last executing test programs:

1.550229091s ago: executing program 1 (id=3802):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x10000}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20)

1.508935383s ago: executing program 1 (id=3803):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.290393758s ago: executing program 1 (id=3813):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711069000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xc}, 0x94)

1.218945681s ago: executing program 1 (id=3815):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x7c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x68, 0x4, 0x0, 0x1, [@nested={0x61, 0x12, 0x0, 0x1, [@generic="a437fa54a0cc5d1124ab2b2806e7f423b6e257262cccca9a82234d912f8d4196192c1ddd5dcb13d7f0921142632c5ebd28", @nested={0x29, 0xde, 0x0, 0x1, [@generic="d3915f12712a643d4966212c4f25b0f088ecbcca05e2c38719e4adaad0c012779c2e654b7a"]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x14, 0x2, 0x4)
getpeername$packet(r4, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000})

814.98335ms ago: executing program 1 (id=3824):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})

720.521489ms ago: executing program 1 (id=3826):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40010041)
sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
read(r0, &(0x7f0000000040)=""/98, 0x3a)

280.932612ms ago: executing program 2 (id=3836):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0)

205.631806ms ago: executing program 2 (id=3838):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum64={0x0, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x2, 0xf7b, 0x6}]}]}, {0x0, [0x2e, 0x2e, 0x4b3195e6d278fd83]}}, 0x0, 0x35, 0x0, 0x1}, 0x28)

203.457374ms ago: executing program 2 (id=3840):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

199.319634ms ago: executing program 2 (id=3841):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

178.602016ms ago: executing program 0 (id=3842):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)

178.272598ms ago: executing program 2 (id=3843):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r2, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r4, 0xb4807000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})

131.091129ms ago: executing program 0 (id=3844):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

128.541142ms ago: executing program 2 (id=3845):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000143ae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce65399", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2000c000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0)
sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000180)={0xa, 0x1, 0x3, @rand_addr=' \x01\x00', 0x8}, 0xfffffdcd)
setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000080)=0x2, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf13000000000000850000002a000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee87"], 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r5, 0x0, 0x24000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r6}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r7}, 0x38)

60.532532ms ago: executing program 0 (id=3846):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18)

60.364578ms ago: executing program 0 (id=3847):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0)

216.99µs ago: executing program 0 (id=3848):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff800, 0x4)

