last executing test programs:

1.8153327s ago: executing program 2 (id=6607):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x40)

1.762810518s ago: executing program 2 (id=6613):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000075a003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000000000d0001009364703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)

1.682960052s ago: executing program 2 (id=6617):
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r2 = socket$kcm(0x10, 0x2, 0x10)
ioctl(r1, 0x1, &(0x7f0000000280)="f4b35d61be48743f2a1f4ff97fe199274e7716389c7aa4ad0b9ffe8ceac16ef5af1c24df8b65af0cd83aafec3a7ef8646c5795c7d9149e189bb3bd762e7144b128cd0c3c00159b25601321772fbbcdb59f8261177c27d6ee963b26a9da9a45291c6e2355f255e732d713e06094fb13d60155bbdb0a79933aded75d391dd8435fd9aabc97")
r3 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fecff6a9250000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x673}, {{0x0, 0x0, 0x0}, 0x7ff}], 0x2, 0x40010142, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000a00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', <r6=>0x0})
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48)
close(0x3)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004f881431b678380e"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYRESHEX=r8, @ANYRESOCT=0x0], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
sendmmsg$inet(r7, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000)
setsockopt(r7, 0x84, 0x7d, 0x0, 0x0)

1.586815642s ago: executing program 2 (id=6621):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

1.468265593s ago: executing program 2 (id=6623):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0)

594.183857ms ago: executing program 2 (id=6636):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r2, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x5d}], 0x1, 0x10022, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x8003, {@in6_addr=@mcast1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES64=r2, @ANYRES16=r5], 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r3, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000000)={@private1, r1}, 0x14)

472.233396ms ago: executing program 0 (id=6643):
r0 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x1d, 0x0, 0x0)
r1 = socket(0x29, 0x5, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50)
ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000))
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000080)=0x8, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x14, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x0, 0x2}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000ac4f000000000081daa9ea2af600950000002000002c09beef5ce52d35e5e1d0b22b10b3a52d00"/56], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
getsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000000140), &(0x7f0000000300)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)

254.82885ms ago: executing program 0 (id=6651):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

204.802217ms ago: executing program 0 (id=6654):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0)

144.71908ms ago: executing program 0 (id=6655):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x3ff}, {{0x2, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)

144.403713ms ago: executing program 1 (id=6656):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0xffffffff, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_sa2={0x2, 0x13, 0xf0, 0x0, 0x0, 0x70bd2c, 0x3506}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

144.296306ms ago: executing program 1 (id=6657):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

75.067354ms ago: executing program 1 (id=6658):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x1})

74.855946ms ago: executing program 1 (id=6659):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x30, 0x107, 0xfffffffe, 0x1, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

74.660812ms ago: executing program 0 (id=6660):
socket$phonet_pipe(0x23, 0x5, 0x2)

3.066927ms ago: executing program 0 (id=6661):
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f07ebbee1, 0x8031, 0xffffffffffffffff, 0x4ff72000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000002c0), 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r1], 0x80}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000018090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0500030008000000bd2df584"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a000004050001000740000033a4"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r6 = socket$unix(0x1, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000"], 0x48)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)

2.94762ms ago: executing program 1 (id=6662):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801)
setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4)

0s ago: executing program 1 (id=6663):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
close(0x3)

kernel console output (not intermixed with test programs):

