Disabling bearer <eth:syzkaller0>
[   96.814977][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1113'.
[   96.877052][ T8485] netlink: 'syz.0.1117': attribute type 7 has an invalid length.
[   96.879994][ T8485] netlink: 'syz.0.1117': attribute type 3 has an invalid length.
[   96.883336][ T8485] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1117'.
[   97.199266][ T8527] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   97.305207][ T8540] netlink: 'syz.1.1140': attribute type 1 has an invalid length.
[   98.227110][ T8580] lo speed is unknown, defaulting to 1000
[   98.229410][ T8580] lo speed is unknown, defaulting to 1000
[   98.232979][ T8580] lo speed is unknown, defaulting to 1000
[   98.237024][ T8580] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   98.245867][ T8580] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   98.264110][ T8580] lo speed is unknown, defaulting to 1000
[   98.267654][ T8580] lo speed is unknown, defaulting to 1000
[   98.270686][ T8580] lo speed is unknown, defaulting to 1000
[   98.405770][ T8591] netlink: 'syz.1.1162': attribute type 1 has an invalid length.
[   98.408371][ T8591] NCSI netlink: No device for ifindex 0
[   98.458163][ T8597] netlink: 'syz.1.1165': attribute type 2 has an invalid length.
[   98.466032][ T8597] k*]: entered promiscuous mode
[   98.484177][ T8597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.502716][ T8597] veth0_to_team: entered promiscuous mode
[   98.504757][ T8597] veth0_to_team: entered allmulticast mode
[   98.510269][ T8603] netlink: 'syz.0.1168': attribute type 4 has an invalid length.
[   98.700801][ T8628] syzkaller1: entered promiscuous mode
[   98.704831][ T8628] syzkaller1: entered allmulticast mode
[   98.745941][ T8635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.966454][ T8666] netlink: 'syz.2.1199': attribute type 1 has an invalid length.
[   98.969686][ T8666] netlink: 'syz.2.1199': attribute type 1 has an invalid length.
[   99.352407][ T8706] lo speed is unknown, defaulting to 1000
[   99.510160][ T8725] tap0: tun_chr_ioctl cmd 1074025677
[   99.517955][ T8725] tap0: linktype set to 825
[  100.084491][ T8776] __nla_validate_parse: 16 callbacks suppressed
[  100.084509][ T8776] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1251'.
[  100.193250][ T8784] tc_dump_action: action bad kind
[  102.618038][ T8867] lo speed is unknown, defaulting to 1000
[  103.060351][ T8890] lo speed is unknown, defaulting to 1000
[  103.544314][ T8922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1306'.
[  103.593999][ T8931] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1312'.
[  103.688058][ T8945] bridge2: entered promiscuous mode
[  103.752714][ T8958] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  103.783954][ T8960] can: request_module (can-proto-5) failed.
[  103.924383][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1332'.
[  103.975695][ T8979] bridge2: left promiscuous mode
[  103.983433][ T8979] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  104.014006][ T8979] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1333'.
[  104.051371][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'.
[  104.145012][ T8988] lo speed is unknown, defaulting to 1000
[  104.199260][ T8988] validate_nla: 1 callbacks suppressed
[  104.199275][ T8988] netlink: 'syz.0.1337': attribute type 1 has an invalid length.
[  104.205684][ T8988] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1337'.
[  104.209430][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  104.856691][ T9025] bridge: RTM_NEWNEIGH with invalid ether address
[  104.971584][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'.
[  105.023938][ T9043] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1362'.
[  105.227543][ T9056] team0: Unable to change to the same mode the team is in
[  105.489105][ T9074] syzkaller1: entered promiscuous mode
[  105.495107][ T9074] syzkaller1: entered allmulticast mode
[  105.777340][ T9086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.780312][ T9086] syzkaller0: entered promiscuous mode
[  105.783147][ T9086] syzkaller0: entered allmulticast mode
[  105.793099][ T9086] tipc: Resetting bearer <eth:syzkaller0>
[  105.797001][ T9085] tipc: Resetting bearer <eth:syzkaller0>
[  105.803650][ T9085] tipc: Disabling bearer <eth:syzkaller0>
[  106.053872][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'.
[  106.099254][ T9111] tun0: tun_chr_ioctl cmd 1074025675
[  106.103964][ T9111] tun0: persist enabled
[  106.105934][ T9111] tun0: tun_chr_ioctl cmd 1074025675
[  106.108391][ T9111] tun0: persist disabled
[  106.243551][   T33] audit: type=1800 audit(1756371872.096:3): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1393" name="cgroup.controllers" dev="tmpfs" ino=2123 res=0 errno=0
[  106.412271][ T9136] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  106.768090][ T9158] bridge_slave_0: left allmulticast mode
[  106.770465][ T9158] bridge_slave_0: left promiscuous mode
[  106.773928][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.013162][ T9158] bridge_slave_1: left allmulticast mode
[  107.019072][ T9158] bridge_slave_1: left promiscuous mode
[  107.034838][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.066420][ T9158] bond0: (slave bond_slave_0): Releasing backup interface
[  107.090150][ T9158] bond0: (slave bond_slave_1): Releasing backup interface
[  107.113404][ T9158] team0: Port device team_slave_0 removed
[  107.120887][ T9158] team0: Port device team_slave_1 removed
[  107.126129][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.129095][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.139621][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.143346][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.155258][ T9158] bond0: (slave netdevsim0): Releasing backup interface
[  107.200587][ T9175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1423'.
[  107.243232][ T9179] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1425'.
[  107.277510][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'.
[  107.296582][ T9187] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1429'.
[  107.454560][ T9203] netlink: 'syz.1.1436': attribute type 10 has an invalid length.
[  107.458507][ T9203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1436'.
[  107.463655][ T9203] dummy0: entered promiscuous mode
[  107.465614][ T9203] dummy0: entered allmulticast mode
[  107.469174][ T9203] bridge0: port 1(dummy0) entered blocking state
[  107.471815][ T9203] bridge0: port 1(dummy0) entered disabled state
[  108.105818][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'.
[  108.152987][ T9280] ip6gre1: entered allmulticast mode
[  108.284956][ T9293] ip6gre1: left allmulticast mode
[  108.624003][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1498'.
[  108.627675][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'.
[  108.694364][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'.
[  108.731377][ T9350] openvswitch: netlink: IP tunnel dst address not specified
[  108.840833][ T9360] macvlan2: entered promiscuous mode
[  108.843622][ T9360] bond0: entered promiscuous mode
[  108.845745][ T9360] bond_slave_0: entered promiscuous mode
[  108.848261][ T9360] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  108.855973][ T9360] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  108.978408][ T9372] bond0: Device is already in use.
[  109.497932][ T9404] bridge0: port 2(syz_tun) entered blocking state
[  109.500585][ T9404] bridge0: port 2(syz_tun) entered disabled state
[  109.504500][ T9404] syz_tun: entered allmulticast mode
[  109.507764][ T9404] syz_tun: entered promiscuous mode
[  109.555619][ T9408] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  109.629848][ T9412] syzkaller1: entered promiscuous mode
[  109.632791][ T9412] syzkaller1: entered allmulticast mode
[  109.765059][ T9424] vlan3: entered promiscuous mode
[  109.767375][ T9424] batadv0: entered promiscuous mode
[  109.874510][ T9434] netlink: 'syz.2.1537': attribute type 32 has an invalid length.
[  109.876957][ T9434] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  109.953134][ T9442] vlan3: entered promiscuous mode
[  109.955215][ T9442] hsr_slave_1: entered promiscuous mode
[  109.957597][ T9442] vlan3: entered allmulticast mode
[  109.959594][ T9442] hsr_slave_1: entered allmulticast mode
[  110.579578][ T9515] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  110.588063][ T9515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.690562][ T9526] netlink: 'syz.0.1573': attribute type 6 has an invalid length.