0s ago: executing program 0 (id=3849):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7759' (ED25519) to the list of known hosts.
syzkaller login: [   50.365100][ T5759] cgroup: Unknown subsys name 'net'
[   50.439456][ T5759] cgroup: Unknown subsys name 'cpuset'
[   50.445189][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.852105][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.456306][ T5213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.460617][ T5213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.465437][ T5213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.469097][ T5213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.487751][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.491765][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.495921][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.530224][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.544597][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.548115][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.597040][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.600587][ T5213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.605093][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.621837][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.630092][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.902292][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   60.966026][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   60.977099][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   61.048743][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.051797][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.054414][ T5842] bridge_slave_0: entered allmulticast mode
[   61.057333][ T5842] bridge_slave_0: entered promiscuous mode
[   61.080062][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.082603][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.085056][ T5842] bridge_slave_1: entered allmulticast mode
[   61.087842][ T5842] bridge_slave_1: entered promiscuous mode
[   61.136758][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.139142][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.143707][ T5846] bridge_slave_0: entered allmulticast mode
[   61.147599][ T5846] bridge_slave_0: entered promiscuous mode
[   61.152307][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.155212][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.158071][ T5839] bridge_slave_0: entered allmulticast mode
[   61.162386][ T5839] bridge_slave_0: entered promiscuous mode
[   61.167221][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.170313][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.173811][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.176705][ T5839] bridge_slave_1: entered allmulticast mode
[   61.180351][ T5839] bridge_slave_1: entered promiscuous mode
[   61.184931][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.187230][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.189515][ T5846] bridge_slave_1: entered allmulticast mode
[   61.193392][ T5846] bridge_slave_1: entered promiscuous mode
[   61.209765][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.249103][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.279819][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.298724][ T5842] team0: Port device team_slave_0 added
[   61.303630][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.309923][ T5842] team0: Port device team_slave_1 added
[   61.314106][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.329509][ T5846] team0: Port device team_slave_0 added
[   61.367630][ T5846] team0: Port device team_slave_1 added
[   61.381977][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.384850][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.395640][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.414233][ T5839] team0: Port device team_slave_0 added
[   61.417114][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.419564][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.431586][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.449421][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.452398][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.460478][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.465651][ T5839] team0: Port device team_slave_1 added
[   61.473984][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.476936][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.487553][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.545814][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.548468][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.557483][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.577588][ T5846] hsr_slave_0: entered promiscuous mode
[   61.580935][ T5846] hsr_slave_1: entered promiscuous mode
[   61.585417][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.587853][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.597546][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.612705][ T5842] hsr_slave_0: entered promiscuous mode
[   61.615578][ T5842] hsr_slave_1: entered promiscuous mode
[   61.618124][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   61.619976][ T5842] Cannot create hsr debugfs directory
[   61.697579][ T5839] hsr_slave_0: entered promiscuous mode
[   61.700067][ T5839] hsr_slave_1: entered promiscuous mode
[   61.703325][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   61.705415][ T5839] Cannot create hsr debugfs directory