.785895][ T8816] netlink: 'syz.2.1209': attribute type 21 has an invalid length.
[  109.788775][ T8816] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1209'.
[  109.795189][ T8817] netlink: 'syz.0.1207': attribute type 5 has an invalid length.
[  110.175539][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'.
[  110.573086][ T8884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.577749][ T8877] tipc: Resetting bearer <eth:syzkaller0>
[  110.591458][ T8877] tipc: Disabling bearer <eth:syzkaller0>
[  110.912171][ T8892] netlink: 'syz.0.1243': attribute type 4 has an invalid length.
[  111.064116][ T8917] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1256'.
[  111.068185][ T8917] .70: renamed from hsr0
[  111.091194][ T8917] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  111.111933][ T8917] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  111.116319][ T8917] .70: entered allmulticast mode
[  111.118519][ T8917] hsr_slave_0: entered allmulticast mode
[  111.120922][ T8917] hsr_slave_1: entered allmulticast mode
[  111.124939][ T8917] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  111.337166][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1261'.
[  111.573914][ T8941] netlink: 'syz.2.1267': attribute type 15 has an invalid length.
[  111.653212][ T8947] veth0_to_bridge: entered promiscuous mode
[  111.660834][ T8947] veth0_to_bridge: left promiscuous mode
[  111.743930][ T8945] netlink: 'syz.2.1269': attribute type 13 has an invalid length.
[  111.747159][ T8945] netlink: 'syz.2.1269': attribute type 17 has an invalid length.
[  111.756878][ T8945] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  112.023079][ T8980] netlink: 'syz.1.1283': attribute type 1 has an invalid length.
[  112.134920][ T8989] netlink: 'syz.1.1288': attribute type 1 has an invalid length.
[  112.138605][ T8989] netlink: 'syz.1.1288': attribute type 2 has an invalid length.
[  112.894957][ T9055] tipc: Started in network mode
[  112.896829][ T9055] tipc: Node identity ffff, cluster identity 4711
[  112.909695][ T9055] tipc: Node number set to 65535
[  112.914498][ T9055] tipc: Cannot configure node identity twice
[  112.966755][ T9058] ip6tnl4: entered promiscuous mode
[  113.122506][ T9064] netlink: 'syz.2.1323': attribute type 12 has an invalid length.
[  113.653492][ T9093] team0: No ports can be present during mode change
[  113.706427][ T9101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.244586][ T9136] __nla_validate_parse: 6 callbacks suppressed
[  114.244600][ T9136] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1354'.
[  114.797096][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1367'.
[  114.810295][ T9163] 8021q: adding VLAN 0 to HW filter on device bond3
[  114.817972][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'.
[  114.826124][ T9163] macsec1: entered promiscuous mode
[  114.828264][ T9163] bond3: entered promiscuous mode
[  114.830265][ T9163] macsec1: entered allmulticast mode
[  114.832300][ T9163] bond3: entered allmulticast mode
[  114.836541][ T9163] bond3: left allmulticast mode
[  114.838246][ T9163] bond3: left promiscuous mode
[  115.305790][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'.
[  115.309376][ T9186] bridge0: entered allmulticast mode
[  115.312578][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'.
[  115.315715][ T9186] bond0: left allmulticast mode
[  115.317378][ T9186] bond0: left promiscuous mode
[  115.319386][ T9186] bridge0: port 3(bond0) entered disabled state
[  115.324693][ T9186] bridge_slave_1: left allmulticast mode
[  115.326905][ T9186] bridge_slave_1: left promiscuous mode
[  115.329118][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.333367][ T9186] bridge_slave_0: left allmulticast mode
[  115.335685][ T9186] bridge_slave_0: left promiscuous mode
[  115.337754][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.349638][ T9186] bridge0 (unregistering): left allmulticast mode
[  115.838416][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'.
[  115.991401][ T9221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1389'.
[  116.950358][ T9256] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1403'.
[  117.095486][ T9264] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1406'.
[  117.098777][ T9264] netem: invalid attributes len -16
[  117.100657][ T9264] netem: change failed
[  117.214009][ T9274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.220978][ T9274] syzkaller0: entered promiscuous mode
[  117.224887][ T9274] syzkaller0: entered allmulticast mode
[  117.241667][ T9274] tipc: Resetting bearer <eth:syzkaller0>
[  117.247972][ T9273] tipc: Resetting bearer <eth:syzkaller0>
[  117.259311][ T9273] tipc: Disabling bearer <eth:syzkaller0>
[  117.321677][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1413'.
[  117.517194][ T9288] validate_nla: 2 callbacks suppressed
[  117.517212][ T9288] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  117.538599][ T9291] netlink: 'syz.0.1419': attribute type 1 has an invalid length.
[  117.550880][ T9288] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.580104][ T9288] ipvlan2: entered allmulticast mode
[  117.582514][ T9288] bond2: entered allmulticast mode
[  117.590892][ T9291] gretap1: entered allmulticast mode
[  117.596485][ T9291] bond4: (slave gretap1): making interface the new active one
[  117.600295][ T9291] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  117.613401][ T9288] bond2: (slave gretap1): making interface the new active one
[  117.616599][ T9288] gretap1: entered allmulticast mode
[  117.620280][ T9288] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  117.656582][ T9294] smc: net device bond0 applied user defined pnetid SYZ2
[  117.956045][ T5896] IPVS: starting estimator thread 0...
[  118.042060][ T9324] IPVS: using max 80 ests per chain, 192000 per kthread
[  118.986808][ T9347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.990398][ T9347] syzkaller0: entered promiscuous mode
[  118.993575][ T9347] syzkaller0: entered allmulticast mode
[  119.010070][ T9347] tipc: Resetting bearer <eth:syzkaller0>
[  119.015033][ T9346] tipc: Resetting bearer <eth:syzkaller0>
[  119.033810][ T9346] tipc: Disabling bearer <eth:syzkaller0>
[  119.284035][ T9371] __nla_validate_parse: 7 callbacks suppressed
[  119.284047][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'.
[  119.306302][ T5859] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.306880][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1457'.
[  119.313134][ T5859] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.318904][ T5859] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.324768][ T5859] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.439018][ T9383] netlink: 'syz.1.1463': attribute type 1 has an invalid length.
[  119.463114][ T9383] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.483533][ T9383] bond0: (slave veth3): Enslaving as an active interface with a down link
[  119.496520][ T9383] 8021q: adding VLAN 0 to HW filter on device batadv1
[  119.499698][ T9383] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  119.918545][ T9412] IPVS: Scheduler module ip_vs_sip not found
[  120.061139][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'.
[  120.064754][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'.
[  120.174811][ T9445] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1489'.
[  120.190946][ T9447] team0: Port device team_slave_0 removed
[  120.196794][ T9447] team0: Port device team_slave_1 removed
[  120.199477][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.205451][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.210033][ T9447] bond1: (slave ip6gretap1): Removing an active aggregator
[  120.214709][ T9447] bond1: (slave ip6gretap1): Releasing backup interface
[  120.218211][ T9447] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 22:ee:ed:9a:be:ff - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  120.228675][ T9447] bond1: (slave veth3): Releasing backup interface
[  120.238646][ T9447] bond4: (slave gretap1): Releasing active interface
[  120.257245][ T9452] team0: Mode changed to "loadbalance"
[  120.259844][ T9453] tun0: tun_chr_ioctl cmd 1074025675
[  120.263409][ T9453] tun0: persist enabled
[  120.264327][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'.
[  120.269428][ T9449] tun0: tun_chr_ioctl cmd 1074025675
[  120.271296][ T9449] tun0: persist enabled
[  120.935284][ T9517] netpci0: tun_chr_ioctl cmd 2147767507
[  120.944068][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'.
[  120.988966][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'.
[  121.062885][ T9531] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1528'.
[  121.275069][ T9554] openvswitch: netlink: Key type 29 is not supported
[  121.321707][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'.
[  121.576205][ T9586] netlink: 'syz.1.1547': attribute type 1 has an invalid length.
[  122.059353][ T9639] netlink: 'syz.2.1570': attribute type 9 has an invalid length.
[  122.307840][ T9662] batman_adv: batadv0: Removing interface: dummy0
[  122.879263][ T9726] netlink: 'syz.0.1607': attribute type 1 has an invalid length.
[  123.293244][ T9759] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.437919][ T9772] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.442443][ T9772] syzkaller0: entered promiscuous mode
[  123.444951][ T9772] syzkaller0: entered allmulticast mode
[  123.471460][ T9772] tipc: Resetting bearer <eth:syzkaller0>
[  123.518213][ T9771] tipc: Resetting bearer <eth:syzkaller0>
[  123.530012][ T9771] tipc: Disabling bearer <eth:syzkaller0>
[  123.856317][ T5896] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0
[  123.866266][ T5896] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  124.673600][ T9795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.676874][ T9796] syzkaller0: entered promiscuous mode
[  124.679242][ T9796] syzkaller0: entered allmulticast mode
[  124.755725][ T9800] tipc: Resetting bearer <eth:syzkaller0>
[  124.782894][ T9800] tipc: Disabling bearer <eth:syzkaller0>
[  125.124296][ T9835] netlink: 'syz.1.1653': attribute type 21 has an invalid length.
[  125.127810][ T9835] IPv6: NLM_F_CREATE should be specified when creating new route
[  125.131232][ T9835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.134604][ T9835] IPv6: NLM_F_CREATE should be set when creating new route
[  125.137619][ T9835] IPv6: NLM_F_CREATE should be set when creating new route
[  125.140639][ T9835] IPv6: NLM_F_CREATE should be set when creating new route
[  125.920994][ T9853] __nla_validate_parse: 9 callbacks suppressed
[  125.921012][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1663'.
[  125.949151][ T9855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.954021][ T9855] syzkaller0: entered promiscuous mode
[  125.956277][ T9855] syzkaller0: entered allmulticast mode
[  125.978916][ T9855] tipc: Resetting bearer <eth:syzkaller0>
[  125.986043][ T9854] tipc: Resetting bearer <eth:syzkaller0>
[  125.998198][ T9854] tipc: Disabling bearer <eth:syzkaller0>
[  126.414766][ T9898] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.583929][ T9907] bond3: entered promiscuous mode
[  126.642340][ T9911] syzkaller1: entered allmulticast mode
[  126.816941][ T9919] netlink: 'syz.2.1690': attribute type 11 has an invalid length.
[  126.820514][ T9919] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1690'.
[  127.276083][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1698'.
[  128.015417][T10001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.019514][T10000] tipc: Resetting bearer <eth:syzkaller0>
[  128.909083][T10000] tipc: Disabling bearer <eth:syzkaller0>
[  129.190225][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'.
[  129.196024][T10038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1737'.
[  129.792326][T10062] netlink: 'syz.2.1746': attribute type 27 has an invalid length.
[  129.915297][T10070] netlink: 'syz.2.1750': attribute type 1 has an invalid length.
[  129.918441][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'.
[  129.936202][T10070] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1750'.
[  130.025721][T10078] netlink: 'syz.0.1754': attribute type 1 has an invalid length.
[  130.028960][T10078] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1754'.
[  130.190371][T10096] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1763'.
[  130.221460][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'.
[  130.224606][T10098] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  130.227247][T10098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.305477][T10108] only policy match revision 0 supported
[  130.305493][T10108] unable to load match
[  130.416596][T10120] netlink: 'syz.0.1776': attribute type 6 has an invalid length.
[  130.648119][T10148] batadv_slave_1: entered promiscuous mode
[  130.728277][T10158] netlink: 'syz.1.1792': attribute type 1 has an invalid length.
[  130.765956][T10164] netlink: 'syz.2.1794': attribute type 4 has an invalid length.
[  131.297663][ T5876] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  131.349950][ T5878] IPVS: starting estimator thread 0...
[  131.441954][T10215] IPVS: using max 41 ests per chain, 98400 per kthread
[  132.686917][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.700244][T10235] __nla_validate_parse: 4 callbacks suppressed
[  132.700261][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'.
[  132.922043][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  132.936296][T10245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.005576][T10247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.694402][T10298] syzkaller0: entered promiscuous mode
[  133.696310][T10298] syzkaller0: entered allmulticast mode
[  133.739600][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'.
[  133.749636][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1856'.
[  133.792914][T10311] dvmrp1: tun_chr_ioctl cmd 1074025677
[  133.794782][T10311] dvmrp1: linktype set to 773
[  133.930960][T10328] syzkaller0: entered promiscuous mode
[  133.932995][T10328] syzkaller0: entered allmulticast mode
[  134.045962][T10344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.132649][T10344] netlink: 'syz.1.1875': attribute type 1 has an invalid length.
[  134.135311][T10344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1875'.
[  134.139030][   T56] block nbd0: Receive control failed (result -32)
[  134.184554][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1878'.
[  134.355884][T10370] netlink: 'syz.2.1887': attribute type 16 has an invalid length.
[  134.357983][T10371] netlink: 'syz.0.1888': attribute type 1 has an invalid length.
[  134.358570][T10370] netlink: 'syz.2.1887': attribute type 17 has an invalid length.
[  134.361512][T10371] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1888'.
[  134.379718][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.382786][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.385642][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.388463][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  134.463563][T10382] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1892'.
[  134.665669][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'.
[  134.690900][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'.
[  134.693426][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1902'.
[  134.955429][T10424] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  135.258216][T10440] netlink: zone id is out of range
[  135.264064][T10440] netlink: zone id is out of range
[  135.268195][T10440] netlink: zone id is out of range
[  135.270406][T10440] netlink: get zone limit has 8 unknown bytes
[  136.587537][T10553] netlink: 'syz.2.1972': attribute type 28 has an invalid length.
[  136.651366][T10560] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  136.746550][T10568] netlink: 'syz.1.1978': attribute type 23 has an invalid length.
[  137.107575][T10591] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  137.165115][T10593] pim6reg1: entered promiscuous mode
[  137.170056][T10593] pim6reg1: entered allmulticast mode
[  137.615340][T10616] veth6: entered allmulticast mode
[  137.767404][T10631] netlink: 'syz.2.2005': attribute type 13 has an invalid length.
[  137.770649][T10631] netlink: 'syz.2.2005': attribute type 17 has an invalid length.
[  137.792830][T10631] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.796072][T10631] 8021q: adding VLAN 0 to HW filter on device team0
[  137.802006][T10633] netlink: 'syz.0.2008': attribute type 1 has an invalid length.
[  137.805689][T10631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.836864][T10633] 8021q: adding VLAN 0 to HW filter on device bond5
[  137.853415][T10633] vlan4: entered promiscuous mode
[  137.855535][T10633] bond5: entered promiscuous mode
[  137.858137][T10633] vlan4: entered allmulticast mode
[  137.860152][T10633] bond5: entered allmulticast mode
[  137.877636][T10633] bond5: (slave gretap2): making interface the new active one
[  137.880293][T10633] gretap2: entered promiscuous mode
[  137.882897][T10633] gretap2: entered allmulticast mode
[  137.887264][T10633] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  137.905890][T10633] syz.0.2008 (10633) used greatest stack depth: 16936 bytes left
[  137.920799][T10631] __nla_validate_parse: 4 callbacks suppressed
[  137.920807][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'.
[  138.325463][T10648] lo speed is unknown, defaulting to 1000
[  138.329613][T10648] lo speed is unknown, defaulting to 1000
[  138.333652][T10648] lo speed is unknown, defaulting to 1000
[  138.465862][T10653] ip6tnl4: left promiscuous mode
[  138.476555][T10653] gretap1: left allmulticast mode
[  138.495163][T10648] infiniband syz0: set down
[  138.499119][T10653] vlan4: left promiscuous mode
[  138.499267][T10648] infiniband syz0: added lo
[  138.501623][T10653] bond5: left promiscuous mode
[  138.506373][T10653] gretap2: left promiscuous mode
[  138.509074][T10653] vlan4: left allmulticast mode
[  138.513977][T10653] bond5: left allmulticast mode
[  138.516222][T10653] gretap2: left allmulticast mode
[  138.522625][ T5878] lo speed is unknown, defaulting to 1000
[  138.555154][T10648] RDS/IB: syz0: added
[  138.556842][T10648] smc: adding ib device syz0 with port count 1
[  138.559394][T10648] smc:    ib device syz0 port 1 has pnetid 
[  138.562520][ T5878] lo speed is unknown, defaulting to 1000
[  138.566041][T10648] lo speed is unknown, defaulting to 1000
[  138.728969][T10648] lo speed is unknown, defaulting to 1000
[  138.851036][T10648] lo speed is unknown, defaulting to 1000
[  138.993260][T10648] lo speed is unknown, defaulting to 1000
[  139.090784][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'.
[  139.210269][T10690] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96
[  139.421316][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2039'.
[  139.709010][T10737] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  139.723803][T10737] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  139.745909][T10740] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  139.788072][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'.
[  139.793908][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'.
[  139.901900][T10747] nbd1: detected capacity change from 0 to 549764202496
[  139.907714][   T55] block nbd1: Receive control failed (result -104)
[  140.098679][T10759] netlink: 'syz.1.2063': attribute type 1 has an invalid length.
[  140.101375][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'.
[  140.442994][T10781] netlink: 'syz.1.2074': attribute type 1 has an invalid length.
[  140.445541][T10781] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2074'.
[  140.448659][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'.
[  140.656179][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'.
[  140.686617][T10794] netlink: 'syz.2.2080': attribute type 1 has an invalid length.
[  140.689487][T10794] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2080'.
[  141.536637][T10801] sctp: [Deprecated]: syz.0.2083 (pid 10801) Use of struct sctp_assoc_value in delayed_ack socket option.
[  141.536637][T10801] Use struct sctp_sack_info instead
[  141.674054][T10811] syzkaller1: entered promiscuous mode
[  141.676135][T10811] syzkaller1: entered allmulticast mode
[  141.761083][T10817] Bluetooth: MGMT ver 1.23
[  142.217711][T10858] pimreg: entered allmulticast mode
[  142.724070][T10894] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  143.297905][T10912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.301038][T10912] IPv6: NLM_F_CREATE should be set when creating new route
[  143.304308][T10912] IPv6: NLM_F_CREATE should be set when creating new route
[  143.336785][T10914] __nla_validate_parse: 4 callbacks suppressed
[  143.336795][T10914] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2132'.
[  143.451064][T10928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2138'.
[  143.636877][T10950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2149'.
[  143.919251][T10977] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  143.924368][T10977] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  144.153560][T10993] team0: Mode changed to "activebackup"
[  144.279218][T11003] syzkaller0: entered promiscuous mode
[  144.281294][T11003] syzkaller0: entered allmulticast mode