[  110.858293][ T9542] netlink: 'syz.1.1580': attribute type 9 has an invalid length.
[  110.939858][ T9546] syzkaller1: entered promiscuous mode
[  110.942143][ T9546] syzkaller1: entered allmulticast mode
[  111.042496][ T9550] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  111.092348][ T9556] __nla_validate_parse: 16 callbacks suppressed
[  111.092359][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'.
[  111.099157][ T9556] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  111.104166][ T9556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.204390][ T9570] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1593'.
[  111.268352][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1598'.
[  111.303962][ T5710] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  111.492040][ T9610] netlink: 'syz.2.1612': attribute type 1 has an invalid length.
[  111.494996][ T9610] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1612'.
[  111.782990][ T9648] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  111.834797][ T9656] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1633'.
[  112.013795][ T9671] lo speed is unknown, defaulting to 1000
[  112.261682][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'.
[  112.535410][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1653'.
[  112.667869][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1656'.
[  112.675768][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1656'.
[  112.796450][ T9716] netlink: 'syz.1.1659': attribute type 6 has an invalid length.
[  112.829779][ T9720] netlink: 'syz.1.1661': attribute type 1 has an invalid length.
[  112.863136][ T9722] netlink: 'syz.0.1662': attribute type 3 has an invalid length.
[  113.166989][ T9765] netlink: 'syz.1.1684': attribute type 11 has an invalid length.
[  113.240799][ T9772] lo speed is unknown, defaulting to 1000
[  113.436673][ T9789] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1694'.
[  113.537268][ T9803] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.539911][ T9803] syzkaller0: entered promiscuous mode
[  113.543915][ T9803] syzkaller0: entered allmulticast mode
[  113.551548][ T9803] tipc: Resetting bearer <eth:syzkaller0>
[  113.557130][ T9802] tipc: Resetting bearer <eth:syzkaller0>
[  113.575068][ T9802] tipc: Disabling bearer <eth:syzkaller0>
[  113.674321][ T9813] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.677775][ T9813] syzkaller0: entered promiscuous mode
[  113.680054][ T9813] syzkaller0: entered allmulticast mode
[  113.689679][ T9813] tipc: Resetting bearer <eth:syzkaller0>
[  113.698782][ T9812] tipc: Resetting bearer <eth:syzkaller0>
[  113.705930][ T9812] tipc: Disabling bearer <eth:syzkaller0>
[  113.709865][ T9817] netlink: 'syz.1.1707': attribute type 21 has an invalid length.
[  113.901731][ T9823] block nbd1: server does not support multiple connections per device.
[  113.904980][ T9823] block nbd1: shutting down sockets
[  114.087430][ T9843] delete_channel: no stack
[  114.144685][ T9849] netlink: 'syz.1.1721': attribute type 6 has an invalid length.
[  114.156564][ T9854] netlink: 'syz.0.1724': attribute type 2 has an invalid length.
[  115.155090][ T9902] lo speed is unknown, defaulting to 1000
[  115.514276][ T9940] xt_policy: neither incoming nor outgoing policy selected
[  115.609513][ T9952] IPVS: persistence engine module ip_vs_pe_ not found
[  115.680871][ T9960] syzkaller1: entered promiscuous mode
[  115.690644][ T9960] syzkaller1: entered allmulticast mode
[  116.087906][T10012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.091378][T10012] syzkaller0: entered promiscuous mode
[  116.093736][T10012] syzkaller0: entered allmulticast mode
[  116.100453][T10012] tipc: Resetting bearer <eth:syzkaller0>
[  116.105290][T10010] tipc: Resetting bearer <eth:syzkaller0>
[  116.110000][T10010] tipc: Disabling bearer <eth:syzkaller0>
[  116.529378][T10065] __nla_validate_parse: 7 callbacks suppressed
[  116.529401][T10065] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1816'.
[  116.625324][T10077] vlan2: entered promiscuous mode
[  116.627386][T10077] bond0: entered promiscuous mode
[  116.633363][T10077] vlan2: entered allmulticast mode
[  116.635001][T10077] bond0: entered allmulticast mode
[  116.641784][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1823'.
[  116.645362][T10079] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  116.648019][T10079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.677590][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'.
[  116.695785][T10083] syzkaller0: entered promiscuous mode
[  116.697987][T10083] syzkaller0: entered allmulticast mode
[  116.706343][T10087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.843828][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  116.847446][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  116.850130][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  116.856550][   T97] block nbd0: Connection timed out, retrying (0/2 alive)
[  116.859281][   T97] block nbd0: Dead connection, failed to find a fallback
[  116.863464][   T97] block nbd0: shutting down sockets
[  116.865463][   T97] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.868878][   T97] Buffer I/O error on dev nbd0, logical block 3, async page read
[  116.872481][   T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.878420][   T97] Buffer I/O error on dev nbd0, logical block 2, async page read
[  116.881837][   T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.885377][   T97] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.888438][   T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.896306][   T97] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.899006][ T7261] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.902890][ T7261] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.906029][ T7261] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.909302][ T7261] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.912749][ T7261] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.918473][ T7261] Buffer I/O error on dev nbd0, logical block 2, async page read
[  116.921736][ T7261] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.925163][ T7261] Buffer I/O error on dev nbd0, logical block 3, async page read
[  116.928715][ T7261] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.935274][ T7261] Buffer I/O error on dev nbd0, logical block 0, async page read
[  116.942684][ T7261] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  116.945917][ T7261] Buffer I/O error on dev nbd0, logical block 1, async page read
[  116.949981][ T7261] ldm_validate_partition_table(): Disk read failed.
[  116.953217][ T7261] Dev nbd0: unable to read RDB block 0
[  116.955518][ T7261]  nbd0: unable to read partition table
[  116.961611][ T7261] ldm_validate_partition_table(): Disk read failed.
[  116.964793][ T7261] Dev nbd0: unable to read RDB block 0
[  116.969478][ T7261]  nbd0: unable to read partition table
[  116.978958][T10105] bridge3: entered allmulticast mode
[  117.019335][T10112] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1835'.
[  117.023698][T10103] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1835'.
[  117.223824][T10131] tipc: Enabled bearer <ib:caif0>, priority 14
[  117.233823][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'.
[  117.248658][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'.
[  117.374915][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'.
[  117.710080][T10196] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1880'.
[  117.713843][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1880'.
[  118.341354][ T5867] tipc: Node number set to 751496659
[  118.679592][T10269] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  119.229658][T10302] batadv_slave_1: entered promiscuous mode
[  119.233828][T10301] batadv_slave_1: left promiscuous mode
[  119.401861][T10319] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  119.405910][T10319] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  119.456882][T10325] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.459662][T10325] syzkaller0: entered promiscuous mode
[  119.464541][T10325] syzkaller0: entered allmulticast mode
[  119.474746][T10325] tipc: Resetting bearer <eth:syzkaller0>
[  119.478521][T10323] tipc: Resetting bearer <eth:syzkaller0>
[  119.484037][T10323] tipc: Disabling bearer <eth:syzkaller0>
[  119.545487][T10331] validate_nla: 2 callbacks suppressed
[  119.545503][T10331] netlink: 'syz.1.1937': attribute type 3 has an invalid length.
[  119.597693][T10336] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  119.760775][T10351] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.773537][T10351] bond0: (slave rose0): Enslaving as an active interface with an up link
[  120.485464][T10420] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  120.945300][T10474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.950239][T10474] syzkaller0: entered promiscuous mode
[  120.954933][T10474] syzkaller0: entered allmulticast mode
[  120.963321][T10474] tipc: Resetting bearer <eth:syzkaller0>
[  120.967145][T10470] tipc: Resetting bearer <eth:syzkaller0>
[  120.972038][T10470] tipc: Disabling bearer <eth:syzkaller0>
[  121.027784][   T46] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  121.030503][   T46] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  121.039282][   T46] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  121.180022][T10512] netlink: 'syz.1.2008': attribute type 1 has an invalid length.