[   61.964684][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.986808][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   62.003319][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   62.017511][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   62.053458][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   62.062997][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   62.074325][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   62.082424][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   62.165748][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   62.186440][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   62.193189][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   62.206803][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   62.274969][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.280945][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.317786][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   62.326269][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   62.335445][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.338567][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.354546][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.357464][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.361266][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.363594][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.383892][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.386283][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.422891][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.454594][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   62.469858][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.476333][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.516135][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.519228][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.527073][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.530177][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.572194][ T5845] Bluetooth: hci1: command tx timeout
[   62.577600][ T5840] Bluetooth: hci0: command tx timeout
[   62.633639][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.661979][ T5840] Bluetooth: hci2: command tx timeout
[   62.681039][ T5846] veth0_vlan: entered promiscuous mode
[   62.702922][ T5846] veth1_vlan: entered promiscuous mode
[   62.734057][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.744890][ T5846] veth0_macvtap: entered promiscuous mode
[   62.755013][ T5846] veth1_macvtap: entered promiscuous mode
[   62.804206][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.809800][ T5842] veth0_vlan: entered promiscuous mode
[   62.828485][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.839630][ T5842] veth1_vlan: entered promiscuous mode
[   62.854618][ T5867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.862464][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.872458][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.876554][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.888710][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.907948][ T5842] veth0_macvtap: entered promiscuous mode
[   62.929249][ T5842] veth1_macvtap: entered promiscuous mode
[   62.962614][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.987728][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.021067][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.026275][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.029904][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.049003][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.056621][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.062889][ T5839] veth0_vlan: entered promiscuous mode
[   63.066530][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.104301][ T5839] veth1_vlan: entered promiscuous mode
[   63.120208][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.126542][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.200229][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   63.200293][ T5839] veth0_macvtap: entered promiscuous mode
[   63.219205][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.228769][ T5839] veth1_macvtap: entered promiscuous mode
[   63.232704][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.281147][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.287041][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.291337][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.313100][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.344240][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.366149][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.375100][ T5905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12'.
[   63.392343][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.406185][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.507345][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.510483][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.538118][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.550610][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.607114][ T5920] bridge0: port 3(netdevsim2) entered blocking state
[   63.609973][ T5920] bridge0: port 3(netdevsim2) entered disabled state
[   63.615039][ T5920] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[   63.619075][ T5920] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[   63.622966][ T5920] bridge0: port 3(netdevsim2) entered blocking state
[   63.625779][ T5920] bridge0: port 3(netdevsim2) entered forwarding state
[   63.668924][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.907174][ T5945] netlink: 240 bytes leftover after parsing attributes in process `syz.2.27'.
[   64.029962][ T5957] tipc: Can't bind to reserved service type 2
[   64.067863][ T5961] netem: change failed
[   64.072685][ T5959] netlink: 'syz.2.34': attribute type 7 has an invalid length.
[   64.077136][ T5959] netlink: 'syz.2.34': attribute type 8 has an invalid length.
[   64.080108][ T5959] netlink: 'syz.2.34': attribute type 4 has an invalid length.
[   64.089466][ T5959] netlink: 204 bytes leftover after parsing attributes in process `syz.2.34'.
[   64.109658][ T5963] netlink: 5 bytes leftover after parsing attributes in process `syz.1.35'.
[   64.556467][ T6004] syz.1.55 uses obsolete (PF_INET,SOCK_PACKET)
[   64.630580][ T6008] syzkaller0: entered promiscuous mode
[   64.633506][ T6008] syzkaller0: entered allmulticast mode
[   64.660224][ T5840] Bluetooth: hci0: command tx timeout
[   64.663618][ T5840] Bluetooth: hci1: command tx timeout
[   64.732492][ T5845] Bluetooth: hci2: command tx timeout