[  144.286508][T11003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.290803][T11003] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  144.301679][T11003] tipc: Resetting bearer <eth:syzkaller0>
[  144.307329][T11002] tipc: Resetting bearer <eth:syzkaller0>
[  144.317713][T11002] tipc: Disabling bearer <eth:syzkaller0>
[  144.951452][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'.
[  144.954634][T11034] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  144.956980][T11034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.051167][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'.
[  145.056885][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'.
[  145.134527][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'.
[  145.163972][T11066] raw_sendmsg: syz.1.2203 forgot to set AF_INET. Fix it!
[  145.354029][T11089] netlink: 'syz.0.2213': attribute type 10 has an invalid length.
[  145.357880][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'.
[  145.361770][T11089] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2213'.
[  145.368653][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'.
[  145.410437][T11096] netlink: 'syz.0.2216': attribute type 30 has an invalid length.
[  145.687079][T11133] batman_adv: batadv0: Removing interface: ip6gretap1
[  145.691348][T11133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  146.359767][T11189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  146.366852][T11189] syzkaller0: entered promiscuous mode
[  146.369254][T11189] syzkaller0: entered allmulticast mode
[  146.381056][T11189] tipc: Resetting bearer <eth:syzkaller0>
[  146.384627][T11188] tipc: Resetting bearer <eth:syzkaller0>
[  146.390502][T11188] tipc: Disabling bearer <eth:syzkaller0>
[  146.678109][T11205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.114544][T11214] lo speed is unknown, defaulting to 1000
[  147.363484][T11229] netlink: 'syz.1.2276': attribute type 1 has an invalid length.
[  148.135650][T11275] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  148.139968][T11275] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  149.044953][T11311] __nla_validate_parse: 9 callbacks suppressed
[  149.044968][T11311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2313'.
[  149.121304][T11316] pimreg: left allmulticast mode
[  149.190528][T11324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'.
[  149.194526][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'.
[  149.198424][T11324] netlink: 'syz.0.2319': attribute type 18 has an invalid length.
[  149.230759][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2320'.
[  149.236019][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2320'.
[  149.243417][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2320'.
[  149.257579][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2320'.
[  149.261413][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2320'.
[  149.283747][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2320'.
[  149.294085][T11327] netlink: 'syz.1.2320': attribute type 1 has an invalid length.
[  149.345626][T11327] 8021q: adding VLAN 0 to HW filter on device bond2
[  149.382398][T11327] bond2: (slave geneve2): making interface the new active one
[  149.386686][T11327] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  149.395772][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.407168][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.410592][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.414656][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.546901][T11352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2329'.
[  149.891895][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  150.351033][T11393] lo speed is unknown, defaulting to 1000
[  150.734783][T11402] syz_tun: entered allmulticast mode
[  150.747311][T11402] dvmrp8: entered allmulticast mode
[  150.763999][T11402] syz_tun: left allmulticast mode
[  150.769833][T11402] dvmrp8: left allmulticast mode
[  150.955728][T11402] lo speed is unknown, defaulting to 1000
[  151.014393][T11425] netlink: 'syz.0.2361': attribute type 2 has an invalid length.
[  151.131356][T11431] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  151.767680][   T33] audit: type=1800 audit(1756738119.231:2): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2382" name="memory.events" dev="tmpfs" ino=4195 res=0 errno=0
[  151.793469][   T33] audit: type=1804 audit(1756738119.251:3): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2382" name="/newroot/828/memory.events" dev="tmpfs" ino=4195 res=1 errno=0
[  153.523661][T11574] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  153.611703][T11582] syzkaller1: entered promiscuous mode
[  153.621811][T11582] syzkaller1: entered allmulticast mode
[  153.803888][T11602] bridge_slave_1: left allmulticast mode
[  153.805969][T11602] bridge_slave_1: left promiscuous mode
[  153.808462][T11602] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.815005][T11602] bridge_slave_0: left allmulticast mode
[  153.816889][T11602] bridge_slave_0: left promiscuous mode
[  153.819263][T11602] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.066178][T11611] smc: net device bond0 applied user defined pnetid SYZ2
[  154.069416][T11611] smc: net device bond0 erased user defined pnetid SYZ2
[  154.585878][T11626] netlink: 'syz.2.2443': attribute type 1 has an invalid length.
[  154.605346][T11626] bond4 (unregistering): Released all slaves
[  154.658869][T11633] __nla_validate_parse: 11 callbacks suppressed
[  154.658883][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2446'.
[  154.805819][T11638] netlink: 'syz.1.2448': attribute type 1 has an invalid length.
[  154.808907][T11638] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2448'.
[  155.539225][T11656] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2456'.
[  155.650419][T11658] batadv_slave_1: left promiscuous mode
[  155.660809][T11658] geneve3: left promiscuous mode
[  155.664692][T11658] bond1: left promiscuous mode
[  155.666521][T11658] bond1: left allmulticast mode
[  155.668820][T11658] ipvlan2: left allmulticast mode
[  155.671787][T11658] bond2: left allmulticast mode
[  155.675575][T11658] gretap1: left allmulticast mode
[  155.683783][T11658] bond3: left promiscuous mode
[  155.774575][ T5859] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.788820][ T5859] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.793918][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2465'.
[  155.804296][ T5859] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.811416][ T5859] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.871388][T11683] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  156.077328][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'.
[  156.090870][T11708] syz_tun: entered promiscuous mode
[  156.100001][T11708] syz_tun: left promiscuous mode
[  156.123180][T11712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2481'.
[  156.159250][T11714] team0: entered promiscuous mode
[  156.161382][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'.
[  156.211504][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2483'.
[  156.239549][T11714] team0 (unregistering): left promiscuous mode
[  156.374926][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'.
[  156.525575][T11743] nft_compat: unsupported protocol 0
[  156.529939][T11744] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2494'.
[  156.650520][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  156.879217][T11779] syz_tun: refused to change device tx_queue_len
[  158.173794][T11848] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  158.207618][T11851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.230210][T11851] syzkaller0: entered promiscuous mode
[  158.235176][T11851] syzkaller0: entered allmulticast mode
[  158.237818][T11851] tipc: Resetting bearer <eth:syzkaller0>
[  158.245609][T11850] tipc: Resetting bearer <eth:syzkaller0>
[  159.079967][T11850] tipc: Disabling bearer <eth:syzkaller0>
[  159.192933][T11874] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.515400][T11908] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  159.608111][T11913] lo speed is unknown, defaulting to 1000
[  159.795357][T11921] lo speed is unknown, defaulting to 1000
[  161.669842][T11995] openvswitch: netlink: Missing valid actions attribute.
[  161.679565][T11995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.334663][T12033] netlink: 'syz.2.2620': attribute type 10 has an invalid length.
[  162.338050][T12033] __nla_validate_parse: 3 callbacks suppressed
[  162.338060][T12033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2620'.
[  162.363860][T12033] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  162.491161][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'.
[  162.495463][T12045] netlink: 'syz.0.2626': attribute type 21 has an invalid length.
[  162.594958][T12053] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  162.652554][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'.
[  162.659713][T12056] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2631'.
[  162.719047][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'.
[  162.777753][T12064] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  162.782758][T12061] syzkaller0: entered promiscuous mode
[  162.784724][T12061] syzkaller0: entered allmulticast mode
[  162.796792][T12063] lo speed is unknown, defaulting to 1000
[  162.799045][T12060] tipc: Resetting bearer <eth:syzkaller0>
[  162.816846][T12060] tipc: Disabling bearer <eth:syzkaller0>
[  163.122881][T12076] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.009070][T12100] netlink: 'syz.0.2650': attribute type 13 has an invalid length.
[  164.011808][T12100] netlink: 'syz.0.2650': attribute type 17 has an invalid length.
[  164.110431][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2652'.
[  164.119992][T12100] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  164.146740][T12105] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2652'.
[  164.185905][T12106] lo speed is unknown, defaulting to 1000
[  164.242573][T12111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.246299][T12111] syzkaller0: entered promiscuous mode
[  164.248658][T12111] syzkaller0: entered allmulticast mode
[  164.323019][T12111] tipc: Resetting bearer <eth:syzkaller0>
[  164.328577][T12110] tipc: Resetting bearer <eth:syzkaller0>
[  164.384638][T12110] tipc: Disabling bearer <eth:syzkaller0>
[  164.623538][T12126] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2661'.
[  164.708370][T12129] syzkaller0: entered promiscuous mode
[  164.710943][T12129] syzkaller0: entered allmulticast mode
[  166.091729][T12169] lo speed is unknown, defaulting to 1000
[  166.153259][T12179] geneve2: entered allmulticast mode
[  166.177825][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.181355][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.192870][ T5876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.197576][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.227590][T12182] netlink: 'syz.1.2684': attribute type 1 has an invalid length.
[  166.238959][T12182] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2684'.
[  166.648326][T12197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2690'.
[  166.963747][T12222] v: renamed from ip6_vti0
[  168.190272][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881118b2400: rx timeout, send abort
[  168.195786][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881118b2400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  168.227716][T12249] __nla_validate_parse: 1 callbacks suppressed
[  168.227732][T12249] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2714'.
[  168.297292][T12258] netlink: 'syz.0.2717': attribute type 3 has an invalid length.
[  168.300741][T12258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2717'.
[  168.344713][T12262] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2719'.
[  168.347919][T12262] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2719'.
[  168.882049][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2728'.
[  170.058134][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2743'.
[  170.449876][   T60] block nbd1: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 30 seconds
[  170.519625][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'.
[  170.545210][T12363] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.2765'.
[  170.654019][T12367] syzkaller0: entered promiscuous mode
[  170.656454][T12367] syzkaller0: entered allmulticast mode
[  171.327778][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2767'.
[  172.006775][T12393] xfrm1: entered allmulticast mode
[  172.163815][T12412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.166738][T12412] syzkaller0: entered promiscuous mode
[  172.168547][T12412] syzkaller0: entered allmulticast mode
[  172.191210][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2788'.
[  172.193185][T12412] tipc: Resetting bearer <eth:syzkaller0>
[  172.200221][T12411] tipc: Resetting bearer <eth:syzkaller0>
[  172.204417][T12416] netlink: 'syz.1.2788': attribute type 20 has an invalid length.
[  172.214096][T12411] tipc: Disabling bearer <eth:syzkaller0>
[  172.221306][T12416] netlink: 'syz.1.2788': attribute type 20 has an invalid length.
[  172.235565][T12420] netlink: 'syz.0.2790': attribute type 5 has an invalid length.
[  172.247852][T12420] geneve3: entered promiscuous mode
[  172.249620][T12420] geneve3: entered allmulticast mode
[  172.253588][ T5876] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  172.258920][ T5876] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  172.262794][ T5876] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  172.265762][ T5876] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  172.349943][T12428] syzkaller0: entered promiscuous mode
[  172.353388][T12428] syzkaller0: entered allmulticast mode
[  173.379921][T12449] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  173.387049][T12449] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  173.412673][T12450] macvlan2: entered promiscuous mode
[  173.415065][T12450] macvlan2: entered allmulticast mode
[  173.417809][T12450] bond4: (slave macvlan2): Error -98 calling set_mac_address
[  173.460414][T12457] __nla_validate_parse: 6 callbacks suppressed
[  173.460423][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'.
[  173.496244][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2809'.
[  173.516832][T12461] vlan2: entered promiscuous mode
[  173.519396][T12461] macvtap0: entered promiscuous mode
[  173.951720][T12507] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2830'.
[  173.955631][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2830'.
[  173.959085][T12507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2830'.
[  174.144187][T12507] team0 (unregistering): Port device team_slave_0 removed
[  174.157088][T12507] team0 (unregistering): Port device team_slave_1 removed
[  174.349681][T12533] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  174.390435][T12536] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2841'.
[  174.921737][T12571] netlink: 'syz.1.2858': attribute type 4 has an invalid length.
[  175.046206][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'.
[  175.303287][T12602] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2872'.
[  175.306786][T12602] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2872'.
[  175.341014][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2873'.
[  175.552694][T12614] netlink: 'syz.0.2878': attribute type 1 has an invalid length.
[  175.622642][T12616] netlink: 'syz.0.2879': attribute type 10 has an invalid length.
[  176.094247][T12636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.362061][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  176.429982][T12652] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  176.898868][T12680] netlink: 'syz.1.2908': attribute type 9 has an invalid length.
[  177.119494][T12703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.594552][T12749] netlink: 'syz.2.2940': attribute type 1 has an invalid length.
[  177.624186][T12749] 8021q: adding VLAN 0 to HW filter on device bond5
[  177.647267][T12749] 8021q: adding VLAN 0 to HW filter on device bond5
[  177.649824][T12749] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  177.654639][T12749] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  177.709829][T12760] veth5: entered promiscuous mode
[  177.721497][T12760] bond5: (slave veth5): Enslaving as an active interface with a down link
[  177.746344][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.749515][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.755879][T12767] netlink: 'syz.1.2948': attribute type 11 has an invalid length.
[  178.009838][T12788] netlink: 'syz.0.2957': attribute type 11 has an invalid length.
[  178.300720][T12811] netlink: 'syz.0.2968': attribute type 13 has an invalid length.
[  178.304012][T12811] netlink: 'syz.0.2968': attribute type 17 has an invalid length.
[  178.308971][T12811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.330060][T12813] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  178.341774][T12811] lo speed is unknown, defaulting to 1000
[  178.658113][T12834] sctp: [Deprecated]: syz.1.2978 (pid 12834) Use of int in maxseg socket option.
[  178.658113][T12834] Use struct sctp_assoc_value instead
[  178.719790][T12841] __nla_validate_parse: 13 callbacks suppressed
[  178.719804][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'.
[  179.347719][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'.
[  180.776181][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3030'.
[  181.134440][T12976] lo speed is unknown, defaulting to 1000
[  181.485739][T12991] netlink: 'syz.1.3043': attribute type 8 has an invalid length.
[  181.920317][T13022] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3059'.
[  181.969219][T13025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  182.135260][T13037] lo speed is unknown, defaulting to 1000
[  182.201684][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'.
[  182.436417][T13061] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.440258][T13061] syzkaller0: entered promiscuous mode
[  182.443274][T13061] syzkaller0: entered allmulticast mode
[  182.465680][T13061] tipc: Resetting bearer <eth:syzkaller0>
[  182.473343][T13059] tipc: Resetting bearer <eth:syzkaller0>
[  182.490361][T13059] tipc: Disabling bearer <eth:syzkaller0>
[  182.548497][T13067] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3078'.
[  182.775243][T13089] netlink: 'syz.2.3089': attribute type 7 has an invalid length.
[  182.787488][T13089] IPVS: Unknown mcast interface: batadv0
[  183.864135][T13134] netlink: 'syz.2.3105': attribute type 2 has an invalid length.
[  184.090704][T13157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3112'.
[  184.096114][T13157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3112'.
[  184.324080][T13184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3126'.
[  184.374368][T13193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.377194][T13193] syzkaller0: entered promiscuous mode
[  184.379111][T13193] syzkaller0: entered allmulticast mode
[  184.397966][T13193] tipc: Resetting bearer <eth:syzkaller0>
[  184.401700][T13192] tipc: Resetting bearer <eth:syzkaller0>
[  184.409429][T13192] tipc: Disabling bearer <eth:syzkaller0>
[  184.496959][T13207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3137'.
[  184.499882][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  184.508821][   T10] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  184.761606][T13229] sch_tbf: burst 5 is lower than device lo mtu (81) !
[  184.947051][T13249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.950527][T13249] syzkaller0: entered promiscuous mode
[  184.953980][T13249] syzkaller0: entered allmulticast mode
[  184.971943][T13249] tipc: Resetting bearer <eth:syzkaller0>
[  184.982678][T13248] tipc: Resetting bearer <eth:syzkaller0>
[  184.995648][T13248] tipc: Disabling bearer <eth:syzkaller0>
[  185.007524][T13253] bridge6: entered promiscuous mode
[  185.009858][T13253] bridge6: entered allmulticast mode
[  185.014744][T13253] team0: Port device bridge6 added
[  185.094591][T13263] openvswitch: netlink: IPv4 tun info is not correct
[  185.139639][T13270] netlink: 'syz.0.3168': attribute type 11 has an invalid length.
[  185.166056][T13273] openvswitch: netlink: Message has 4 unknown bytes.
[  185.168430][T13273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  185.356151][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'.
[  185.421083][T13304] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3183'.
[  185.428721][T13304] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3183'.
[  185.450076][T13304] rdma_rxe: rxe_newlink: failed to add lo
[  185.494760][ T5859] bond0: (slave bond_slave_0): interface is now down
[  185.496099][T13304] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.498653][ T5859] bond0: (slave bond_slave_1): interface is now down
[  185.507117][T13304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  185.522849][ T5859] bond0: (slave bond_slave_0): interface is now down
[  185.532720][ T5859] bond0: (slave bond_slave_1): interface is now down
[  185.538088][T13309] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.544873][T13309] syzkaller0: entered promiscuous mode