[  121.352530][T10532] vxcan3: entered allmulticast mode
[  121.544105][T10560] __nla_validate_parse: 16 callbacks suppressed
[  121.544116][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'.
[  121.687240][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'.
[  121.803907][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'.
[  121.807452][T10595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'.
[  122.036529][T10612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2047'.
[  122.529683][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'.
[  122.598113][T10634] macsec1: entered promiscuous mode
[  122.600304][T10634] dummy0: entered promiscuous mode
[  122.604208][T10634] macsec1: entered allmulticast mode
[  122.606041][T10634] dummy0: entered allmulticast mode
[  122.608947][T10634] dummy0: left allmulticast mode
[  122.611012][T10634] dummy0: left promiscuous mode
[  122.694366][   T33] audit: type=1107 audit(1756371888.546:4): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  122.790340][T10653] netlink: 'syz.1.2066': attribute type 2 has an invalid length.
[  122.795978][T10653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.856046][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'.
[  122.943193][T10676] nbd: socks must be embedded in a SOCK_ITEM attr
[  122.945982][T10676] block nbd1: shutting down sockets
[  123.061286][T10697] Bluetooth: MGMT ver 1.23
[  123.078168][T10699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2088'.
[  123.079779][T10702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'.
[  123.206816][T10727] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2102'.
[  124.036750][T10780] geneve3: entered promiscuous mode
[  124.039414][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.044113][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.047120][ T5881] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.050525][ T5881] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.270854][T10786] gretap0: entered promiscuous mode
[  124.273309][T10786] gretap0: left promiscuous mode
[  124.379126][T10794] team0: entered promiscuous mode
[  124.382848][T10794] team0 (unregistering): left promiscuous mode
[  124.693343][T10810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.765570][T10816] netlink: 'syz.2.2141': attribute type 1 has an invalid length.
[  125.482871][T10853] lo speed is unknown, defaulting to 1000
[  125.745657][T10871] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  126.354038][T10925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  126.357097][T10925] syzkaller0: entered promiscuous mode
[  126.359762][T10925] syzkaller0: entered allmulticast mode
[  126.366613][T10925] tipc: Resetting bearer <eth:syzkaller0>
[  126.370146][T10924] tipc: Resetting bearer <eth:syzkaller0>
[  126.377877][T10924] tipc: Disabling bearer <eth:syzkaller0>
[  126.478517][T10939] netlink: 'syz.1.2183': attribute type 4 has an invalid length.
[  126.487195][T10939] netlink: 'syz.1.2183': attribute type 4 has an invalid length.
[  126.572575][T10950] __nla_validate_parse: 8 callbacks suppressed
[  126.572587][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2186'.
[  126.967268][T11000] netlink: 'syz.0.2196': attribute type 13 has an invalid length.
[  126.970403][T11000] netlink: 'syz.0.2196': attribute type 17 has an invalid length.
[  127.008829][T11000] 8021q: adding VLAN 0 to HW filter on device team0
[  127.012466][T11000] batman_adv: batadv0: Interface activated: dummy0
[  127.016691][T11000] batadv0: mtu less than device minimum
[  127.019066][T11000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.023395][T11000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.026932][T11000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.030920][T11000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.034675][T11000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.038682][T11000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.042958][T11000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  127.054897][   T46] lo speed is unknown, defaulting to 1000
[  127.056749][   T46] syz1: Port: 1 Link ACTIVE
[  127.072297][T11010] lo speed is unknown, defaulting to 1000
[  127.106966][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'.
[  127.148898][T10992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.233046][T11020] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.2206'.
[  127.272316][T11026] netlink: 'syz.2.2208': attribute type 1 has an invalid length.
[  127.275550][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2208'.
[  127.282768][T11026] netlink: 'syz.2.2208': attribute type 1 has an invalid length.
[  127.307327][T11025] lo speed is unknown, defaulting to 1000
[  128.045538][T11073] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  128.225261][T11097] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.2241'.
[  128.270599][T11104] netlink: 'syz.1.2246': attribute type 10 has an invalid length.
[  128.289000][T11107] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2247'.
[  128.418603][T11129] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2258'.
[  128.448969][T11132] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2259'.
[  128.455693][T11132] ip6erspan0: entered allmulticast mode
[  128.685243][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'.
[  128.878554][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'.
[  129.177650][T11193] syzkaller1: entered promiscuous mode
[  129.179867][T11193] syzkaller1: entered allmulticast mode
[  129.257309][T11199] net_ratelimit: 13 callbacks suppressed
[  129.257327][T11199] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  129.539466][ T5931] hid-generic 0005:0B57:0000.0002: collection stack underflow
[  129.542919][ T5931] hid-generic 0005:0B57:0000.0002: item 0 0 0 12 parsing failed
[  129.547113][ T5931] hid-generic 0005:0B57:0000.0002: probe with driver hid-generic failed with error -22
[  129.586145][T11227] tun0: tun_chr_ioctl cmd 2148045848
[  129.589040][T11227] tun0: tun_chr_ioctl cmd 21731
[  129.737112][T11240] pim6reg1: entered promiscuous mode
[  129.739337][T11240] pim6reg1: entered allmulticast mode
[  130.362217][T11266] vlan2: entered promiscuous mode
[  130.363878][T11266] bridge0: entered promiscuous mode
[  130.628145][T11279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.634642][T11279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  130.709234][T11279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.713739][T11279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  130.768535][T11279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.774956][T11279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  130.816822][T11279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.820865][T11279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  130.902238][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  130.905205][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  130.927393][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  130.937409][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  130.944043][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  130.971893][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  130.975192][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  130.978399][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  131.184784][T11329] netlink: 'syz.2.2347': attribute type 12 has an invalid length.
[  131.245952][T11338] netlink: 'syz.1.2351': attribute type 17 has an invalid length.
[  131.462224][T11354] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  131.465568][T11354] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  131.846193][T11368] lo speed is unknown, defaulting to 1000
[  132.327976][T11368] __nla_validate_parse: 16 callbacks suppressed
[  132.327990][T11368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'.
[  132.334442][T11368] netlink: 'syz.2.2365': attribute type 13 has an invalid length.
[  132.337309][T11368] netlink: 'syz.2.2365': attribute type 17 has an invalid length.
[  132.344388][T11368] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  132.459185][T11376] gretap1: entered promiscuous mode
[  132.460988][T11376] gretap1: entered allmulticast mode
[  132.693881][T11395] lo speed is unknown, defaulting to 1000
[  132.706915][T11398] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2378'.
[  132.711918][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2378'.
[  132.736987][T11400] netlink: 'syz.0.2379': attribute type 1 has an invalid length.
[  132.740099][T11400] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2379'.
[  132.758360][T11401] lo speed is unknown, defaulting to 1000
[  132.790352][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'.
[  132.823192][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  132.826096][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[  132.900456][T11416] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  132.912882][T11418] netlink: 'syz.0.2386': attribute type 1 has an invalid length.
[  132.916020][T11418] netlink: 'syz.0.2386': attribute type 2 has an invalid length.
[  133.057054][T11427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2390'.
[  133.060284][T11427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2390'.
[  133.363752][T11445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2398'.
[  133.472836][T11448] batman_adv: batadv0: Interface deactivated: dummy0
[  133.474973][T11448] batman_adv: batadv0: Removing interface: dummy0
[  133.478546][T11448] bridge_slave_0: left allmulticast mode
[  133.480691][T11448] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.484612][T11448] bridge_slave_1: left allmulticast mode
[  133.486423][T11448] bridge_slave_1: left promiscuous mode
[  133.488973][T11448] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.494221][T11448] bond0: (slave bond_slave_0): Releasing backup interface
[  133.497234][T11448] bond_slave_0: left promiscuous mode
[  133.503068][T11448] team0: Port device team_slave_0 removed
[  133.508052][T11448] team0: Port device team_slave_1 removed
[  133.510836][T11448] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.523840][T11448] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.528840][T11448] bond0: (slave wlan1): Releasing backup interface
[  133.533309][T11448] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  133.537553][T11448] bond1: (slave gretap1): Releasing active interface
[  133.596732][T11448] netlink: 'syz.0.2399': attribute type 10 has an invalid length.