[   64.983380][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'.
[   65.034320][ T6028] netlink: 'syz.2.67': attribute type 1 has an invalid length.
[   65.530920][ T6034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'.
[   65.628353][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.74'.
[   66.293856][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.101'.
[   66.466579][ T6114] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   66.491416][ T6115] tipc: Started in network mode
[   66.508657][ T6115] tipc: Node identity 5eb8237588c5, cluster identity 4711
[   66.514217][ T6115] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   66.565986][ T6115] tipc: Resetting bearer <eth:syzkaller0>
[   66.597909][ T6112] tipc: Resetting bearer <eth:syzkaller0>
[   66.731991][ T5845] Bluetooth: hci1: command tx timeout
[   66.734360][ T5845] Bluetooth: hci0: command tx timeout
[   66.811828][ T5840] Bluetooth: hci2: command tx timeout
[   66.943810][ T6148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.123'.
[   67.408978][ T6112] tipc: Disabling bearer <eth:syzkaller0>
[   67.581953][ T6159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   67.922248][ T6195] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.720966][ T6249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.163'.
[   68.766321][ T6254] netlink: 424 bytes leftover after parsing attributes in process `syz.2.165'.
[   68.769963][ T6254] netlink: 424 bytes leftover after parsing attributes in process `syz.2.165'.
[   68.811775][ T5840] Bluetooth: hci0: command tx timeout
[   68.814145][ T5840] Bluetooth: hci1: command tx timeout
[   68.892858][ T5840] Bluetooth: hci2: command tx timeout
[   68.910222][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029cee800: rx timeout, send abort
[   69.361850][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'.
[   69.414035][    C0] vcan0: j1939_tp_rxtimer: 0xffff888029cee800: abort rx timeout. Force session deactivation
[   69.838131][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'.
[   69.973501][ T6335] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   69.988273][ T6335] bridge_slave_0: left allmulticast mode
[   69.990248][ T6335] bridge_slave_0: left promiscuous mode
[   70.001314][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.017464][ T6335] bridge_slave_1: left allmulticast mode
[   70.019764][ T6335] bridge_slave_1: left promiscuous mode
[   70.025560][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.048043][ T6335] bond0: (slave bond_slave_0): Releasing backup interface
[   70.064836][ T6335] bond0: (slave bond_slave_1): Releasing backup interface
[   70.085139][ T6345] netlink: 'syz.1.206': attribute type 9 has an invalid length.
[   70.088461][ T6345] netlink: 'syz.1.206': attribute type 6 has an invalid length.
[   70.106370][ T6335] team0: Port device team_slave_0 removed
[   70.107357][ T6348] netlink: 'syz.2.203': attribute type 10 has an invalid length.
[   70.116675][ T6335] team0: Port device team_slave_1 removed
[   70.121349][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.124821][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.135428][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.138476][ T6335] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.185969][ T6335] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[   70.195652][ T6335] netdevsim netdevsim2 netdevsim2: left promiscuous mode
[   70.198347][ T6335] bridge0: port 3(netdevsim2) entered disabled state
[   70.229123][ T6348] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   70.244681][ T6348] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   70.775274][ T6335] syz.2.203 (6335) used greatest stack depth: 19960 bytes left
[   70.775637][    T9] cfg80211: failed to load regulatory.db
[   70.839630][ T6371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.845205][ T6371] syzkaller0: entered promiscuous mode
[   70.851142][ T6371] syzkaller0: entered allmulticast mode
[   70.884161][ T6371] tipc: Resetting bearer <eth:syzkaller0>
[   70.886324][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   70.889382][ T6371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   70.895318][ T6370] tipc: Resetting bearer <eth:syzkaller0>
[   70.932538][ T6370] tipc: Disabling bearer <eth:syzkaller0>
[   71.174102][ T6378] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   71.395852][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.398943][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.647332][ T6393] batman_adv: batadv0: Adding interface: gretap1
[   71.649708][ T6393] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.662426][ T6393] batman_adv: batadv0: Interface activated: gretap1
[   71.929276][ T6414] mac80211_hwsim hwsim6 ": renamed from wlan0 (while UP)
[   72.030709][ T6426] netlink: 'syz.0.244': attribute type 11 has an invalid length.
[   72.210331][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'.
[   72.470619][ T6452] netlink: 'syz.1.253': attribute type 4 has an invalid length.
[   72.504486][ T6452] netlink: 'syz.1.253': attribute type 4 has an invalid length.
[   73.199650][ T6474] netlink: 'syz.2.262': attribute type 2 has an invalid length.
[   73.204704][ T6474] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[   73.208607][ T6474] netlink: 152 bytes leftover after parsing attributes in process `syz.2.262'.
[   73.483293][ T6494] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[   73.493781][ T6494] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[   73.719420][ T6501] netlink: 'syz.1.274': attribute type 10 has an invalid length.
[   73.727194][ T6501] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   73.862181][ T6511] netlink: 'syz.0.277': attribute type 1 has an invalid length.
[   75.755428][ T6582] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   75.781861][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   75.831110][ T6588] veth2: entered allmulticast mode
[   75.852288][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   76.004470][ T6599] Zero length message leads to an empty skb