[  185.549801][T13309] syzkaller0: entered allmulticast mode
[  185.557460][ T5859] bond0: (slave bond_slave_0): interface is now down
[  185.560670][ T5859] bond0: (slave bond_slave_1): interface is now down
[  185.566843][ T5859] bond0: now running without any active interface!
[  185.578125][T13309] tipc: Resetting bearer <eth:syzkaller0>
[  185.582725][T13308] tipc: Resetting bearer <eth:syzkaller0>
[  185.589882][T13312] netlink: 'syz.2.3186': attribute type 1 has an invalid length.
[  185.595205][T13308] tipc: Disabling bearer <eth:syzkaller0>
[  185.596117][T13312] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3186'.
[  185.601767][T13312] netlink: 'syz.2.3186': attribute type 1 has an invalid length.
[  185.691288][T13318] netlink: 'syz.2.3189': attribute type 26 has an invalid length.
[  185.972140][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  186.151308][T13368] IPVS: stopping backup sync thread 8035 ...
[  186.234305][T13378] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3215'.
[  186.264043][T13383] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3217'.
[  186.474565][T13409] lo speed is unknown, defaulting to 1000
[  186.477129][T13409] lo speed is unknown, defaulting to 1000
[  186.480616][T13409] lo speed is unknown, defaulting to 1000
[  186.491640][T13409] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  186.503353][T13409] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  186.524358][T13409] lo speed is unknown, defaulting to 1000
[  186.529621][T13409] lo speed is unknown, defaulting to 1000
[  186.539290][T13409] lo speed is unknown, defaulting to 1000
[  186.547828][T13412] smc: removing ib device syz0
[  186.579346][T13416] netlink: 'syz.1.3232': attribute type 7 has an invalid length.
[  186.583382][T13416] netlink: 'syz.1.3232': attribute type 8 has an invalid length.
[  186.596344][T13416] batadv_slave_1: entered promiscuous mode
[  186.601592][T13416] erspan0: entered promiscuous mode
[  186.607025][T13416] hsr0: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[  186.610942][T13416] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  186.615844][T13416] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[  186.621306][T13409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.630911][T13409] veth0_to_bridge: entered promiscuous mode
[  186.643830][T13409] veth0_to_bridge: entered allmulticast mode
[  186.856189][T13432] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  186.974134][T13408] tipc: Disabling bearer <eth:syzkaller0>
[  187.090805][T13444] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  187.199267][T13451] smc: net device bond0 applied user defined pnetid SYZ2
[  187.229895][T13452] unsupported nlmsg_type 40
[  187.397115][T13456] veth0_to_bridge: left promiscuous mode
[  187.402121][T13456] veth0_to_bridge: left allmulticast mode
[  187.423043][T13456] geneve2: left allmulticast mode
[  187.436045][T13456] xfrm1: left allmulticast mode
[  187.443179][T13456] geneve3: left promiscuous mode
[  187.448842][T13456] geneve3: left allmulticast mode
[  187.461214][ T5876] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.467063][ T5896] lo speed is unknown, defaulting to 1000
[  187.469873][ T5876] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.477867][ T5896] syz2: Port: 1 Link DOWN
[  187.481597][ T5876] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  187.490119][ T5876] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.495558][ T5876] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.499339][ T5876] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  187.504504][ T5876] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.508120][ T5876] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.513569][ T5876] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  187.517283][ T5876] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  187.522398][ T5876] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  187.525823][ T5876] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  187.694265][T13469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.699504][T13469] syzkaller0: entered promiscuous mode
[  187.702344][T13469] syzkaller0: entered allmulticast mode
[  187.723531][T13469] tipc: Resetting bearer <eth:syzkaller0>
[  187.728053][T13468] tipc: Resetting bearer <eth:syzkaller0>
[  187.743324][T13468] tipc: Disabling bearer <eth:syzkaller0>
[  188.113682][T13499] Unsupported ieee802154 address type: 0
[  188.479170][T13542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.486150][T13543] !: renamed from dummy0
[  188.514697][T13547] netlink: 'syz.2.3290': attribute type 1 has an invalid length.
[  188.559501][T13551] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  188.611704][T13551] lo speed is unknown, defaulting to 1000
[  189.386142][T13606] __nla_validate_parse: 6 callbacks suppressed
[  189.386160][T13606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3304'.
[  189.645047][T13627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3314'.
[  189.938989][T13658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3329'.
[  189.952169][T13658] tc_dump_action: action bad kind
[  190.685823][T13742] tipc: New replicast peer: 255.255.255.255
[  190.688846][T13742] tipc: Enabled bearer <udp:syz2>, priority 10
[  191.018224][T13779] syzkaller0: entered promiscuous mode
[  191.020458][T13779] syzkaller0: entered allmulticast mode
[  191.283132][T13801] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3394'.
[  192.080069][T13798] lo speed is unknown, defaulting to 1000
[  192.329315][T13826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3407'.
[  192.545744][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3413'.
[  192.549734][T13843] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3413'.
[  192.779623][T13865] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3424'.
[  192.904995][T13874] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3428'.
[  192.914033][T13874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3428'.
[  193.159972][T13892] netlink: 'syz.1.3436': attribute type 18 has an invalid length.
[  193.163969][T13892] netlink: 'syz.1.3436': attribute type 18 has an invalid length.
[  193.245855][T13900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.249458][T13900] syzkaller0: entered promiscuous mode
[  193.251237][T13900] syzkaller0: entered allmulticast mode
[  193.266429][T13900] tipc: Resetting bearer <eth:syzkaller0>
[  193.269895][T13899] tipc: Resetting bearer <eth:syzkaller0>
[  193.278403][T13899] tipc: Disabling bearer <eth:syzkaller0>
[  193.449398][T13908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.506714][T13912] netlink: 'syz.1.3446': attribute type 2 has an invalid length.
[  194.367634][T13957] lo speed is unknown, defaulting to 1000
[  194.635903][T13957] __nla_validate_parse: 4 callbacks suppressed
[  194.635936][T13957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3466'.
[  194.652624][T13957] netlink: 'syz.2.3466': attribute type 13 has an invalid length.
[  194.655218][T13957] netlink: 'syz.2.3466': attribute type 17 has an invalid length.
[  194.662646][T13957] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  195.111460][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'.
[  195.257177][T14009] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3486'.
[  195.620815][T14031] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3497'.
[  195.678475][T14037] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  195.683311][T14037] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  196.018709][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'.
[  196.221580][T14057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.229419][T14057] syzkaller0: entered promiscuous mode
[  196.232078][T14057] syzkaller0: entered allmulticast mode
[  196.254094][T14057] tipc: Resetting bearer <eth:syzkaller0>
[  196.259521][T14056] tipc: Resetting bearer <eth:syzkaller0>
[  196.271045][T14056] tipc: Disabling bearer <eth:syzkaller0>
[  196.705836][T14084] netlink: 'syz.2.3522': attribute type 1 has an invalid length.
[  196.730227][T14085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3521'.
[  196.747442][T14087] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3523'.
[  196.763472][T14085] lo speed is unknown, defaulting to 1000
[  196.829566][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3524'.
[  196.928400][T14099] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3526'.
[  197.098133][T14114] netlink: 'syz.1.3534': attribute type 3 has an invalid length.
[  197.108129][T14114] syz_tun: entered allmulticast mode
[  197.193551][T14114] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  197.238127][T14123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  197.254826][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3537'.
[  197.268248][T14112] syz_tun: left allmulticast mode
[  197.837438][T14164] netlink: 'syz.0.3551': attribute type 29 has an invalid length.
[  197.841762][T14164] netlink: 'syz.0.3551': attribute type 29 has an invalid length.
[  197.845806][T14164] netlink: 'syz.0.3551': attribute type 29 has an invalid length.
[  197.886839][T14170] batadv1: entered promiscuous mode
[  198.061532][T14183] lo speed is unknown, defaulting to 1000
[  198.870853][T14233] lo speed is unknown, defaulting to 1000
[  199.118654][T14250] validate_nla: 37 callbacks suppressed
[  199.118670][T14250] netlink: 'syz.0.3589': attribute type 5 has an invalid length.
[  199.188440][T14256] syz_tun: entered allmulticast mode
[  199.198489][T14250] lo speed is unknown, defaulting to 1000
[  199.209724][T14256] dvmrp8: entered allmulticast mode
[  199.235208][T14256] tipc: Enabled bearer <udp:syz0>, priority 10
[  199.247661][T14255] syz_tun: left allmulticast mode
[  199.249751][T14255] dvmrp8: left allmulticast mode
[  199.341947][T14263] netlink: 'syz.2.3594': attribute type 1 has an invalid length.
[  199.584616][T14279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  199.855939][T14307] netlink: 'syz.0.3612': attribute type 10 has an invalid length.
[  200.115051][T14328] vlan0: entered promiscuous mode
[  200.180271][T14334] netlink: 'syz.1.3625': attribute type 142 has an invalid length.
[  200.208233][T14339] __nla_validate_parse: 13 callbacks suppressed
[  200.208244][T14339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3627'.
[  200.534361][   T60] block nbd1: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 60 seconds
[  200.873756][T14410] netlink: 'syz.0.3655': attribute type 1 has an invalid length.
[  200.879111][T14410] netlink: 'syz.0.3655': attribute type 3 has an invalid length.
[  200.887032][T14410] netlink: 'syz.0.3655': attribute type 1 has an invalid length.
[  200.892586][T14410] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3655'.
[  200.900107][T14410] NCSI netlink: No device for ifindex 0
[  200.971675][ T5850] Bluetooth: hci2: link tx timeout
[  200.974464][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  200.981779][ T5846] Bluetooth: hci2: link tx timeout
[  200.984123][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  201.047520][ T5846] Bluetooth: hci2: link tx timeout
[  201.049741][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  201.073489][ T5846] Bluetooth: hci2: link tx timeout
[  201.075787][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  201.090111][T14424] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3662'.
[  201.095100][T14424] netlink: zone id is out of range
[  201.097566][T14424] netlink: zone id is out of range
[  201.099829][T14424] netlink: zone id is out of range
[  201.105232][T14424] netlink: zone id is out of range
[  201.107657][T14424] netlink: zone id is out of range
[  201.110181][T14424] netlink: zone id is out of range
[  201.112711][T14424] netlink: zone id is out of range
[  201.116138][T14424] netlink: zone id is out of range
[  201.120549][T14424] netlink: zone id is out of range
[  201.126404][T14424] netlink: zone id is out of range
[  201.476249][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'.
[  201.964378][ T5846] Bluetooth: hci2: link tx timeout
[  201.966505][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.578675][ T5846] Bluetooth: hci2: link tx timeout
[  202.580610][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.619926][ T5846] Bluetooth: hci2: link tx timeout
[  202.632237][ T5846] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  202.724225][T14463] blkio.reset_stats is deprecated
[  203.003648][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  203.250653][T14505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.285255][T14505] syzkaller0: entered promiscuous mode
[  203.287461][T14505] syzkaller0: entered allmulticast mode
[  203.290705][T14505] tipc: Resetting bearer <eth:syzkaller0>
[  203.309276][T14504] tipc: Resetting bearer <eth:syzkaller0>
[  203.382188][T14509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3696'.
[  204.445119][T14504] tipc: Disabling bearer <eth:syzkaller0>
[  204.453322][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'.
[  204.771557][T14538] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3709'.
[  205.482231][T14573] netlink: 'syz.2.3724': attribute type 10 has an invalid length.
[  206.680256][T14611] tunl0: entered promiscuous mode
[  206.684246][T14611] net_ratelimit: 3 callbacks suppressed
[  206.684418][T14611] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  207.081453][T14635] lo speed is unknown, defaulting to 1000
[  207.298043][T14642] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  207.838059][T14663] bond5: (slave gretap2): Releasing active interface
[  207.961035][T14671] macvlan2: entered promiscuous mode
[  207.969439][T14671] macvlan2: entered allmulticast mode
[  207.974108][T14674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3766'.
[  208.015060][T14680] syz_tun: entered allmulticast mode
[  208.023561][T14680] dvmrp8: entered allmulticast mode
[  208.030203][T14680] syz_tun: left allmulticast mode
[  208.032912][T14680] dvmrp8: left allmulticast mode
[  208.170742][T14691] lo speed is unknown, defaulting to 1000
[  208.198366][T14693] netlink: 'syz.1.3774': attribute type 9 has an invalid length.
[  208.205480][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3773'.
[  208.376045][T14702] macsec0: entered allmulticast mode
[  208.378497][T14702] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  208.429930][T14706] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  208.671695][T14724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.675484][T14724] syzkaller0: entered promiscuous mode
[  208.677661][T14724] syzkaller0: entered allmulticast mode
[  208.696022][T14724] tipc: Resetting bearer <eth:syzkaller0>
[  208.703299][T14723] tipc: Resetting bearer <eth:syzkaller0>
[  208.717848][T14723] tipc: Disabling bearer <eth:syzkaller0>
[  209.487710][T14793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3807'.
[  209.510308][T14798] netlink: 'syz.1.3809': attribute type 2 has an invalid length.
[  209.593068][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3812'.
[  209.596735][T14806] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  209.600981][T14806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  209.789569][T14818] nbd: nbd0 already in use
[  209.796397][T14818] block nbd0: NBD_DISCONNECT
[  209.798420][T14818] block nbd0: Send disconnect failed -32
[  209.800861][T14818] block nbd0: shutting down sockets
[  210.126466][T14841] bond0: (slave veth3): Releasing active interface
[  210.143678][T14841] bond2: (slave geneve2): Releasing active interface
[  210.171325][T14841] team0: Port device bridge6 removed
[  210.175951][ T5876] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.189307][ T5876] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.202057][ T5876] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.204904][ T5876] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.276552][T14850] netlink: 'syz.1.3825': attribute type 10 has an invalid length.
[  210.995202][T14918] syzkaller1: entered promiscuous mode
[  210.997285][T14918] syzkaller1: entered allmulticast mode
[  211.240007][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3873'.
[  211.383932][T14948] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3877'.
[  211.458308][T14956] netlink: 'syz.1.3880': attribute type 12 has an invalid length.
[  211.517577][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3885'.
[  211.623892][T14968] netlink: 'syz.1.3887': attribute type 10 has an invalid length.
[  211.669335][T14974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.710158][T14974] syzkaller0: entered promiscuous mode
[  211.713949][T14974] syzkaller0: entered allmulticast mode
[  211.716725][T14974] tipc: Resetting bearer <eth:syzkaller0>
[  211.725578][T14972] tipc: Resetting bearer <eth:syzkaller0>
[  212.728974][T14972] tipc: Disabling bearer <eth:syzkaller0>
[  212.745100][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3897'.
[  212.840380][ T5293] udevd[5293]: worker [9538] /devices/virtual/block/nbd1 is taking a long time
[  213.065140][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'.
[  213.070729][ T5876] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  213.070819][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'.
[  213.077438][ T5876] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  213.081228][ T5876] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  213.086541][ T5876] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  213.213668][T15038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3913'.
[  213.339845][T15050] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3917'.
[  213.476422][T15060] netlink: 'syz.2.3922': attribute type 10 has an invalid length.
[  213.479775][T15060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3922'.
[  213.486231][T15056] netlink: 'syz.1.3919': attribute type 12 has an invalid length.
[  213.489476][T15056] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3919'.
[  213.501603][T15060] bond0: entered promiscuous mode
[  213.505766][T15060] bond_slave_0: entered promiscuous mode
[  213.508248][T15060] bond_slave_1: entered promiscuous mode
[  213.510868][T15060] bond0: entered allmulticast mode
[  213.514645][T15060] bond_slave_0: entered allmulticast mode
[  213.517249][T15060] bond_slave_1: entered allmulticast mode
[  213.520423][T15060] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  213.617276][T15067] vlan0: left promiscuous mode
[  213.672778][T15076] sctp: [Deprecated]: syz.1.3929 (pid 15076) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.672778][T15076] Use struct sctp_sack_info instead
[  213.789850][T15090] netlink: 'syz.0.3937': attribute type 2 has an invalid length.
[  213.801313][T15090] : entered promiscuous mode
[  213.826796][T15094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3939'.
[  214.038119][T15116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3949'.
[  214.816136][T15202] netlink: 'syz.2.3987': attribute type 1 has an invalid length.
[  214.818613][T15202] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3987'.
[  214.852984][T15205] netlink: 'syz.2.3989': attribute type 10 has an invalid length.
[  215.196007][T15225] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3996'.
[  215.338243][T15231] netlink: ct family unspecified
[  215.340140][T15231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  215.944994][T15270] netlink: 'syz.1.4013': attribute type 13 has an invalid length.
[  215.948551][T15270] netlink: 'syz.1.4013': attribute type 17 has an invalid length.
[  215.960413][T15270] tunl0: left promiscuous mode
[  216.017250][T15270] 8021q: adding VLAN 0 to HW filter on device team0
[  216.021273][T15270] tipc: Resetting bearer <eth:team0>
[  216.026182][T15270] tipc: Resetting bearer <eth:team0>
[  216.029890][T15270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.076174][T15271] lo speed is unknown, defaulting to 1000
[  216.297483][T15282] netlink: 'syz.0.4018': attribute type 1 has an invalid length.
[  216.359201][T15282] bond7: (slave gretap4): making interface the new active one
[  216.367599][T15282] bond7: (slave gretap4): Enslaving as an active interface with an up link
[  217.486042][T15346] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  217.564796][T15350] nbd: device at index 2 is going down
[  217.839462][T15383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.130958][T15412] netlink: 'syz.1.4079': attribute type 11 has an invalid length.
[  218.135591][T15412] __nla_validate_parse: 7 callbacks suppressed
[  218.135598][T15412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4079'.
[  219.254609][T15497] ip6gretap0: entered promiscuous mode
[  219.257298][T15497] macsec1: entered allmulticast mode
[  219.259583][T15497] ip6gretap0: entered allmulticast mode
[  219.267069][T15497] ip6gretap0: left allmulticast mode
[  219.268932][T15497] ip6gretap0: left promiscuous mode
[  219.344660][T15504] netlink: 'syz.1.4123': attribute type 7 has an invalid length.
[  219.353470][T15504] netlink: 'syz.1.4123': attribute type 8 has an invalid length.
[  219.498800][T15520] IPv6: NLM_F_CREATE should be specified when creating new route
[  220.093056][T15590] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4165'.
[  220.218779][T15598] lo speed is unknown, defaulting to 1000
[  220.372520][T15607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4172'.