[  133.600419][T11448] bond0: (slave wlan1): refused to change device type
[  133.609348][T11448] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.613684][T11448] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.906206][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2411'.
[  134.909010][T11479] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  134.944023][T11481] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  134.980467][T11483] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2413'.
[  135.355183][T11505] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  135.403552][T11509] batadv1: entered promiscuous mode
[  135.405865][T11509] batadv1: entered allmulticast mode
[  135.776922][T11529] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  135.982453][T11546] lo speed is unknown, defaulting to 1000
[  136.046808][T11546] lo speed is unknown, defaulting to 1000
[  136.566585][T11594] netlink: 'syz.1.2464': attribute type 3 has an invalid length.
[  137.536021][T11683] lo speed is unknown, defaulting to 1000
[  137.979471][T11711] __nla_validate_parse: 16 callbacks suppressed
[  137.979488][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'.
[  138.719488][T11743] bond0: entered promiscuous mode
[  138.727843][T11743] bond0: entered allmulticast mode
[  138.734469][T11743] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.785274][T11745] ieee802154 phy0 wpan0: encryption failed: -22
[  138.868539][T11750] tipc: Enabled bearer <eth:team0>, priority 0
[  139.005006][T11767] netlink: 'syz.1.2535': attribute type 15 has an invalid length.
[  139.032488][T11769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2536'.
[  139.036155][T11769] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2536'.
[  139.942544][T11796] syzkaller0: entered promiscuous mode
[  139.945040][T11796] syzkaller0: entered allmulticast mode
[  139.950330][T11789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.960400][T11789] tipc: Resetting bearer <eth:syzkaller0>
[  139.970674][T11788] tipc: Resetting bearer <eth:syzkaller0>
[  139.975412][T11788] tipc: Disabling bearer <eth:syzkaller0>
[  140.174966][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  140.225659][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'.
[  140.229785][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  140.457608][T11846] Bluetooth: MGMT ver 1.23
[  141.099432][T11878] syzkaller1: entered promiscuous mode
[  141.102614][T11878] syzkaller1: entered allmulticast mode
[  141.681866][ T5881] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  141.705734][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2595'.
[  141.709563][T11919] openvswitch: netlink: Unknown nsh attribute 0
[  141.713066][T11919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.979904][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'.
[  142.039640][T11960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.207698][T11982] lo speed is unknown, defaulting to 1000
[  142.337829][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'.
[  142.340162][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2632'.
[  142.346171][T11996] veth1_macvtap: left promiscuous mode
[  142.408756][T12002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2634'.
[  142.423041][T12002] 8021q: VLANs not supported on ipvlan1
[  142.498731][T12012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.553855][T12012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.600825][T12012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.654139][T12012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.758548][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.767749][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.777008][ T5881] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.782364][ T5881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.785706][T12036] syzkaller1: entered promiscuous mode
[  142.787973][T12036] syzkaller1: entered allmulticast mode
[  143.092521][T12070] pim6reg: entered allmulticast mode
[  143.096033][T12070] pim6reg: left allmulticast mode
[  143.278192][T12085] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2673'.
[  143.284824][T12086] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2674'.
[  143.292790][T12086] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2674'.
[  143.377978][T12088] netlink: 1360 bytes leftover after parsing attributes in process `syz.2.2675'.
[  143.382721][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'.
[  143.459032][T12103] netlink: 'syz.2.2681': attribute type 1 has an invalid length.
[  143.464511][T12103] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2681'.
[  143.468854][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2681'.
[  143.502665][T12108] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2684'.
[  143.852241][T12158] netlink: 'syz.0.2705': attribute type 10 has an invalid length.
[  143.855134][T12158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2705'.
[  143.858210][T12158] dummy0: entered promiscuous mode
[  143.859962][T12158] dummy0: entered allmulticast mode
[  143.862920][T12158] bridge0: port 1(dummy0) entered blocking state
[  143.865616][T12158] bridge0: port 1(dummy0) entered disabled state
[  143.872313][T12158] bridge0: port 1(dummy0) entered blocking state
[  143.874680][T12158] bridge0: port 1(dummy0) entered forwarding state
[  144.025298][T12174] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  144.535141][T12225] syzkaller0: entered promiscuous mode
[  144.537146][T12225] syzkaller0: entered allmulticast mode
[  144.544050][T12229] trusted_key: syz.1.2738 sent an empty control message without MSG_MORE.
[  144.549529][T12229] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  144.553568][T12225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.556557][T12224] tipc: Resetting bearer <eth:syzkaller0>
[  144.598283][T12224] tipc: Disabling bearer <eth:syzkaller0>
[  144.604335][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'.
[  144.612747][T12229] bridge5: entered promiscuous mode
[  144.614681][T12229] bridge5: entered allmulticast mode
[  144.697244][T12241] team0: Device macvlan0 is already an upper device of the team interface
[  144.766663][T12247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.802226][T12251] IPv6: NLM_F_CREATE should be specified when creating new route
[  144.967747][T12276] netlink: 'syz.1.2760': attribute type 1 has an invalid length.
[  145.218035][T12305] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  145.220954][T12305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.530712][T12344] lo speed is unknown, defaulting to 1000
[  145.588664][T12350] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  145.673626][T12357] batadv_slave_1: entered promiscuous mode
[  145.677013][T12355] batadv_slave_1: left promiscuous mode
[  145.871431][T12385] netlink: 'syz.2.2812': attribute type 9 has an invalid length.
[  145.909615][T12391] netlink: 'syz.0.2814': attribute type 9 has an invalid length.
[  146.357452][T12455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.360236][T12455] syzkaller0: entered promiscuous mode
[  146.364863][T12455] syzkaller0: entered allmulticast mode
[  146.370579][T12455] tipc: Resetting bearer <eth:syzkaller0>
[  146.374755][T12454] tipc: Resetting bearer <eth:syzkaller0>
[  146.377619][T12454] tipc: Disabling bearer <eth:syzkaller0>
[  146.458455][T12466] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  146.464461][T12464] IPVS: stopping backup sync thread 12466 ...
[  146.555267][T12475] batadv0: entered promiscuous mode
[  146.557350][T12475] macvtap1: entered promiscuous mode
[  146.559499][T12475] macvtap1: entered allmulticast mode
[  146.562049][T12475] batadv0: entered allmulticast mode
[  146.565188][T12475] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  146.930442][T12507] svc: failed to register nfsdv3 RPC service (errno 111).
[  146.935178][T12507] svc: failed to register nfsaclv3 RPC service (errno 111).
[  147.137813][T12527] lo speed is unknown, defaulting to 1000
[  147.628262][T12530] netlink: 'syz.2.2875': attribute type 6 has an invalid length.
[  147.983500][T12559] wg1 speed is unknown, defaulting to 1000
[  147.986714][T12559] wg1 speed is unknown, defaulting to 1000
[  147.997141][T12559] wg1 speed is unknown, defaulting to 1000
[  148.016639][T12559] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  148.036041][T12559] wg1 speed is unknown, defaulting to 1000
[  148.038623][T12559] wg1 speed is unknown, defaulting to 1000
[  148.049448][T12559] wg1 speed is unknown, defaulting to 1000
[  148.053120][T12559] wg1 speed is unknown, defaulting to 1000
[  148.305190][T12591] __nla_validate_parse: 18 callbacks suppressed
[  148.305209][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2903'.