[   76.033493][ T6599] validate_nla: 1 callbacks suppressed
[   76.033504][ T6599] netlink: 'syz.1.318': attribute type 10 has an invalid length.
[   76.657432][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   77.210944][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'.
[   77.290437][ T5838] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   78.205276][ T6701] netlink: 'syz.2.357': attribute type 1 has an invalid length.
[   78.256991][ T6701] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.261186][ T6701] bond1: (slave bond2): making interface the new active one
[   78.265234][ T6701] bond1: (slave bond2): Enslaving as an active interface with an up link
[   78.289882][ T6701] bond1: (slave gretap2): Enslaving as a backup interface with an up link
[   78.327672][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'.
[   78.336747][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.823201][ T6756] warning: `syz.2.382' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.997371][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'.
[   79.064934][ T6779] team0 (unregistering): Port device team_slave_0 removed
[   79.071862][ T6779] team0 (unregistering): Port device team_slave_1 removed
[   79.124549][ T6780] netlink: 'syz.2.392': attribute type 13 has an invalid length.
[   79.127160][ T6780] netlink: 'syz.2.392': attribute type 17 has an invalid length.
[   79.133689][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'.
[   79.183367][ T6780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   79.200384][ T6786] bridge_slave_0: left allmulticast mode
[   79.205529][ T2329] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   79.209644][ T6786] bridge_slave_0: left promiscuous mode
[   79.228525][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.245460][ T6786] bridge_slave_1: left allmulticast mode
[   79.247853][ T6786] bridge_slave_1: left promiscuous mode
[   79.250046][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.257854][ T6786] bond0: (slave bond_slave_0): Releasing backup interface
[   79.290527][ T6786] bond0: (slave bond_slave_1): Releasing backup interface
[   79.303967][ T6786] team0: Port device team_slave_0 removed
[   79.311076][ T6786] team0: Port device team_slave_1 removed
[   79.314879][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.319450][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.328248][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.331389][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.345542][ T6786] bond0: (slave wlan1): Releasing backup interface
[   79.355038][ T6790] team0: Mode changed to "broadcast"
[   79.384515][ T6794] vlan0: entered promiscuous mode
[   79.404440][ T6794] team0: Port device vlan0 added
[   79.407361][ T6798] tipc: Started in network mode
[   79.409551][ T6798] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   79.413453][ T6798] tipc: Enabled bearer <eth:team0>, priority 0
[   79.448604][ T6804] sctp: [Deprecated]: syz.2.401 (pid 6804) Use of int in max_burst socket option.
[   79.448604][ T6804] Use struct sctp_assoc_value instead
[   79.885934][ T6842] veth0_to_bridge: entered promiscuous mode
[   79.889160][ T6841] veth0_to_bridge: left promiscuous mode
[   80.011966][ T2329] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.062031][ T6860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'.
[   80.348548][ T6900] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   80.417705][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[   80.420907][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[   80.424903][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[   80.537084][  T789] tipc: Node number set to 11578026
[   80.610051][ T6920] sctp: [Deprecated]: syz.0.450 (pid 6920) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.610051][ T6920] Use struct sctp_sack_info instead
[   80.845641][ T6937] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   80.851027][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'.
[   80.867634][ T6937] bridge2: entered promiscuous mode
[   80.870262][ T6937] bridge2: entered allmulticast mode
[   80.877000][ T6937] team0: Port device bridge2 added
[   81.211351][ T6959] netlink: 216 bytes leftover after parsing attributes in process `syz.2.463'.
[   81.699198][ T6994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.780152][ T6994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.838430][ T6994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.884637][ T6994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.930501][ T7010] delete_channel: no stack
[   81.963002][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.973136][ T5838] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.984642][ T5838] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.998650][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.446153][ T7036] netlink: 'syz.1.489': attribute type 1 has an invalid length.
[   82.494647][ T7036] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   82.505649][ T5838] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   82.512199][ T7036] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.537090][ T7036] veth3: entered promiscuous mode
[   82.543574][ T7036] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   82.578172][ T7036] team0: Port device vlan0 removed
[   82.594052][ T7036] team0: Port device bridge2 removed
[   82.597922][ T7036] bond1: (slave ip6gretap1): Removing an active aggregator
[   82.601162][ T7036] bond1: (slave ip6gretap1): Releasing backup interface
[   82.608535][ T7036] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 32:71:cf:17:91:92 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   82.628378][ T7036] bond1: (slave veth3): Releasing backup interface
[   82.636054][   T32] tipc: Resetting bearer <eth:team0>
[   82.706521][ T7050] __nla_validate_parse: 3 callbacks suppressed
[   82.706531][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'.