[  220.688421][T15630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4183'.
[  221.091653][T15659] netlink: 'syz.1.4195': attribute type 21 has an invalid length.
[  221.096755][T15659] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4195'.
[  221.997808][T15659] netlink: 'syz.1.4195': attribute type 5 has an invalid length.
[  222.001094][T15659] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4195'.
[  222.128797][T15673] bridge_slave_0: default FDB implementation only supports local addresses
[  222.636520][T15729] netlink: 'syz.2.4222': attribute type 1 has an invalid length.
[  222.941340][T15745] netlink: 'syz.2.4230': attribute type 5 has an invalid length.
[  223.442980][T15777] netlink: 'syz.1.4247': attribute type 15 has an invalid length.
[  223.546206][T15787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4251'.
[  223.611640][T15799] netlink: 'syz.2.4257': attribute type 1 has an invalid length.
[  223.654730][T15805] netlink: 'syz.0.4260': attribute type 4 has an invalid length.
[  223.976403][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4272'.
[  223.980330][T15831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.326115][T15869] netlink: 'syz.1.4291': attribute type 2 has an invalid length.
[  224.329573][T15869] netlink: 'syz.1.4291': attribute type 2 has an invalid length.
[  224.380995][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4293'.
[  224.753791][T15911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4310'.
[  224.757563][T15911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4310'.
[  224.811776][T15919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4314'.
[  224.817438][T15919] netem: change failed
[  225.008861][T15940] netlink: 'syz.1.4324': attribute type 6 has an invalid length.
[  226.013860][T15950] netlink: 724 bytes leftover after parsing attributes in process `syz.2.4328'.
[  226.016929][T15950] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4328'.
[  226.234134][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4341'.
[  226.255725][T15978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4342'.
[  226.457369][T15995] macvlan3: entered promiscuous mode
[  226.459745][T15995] macvlan3: entered allmulticast mode
[  226.463141][T15995] bond7: (slave macvlan3): Opening slave failed
[  226.580800][T16009] netlink: 'syz.1.4355': attribute type 29 has an invalid length.
[  226.698561][T16016] tipc: Resetting bearer <eth:team0>
[  227.087305][T16039] lo speed is unknown, defaulting to 1000
[  227.253316][T16043] syzkaller1: entered promiscuous mode
[  227.262455][T16043] syzkaller1: entered allmulticast mode
[  227.340567][T16054] netlink: 'syz.1.4372': attribute type 4 has an invalid length.
[  227.680473][T16079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.236412][T16127] netlink: 'syz.1.4398': attribute type 19 has an invalid length.
[  228.239873][T16127] netlink: 'syz.1.4398': attribute type 19 has an invalid length.
[  228.342987][T16130] .70: left allmulticast mode
[  228.345010][T16130] hsr_slave_0: left allmulticast mode
[  228.347074][T16130] hsr_slave_1: left allmulticast mode
[  228.355833][T16130] bridge6: left promiscuous mode
[  228.357667][T16130] bridge6: left allmulticast mode
[  228.431753][T16143] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  228.436338][T16143] syzkaller0: entered promiscuous mode
[  228.438799][T16143] syzkaller0: entered allmulticast mode
[  228.757375][T16170] __nla_validate_parse: 12 callbacks suppressed
[  228.757397][T16170] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4418'.
[  228.763994][T16177] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4418'.
[  228.825286][T16182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.828804][T16182] syzkaller0: entered promiscuous mode
[  228.831186][T16182] syzkaller0: entered allmulticast mode
[  228.854416][T16182] tipc: Resetting bearer <eth:syzkaller0>
[  228.859285][T16181] tipc: Resetting bearer <eth:syzkaller0>
[  228.865030][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4423'.
[  228.876588][T16181] tipc: Disabling bearer <eth:syzkaller0>
[  228.890652][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4423'.
[  229.036105][T16197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4428'.
[  230.007136][T16263] syzkaller1: entered promiscuous mode
[  230.009240][T16263] syzkaller1: entered allmulticast mode
[  230.215625][T16276] netlink: 'syz.1.4462': attribute type 15 has an invalid length.
[  230.243017][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4463'.
[  230.604662][   T60] block nbd1: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 90 seconds
[  230.933435][T16346] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4491'.
[  230.974177][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4493'.
[  231.197722][T16375] netlink: 'syz.2.4504': attribute type 1 has an invalid length.
[  231.248992][T16378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.253277][T16378] syzkaller0: entered promiscuous mode
[  231.255562][T16378] syzkaller0: entered allmulticast mode
[  231.280125][T16378] tipc: Resetting bearer <eth:syzkaller0>
[  231.286086][T16377] tipc: Resetting bearer <eth:syzkaller0>
[  231.299530][T16377] tipc: Disabling bearer <eth:syzkaller0>
[  231.325476][T16389] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  231.329354][T16389] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  231.431166][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4516'.
[  231.462497][T16399] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4515'.
[  231.619699][T16412] netlink: 'syz.0.4522': attribute type 1 has an invalid length.
[  231.629147][T16412] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  231.634932][T16412] gretap5: entered promiscuous mode
[  231.688059][T16424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.234673][T16453] macvtap1: entered promiscuous mode
[  232.237064][T16453] !: entered promiscuous mode
[  232.239425][T16453] macvtap1: entered allmulticast mode
[  232.241704][T16453] !: entered allmulticast mode
[  232.582028][T16477] IPv6: NLM_F_REPLACE set, but no existing node found!
[  232.610290][T16479] bond0: left promiscuous mode
[  232.612944][T16479] bond_slave_0: left promiscuous mode
[  232.615216][T16479] bond_slave_1: left promiscuous mode
[  232.617391][T16479] bond0: left allmulticast mode
[  232.619369][T16479] bond_slave_0: left allmulticast mode
[  232.621441][T16479] bond_slave_1: left allmulticast mode
[  232.627163][T16479] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  232.672657][T16483] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  232.744941][T16491] bridge3: entered promiscuous mode
[  232.746762][T16491] bridge3: entered allmulticast mode
[  232.980013][T16515] syzkaller1: entered allmulticast mode
[  232.987719][T16515] syzkaller1: left allmulticast mode
[  233.370211][T16541] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  233.791286][T16584] netlink: 'syz.1.4599': attribute type 11 has an invalid length.
[  233.800079][T16584] __nla_validate_parse: 12 callbacks suppressed
[  233.800093][T16584] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4599'.
[  234.120594][T16618] netlink: 'syz.0.4615': attribute type 9 has an invalid length.
[  234.129951][T16618] netlink: 'syz.0.4615': attribute type 6 has an invalid length.
[  234.170450][T16625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4619'.
[  234.175743][T16626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4618'.
[  234.179267][T16625] netlink: 'syz.1.4619': attribute type 6 has an invalid length.
[  234.184540][T16625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4619'.
[  234.259531][T16629] netlink: 23932 bytes leftover after parsing attributes in process `syz.0.4618'.
[  234.406257][T16647] netlink: 'syz.1.4628': attribute type 11 has an invalid length.
[  234.410176][T16647] netlink: 'syz.1.4628': attribute type 4 has an invalid length.
[  234.413159][T16647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4628'.
[  234.416172][T16648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4625'.
[  234.658094][T16669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4638'.
[  234.890446][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4638'.
[  234.998483][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4639'.
[  235.267034][T16687] lo speed is unknown, defaulting to 1000
[  235.470810][T16702] netlink: 'syz.0.4650': attribute type 2 has an invalid length.
[  235.724902][T16731] netlink: 'syz.0.4663': attribute type 7 has an invalid length.
[  235.741334][T16733] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  235.799865][T16743] ip6tnl3: entered allmulticast mode
[  236.108596][T16774] openvswitch: netlink: VXLAN extension message has 10 unknown bytes.
[  236.540386][T16814] geneve4: entered promiscuous mode
[  236.577118][T16818] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  236.965073][T16843] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  237.032726][T16853] syzkaller1: entered promiscuous mode
[  237.034492][T16853] syzkaller1: entered allmulticast mode
[  238.604342][ T5850] Bluetooth: hci0: command tx timeout
[  238.814324][T16986] __nla_validate_parse: 8 callbacks suppressed
[  238.814339][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4777'.
[  239.982132][T17015] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.987440][T17015] syzkaller0: entered promiscuous mode
[  239.990971][T17015] syzkaller0: entered allmulticast mode
[  240.004854][T17015] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  240.024721][T17015] tipc: Resetting bearer <eth:syzkaller0>
[  240.035697][T17014] tipc: Resetting bearer <eth:syzkaller0>
[  240.050144][T17014] tipc: Disabling bearer <eth:syzkaller0>
[  240.085810][T17021] delete_channel: no stack
[  240.640046][T17067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4804'.
[  240.646104][T17068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4805'.
[  240.664393][T17068] lo speed is unknown, defaulting to 1000
[  240.706320][T17073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4804'.
[  240.710056][T17067] netlink: 34 bytes leftover after parsing attributes in process `syz.2.4804'.
[  240.914190][T17085] netlink: 'syz.0.4808': attribute type 8 has an invalid length.
[  241.397802][T17135] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4828'.
[  241.403235][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4828'.
[  241.620796][T17138] syzkaller0: entered allmulticast mode
[  241.642977][T17138] syzkaller0 (unregistering): left allmulticast mode
[  242.048604][T17170] bridge0: port 1(veth0_to_team) entered blocking state
[  242.052080][T17170] bridge0: port 1(veth0_to_team) entered disabled state
[  242.055155][T17170] veth0_to_team: entered allmulticast mode
[  242.060937][T17170] veth0_to_team: entered promiscuous mode
[  242.072047][T17170] veth0_to_team: left allmulticast mode
[  242.074581][T17170] veth0_to_team: left promiscuous mode
[  242.078141][T17170] bridge0: port 1(veth0_to_team) entered disabled state
[  242.089294][T17170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  242.091738][T17170] IPv6: NLM_F_CREATE should be set when creating new route
[  242.511337][T17195] lo: MTU too low for tipc bearer
[  242.514574][T17195] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  242.560990][T17199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4856'.
[  242.675371][T17207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4860'.
[  242.679258][T17207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4860'.
[  242.733536][T17211] netlink: 'syz.0.4862': attribute type 178 has an invalid length.
[  242.823709][T17217] 8021q: adding VLAN 0 to HW filter on device bond8
[  242.841276][T17217] macvlan2: entered promiscuous mode
[  242.844603][T17217] macvlan2: entered allmulticast mode
[  242.848058][T17217] bond8: entered promiscuous mode
[  242.850884][T17217] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  242.857067][T17217] bond8: left promiscuous mode
[  243.299497][T17242] batadv2: entered promiscuous mode
[  243.355433][T17243] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  243.519510][T17261] gretap5: left promiscuous mode
[  243.524893][T17261] macvtap1: left promiscuous mode
[  243.527158][T17261] !: left promiscuous mode
[  243.530342][T17261] bridge3: left promiscuous mode
[  243.544963][T17261] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  243.583999][T17268] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  244.092256][T17314] __nla_validate_parse: 6 callbacks suppressed
[  244.092273][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4910'.
[  244.126934][T17314] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  244.130627][T17314] CPU: 0 UID: 0 PID: 17314 Comm: syz.1.4910 Not tainted syzkaller #0 PREEMPT(full) 
[  244.130646][T17314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  244.130656][T17314] Call Trace:
[  244.130661][T17314]  <TASK>
[  244.130670][T17314]  dump_stack_lvl+0x189/0x250
[  244.130694][T17314]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.130708][T17314]  ? __pfx__printk+0x10/0x10
[  244.130732][T17314]  ? kernfs_path_from_node+0x2f/0x290
[  244.130748][T17314]  ? kernfs_path_from_node+0x250/0x290
[  244.130762][T17314]  ? kernfs_path_from_node+0x2f/0x290
[  244.130778][T17314]  sysfs_warn_dup+0x8e/0xa0
[  244.130793][T17314]  sysfs_do_create_link_sd+0xc0/0x110
[  244.130809][T17314]  device_add_class_symlinks+0x1cf/0x240
[  244.130826][T17314]  device_add+0x475/0xb50
[  244.130844][T17314]  wiphy_register+0x1ba6/0x28d0
[  244.130873][T17314]  ? __pfx_wiphy_register+0x10/0x10
[  244.130884][T17314]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  244.130910][T17314]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  244.130930][T17314]  ieee80211_register_hw+0x3425/0x4080
[  244.130958][T17314]  ? ieee80211_register_hw+0x1431/0x4080
[  244.130978][T17314]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  244.130997][T17314]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  244.131019][T17314]  ? __hrtimer_setup+0x187/0x210
[  244.131030][T17314]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  244.131049][T17314]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  244.131088][T17314]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  244.131103][T17314]  ? trace_kmalloc+0x1f/0xd0
[  244.131115][T17314]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  244.131130][T17314]  ? kstrndup+0xbf/0x160
[  244.131151][T17314]  hwsim_new_radio_nl+0xea4/0x1b10
[  244.131170][T17314]  ? __pfx___nla_validate_parse+0x10/0x10
[  244.131200][T17314]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  244.131226][T17314]  ? __nla_parse+0x40/0x60
[  244.131250][T17314]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  244.131277][T17314]  genl_family_rcv_msg_doit+0x215/0x300
[  244.131300][T17314]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  244.131326][T17314]  ? bpf_lsm_capable+0x9/0x20
[  244.131341][T17314]  ? security_capable+0x7e/0x2e0
[  244.131364][T17314]  genl_rcv_msg+0x60e/0x790
[  244.131385][T17314]  ? __pfx_genl_rcv_msg+0x10/0x10
[  244.131400][T17314]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  244.131428][T17314]  netlink_rcv_skb+0x208/0x470
[  244.131439][T17314]  ? __lock_acquire+0xab9/0xd20
[  244.131490][T17314]  ? __pfx_genl_rcv_msg+0x10/0x10
[  244.131508][T17314]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  244.131537][T17314]  ? down_read+0x1ad/0x2e0
[  244.131554][T17314]  genl_rcv+0x28/0x40
[  244.131568][T17314]  netlink_unicast+0x82f/0x9e0
[  244.131595][T17314]  ? __pfx_netlink_unicast+0x10/0x10
[  244.131615][T17314]  ? netlink_sendmsg+0x642/0xb30
[  244.131627][T17314]  ? skb_put+0x11b/0x210
[  244.131645][T17314]  netlink_sendmsg+0x805/0xb30
[  244.131666][T17314]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.131681][T17314]  ? aa_sock_msg_perm+0xf1/0x1d0
[  244.131694][T17314]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  244.131710][T17314]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.131724][T17314]  __sock_sendmsg+0x21c/0x270
[  244.131746][T17314]  ____sys_sendmsg+0x505/0x830
[  244.131765][T17314]  ? __pfx_____sys_sendmsg+0x10/0x10
[  244.131787][T17314]  ? import_iovec+0x74/0xa0
[  244.131805][T17314]  ___sys_sendmsg+0x21f/0x2a0
[  244.131841][T17314]  ? __pfx____sys_sendmsg+0x10/0x10
[  244.131886][T17314]  ? __fget_files+0x2a/0x420
[  244.131897][T17314]  ? __fget_files+0x3a0/0x420
[  244.131916][T17314]  __x64_sys_sendmsg+0x19b/0x260
[  244.131932][T17314]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  244.131955][T17314]  ? rcu_is_watching+0x15/0xb0
[  244.131974][T17314]  ? do_syscall_64+0xbe/0x3b0
[  244.131993][T17314]  do_syscall_64+0xfa/0x3b0
[  244.132005][T17314]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.132018][T17314]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.132030][T17314]  ? exc_page_fault+0x9f/0xf0
[  244.132044][T17314]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.132055][T17314] RIP: 0033:0x7f52d4d8ebe9
[  244.132068][T17314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.132079][T17314] RSP: 002b:00007f52d5c8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.132093][T17314] RAX: ffffffffffffffda RBX: 00007f52d4fc5fa0 RCX: 00007f52d4d8ebe9
[  244.132101][T17314] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  244.132109][T17314] RBP: 00007f52d4e11e19 R08: 0000000000000000 R09: 0000000000000000
[  244.132117][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.132125][T17314] R13: 00007f52d4fc6038 R14: 00007f52d4fc5fa0 R15: 00007ffe9db99eb8
[  244.132148][T17314]  </TASK>
[  244.518063][T17330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  244.521623][T17330] syzkaller0: entered promiscuous mode
[  244.528551][T17330] syzkaller0: entered allmulticast mode
[  244.562835][T17330] tipc: Resetting bearer <eth:syzkaller0>
[  244.574163][T17329] tipc: Resetting bearer <eth:syzkaller0>
[  244.591176][T17329] tipc: Disabling bearer <eth:syzkaller0>
[  244.596383][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4919'.
[  244.603883][T17335] netlink: zone id is out of range
[  244.608500][T17335] netlink: zone id is out of range
[  244.612671][T17335] netlink: zone id is out of range
[  244.655371][T17338] lo speed is unknown, defaulting to 1000
[  244.656309][T17335] netlink: set zone limit has 4 unknown bytes
[  244.663078][T17335] netlink: del zone limit has 4 unknown bytes
[  244.874256][T17354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4927'.
[  244.955064][T17356] netem: incorrect ge model size
[  244.963347][T17356] netem: change failed
[  245.211128][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4933'.
[  245.490896][T17382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.500476][T17382] syzkaller0: entered promiscuous mode
[  245.503259][T17382] syzkaller0: entered allmulticast mode
[  245.515391][T17382] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  245.536061][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4941'.
[  245.545839][T17382] tipc: Resetting bearer <eth:syzkaller0>
[  245.551391][T17381] tipc: Resetting bearer <eth:syzkaller0>
[  245.567490][T17381] tipc: Disabling bearer <eth:syzkaller0>
[  245.667938][T17388] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4944'.
[  245.689134][T17388] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4944'.
[  245.693351][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'.
[  245.807439][T17390] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  245.817322][T17390] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  245.858919][T17390] netlink: 'syz.2.4946': attribute type 37 has an invalid length.
[  246.123879][T17406] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4952'.
[  246.144913][T17408] smc: net device bond0 erased user defined pnetid SYZ2
[  246.191799][T17408] smc: removing net device bond0 with user defined pnetid SYZ2
[  246.195039][T17408] bond0 (unregistering): Released all slaves
[  246.604503][T17449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4971'.
[  246.662566][ T5876] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  246.665562][ T5876] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.678928][ T5876] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.689835][ T5876] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  246.725949][T17463] netlink: 'syz.2.4977': attribute type 13 has an invalid length.
[  246.810382][T17474] syz_tun: entered allmulticast mode
[  246.819943][T17474] dvmrp8: entered allmulticast mode
[  246.841734][T17474] lo speed is unknown, defaulting to 1000
[  246.890562][T17485] netlink: 'syz.2.4983': attribute type 23 has an invalid length.
[  246.985381][T17473] syz_tun: left allmulticast mode
[  246.987595][T17473] dvmrp8: left allmulticast mode
[  250.059866][T17508] netlink: 'syz.2.4998': attribute type 4 has an invalid length.
[  250.071684][T17508] netlink: 'syz.2.4998': attribute type 4 has an invalid length.
[  250.254890][T17521] netlink: 'syz.1.5003': attribute type 32 has an invalid length.
[  250.282321][T17523] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  250.286133][T17523] bond0: option all_slaves_active: invalid value (7)
[  250.321310][T17525] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  250.325689][T17525] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  250.329812][T17525] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  250.465784][T17533] __nla_validate_parse: 5 callbacks suppressed