[  148.332484][T12587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.338184][T12586] tipc: Resetting bearer <eth:syzkaller0>
[  148.398493][T12586] tipc: Disabling bearer <eth:syzkaller0>
[  148.521760][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2916'.
[  148.533310][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2916'.
[  148.536377][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.539636][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.557460][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.560624][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.571854][T12621] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[  148.799411][T12643] syzkaller0: entered promiscuous mode
[  148.804515][T12643] syzkaller0: entered allmulticast mode
[  148.862956][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'.
[  148.866642][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'.
[  149.026181][T12668] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2940'.
[  149.052281][T12670] netlink: 'syz.1.2941': attribute type 10 has an invalid length.
[  149.070071][T12672] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2942'.
[  149.354061][T12711] unsupported nla_type 52263
[  149.399141][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2964'.
[  149.569274][   T33] audit: type=1800 audit(1756371915.416:5): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2963" name="memory.events" dev="tmpfs" ino=4847 res=0 errno=0
[  149.725172][T12740] lo speed is unknown, defaulting to 1000
[  149.729305][T12740] wg1 speed is unknown, defaulting to 1000
[  149.767712][T12740] netlink: 'syz.0.2973': attribute type 5 has an invalid length.
[  149.771625][ T5931] IPVS: starting estimator thread 0...
[  149.775037][T12740] ieee802154 phy0 wpan0: encryption failed: -22
[  149.862586][T12745] IPVS: using max 92 ests per chain, 220800 per kthread
[  150.015506][ T5881] IPVS: stop unused estimator thread 0...
[  150.040090][T12776] netlink: 'syz.1.2988': attribute type 30 has an invalid length.
[  150.155233][T12789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.159132][T12789] syzkaller0: entered promiscuous mode
[  150.162004][T12789] syzkaller0: entered allmulticast mode
[  150.178605][T12789] tipc: Resetting bearer <eth:syzkaller0>
[  150.183268][T12787] tipc: Resetting bearer <eth:syzkaller0>
[  150.189022][T12787] tipc: Disabling bearer <eth:syzkaller0>
[  150.295580][T12808] dvmrp0: entered allmulticast mode
[  150.373321][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'.
[  150.575882][T12845] netlink: 'syz.2.3020': attribute type 16 has an invalid length.
[  150.578389][T12845] netlink: 'syz.2.3020': attribute type 3 has an invalid length.
[  150.581300][T12845] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.3020'.
[  150.622334][T12843] IPVS: persistence engine module ip_vs_pe_ not found
[  150.904582][T12891] syzkaller0: entered promiscuous mode
[  150.906954][T12891] syzkaller0: entered allmulticast mode
[  151.702710][ T5870] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  151.702754][ T5874] Bluetooth: hci0: command 0x0c1a tx timeout
[  152.213216][T12987] netlink: 'syz.2.3085': attribute type 11 has an invalid length.
[  152.309436][T12993] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.439736][   T46] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  152.442993][   T46] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[  152.446286][   T46] hid-generic 0005:16BF:5505.0003: reserved main item tag 0xe
[  152.449730][   T46] hid-generic 0005:16BF:5505.0003: item fetching failed at offset 16/18
[  152.456084][   T46] hid-generic 0005:16BF:5505.0003: probe with driver hid-generic failed with error -22
[  152.813366][T13048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.905430][ T5874] Bluetooth: hci2: link tx timeout
[  152.908294][ T5874] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  152.911688][ T5874] Bluetooth: hci2: link tx timeout
[  152.913374][ T5874] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.427877][T13103] __nla_validate_parse: 11 callbacks suppressed
[  153.427888][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'.
[  153.433356][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3138'.
[  154.470752][T13138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'.
[  154.476453][T13138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3154'.
[  154.564868][T13144] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  154.569144][T13144] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  154.574298][T13144] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  154.693195][T13164] netlink: 'syz.2.3166': attribute type 1 has an invalid length.
[  154.784496][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'.
[  154.992330][ T5874] Bluetooth: hci2: command 0x0405 tx timeout
[  155.007145][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3188'.
[  155.016122][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  155.018801][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.021515][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.024137][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.026767][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.029613][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.032285][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.034953][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.037906][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.040886][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.043663][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.046161][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.048909][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.051588][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.054667][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.057756][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.060781][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.063743][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.066733][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.069861][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.073530][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.076450][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.079123][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.081613][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.084512][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.087316][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.088718][T13215] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.3191'.
[  155.089925][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.089935][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.089964][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.101822][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.104686][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.107529][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.110912][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.114007][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.117040][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.119959][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.123126][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.126056][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.128993][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.132047][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.135133][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.138030][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.140766][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.143740][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.146785][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.149635][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.152681][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.155661][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.158758][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.161879][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.164797][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.167789][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.170462][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.173485][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.176492][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.179317][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.182506][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.185279][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.188433][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.191588][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.195217][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.198149][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.201415][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.204699][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.207831][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.210883][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.214135][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.217195][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.220196][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.223267][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.226408][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.229496][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.232723][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.235836][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.238957][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.242194][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.245324][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.248263][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.251441][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.254403][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.257428][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.260385][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.263624][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.266594][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.269688][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.272842][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.275940][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.278912][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.282130][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.285185][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.288481][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.291725][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.294870][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.297929][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.301160][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.304254][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.307308][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.310396][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.313621][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.316697][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.319807][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.322992][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.326120][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.329192][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.332428][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.335510][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.338629][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.341786][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.344897][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.347972][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.351142][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.354173][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.357308][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.360395][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.363621][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.366681][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.369796][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.372838][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.375968][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.378945][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.382163][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.385255][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.388295][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.391429][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.394548][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.397596][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.400662][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  155.403815][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  155.427677][T13225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3196'.
[  155.431612][T13225] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3196'.
[  155.691999][T13255] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3204'.
[  155.795601][T13265] netlink: 'syz.2.3206': attribute type 1 has an invalid length.
[  156.314048][T13305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  156.365569][T13309] netlink: 'syz.1.3217': attribute type 16 has an invalid length.
[  156.368515][T13309] netlink: 'syz.1.3217': attribute type 17 has an invalid length.
[  156.936456][T13335] sctp: [Deprecated]: syz.2.3227 (pid 13335) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.936456][T13335] Use struct sctp_sack_info instead
[  157.002896][T13339] IPVS: wrr: FWM 3 0x00000003 - no destination available
[  157.014622][T13339] lo speed is unknown, defaulting to 1000
[  157.017034][T13339] wg1 speed is unknown, defaulting to 1000
[  157.061432][ T5874] Bluetooth: hci2: command 0x0405 tx timeout
[  157.437051][T13370] pim6reg1: entered promiscuous mode
[  157.439200][T13370] pim6reg1: entered allmulticast mode
[  157.499398][T13376] netlink: 'syz.1.3245': attribute type 4 has an invalid length.
[  157.503699][T13376] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  157.665891][T13394] netlink: 'syz.0.3254': attribute type 11 has an invalid length.
[  157.688352][T13392] netlink: 'syz.1.3253': attribute type 1 has an invalid length.
[  157.702468][T13392] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  157.707015][T13392] gretap1: entered promiscuous mode
[  157.818461][T13405] netlink: 'syz.1.3259': attribute type 11 has an invalid length.
[  157.956270][ T7788] block nbd1: Receive control failed (result -32)
[  158.023918][T13428] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  158.239759][T13435] bridge0: port 3(erspan0) entered blocking state
[  158.242412][T13435] bridge0: port 3(erspan0) entered disabled state
[  158.244582][T13435] erspan0: entered allmulticast mode
[  158.246712][T13435] erspan0: entered promiscuous mode
[  158.249710][T13435] erspan0: left allmulticast mode
[  158.251732][T13435] erspan0: left promiscuous mode
[  158.253407][T13435] bridge0: port 3(erspan0) entered disabled state
[  158.496004][T13475] __nla_validate_parse: 11 callbacks suppressed
[  158.496024][T13475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3291'.