[   82.713246][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'.
[   82.979063][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'.
[   83.014955][ T7078] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[   83.022609][ T7078] netlink: 'syz.2.508': attribute type 1 has an invalid length.
[   83.109109][ T7094] netlink: 76 bytes leftover after parsing attributes in process `syz.1.517'.
[   83.109664][ T7093] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.516'.
[   83.139995][ T7097] netlink: 'syz.2.518': attribute type 9 has an invalid length.
[   83.145635][ T7097] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.518'.
[   83.399714][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'.
[   83.455336][ T7121] nbd: must specify a size in bytes for the device
[   83.667299][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.533'.
[   83.761023][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'.
[   83.946700][ T7148] netlink: 'syz.0.541': attribute type 1 has an invalid length.
[   84.048341][ T7158] netlink: 'syz.0.546': attribute type 27 has an invalid length.
[   84.124651][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.548'.
[   84.186745][ T7168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.190506][ T7168] syzkaller0: entered promiscuous mode
[   84.194112][ T7168] syzkaller0: entered allmulticast mode
[   84.208027][ T7168] tipc: Resetting bearer <eth:syzkaller0>
[   84.215345][ T7167] tipc: Resetting bearer <eth:syzkaller0>
[   84.224144][ T7167] tipc: Disabling bearer <eth:syzkaller0>
[   84.360851][ T7176] team1: entered promiscuous mode
[   84.363304][ T7176] team1: entered allmulticast mode
[   84.456954][ T7180] tipc: Cannot configure node identity twice
[   84.459645][ T7180] tipc: Cannot configure node identity twice
[   86.215068][ T7292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   86.227754][ T7292] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.441192][ T7312] tap0: tun_chr_ioctl cmd 1074025678
[   86.450943][ T7312] tap0: group set to 0
[   87.610547][ T7379] netlink: 'syz.0.632': attribute type 1 has an invalid length.
[   87.617661][ T7379] NCSI netlink: No device for ifindex 0
[   87.737663][ T7236] Set syz1 is full, maxelem 65536 reached
[   87.770849][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.773463][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.848586][ T7385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.967239][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.971633][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.974550][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.988526][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   88.018320][   T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[   88.381957][ T1270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   88.642598][ T1270] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   89.191811][ T7476] openvswitch: netlink: IPv4 tun info is not correct
[   89.311687][ T7495] __nla_validate_parse: 6 callbacks suppressed
[   89.311697][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[   89.480541][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'.
[   89.550089][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'.
[   89.553986][ T7527] netlink: 'syz.0.682': attribute type 12 has an invalid length.
[   89.564777][ T5838] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.568291][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'.
[   89.571320][ T5838] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.575298][ T7527] netlink: 'syz.0.682': attribute type 12 has an invalid length.
[   89.579441][ T5838] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.588286][ T5838] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   89.875139][ T5838] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   90.063508][ T7599] netlink: 'syz.2.698': attribute type 1 has an invalid length.
[   90.078760][ T7599] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.092309][ T7599] 8021q: adding VLAN 0 to HW filter on device bond3
[   90.094771][ T7599] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[   90.099026][ T7599] bond3: (slave vcan1): Error -95 calling set_mac_address
[   90.146884][ T7603] gretap3: entered promiscuous mode
[   90.150926][ T7603] bond3: (slave gretap3): making interface the new active one
[   90.154554][ T7603] bond3: (slave gretap3): Enslaving as an active interface with an up link
[   90.173135][ T7599] macvlan2: entered promiscuous mode
[   90.174996][ T7599] macvlan2: entered allmulticast mode
[   90.177640][ T7599] bond3: entered promiscuous mode
[   90.179802][ T7599] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   90.184185][ T7599] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3
[   90.188545][ T7599] bond3: left promiscuous mode
[   90.648929][ T7628] netlink: 'syz.0.710': attribute type 1 has an invalid length.
[   92.068424][ T2329] hid-generic 0005:0B57:0009.0001: unknown main item tag 0x0
[   92.080789][ T2329] hid-generic 0005:0B57:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa
[   92.427876][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'.
[   92.495078][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   92.620968][ T7717] netlink: 'syz.0.746': attribute type 28 has an invalid length.
[   92.656164][ T7719] netlink: 128 bytes leftover after parsing attributes in process `syz.0.747'.
[   92.663026][ T3960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.667195][ T3960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.679821][ T7719] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.685004][ T7719] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.020269][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'.
[   93.694917][ T7752] netlink: 'syz.0.760': attribute type 13 has an invalid length.
[   93.955743][ T7768] sock: sock_timestamping_bind_phc: sock not bind to device
[   94.084065][ T5838] nci: nci_rsp_packet: unknown rsp opcode 0x204
[   94.890676][ T7804] bond0: entered promiscuous mode
[   94.898741][ T7804] bond_slave_0: entered promiscuous mode