[  250.465794][T17533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5009'.
[  250.537375][T17539] nbd: must specify at least one socket
[  250.702791][T17549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5015'.
[  250.706604][T17549] netlink: 'syz.2.5015': attribute type 1 has an invalid length.
[  251.183519][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5021'.
[  251.187443][T17584] IPVS: Unknown mcast interface: bridGe_slave0
[  251.575498][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5039'.
[  251.650909][T17618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5044'.
[  251.991414][T17649] netlink: 'syz.1.5058': attribute type 10 has an invalid length.
[  251.998637][T17649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5058'.
[  252.009364][T17649] bond0: option arp_all_targets: invalid value (196616)
[  252.014701][T17650] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5056'.
[  252.108369][T17658] netlink: 'syz.1.5063': attribute type 2 has an invalid length.
[  252.547339][T17677] netlink: 'syz.0.5069': attribute type 2 has an invalid length.
[  253.078232][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5091'.
[  253.116271][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5093'.
[  253.216357][T17732] gtp3: entered promiscuous mode
[  253.218463][T17732] gtp3: entered allmulticast mode
[  253.351060][T17747] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.438789][T17751] ip6tnl3: left allmulticast mode
[  253.536459][T17757] netlink: 41 bytes leftover after parsing attributes in process `syz.1.5106'.
[  254.217850][T17829] netlink: 'syz.0.5138': attribute type 1 has an invalid length.
[  254.221207][T17829] netlink: 'syz.0.5138': attribute type 1 has an invalid length.
[  254.377574][T17829] netlink: 'syz.0.5138': attribute type 1 has an invalid length.
[  254.398226][T17829] smc: adding net device bond0 with user defined pnetid SYZ2
[  254.404991][T17829] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.415476][T17829] bond0: (slave wlan0): Enslaving as an active interface with a down link
[  254.432666][T17829] vlan3: entered allmulticast mode
[  254.434923][T17829] veth1: entered allmulticast mode
[  254.437820][T17829] bond0: (slave vlan3): Opening slave failed
[  255.010314][T17895] netlink: 'syz.1.5169': attribute type 12 has an invalid length.
[  255.076726][T17898] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.135687][T17898] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.191352][T17898] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.299184][T17898] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  255.358433][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  255.366182][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  255.404606][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  255.417934][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  255.698700][T17929] __nla_validate_parse: 7 callbacks suppressed
[  255.698714][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5185'.
[  256.099079][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'.
[  256.100797][T17964] sctp: [Deprecated]: syz.1.5202 (pid 17964) Use of int in maxseg socket option.
[  256.100797][T17964] Use struct sctp_assoc_value instead
[  256.189481][T17970] netlink: 'syz.1.5205': attribute type 11 has an invalid length.
[  256.236221][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5208'.
[  256.318879][T17983] netlink: 'syz.0.5211': attribute type 1 has an invalid length.
[  257.440638][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5243'.
[  257.516590][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5250'.
[  257.740628][T18108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5258'.
[  257.744579][T18108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5258'.
[  257.748360][T18108] netlink: 31 bytes leftover after parsing attributes in process `syz.1.5258'.
[  257.754809][T18108] netlink: 'syz.1.5258': attribute type 3 has an invalid length.
[  257.758067][T18108] netlink: 'syz.1.5258': attribute type 2 has an invalid length.
[  257.761363][T18108] netlink: 31 bytes leftover after parsing attributes in process `syz.1.5258'.
[  257.765637][T18108] netlink: 'syz.1.5258': attribute type 2 has an invalid length.
[  258.320638][T18139] IPVS: stopping master sync thread 6745 ...
[  258.461485][T18153] netlink: 'syz.2.5277': attribute type 2 has an invalid length.
[  258.464719][T18153] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5277'.
[  258.558199][T18163] tap0: tun_chr_ioctl cmd 1074025677
[  258.560812][T18163] tap0: linktype set to 780
[  258.968741][T18190] netlink: 'syz.0.5296': attribute type 1 has an invalid length.
[  259.846897][T18275] netlink: 'syz.1.5335': attribute type 1 has an invalid length.
[  259.969186][T18286] gretap6: entered promiscuous mode
[  260.062860][T18300] tipc: Enabled bearer <eth:gre0>, priority 10
[  260.298897][ T5859] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  260.305355][T18325] netlink: 'syz.0.5357': attribute type 1 has an invalid length.
[  260.701965][   T60] block nbd1: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 120 seconds
[  260.998328][T18390] netlink: 'syz.0.5386': attribute type 1 has an invalid length.
[  261.001589][T18390] netlink: 'syz.0.5386': attribute type 1 has an invalid length.
[  261.018770][T18394] __nla_validate_parse: 6 callbacks suppressed
[  261.018780][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.018924][T18390] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5386'.
[  261.021240][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.035564][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.038767][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.042294][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.045908][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.049434][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.056139][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.059245][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'.
[  261.183110][ T5896] tipc: Node number set to 3834648796
[  261.186498][T18406] macvlan2: entered allmulticast mode
[  261.189208][T18406] veth1_vlan: entered allmulticast mode
[  261.200681][T18406] veth1_vlan: left allmulticast mode
[  261.820975][T18444] syzkaller1: entered promiscuous mode
[  261.823617][T18444] syzkaller1: entered allmulticast mode
[  262.059785][T18461] netlink: 'syz.2.5413': attribute type 10 has an invalid length.
[  262.091681][T18461] bond0: (slave 0!): Enslaving as an active interface with an up link
[  262.095776][   T13] bond0: (slave 0!): interface is now down
[  262.122963][   T13] bond0: (slave 0!): interface is now down
[  262.128192][   T13] bond0: now running without any active interface!
[  263.049973][ T5850] Bluetooth: hci2: link tx timeout
[  263.052507][ T5850] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  263.288214][T18509] lo speed is unknown, defaulting to 1000
[  263.288793][T18507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.299229][T18507] syzkaller0: entered promiscuous mode
[  263.301607][T18507] syzkaller0: entered allmulticast mode
[  263.353350][T18507] tipc: Resetting bearer <eth:syzkaller0>
[  263.369799][T18505] tipc: Resetting bearer <eth:syzkaller0>
[  263.407624][T18505] tipc: Disabling bearer <eth:syzkaller0>
[  263.654392][T18526] vti0: entered promiscuous mode
[  264.366684][T18572] batadv_slave_1 (unregistering): left promiscuous mode
[  264.983842][T18606] pim6reg9: entered allmulticast mode
[  265.088484][ T5846] Bluetooth: hci2: command 0x0405 tx timeout
[  265.325705][   T33] audit: type=1800 audit(1756738232.791:4): pid=18624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5479" name="memory.events" dev="tmpfs" ino=9850 res=0 errno=0
[  265.879225][T18668] lo speed is unknown, defaulting to 1000
[  266.035485][T18683] C: renamed from lo
[  266.049875][T18683] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  266.166498][T18688] __nla_validate_parse: 20 callbacks suppressed
[  266.166515][T18688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5499'.
[  266.457136][T18701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5503'.
[  266.641626][T18715] bridge: RTM_NEWNEIGH with invalid ether address
[  266.876053][T18736] lo speed is unknown, defaulting to 1000
[  266.925872][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5516'.
[  267.237824][T18758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5520'.
[  267.376998][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'.
[  267.380918][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'.
[  267.385583][T18768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'.
[  267.431710][T18770] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5525'.
[  267.870708][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5535'.
[  267.894113][T18798] lo speed is unknown, defaulting to 1000
[  267.903863][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5537'.
[  268.070048][T18809] : renamed from bond_slave_0
[  268.617509][T18831] validate_nla: 2 callbacks suppressed
[  268.617528][T18831] netlink: 'syz.0.5549': attribute type 1 has an invalid length.
[  269.038309][T18867] netlink: 'syz.1.5566': attribute type 5 has an invalid length.
[  269.040962][T18867] netlink: 'syz.1.5566': attribute type 5 has an invalid length.
[  269.236164][T18885] netlink: 'syz.1.5574': attribute type 10 has an invalid length.
[  269.490647][T18911] vlan2: entered allmulticast mode
[  269.495706][T18911] bond0: entered allmulticast mode
[  270.187875][T18948] : entered promiscuous mode
[  270.277768][T18955] syz_tun (unregistering): left promiscuous mode
[  270.316340][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[  271.191355][T18992] siw: device registration error -23
[  271.210743][T18992] netlink: 'syz.2.5622': attribute type 4 has an invalid length.
[  271.516615][T19038] sctp: [Deprecated]: syz.2.5644 (pid 19038) Use of struct sctp_assoc_value in delayed_ack socket option.
[  271.516615][T19038] Use struct sctp_sack_info instead
[  271.563074][T19045] __nla_validate_parse: 8 callbacks suppressed
[  271.563088][T19045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5646'.
[  271.579174][T19050] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5645'.
[  271.613084][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5648'.
[  271.646119][T19055] syzkaller1: entered promiscuous mode
[  271.649136][T19055] syzkaller1: entered allmulticast mode
[  271.746260][T19064] netlink: 'syz.0.5653': attribute type 11 has an invalid length.
[  271.766239][T19058] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  271.775480][T19058] veth5: left promiscuous mode
[  271.787650][T19058] macvlan2: left promiscuous mode
[  271.789763][T19058] macvlan2: left allmulticast mode
[  271.800896][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.808426][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.812004][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  271.839963][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  272.008618][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5666'.
[  272.021314][T19091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5667'.
[  272.082033][T19105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5672'.
[  272.090601][T19105] netlink: 560 bytes leftover after parsing attributes in process `syz.2.5672'.
[  272.161534][T19112] syzkaller1: entered promiscuous mode
[  272.164716][T19112] syzkaller1: entered allmulticast mode
[  272.306810][T19128] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.310326][T19128] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  272.313350][T19128] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  272.325326][T19128] tipc: Resetting bearer <eth:syzkaller0>
[  272.484450][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5690'.
[  272.524829][T19146] netlink: 'syz.1.5692': attribute type 2 has an invalid length.
[  272.536553][T19146] k*]: entered promiscuous mode
[  272.583403][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5694'.
[  272.698969][T19165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5700'.
[  272.770508][T19171] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590)
[  272.780840][T19171] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  272.924516][T19185] lo speed is unknown, defaulting to 1000
[  273.186469][T19213] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  273.189092][T19217] netlink: 'syz.0.5722': attribute type 11 has an invalid length.
[  273.239973][T19221] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  273.339456][T19232] netlink: 'syz.1.5730': attribute type 2 has an invalid length.
[  273.344678][T19232] netlink: 'syz.1.5730': attribute type 1 has an invalid length.
[  273.348167][T19232] netlink: 'syz.1.5730': attribute type 1 has an invalid length.
[  273.636722][T19269] netlink: 'syz.2.5748': attribute type 2 has an invalid length.
[  273.990565][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  274.165891][T19335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.470645][T19370] netlink: 'syz.2.5790': attribute type 1 has an invalid length.
[  274.628875][T19379] netlink: 'syz.2.5793': attribute type 10 has an invalid length.
[  274.913653][T19396] netlink: 'syz.1.5801': attribute type 1 has an invalid length.
[  274.916314][T19396] netlink: 'syz.1.5801': attribute type 1 has an invalid length.
[  274.983406][T19402] syz_tun: entered allmulticast mode
[  274.989129][T19402] dvmrp8: entered allmulticast mode
[  275.001067][T19402] lo speed is unknown, defaulting to 1000
[  275.050896][T19401] syz_tun: left allmulticast mode
[  275.064855][T19401] dvmrp8: left allmulticast mode
[  275.391374][T19433] 8021q: VLANs not supported on ipvlan1
[  275.706066][T19469] dvmrp8: entered allmulticast mode
[  275.718472][T19468] dvmrp8: left allmulticast mode
[  276.187741][T19491] lo speed is unknown, defaulting to 1000
[  276.670919][T19520] __nla_validate_parse: 17 callbacks suppressed
[  276.670934][T19520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5853'.
[  276.680107][T19520] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5853'.
[  276.722389][T19524] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5855'.
[  276.782847][T19534] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5860'.
[  276.917150][T19556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.920335][T19556] syzkaller0: entered promiscuous mode
[  276.922757][T19556] syzkaller0: entered allmulticast mode
[  276.975678][T19556] tipc: Resetting bearer <eth:syzkaller0>
[  276.988981][T19555] tipc: Resetting bearer <eth:syzkaller0>
[  277.001671][T19555] tipc: Disabling bearer <eth:syzkaller0>
[  277.046558][T19553] netlink: 'syz.0.5867': attribute type 29 has an invalid length.
[  278.604558][T19548] Set syz1 is full, maxelem 65536 reached
[  278.658891][T19580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5879'.
[  278.699216][T19580] nbd: socks must be embedded in a SOCK_ITEM attr
[  278.703977][T10873] block nbd64: NBD_DISCONNECT
[  279.475963][T19608] netlink: zone id is out of range
[  279.478523][T19608] netlink: zone id is out of range
[  279.480971][T19608] netlink: zone id is out of range
[  279.485666][T19608] netlink: zone id is out of range
[  279.497279][T19608] netlink: zone id is out of range
[  279.499557][T19608] netlink: zone id is out of range
[  279.501747][T19608] netlink: zone id is out of range
[  279.526246][T19608] netlink: zone id is out of range
[  279.529601][T19608] netlink: zone id is out of range
[  280.106066][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5904'.
[  280.110514][T19640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5904'.
[  280.389475][T19660] sit0: entered promiscuous mode
[  280.391780][T19660] netlink: 'syz.2.5913': attribute type 1 has an invalid length.
[  280.394697][T19660] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5913'.
[  281.455733][T19731] lo speed is unknown, defaulting to 1000
[  281.480210][T19733] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5947'.
[  281.683799][T19751] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5954'.
[  281.717244][ T6266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.724484][ T6266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.734063][T19751] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  281.742561][T19751] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  281.784351][T19755] netlink: 'syz.1.5954': attribute type 10 has an invalid length.
[  281.791902][T19755] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  281.819551][T19746] lo speed is unknown, defaulting to 1000
[  282.046509][T19771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5964'.
[  282.050493][T19771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5964'.
[  282.257813][T19775] dvmrp0: entered allmulticast mode
[  282.817500][T19798] sctp: [Deprecated]: syz.1.5976 (pid 19798) Use of int in max_burst socket option.
[  282.817500][T19798] Use struct sctp_assoc_value instead
[  282.873439][T19806] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5981'.
[  282.876732][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5981'.
[  283.404859][T19862] lo speed is unknown, defaulting to 1000
[  283.769839][T19892] !: entered promiscuous mode
[  283.775596][T19892] net_ratelimit: 6 callbacks suppressed
[  283.775603][T19892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.784767][ T5878] lo speed is unknown, defaulting to 1000
[  283.787357][ T5878] syz2: Port: 1 Link ACTIVE
[  283.835609][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6024'.
[  283.839412][T19898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6024'.
[  283.920580][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6028'.
[  283.963648][T19908] lo speed is unknown, defaulting to 1000
[  283.965614][T19908] lo speed is unknown, defaulting to 1000
[  283.967786][T19908] lo speed is unknown, defaulting to 1000
[  283.987212][T19908] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  284.035173][T19908] lo speed is unknown, defaulting to 1000
[  284.044617][T19908] lo speed is unknown, defaulting to 1000
[  284.048910][T19908] lo speed is unknown, defaulting to 1000
[  284.156403][T19928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.159385][T19928] syzkaller0: entered promiscuous mode
[  284.161159][T19928] syzkaller0: entered allmulticast mode
[  284.186612][T19928] tipc: Resetting bearer <eth:syzkaller0>
[  284.190841][T19925] tipc: Resetting bearer <eth:syzkaller0>
[  284.210257][T19925] tipc: Disabling bearer <eth:syzkaller0>
[  284.227801][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6039'.
[  284.277735][T19936] netlink: 'syz.0.6041': attribute type 1 has an invalid length.
[  284.281006][T19936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6041'.
[  284.380923][T19944] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  286.225825][T20119] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  286.315275][T20127] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  286.614542][T20154] 8021q: adding VLAN 0 to HW filter on device bond9
[  286.933105][T20180] __nla_validate_parse: 12 callbacks suppressed
[  286.933121][T20180] netlink: 504 bytes leftover after parsing attributes in process `syz.2.6141'.
[  287.346933][T20208] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6150'.
[  287.528824][T20222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.540893][T20222] syzkaller0: entered promiscuous mode
[  287.543923][T20222] syzkaller0: entered allmulticast mode
[  287.566137][T20222] tipc: Resetting bearer <eth:syzkaller0>
[  287.577622][T20221] tipc: Resetting bearer <eth:syzkaller0>
[  287.604187][T20221] tipc: Disabling bearer <eth:syzkaller0>
[  287.727389][T20236] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  287.733580][T20236] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  287.778028][T20240] tc_dump_action: action bad kind
[  287.892324][T20248] tun0: tun_chr_ioctl cmd 2148045848
[  287.895970][T20248] tun0: tun_chr_ioctl cmd 21731
[  288.853998][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6176'.
[  289.025832][T20295] bond0: (slave wlan0): Releasing active interface
[  289.059039][T20300] netlink: 'syz.1.6181': attribute type 1 has an invalid length.
[  289.059499][T20295] bond7: (slave gretap4): Releasing active interface
[  289.114082][T20293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6178'.
[  289.379077][T20331] netlink: 'syz.1.6194': attribute type 13 has an invalid length.
[  289.383763][T20331] netlink: 'syz.1.6194': attribute type 17 has an invalid length.
[  289.429551][T20331] 8021q: adding VLAN 0 to HW filter on device team0
[  289.435005][T20331] tipc: Resetting bearer <eth:team0>
[  289.438145][T20331] tipc: Resetting bearer <eth:team0>
[  289.441721][T20331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  289.500327][T20331] lo speed is unknown, defaulting to 1000
[  289.505284][T20331] lo speed is unknown, defaulting to 1000
[  289.855880][T20343] netlink: 'syz.0.6197': attribute type 1 has an invalid length.
[  290.762493][   T60] block nbd1: Possible stuck request ffff888020cc0000: control (read@0,4096B). Runtime 150 seconds
[  290.836364][T20419] netlink: 'syz.1.6227': attribute type 10 has an invalid length.