[  158.610804][T13483] pimreg: entered allmulticast mode
[  158.623068][T13483] dvmrp8: entered allmulticast mode
[  158.627791][T13483] pimreg: left allmulticast mode
[  158.629984][T13483] dvmrp8: left allmulticast mode
[  158.774298][T13488] syzkaller0: entered promiscuous mode
[  158.776351][T13488] syzkaller0: entered allmulticast mode
[  158.887719][T13494] netlink: 'syz.1.3299': attribute type 7 has an invalid length.
[  158.890563][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'.
[  158.913551][T13494] bridge6: port 1(bond4) entered blocking state
[  158.916234][T13494] bridge6: port 1(bond4) entered disabled state
[  158.918888][T13494] bond4: entered allmulticast mode
[  159.186359][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'.
[  159.191483][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3308'.
[  159.271302][   T33] audit: type=1800 audit(1756371925.116:6): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3310" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5154 res=0 errno=0
[  159.285887][   T33] audit: type=1800 audit(1756371925.116:7): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3310" name="blkio.bfq.time_recursive" dev="tmpfs" ino=5154 res=0 errno=0
[  159.503643][T13532] tipc: New replicast peer: 255.255.255.255
[  159.506220][T13532] tipc: Enabled bearer <udp:syz2>, priority 10
[  159.650568][T13540] IPVS: Scheduler module ip_vs_sip not found
[  159.699247][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3323'.
[  160.046594][T13581] netlink: 'syz.1.3338': attribute type 19 has an invalid length.
[  160.049271][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3338'.
[  160.058191][T13581] netlink: 'syz.1.3338': attribute type 19 has an invalid length.
[  160.061617][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3338'.
[  160.225784][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'.
[  160.621401][   T46] tipc: Node number set to 786121456
[  160.678521][T13610] lo speed is unknown, defaulting to 1000
[  160.684341][T13610] wg1 speed is unknown, defaulting to 1000
[  160.758291][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'.
[  160.763054][T13614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.945836][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'.
[  161.029273][T13636] lo speed is unknown, defaulting to 1000
[  161.033140][T13636] wg1 speed is unknown, defaulting to 1000
[  161.228858][T13658] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  161.284429][T13664] bond0: option mode: unable to set because the bond device is up
[  161.357421][T13669] netlink: 'syz.2.3377': attribute type 1 has an invalid length.
[  162.437144][T13762] sctp: [Deprecated]: syz.2.3415 (pid 13762) Use of int in max_burst socket option.
[  162.437144][T13762] Use struct sctp_assoc_value instead
[  162.599547][T13774] lo speed is unknown, defaulting to 1000
[  162.603008][T13774] wg1 speed is unknown, defaulting to 1000
[  162.794756][T13790] netlink: 'syz.2.3426': attribute type 1 has an invalid length.
[  162.929158][T13813] netlink: 'syz.2.3434': attribute type 2 has an invalid length.
[  162.932376][T13813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  163.147644][T13842] ieee802154 phy0 wpan0: encryption failed: -22
[  164.468886][T13938] ieee802154 phy0 wpan0: encryption failed: -90
[  164.493808][T13940] __nla_validate_parse: 18 callbacks suppressed
[  164.493819][T13940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3492'.
[  164.499183][T13940] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3492'.
[  164.505163][T13940] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3492'.
[  164.562480][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3495'.
[  164.565708][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3495'.
[  164.572083][T13946] batadv0: entered promiscuous mode
[  164.574270][T13946] team0: entered promiscuous mode
[  164.577075][T13946] hsr2: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  164.580956][T13946] hsr2: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  164.591607][T13946] 8021q: adding VLAN 0 to HW filter on device hsr2
[  165.187087][T13988] bridge5: entered promiscuous mode
[  165.195683][T13988] bridge5: entered allmulticast mode
[  165.444294][T13998] openvswitch: netlink: Missing key (keys=40, expected=80)
[  165.478746][T14000] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3519'.
[  165.483083][T14000] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  165.633630][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'.
[  165.761008][T14020] syzkaller0: entered promiscuous mode
[  165.767193][T14020] syzkaller0: entered allmulticast mode
[  165.777906][T14020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  165.787143][T14019] tipc: Resetting bearer <eth:syzkaller0>
[  165.808862][T14019] tipc: Disabling bearer <eth:syzkaller0>
[  166.032648][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3542'.
[  166.036643][T14049] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3542'.
[  166.040599][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3543'.
[  166.107789][T14057] rdma_rxe: rxe_newlink: failed to add lo
[  166.204113][T14069] syzkaller1: entered promiscuous mode
[  166.206326][T14069] syzkaller1: entered allmulticast mode
[  166.253890][T14077] netlink: 'syz.0.3556': attribute type 7 has an invalid length.
[  166.415478][T14101] atomic_op ffff88803a70a998 conn xmit_atomic 0000000000000000
[  166.487313][T14110] tipc: Enabled bearer <eth:vlan0>, priority 18
[  166.565207][T14119] v: renamed from ip6_vti0 (while UP)
[  166.599953][T14126] netlink: 'syz.2.3579': attribute type 1 has an invalid length.
[  166.963209][T14167] netlink: 'syz.2.3597': attribute type 46 has an invalid length.
[  167.316004][T14195] tipc: MTU too low for tipc bearer
[  167.659991][T14241] ==================================================================
[  167.663396][T14241] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  167.666609][T14241] Read of size 4 at addr ffff8880394692c4 by task syz.2.3628/14241
[  167.669974][T14241] 
[  167.671187][T14241] CPU: 0 UID: 0 PID: 14241 Comm: syz.2.3628 Not tainted syzkaller #0 PREEMPT(full) 
[  167.671203][T14241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.671209][T14241] Call Trace:
[  167.671225][T14241]  <TASK>
[  167.671230][T14241]  dump_stack_lvl+0x189/0x250
[  167.671246][T14241]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.671256][T14241]  ? lock_release+0x4b/0x3e0
[  167.671270][T14241]  ? __virt_addr_valid+0x4a5/0x5c0
[  167.671281][T14241]  print_report+0xca/0x240
[  167.671290][T14241]  ? xfrm_alloc_spi+0x570/0xf30
[  167.671299][T14241]  kasan_report+0x118/0x150
[  167.671310][T14241]  ? lock_acquire+0x5f/0x360
[  167.671321][T14241]  ? xfrm_alloc_spi+0x570/0xf30
[  167.671331][T14241]  xfrm_alloc_spi+0x570/0xf30
[  167.671339][T14241]  ? xfrm_alloc_spi+0x2a0/0xf30
[  167.671350][T14241]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  167.671358][T14241]  ? xfrm_find_acq+0x87/0xa0
[  167.671367][T14241]  xfrm_alloc_userspi+0x70b/0xc90
[  167.671380][T14241]  ? apparmor_capable+0x137/0x1b0
[  167.671389][T14241]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  167.671399][T14241]  ? __nla_parse+0x40/0x60