[   94.901116][ T7804] bond_slave_1: entered promiscuous mode
[   94.908155][ T7804] bond0: left promiscuous mode
[   94.910168][ T7804] bond_slave_0: left promiscuous mode
[   94.912762][ T7804] bond_slave_1: left promiscuous mode
[   94.959114][ T7804] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   95.045589][ T7817] team1: left promiscuous mode
[   95.047707][ T7817] gretap3: left promiscuous mode
[   95.053470][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   95.080184][ T7817] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   95.137658][ T7817] netlink: 68 bytes leftover after parsing attributes in process `syz.2.786'.
[   95.249574][ T7830] vlan2: entered promiscuous mode
[   95.252264][ T7830] bond0: entered promiscuous mode
[   95.254555][ T7830] vlan2: entered allmulticast mode
[   95.256419][ T7830] bond0: entered allmulticast mode
[   95.304845][ T7836] Bluetooth: MGMT ver 1.23
[   95.349443][ T7844] netlink: 56 bytes leftover after parsing attributes in process `syz.0.798'.
[   95.355156][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'.
[   95.359880][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.798'.
[   95.503430][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'.
[   95.507190][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'.
[   95.510814][ T7859] netlink: 'syz.0.805': attribute type 7 has an invalid length.
[   95.625371][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'.
[   95.776594][ T7879] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   95.776665][   T24] IPVS: starting estimator thread 0...
[   95.893371][ T7881] IPVS: using max 46 ests per chain, 110400 per kthread
[   95.923998][ T7889] netlink: 'syz.0.819': attribute type 3 has an invalid length.
[   95.929157][ T7889] syz_tun: entered allmulticast mode
[   95.939179][ T7889] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   95.947138][ T7889] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   96.003754][ T7889] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.009534][ T7889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.033375][ T7888] syz_tun: left allmulticast mode
[   96.036429][ T7889] syz.0.819 (7889) used greatest stack depth: 19512 bytes left
[   96.072714][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'.
[   96.092200][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   96.658813][ T7899] batman_adv: batadv0: Interface deactivated: gretap1
[   96.687084][ T5867] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.705741][ T5867] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.709220][ T5867] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.731936][ T5867] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.037497][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'.
[   97.049451][ T7945] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   97.055645][ T7945] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   97.098437][ T7951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'.
[   97.107633][ T7953] 8021q: VLANs not supported on ipvlan1
[   97.186872][ T7958] netlink: 'syz.0.848': attribute type 1 has an invalid length.
[   97.209959][ T7958] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.235749][ T7958] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.238722][ T7958] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   97.247248][ T7958] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   97.266700][ T7964] netlink: 'syz.2.849': attribute type 3 has an invalid length.
[   97.274086][ T7964] lo: entered allmulticast mode
[   97.281732][ T7964] siw: device registration error -23
[   97.296845][ T7966] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   97.342500][ T7964] 8021q: adding VLAN 0 to HW filter on device team0
[   97.350168][ T7964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.399388][ T7963] lo: left allmulticast mode
[   97.434142][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   97.641773][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   98.013057][ T5838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   98.021633][ T8029] ieee802154 phy0 wpan0: encryption failed: -22
[   98.024136][ T8029] ieee802154 phy0 wpan0: encryption failed: -22
[   98.124221][ T8034] ieee802154 phy0 wpan0: encryption failed: -22
[   98.170805][ T8042] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   98.190085][ T8042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.220591][ T5838] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.235089][ T5838] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.238614][ T5838] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.255223][ T5838] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   98.269919][ T8046] netlink: 'syz.1.885': attribute type 13 has an invalid length.
[   98.399671][ T8056] netlink: 'syz.1.890': attribute type 3 has an invalid length.
[   98.516148][ T8068] bridge_slave_1: left allmulticast mode
[   98.518074][ T8068] bridge_slave_1: left promiscuous mode
[   98.520058][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.528502][ T8068] bridge_slave_0: left allmulticast mode
[   98.530825][ T8068] bridge_slave_0: left promiscuous mode
[   98.536075][ T8070] netlink: 'syz.2.896': attribute type 1 has an invalid length.
[   98.541003][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.053126][ T5838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   99.056804][ T5838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   99.365314][ T8127] IPv6: NLM_F_REPLACE set, but no existing node found!
[   99.569303][ T8107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   99.771752][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  100.107397][ T8187] tipc: Started in network mode
[  100.109155][ T8187] tipc: Node identity ac14140f, cluster identity 4711
[  100.112132][ T8187] tipc: New replicast peer: 255.255.255.255
[  100.114907][ T8187] tipc: Enabled bearer <udp:syz2>, priority 10
[  100.118243][ T8187] tipc: Disabling bearer <udp:syz2>