[  290.842392][T20419] netlink: 'syz.1.6227': attribute type 10 has an invalid length.
[  291.287956][T20444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.298169][T20444] syzkaller0: entered promiscuous mode
[  291.300525][T20444] syzkaller0: entered allmulticast mode
[  291.348916][T20444] tipc: Resetting bearer <eth:syzkaller0>
[  291.355657][T20443] tipc: Resetting bearer <eth:syzkaller0>
[  291.373913][T20443] tipc: Disabling bearer <eth:syzkaller0>
[  291.544379][T20459] netlink: 'syz.2.6247': attribute type 21 has an invalid length.
[  291.547705][T20459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6247'.
[  291.727078][T20469] netlink: 'syz.2.6252': attribute type 3 has an invalid length.
[  291.730527][T20469] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6252'.
[  292.251148][T20500] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6267'.
[  292.257247][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6267'.
[  292.261058][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6267'.
[  294.157272][T20580] sctp: [Deprecated]: syz.0.6298 (pid 20580) Use of int in max_burst socket option.
[  294.157272][T20580] Use struct sctp_assoc_value instead
[  294.671042][T20613] tun0: tun_chr_ioctl cmd 1074812118
[  294.933316][T20631] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  294.971750][T20635] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  295.291969][T20658] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.400488][T20671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6334'.
[  295.421669][T20661] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6334'.
[  295.502757][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  295.777926][T20709] netlink: 'syz.0.6353': attribute type 2 has an invalid length.
[  295.953485][ T5896] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  296.073665][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6357'.
[  296.823306][T20769] netlink: 'syz.2.6375': attribute type 9 has an invalid length.
[  296.961798][T20778] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  297.172264][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  297.376913][T20810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6393'.
[  297.478250][T20820] tipc: Resetting bearer <eth:gre0>
[  297.480700][T20820] tipc: Resetting bearer <eth:gre0>
[  297.513566][   T10] lo speed is unknown, defaulting to 1000
[  297.516141][   T10] syz2: Port: 1 Link DOWN
[  297.518089][ T5854] lo speed is unknown, defaulting to 1000
[  297.633785][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6403'.
[  297.637589][T20834] bond0: up delay (18673) is not a multiple of miimon (33271), value rounded to 0 ms
[  297.641430][T20834] bond0: entered promiscuous mode
[  297.646332][T20834] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.800405][T20847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6410'.
[  298.059352][T20869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6420'.
[  298.068647][T20869] netlink: 35 bytes leftover after parsing attributes in process `syz.1.6420'.
[  298.140279][T20875] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6422'.
[  298.463085][T20894] syzkaller1: entered promiscuous mode
[  298.470019][T20894] syzkaller1: entered allmulticast mode
[  298.737516][T20908] netlink: 'syz.1.6430': attribute type 1 has an invalid length.
[  298.752097][T20908] netlink: 'syz.1.6430': attribute type 1 has an invalid length.
[  298.755393][T20908] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6430'.
[  298.984141][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.988184][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.991497][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.996157][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  299.423442][T20962] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6460'.
[  299.436491][T20964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6459'.
[  299.469055][T20966] netlink: 'syz.0.6461': attribute type 1 has an invalid length.
[  299.475114][T20966] netlink: 'syz.0.6461': attribute type 1 has an invalid length.
[  299.695472][T20986] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.699096][T20986] syzkaller0: entered promiscuous mode
[  299.701085][T20986] syzkaller0: entered allmulticast mode
[  299.723331][T20986] tipc: Resetting bearer <eth:syzkaller0>
[  299.732548][T20985] tipc: Resetting bearer <eth:syzkaller0>
[  299.746893][T20985] tipc: Disabling bearer <eth:syzkaller0>
[  299.937133][T21004] netlink: 'syz.1.6479': attribute type 1 has an invalid length.
[  299.940356][T21004] netlink: 'syz.1.6479': attribute type 2 has an invalid length.
[  299.974135][T21009] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.6481'.
[  300.476877][T21057] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  300.481149][T21057] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  300.486187][T21057] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  300.587067][T21063] lo speed is unknown, defaulting to 1000
[  300.596549][T21063] lo speed is unknown, defaulting to 1000
[  300.693418][T21071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.418336][T21139] lo speed is unknown, defaulting to 1000
[  301.433876][T21139] lo speed is unknown, defaulting to 1000
[  302.508057][T21224] batadv2: entered allmulticast mode
[  302.511441][T21224] 8021q: adding VLAN 0 to HW filter on device batadv2
[  302.785823][T21245] __nla_validate_parse: 8 callbacks suppressed
[  302.785835][T21245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6589'.
[  302.926884][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6597'.
[  303.128993][T21281] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6605'.
[  303.171100][T21286] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6609'.
[  303.179368][T21286] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6609'.
[  303.283834][T21298] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  303.338164][T21304] netlink: 'syz.2.6617': attribute type 4 has an invalid length.
[  303.348516][T21304] netlink: 'syz.2.6617': attribute type 4 has an invalid length.
[  303.356068][   T10] lo speed is unknown, defaulting to 1000
[  303.358604][   T10] syz1: Port: 1 Link ACTIVE
[  303.407656][T21309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6620'.
[  303.424655][T21309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6620'.
[  303.440123][T21314] netlink: 'syz.2.6621': attribute type 1 has an invalid length.
[  303.505158][T21314] bond10: (slave gretap3): making interface the new active one
[  303.508737][T21314] bond10: (slave gretap3): Enslaving as an active interface with an up link
[  303.520677][T21311] lo speed is unknown, defaulting to 1000
[  303.545851][T21311] lo speed is unknown, defaulting to 1000
[  304.322829][T21345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6633'.
[  304.480708][T21359] IPv6: Can't replace route, no match found
[  304.527499][T21366] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6642'.
[  304.530636][T21366] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6642'.
[  304.639010][T21378] gtp0: entered promiscuous mode
[  304.777623][T21388] netlink: 'syz.1.6652': attribute type 1 has an invalid length.
[  305.056489][T21414] ==================================================================
[  305.059521][T21414] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  305.062589][T21414] Read of size 4 at addr ffff88802a9d7244 by task syz.1.6664/21414
[  305.066969][T21414] 
[  305.068011][T21414] CPU: 1 UID: 0 PID: 21414 Comm: syz.1.6664 Not tainted syzkaller #0 PREEMPT(full) 
[  305.068028][T21414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  305.068037][T21414] Call Trace:
[  305.068044][T21414]  <TASK>
[  305.068051][T21414]  dump_stack_lvl+0x189/0x250
[  305.068070][T21414]  ? __kasan_check_byte+0x12/0x40
[  305.068091][T21414]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.068106][T21414]  ? lock_release+0x4b/0x3e0
[  305.068128][T21414]  ? __virt_addr_valid+0x4a5/0x5c0
[  305.068145][T21414]  print_report+0xca/0x240
[  305.068158][T21414]  ? xfrm_alloc_spi+0x570/0xf30
[  305.068174][T21414]  kasan_report+0x118/0x150
[  305.068190][T21414]  ? xfrm_alloc_spi+0x570/0xf30
[  305.068207][T21414]  xfrm_alloc_spi+0x570/0xf30
[  305.068222][T21414]  ? xfrm_alloc_spi+0x2a0/0xf30
[  305.068243][T21414]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  305.068260][T21414]  ? xfrm_find_acq+0x87/0xa0
[  305.068278][T21414]  xfrm_alloc_userspi+0x70b/0xc90
[  305.068301][T21414]  ? apparmor_capable+0x137/0x1b0
[  305.068316][T21414]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  305.068332][T21414]  ? __nla_parse+0x40/0x60
[  305.068352][T21414]  xfrm_user_rcv_msg+0x7a3/0xab0
[  305.068370][T21414]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  305.068395][T21414]  ? __pfx___mutex_trylock_common+0x10/0x10
[  305.068410][T21414]  ? rcu_is_watching+0x15/0xb0
[  305.068423][T21414]  ? trace_contention_end+0x39/0x120
[  305.068435][T21414]  ? __mutex_lock+0x335/0x1350
[  305.068450][T21414]  netlink_rcv_skb+0x208/0x470
[  305.068463][T21414]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  305.068480][T21414]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  305.068497][T21414]  ? netlink_deliver_tap+0x2e/0x1b0
[  305.068517][T21414]  ? netlink_deliver_tap+0x2e/0x1b0
[  305.068530][T21414]  xfrm_netlink_rcv+0x79/0x90
[  305.068547][T21414]  netlink_unicast+0x82f/0x9e0
[  305.068570][T21414]  ? __pfx_netlink_unicast+0x10/0x10
[  305.068589][T21414]  ? netlink_sendmsg+0x642/0xb30
[  305.068601][T21414]  ? skb_put+0x11b/0x210
[  305.068616][T21414]  netlink_sendmsg+0x805/0xb30
[  305.068632][T21414]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.068646][T21414]  ? aa_sock_msg_perm+0xf1/0x1d0
[  305.068658][T21414]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  305.068674][T21414]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.068687][T21414]  __sock_sendmsg+0x21c/0x270
[  305.068705][T21414]  ____sys_sendmsg+0x505/0x830
[  305.068720][T21414]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.068735][T21414]  ? import_iovec+0x74/0xa0
[  305.068758][T21414]  ___sys_sendmsg+0x21f/0x2a0
[  305.068771][T21414]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.068795][T21414]  ? __fget_files+0x2a/0x420
[  305.068806][T21414]  ? __fget_files+0x3a0/0x420
[  305.068819][T21414]  __x64_sys_sendmsg+0x19b/0x260
[  305.068834][T21414]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  305.068853][T21414]  ? rcu_is_watching+0x15/0xb0
[  305.068868][T21414]  ? do_syscall_64+0xbe/0x3b0
[  305.068884][T21414]  do_syscall_64+0xfa/0x3b0
[  305.068923][T21414]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.068938][T21414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.068951][T21414]  ? exc_page_fault+0x9f/0xf0
[  305.068963][T21414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.068974][T21414] RIP: 0033:0x7f52d4d8ebe9
[  305.068987][T21414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.068996][T21414] RSP: 002b:00007f52d5c8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.069013][T21414] RAX: ffffffffffffffda RBX: 00007f52d4fc5fa0 RCX: 00007f52d4d8ebe9
[  305.069022][T21414] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003
[  305.069031][T21414] RBP: 00007f52d4e11e19 R08: 0000000000000000 R09: 0000000000000000
[  305.069039][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.069046][T21414] R13: 00007f52d4fc6038 R14: 00007f52d4fc5fa0 R15: 00007ffe9db99eb8
[  305.069061][T21414]  </TASK>
[  305.069067][T21414] 
[  305.221267][T21414] Allocated by task 18291:
[  305.223060][T21414]  kasan_save_track+0x3e/0x80
[  305.225077][T21414]  __kasan_slab_alloc+0x6c/0x80
[  305.226746][T21414]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  305.228713][T21414]  xfrm_state_alloc+0x24/0x2f0
[  305.230312][T21414]  __find_acq_core+0x8a7/0x1c00
[  305.231975][T21414]  xfrm_find_acq+0x78/0xa0
[  305.233605][T21414]  xfrm_alloc_userspi+0x6b3/0xc90
[  305.235626][T21414]  xfrm_user_rcv_msg+0x7a3/0xab0
[  305.237680][T21414]  netlink_rcv_skb+0x208/0x470
[  305.239651][T21414]  xfrm_netlink_rcv+0x79/0x90
[  305.241354][T21414]  netlink_unicast+0x82f/0x9e0
[  305.243311][T21414]  netlink_sendmsg+0x805/0xb30
[  305.245370][T21414]  __sock_sendmsg+0x21c/0x270
[  305.247337][T21414]  ____sys_sendmsg+0x505/0x830
[  305.249311][T21414]  ___sys_sendmsg+0x21f/0x2a0
[  305.251300][T21414]  __x64_sys_sendmsg+0x19b/0x260
[  305.253426][T21414]  do_syscall_64+0xfa/0x3b0
[  305.255394][T21414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.257920][T21414] 
[  305.258933][T21414] Freed by task 10:
[  305.260565][T21414]  kasan_save_track+0x3e/0x80
[  305.262618][T21414]  kasan_save_free_info+0x46/0x50
[  305.264767][T21414]  __kasan_slab_free+0x5b/0x80
[  305.266836][T21414]  kmem_cache_free+0x18f/0x400
[  305.268929][T21414]  xfrm_state_gc_task+0x52d/0x6b0
[  305.271093][T21414]  process_scheduled_works+0xae1/0x17b0
[  305.273412][T21414]  worker_thread+0x8a0/0xda0
[  305.275312][T21414]  kthread+0x711/0x8a0
[  305.276995][T21414]  ret_from_fork+0x3fc/0x770
[  305.278978][T21414]  ret_from_fork_asm+0x1a/0x30
[  305.281050][T21414] 
[  305.282107][T21414] The buggy address belongs to the object at ffff88802a9d7180
[  305.282107][T21414]  which belongs to the cache xfrm_state of size 928
[  305.287920][T21414] The buggy address is located 196 bytes inside of
[  305.287920][T21414]  freed 928-byte region [ffff88802a9d7180, ffff88802a9d7520)
[  305.293641][T21414] 
[  305.294699][T21414] The buggy address belongs to the physical page:
[  305.297392][T21414] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802a9d7180 pfn:0x2a9d4
[  305.301623][T21414] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  305.305210][T21414] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  305.308420][T21414] page_type: f5(slab)
[  305.310104][T21414] raw: 00fff00000000040 ffff888104c08c80 dead000000000122 0000000000000000
[  305.313508][T21414] raw: ffff88802a9d7180 00000000800e000b 00000000f5000000 0000000000000000
[  305.317151][T21414] head: 00fff00000000040 ffff888104c08c80 dead000000000122 0000000000000000
[  305.320809][T21414] head: ffff88802a9d7180 00000000800e000b 00000000f5000000 0000000000000000
[  305.324357][T21414] head: 00fff00000000002 ffffea0000aa7501 00000000ffffffff 00000000ffffffff
[  305.327955][T21414] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  305.331579][T21414] page dumped because: kasan: bad access detected
[  305.334311][T21414] page_owner tracks the page as allocated
[  305.336830][T21414] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7117, tgid 7116 (syz.0.508), ts 82747544258, free_ts 76652888594
[  305.344699][T21414]  post_alloc_hook+0x240/0x2a0
[  305.346794][T21414]  get_page_from_freelist+0x21e4/0x22c0
[  305.349130][T21414]  __alloc_frozen_pages_noprof+0x181/0x370
[  305.351537][T21414]  alloc_pages_mpol+0x232/0x4a0
[  305.353562][T21414]  allocate_slab+0x8a/0x370
[  305.355493][T21414]  ___slab_alloc+0xbeb/0x1410
[  305.357500][T21414]  kmem_cache_alloc_noprof+0x283/0x3c0
[  305.359774][T21414]  xfrm_state_alloc+0x24/0x2f0
[  305.361847][T21414]  xfrm_add_sa+0x17d1/0x4070
[  305.363846][T21414]  xfrm_user_rcv_msg+0x7a3/0xab0
[  305.366002][T21414]  netlink_rcv_skb+0x208/0x470
[  305.368071][T21414]  xfrm_netlink_rcv+0x79/0x90
[  305.370158][T21414]  netlink_unicast+0x82f/0x9e0
[  305.372263][T21414]  netlink_sendmsg+0x805/0xb30
[  305.374310][T21414]  __sock_sendmsg+0x21c/0x270
[  305.376341][T21414]  ____sys_sendmsg+0x505/0x830
[  305.378374][T21414] page last free pid 6700 tgid 6697 stack trace:
[  305.381061][T21414]  __free_frozen_pages+0xbc4/0xd30
[  305.383222][T21414]  __tlb_remove_table+0x2d2/0x3b0
[  305.385390][T21414]  tlb_remove_table_rcu+0x85/0x100
[  305.387577][T21414]  rcu_core+0xcab/0x1770
[  305.389431][T21414]  handle_softirqs+0x286/0x870
[  305.391500][T21414]  __irq_exit_rcu+0xca/0x1f0
[  305.393497][T21414]  irq_exit_rcu+0x9/0x30
[  305.395229][T21414]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  305.397541][T21414]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  305.399889][T21414] 
[  305.400724][T21414] Memory state around the buggy address:
[  305.402559][T21414]  ffff88802a9d7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  305.405620][T21414]  ffff88802a9d7180: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  305.408985][T21414] >ffff88802a9d7200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  305.411826][T21414]                                            ^
[  305.414385][T21414]  ffff88802a9d7280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  305.417686][T21414]  ffff88802a9d7300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  305.420536][T21414] ==================================================================
[  305.423551][T21414] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  305.425963][T21414] CPU: 1 UID: 0 PID: 21414 Comm: syz.1.6664 Not tainted syzkaller #0 PREEMPT(full) 
[  305.429026][T21414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  305.432340][T21414] Call Trace:
[  305.433633][T21414]  <TASK>
[  305.434730][T21414]  dump_stack_lvl+0x99/0x250
[  305.436304][T21414]  ? __asan_memcpy+0x40/0x70
[  305.437960][T21414]  ? __pfx_dump_stack_lvl+0x10/0x10
[  305.439963][T21414]  ? __pfx__printk+0x10/0x10
[  305.441610][T21414]  vpanic+0x281/0x750
[  305.443194][T21414]  ? __pfx_vpanic+0x10/0x10
[  305.445038][T21414]  ? irqentry_exit+0x74/0x90
[  305.447006][T21414]  panic+0xb9/0xc0
[  305.448561][T21414]  ? __pfx_panic+0x10/0x10
[  305.450408][T21414]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  305.452821][T21414]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  305.455378][T21414]  ? xfrm_alloc_spi+0x570/0xf30
[  305.457068][T21414]  check_panic_on_warn+0x89/0xb0
[  305.458722][T21414]  ? xfrm_alloc_spi+0x570/0xf30
[  305.460359][T21414]  end_report+0x78/0x160
[  305.461775][T21414]  kasan_report+0x129/0x150
[  305.463362][T21414]  ? xfrm_alloc_spi+0x570/0xf30
[  305.465030][T21414]  xfrm_alloc_spi+0x570/0xf30
[  305.466658][T21414]  ? xfrm_alloc_spi+0x2a0/0xf30
[  305.468313][T21414]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  305.470117][T21414]  ? xfrm_find_acq+0x87/0xa0
[  305.471737][T21414]  xfrm_alloc_userspi+0x70b/0xc90
[  305.473698][T21414]  ? apparmor_capable+0x137/0x1b0
[  305.475636][T21414]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  305.477678][T21414]  ? __nla_parse+0x40/0x60
[  305.479397][T21414]  xfrm_user_rcv_msg+0x7a3/0xab0
[  305.481439][T21414]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  305.483702][T21414]  ? __pfx___mutex_trylock_common+0x10/0x10
[  305.486051][T21414]  ? rcu_is_watching+0x15/0xb0
[  305.487923][T21414]  ? trace_contention_end+0x39/0x120
[  305.489808][T21414]  ? __mutex_lock+0x335/0x1350
[  305.491413][T21414]  netlink_rcv_skb+0x208/0x470
[  305.493375][T21414]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  305.495588][T21414]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  305.497719][T21414]  ? netlink_deliver_tap+0x2e/0x1b0
[  305.499924][T21414]  ? netlink_deliver_tap+0x2e/0x1b0
[  305.502016][T21414]  xfrm_netlink_rcv+0x79/0x90
[  305.503973][T21414]  netlink_unicast+0x82f/0x9e0
[  305.505977][T21414]  ? __pfx_netlink_unicast+0x10/0x10
[  305.508163][T21414]  ? netlink_sendmsg+0x642/0xb30
[  305.510183][T21414]  ? skb_put+0x11b/0x210
[  305.511886][T21414]  netlink_sendmsg+0x805/0xb30
[  305.513870][T21414]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.516064][T21414]  ? aa_sock_msg_perm+0xf1/0x1d0
[  305.518109][T21414]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  305.520281][T21414]  ? __pfx_netlink_sendmsg+0x10/0x10
[  305.522429][T21414]  __sock_sendmsg+0x21c/0x270
[  305.524349][T21414]  ____sys_sendmsg+0x505/0x830
[  305.526069][T21414]  ? __pfx_____sys_sendmsg+0x10/0x10
[  305.527833][T21414]  ? import_iovec+0x74/0xa0
[  305.529580][T21414]  ___sys_sendmsg+0x21f/0x2a0
[  305.531539][T21414]  ? __pfx____sys_sendmsg+0x10/0x10
[  305.533665][T21414]  ? __fget_files+0x2a/0x420
[  305.535367][T21414]  ? __fget_files+0x3a0/0x420
[  305.537074][T21414]  __x64_sys_sendmsg+0x19b/0x260
[  305.538769][T21414]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  305.540730][T21414]  ? rcu_is_watching+0x15/0xb0
[  305.542331][T21414]  ? do_syscall_64+0xbe/0x3b0
[  305.544111][T21414]  do_syscall_64+0xfa/0x3b0
[  305.545671][T21414]  ? lockdep_hardirqs_on+0x9c/0x150
[  305.547506][T21414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.549625][T21414]  ? exc_page_fault+0x9f/0xf0
[  305.551243][T21414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.553276][T21414] RIP: 0033:0x7f52d4d8ebe9
[  305.554819][T21414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.562305][T21414] RSP: 002b:00007f52d5c8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.565363][T21414] RAX: ffffffffffffffda RBX: 00007f52d4fc5fa0 RCX: 00007f52d4d8ebe9
[  305.568353][T21414] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000003
[  305.571642][T21414] RBP: 00007f52d4e11e19 R08: 0000000000000000 R09: 0000000000000000
[  305.574702][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.577809][T21414] R13: 00007f52d4fc6038 R14: 00007f52d4fc5fa0 R15: 00007ffe9db99eb8
[  305.581051][T21414]  </TASK>
[  305.582752][T21414] Kernel Offset: disabled
[  305.584197][T21414] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:51:12  Registers:
info registers vcpu 0