[  167.671412][T14241]  xfrm_user_rcv_msg+0x7a3/0xab0
[  167.671423][T14241]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  167.671469][T14241]  ? __pfx___mutex_trylock_common+0x10/0x10
[  167.671479][T14241]  ? rcu_is_watching+0x15/0xb0
[  167.671488][T14241]  ? trace_contention_end+0x39/0x120
[  167.671496][T14241]  ? __mutex_lock+0x335/0x1350
[  167.671511][T14241]  netlink_rcv_skb+0x208/0x470
[  167.671523][T14241]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  167.671533][T14241]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  167.671546][T14241]  ? lock_release+0x4b/0x3e0
[  167.671558][T14241]  ? netlink_deliver_tap+0x2e/0x1b0
[  167.671569][T14241]  xfrm_netlink_rcv+0x79/0x90
[  167.671578][T14241]  netlink_unicast+0x82f/0x9e0
[  167.671589][T14241]  ? __pfx_netlink_unicast+0x10/0x10
[  167.671599][T14241]  ? netlink_sendmsg+0x642/0xb30
[  167.671606][T14241]  ? skb_put+0x11b/0x210
[  167.671614][T14241]  netlink_sendmsg+0x805/0xb30
[  167.671622][T14241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.671629][T14241]  ? futex_unqueue+0x22/0x240
[  167.671637][T14241]  ? aa_sock_msg_perm+0xf1/0x1d0
[  167.671645][T14241]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  167.671653][T14241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  167.671660][T14241]  __sock_sendmsg+0x21c/0x270
[  167.671670][T14241]  ____sys_sendmsg+0x505/0x830
[  167.671682][T14241]  ? __pfx_____sys_sendmsg+0x10/0x10
[  167.671692][T14241]  ? import_iovec+0x74/0xa0
[  167.671701][T14241]  ___sys_sendmsg+0x21f/0x2a0
[  167.671710][T14241]  ? __pfx____sys_sendmsg+0x10/0x10
[  167.671719][T14241]  ? futex_wait+0x285/0x360
[  167.671736][T14241]  ? __fget_files+0x2a/0x420
[  167.671743][T14241]  ? __fget_files+0x3a0/0x420
[  167.671752][T14241]  __x64_sys_sendmsg+0x19b/0x260
[  167.671760][T14241]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  167.671770][T14241]  ? rcu_is_watching+0x15/0xb0
[  167.671778][T14241]  ? rcu_is_watching+0x15/0xb0
[  167.671786][T14241]  do_syscall_64+0xfa/0x3b0
[  167.671793][T14241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.671801][T14241]  ? exc_page_fault+0x9f/0xf0
[  167.671812][T14241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.671819][T14241] RIP: 0033:0x7f8c2018ebe9
[  167.671828][T14241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.671836][T14241] RSP: 002b:00007f8c21010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  167.671846][T14241] RAX: ffffffffffffffda RBX: 00007f8c203b5fa0 RCX: 00007f8c2018ebe9
[  167.671852][T14241] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  167.671858][T14241] RBP: 00007f8c20211e19 R08: 0000000000000000 R09: 0000000000000000
[  167.671863][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.671868][T14241] R13: 00007f8c203b6038 R14: 00007f8c203b5fa0 R15: 00007ffd72d16ce8
[  167.671878][T14241]  </TASK>
[  167.671881][T14241] 
[  167.803190][T14241] Allocated by task 13530:
[  167.804581][T14241]  kasan_save_track+0x3e/0x80
[  167.806029][T14241]  __kasan_slab_alloc+0x6c/0x80
[  167.807503][T14241]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  167.809157][T14241]  xfrm_state_alloc+0x24/0x2f0
[  167.810637][T14241]  xfrm_add_sa+0x17d1/0x4070
[  167.812099][T14241]  xfrm_user_rcv_msg+0x7a3/0xab0
[  167.813687][T14241]  netlink_rcv_skb+0x208/0x470
[  167.815076][T14241]  xfrm_netlink_rcv+0x79/0x90
[  167.816475][T14241]  netlink_unicast+0x82f/0x9e0
[  167.817990][T14241]  netlink_sendmsg+0x805/0xb30
[  167.819687][T14241]  __sock_sendmsg+0x21c/0x270
[  167.821367][T14241]  ____sys_sendmsg+0x505/0x830
[  167.822857][T14241]  ___sys_sendmsg+0x21f/0x2a0
[  167.824310][T14241]  __x64_sys_sendmsg+0x19b/0x260
[  167.825821][T14241]  do_syscall_64+0xfa/0x3b0
[  167.827207][T14241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.829160][T14241] 
[  167.830066][T14241] Freed by task 9:
[  167.831516][T14241]  kasan_save_track+0x3e/0x80
[  167.833334][T14241]  kasan_save_free_info+0x46/0x50
[  167.835101][T14241]  __kasan_slab_free+0x5b/0x80
[  167.836925][T14241]  kmem_cache_free+0x18f/0x400
[  167.838408][T14241]  xfrm_state_gc_task+0x52d/0x6b0
[  167.840047][T14241]  process_scheduled_works+0xae1/0x17b0
[  167.842053][T14241]  worker_thread+0x8a0/0xda0
[  167.843714][T14241]  kthread+0x711/0x8a0
[  167.845017][T14241]  ret_from_fork+0x3fc/0x770
[  167.846508][T14241]  ret_from_fork_asm+0x1a/0x30
[  167.848059][T14241] 
[  167.848877][T14241] The buggy address belongs to the object at ffff888039469200
[  167.848877][T14241]  which belongs to the cache xfrm_state of size 928
[  167.853507][T14241] The buggy address is located 196 bytes inside of
[  167.853507][T14241]  freed 928-byte region [ffff888039469200, ffff8880394695a0)
[  167.857748][T14241] 
[  167.858524][T14241] The buggy address belongs to the physical page:
[  167.860489][T14241] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888039469200 pfn:0x39468
[  167.863566][T14241] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  167.866598][T14241] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  167.869679][T14241] page_type: f5(slab)
[  167.871304][T14241] raw: 00fff00000000040 ffff888104c8dc80 dead000000000122 0000000000000000
[  167.874711][T14241] raw: ffff888039469200 00000000800e000a 00000000f5000000 0000000000000000
[  167.878120][T14241] head: 00fff00000000040 ffff888104c8dc80 dead000000000122 0000000000000000
[  167.881002][T14241] head: ffff888039469200 00000000800e000a 00000000f5000000 0000000000000000
[  167.883710][T14241] head: 00fff00000000002 ffffea0000e51a01 00000000ffffffff 00000000ffffffff
[  167.886369][T14241] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  167.889335][T14241] page dumped because: kasan: bad access detected
[  167.891692][T14241] page_owner tracks the page as allocated
[  167.893459][T14241] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6383, tgid 6382 (syz.0.186), ts 68023817666, free_ts 68019599952
[  167.899346][T14241]  post_alloc_hook+0x240/0x2a0
[  167.901222][T14241]  get_page_from_freelist+0x21e4/0x22c0
[  167.903097][T14241]  __alloc_frozen_pages_noprof+0x181/0x370
[  167.904834][T14241]  alloc_pages_mpol+0x232/0x4a0
[  167.906736][T14241]  allocate_slab+0x8a/0x370
[  167.908575][T14241]  ___slab_alloc+0xbeb/0x1410
[  167.910461][T14241]  kmem_cache_alloc_noprof+0x283/0x3c0
[  167.912673][T14241]  xfrm_state_alloc+0x24/0x2f0
[  167.914588][T14241]  pfkey_add+0x6e4/0x2e00
[  167.916241][T14241]  pfkey_sendmsg+0xbfe/0x1090
[  167.917739][T14241]  __sock_sendmsg+0x21c/0x270
[  167.919215][T14241]  ____sys_sendmsg+0x505/0x830
[  167.920716][T14241]  ___sys_sendmsg+0x21f/0x2a0
[  167.922319][T14241]  __x64_sys_sendmsg+0x19b/0x260
[  167.924259][T14241]  do_syscall_64+0xfa/0x3b0
[  167.926075][T14241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.928435][T14241] page last free pid 5290 tgid 5290 stack trace:
[  167.930835][T14241]  __free_frozen_pages+0xbc4/0xd30
[  167.932306][T14241]  __slab_free+0x303/0x3c0
[  167.933674][T14241]  qlist_free_all+0x97/0x140
[  167.935061][T14241]  kasan_quarantine_reduce+0x148/0x160
[  167.937101][T14241]  __kasan_slab_alloc+0x22/0x80
[  167.938913][T14241]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  167.940837][T14241]  getname_flags+0xb8/0x540
[  167.942597][T14241]  vfs_fstatat+0x43/0x170
[  167.944196][T14241]  __x64_sys_newfstatat+0x116/0x190
[  167.946117][T14241]  do_syscall_64+0xfa/0x3b0
[  167.947863][T14241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.950162][T14241] 
[  167.951109][T14241] Memory state around the buggy address:
[  167.953165][T14241]  ffff888039469180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  167.956344][T14241]  ffff888039469200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.959262][T14241] >ffff888039469280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.961729][T14241]                                            ^
[  167.963607][T14241]  ffff888039469300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.966760][T14241]  ffff888039469380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  167.969810][T14241] ==================================================================
[  167.973033][T14241] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  167.976055][T14241] CPU: 0 UID: 0 PID: 14241 Comm: syz.2.3628 Not tainted syzkaller #0 PREEMPT(full) 
[  167.979731][T14241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.983476][T14241] Call Trace:
[  167.984548][T14241]  <TASK>
[  167.985483][T14241]  dump_stack_lvl+0x99/0x250
[  167.986900][T14241]  ? __asan_memcpy+0x40/0x70
[  167.988262][T14241]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.989827][T14241]  ? __pfx__printk+0x10/0x10
[  167.991204][T14241]  vpanic+0x281/0x750
[  167.992661][T14241]  ? __pfx_vpanic+0x10/0x10
[  167.994365][T14241]  ? rcu_is_watching+0x15/0xb0
[  167.996121][T14241]  panic+0xb9/0xc0
[  167.997611][T14241]  ? __pfx_panic+0x10/0x10
[  167.999231][T14241]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  168.001066][T14241]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  168.002916][T14241]  ? xfrm_alloc_spi+0x570/0xf30
[  168.004495][T14241]  check_panic_on_warn+0x89/0xb0
[  168.006279][T14241]  ? xfrm_alloc_spi+0x570/0xf30
[  168.007779][T14241]  end_report+0x78/0x160
[  168.009111][T14241]  kasan_report+0x129/0x150
[  168.010554][T14241]  ? lock_acquire+0x5f/0x360
[  168.012210][T14241]  ? xfrm_alloc_spi+0x570/0xf30
[  168.013804][T14241]  xfrm_alloc_spi+0x570/0xf30
[  168.015289][T14241]  ? xfrm_alloc_spi+0x2a0/0xf30
[  168.016882][T14241]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  168.018595][T14241]  ? xfrm_find_acq+0x87/0xa0
[  168.020145][T14241]  xfrm_alloc_userspi+0x70b/0xc90
[  168.022159][T14241]  ? apparmor_capable+0x137/0x1b0
[  168.024187][T14241]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  168.026360][T14241]  ? __nla_parse+0x40/0x60
[  168.028143][T14241]  xfrm_user_rcv_msg+0x7a3/0xab0
[  168.030030][T14241]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  168.032218][T14241]  ? __pfx___mutex_trylock_common+0x10/0x10
[  168.034566][T14241]  ? rcu_is_watching+0x15/0xb0
[  168.036467][T14241]  ? trace_contention_end+0x39/0x120
[  168.038562][T14241]  ? __mutex_lock+0x335/0x1350
[  168.040482][T14241]  netlink_rcv_skb+0x208/0x470
[  168.042326][T14241]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  168.044381][T14241]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  168.046318][T14241]  ? lock_release+0x4b/0x3e0
[  168.048172][T14241]  ? netlink_deliver_tap+0x2e/0x1b0
[  168.050166][T14241]  xfrm_netlink_rcv+0x79/0x90
[  168.051641][T14241]  netlink_unicast+0x82f/0x9e0
[  168.053564][T14241]  ? __pfx_netlink_unicast+0x10/0x10
[  168.055437][T14241]  ? netlink_sendmsg+0x642/0xb30
[  168.057100][T14241]  ? skb_put+0x11b/0x210
[  168.058723][T14241]  netlink_sendmsg+0x805/0xb30
[  168.060599][T14241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.062571][T14241]  ? futex_unqueue+0x22/0x240
[  168.064247][T14241]  ? aa_sock_msg_perm+0xf1/0x1d0
[  168.065968][T14241]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  168.067757][T14241]  ? __pfx_netlink_sendmsg+0x10/0x10
[  168.069566][T14241]  __sock_sendmsg+0x21c/0x270
[  168.071193][T14241]  ____sys_sendmsg+0x505/0x830
[  168.072831][T14241]  ? __pfx_____sys_sendmsg+0x10/0x10
[  168.074681][T14241]  ? import_iovec+0x74/0xa0
[  168.076081][T14241]  ___sys_sendmsg+0x21f/0x2a0
[  168.077604][T14241]  ? __pfx____sys_sendmsg+0x10/0x10
[  168.079324][T14241]  ? futex_wait+0x285/0x360
[  168.080812][T14241]  ? __fget_files+0x2a/0x420
[  168.082387][T14241]  ? __fget_files+0x3a0/0x420
[  168.083909][T14241]  __x64_sys_sendmsg+0x19b/0x260
[  168.085613][T14241]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  168.087299][T14241]  ? rcu_is_watching+0x15/0xb0
[  168.088862][T14241]  ? rcu_is_watching+0x15/0xb0
[  168.090426][T14241]  do_syscall_64+0xfa/0x3b0
[  168.091912][T14241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.093918][T14241]  ? exc_page_fault+0x9f/0xf0
[  168.095354][T14241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  168.097238][T14241] RIP: 0033:0x7f8c2018ebe9
[  168.098641][T14241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  168.104689][T14241] RSP: 002b:00007f8c21010038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.107277][T14241] RAX: ffffffffffffffda RBX: 00007f8c203b5fa0 RCX: 00007f8c2018ebe9
[  168.110289][T14241] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  168.113309][T14241] RBP: 00007f8c20211e19 R08: 0000000000000000 R09: 0000000000000000
[  168.116431][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  168.119378][T14241] R13: 00007f8c203b6038 R14: 00007f8c203b5fa0 R15: 00007ffd72d16ce8
[  168.122249][T14241]  </TASK>
[  168.124164][T14241] Kernel Offset: disabled
[  168.125570][T14241] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:05:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000118f RDI=0000000000001190 RBP=00000000000003f8 RSP=ffffc90009a869f0
R8 =ffff88801fc48237 R9 =1ffff11003f89046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb90f R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8c210106c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000004c0 CR3=0000000106f68000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8c20387498 00007f8c20387470 XMM03=00007f8c203874a8 00007f8c203874a0
XMM04=00007f8c20eed100 00007f8c20387460 XMM05=00007f8c20387478 00007f8c203874c0
XMM06=00007f8c203874b8 00007f8c203874b0 XMM07=00007f8c203874a8 00007f8c203874a0
XMM08=0000000000000000 00007f8c20212ee7 XMM09=0000000000000000 00007f8c20212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000246 RBX=ffffc90009de7ef0 RCX=ffff88810b73d640 RDX=0000000000000000
RSI=ffffffff8e280430 RDI=ffffc90009de7f58 RBP=ffffc90009de7f48 RSP=ffffc90009de7ee0
R8 =ffff88810b73d640 R9 =0000000000000005 R10=00000000fffffe00 R11=0000000000000000
R12=0000000000000000 R13=0000000000000003 R14=ffffc90009de7f58 R15=ffff88810b73d640
RIP=ffffffff813391f1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555573182500 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f72b69b6980 CR3=000000010ec62000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffffff00000000 XMM05=0000000000000000 00007f72b6a12e53
XMM06=0000000000000000 00007f72b6a12e4d XMM07=0000000000000000 00007f72b6a12e61
XMM08=0000000000000000 00007f72b6a12ee7 XMM09=0000000000000000 00007f72b6a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