CPU#0
RAX=9951cd24a3710300 RBX=ffffffff819683c8 RCX=9951cd24a3710300 RDX=0000000000000001
RSI=ffffffff8d9b95a6 RDI=ffffffff8be33800 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000840 CR3=0000000105dc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8174859b ffffffff81688a1f
XMM02=00007f52d4f97498 ffffffff81aced07 XMM03=00007f52d4f974a8 00007f52d4f974a0
XMM04=00007f52d5afd100 00007f52d4f97460 XMM05=00007f52d4f97478 00007f52d4f974c0
XMM06=00007f52d4f974b8 00007f52d4f974b0 XMM07=00007f52d4f974a8 00007f52d4f974a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f52d4e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000012c9 RDI=00000000000012ca RBP=00000000000003f8 RSP=ffffc90004ace9f0
R8 =ffff888020058237 R9 =1ffff1100400b046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b01914 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f52d5c8d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f52d5c8cfc8 CR3=0000000105dc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f52d4f97498 00007f52d4f97470 XMM03=00007f52d4f974a8 00007f52d4f974a0
XMM04=00007f52d5afd100 00007f52d4f97460 XMM05=00007f52d4f97478 00007f52d4f974c0
XMM06=00007f52d4f974b8 00007f52d4f974b0 XMM07=00007f52d4f974a8 00007f52d4f974a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f52d4e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