[  100.127205][ T8189] netlink: 'syz.2.942': attribute type 13 has an invalid length.
[  100.268865][ T8204] __nla_validate_parse: 9 callbacks suppressed
[  100.268879][ T8204] netlink: 3 bytes leftover after parsing attributes in process `syz.0.948'.
[  100.285189][ T8192] tipc: Resetting bearer <eth:team0>
[  100.382354][ T8207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.948'.
[  100.547700][ T8204] batadv1: entered promiscuous mode
[  100.550466][ T8204] batadv1: entered allmulticast mode
[  100.574196][ T5838] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.577947][ T5838] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.582438][ T5838] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.588922][ T5838] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.009627][ T8233] netlink: 48 bytes leftover after parsing attributes in process `syz.1.959'.
[  101.805281][ T8281] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.982'.
[  101.809373][ T8281] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  101.814241][ T8281] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  101.963368][ T8291] netlink: 'syz.2.986': attribute type 11 has an invalid length.
[  101.966708][ T8291] netlink: 'syz.2.986': attribute type 11 has an invalid length.
[  101.979590][ T8291] netlink: 224 bytes leftover after parsing attributes in process `syz.2.986'.
[  102.160782][ T8310] netpci0: tun_chr_ioctl cmd 1074025681
[  103.015425][ T8356] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  103.052119][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  103.055795][ T5840] Bluetooth: hci2: command tx timeout
[  103.161683][ T8367] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1021'.
[  103.728505][ T8390] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1030'.
[  104.333190][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1038'.
[  104.396824][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1039'.
[  104.463628][ T8414] atomic_op ffff88810e26f198 conn xmit_atomic 0000000000000000
[  105.100402][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1045'.
[  105.232443][ T8437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.743676][ T8456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1061'.
[  105.879394][ T8462] netlink: 'syz.0.1064': attribute type 10 has an invalid length.
[  106.176363][ T8481] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  106.525394][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'.
[  106.529529][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'.
[  106.536004][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'.
[  106.539896][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'.
[  106.605514][ T8460] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  107.073725][ T8580] netlink: 'syz.2.1106': attribute type 1 has an invalid length.
[  107.080549][ T8580] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1106'.
[  107.656136][ T8627] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1127'.
[  107.659501][ T8627] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1127'.
[  108.240891][ T8630] team1: left allmulticast mode
[  108.491006][ T8643] netlink: 'syz.1.1134': attribute type 10 has an invalid length.
[  108.494231][ T8643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1134'.
[  108.550450][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'.
[  108.607910][ T8652] netlink: 'syz.0.1137': attribute type 1 has an invalid length.
[  108.727980][ T8664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.769864][ T8664] syzkaller0: entered promiscuous mode
[  108.774208][ T8664] syzkaller0: entered allmulticast mode
[  108.777424][ T8664] tipc: Resetting bearer <eth:syzkaller0>
[  108.787479][ T8662] tipc: Resetting bearer <eth:syzkaller0>
[  109.763277][ T5868] tipc: Node number set to 2886997007
[  109.817998][ T8662] tipc: Disabling bearer <eth:syzkaller0>
[  110.051214][ T8725] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  110.963309][ T8818] __nla_validate_parse: 7 callbacks suppressed
[  110.963319][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'.
[  111.472962][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  111.541780][ T8848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1225'.
[  111.620532][ T8853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1227'.
[  111.638542][ T8853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1227'.
[  111.655093][   T33] audit: type=1800 audit(1754485969.115:2): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1228" name="memory.events" dev="tmpfs" ino=2084 res=0 errno=0
[  111.979967][ T8890] netlink: 'syz.1.1244': attribute type 1 has an invalid length.
[  111.983480][ T8890] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1244'.
[  112.059306][ T8896] sctp: [Deprecated]: syz.2.1247 (pid 8896) Use of int in max_burst socket option.
[  112.059306][ T8896] Use struct sctp_assoc_value instead
[  112.068277][ T8898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  112.073467][ T8898] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  112.126714][ T8902] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1250'.
[  113.090369][ T8949] delete_channel: no stack
[  113.418614][ T8959] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  113.670345][ T8969] netlink: 'syz.2.1271': attribute type 1 has an invalid length.
[  113.757630][ T8975] geneve2: entered promiscuous mode
[  113.759515][ T8975] geneve2: entered allmulticast mode
[  113.763964][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 51457 - 0
[  113.767869][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 40301 - 0
[  113.774264][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 51457 - 0
[  113.780709][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 40301 - 0
[  113.787818][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 51457 - 0
[  113.795419][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 40301 - 0
[  113.801966][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 51457 - 0
[  113.805298][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 40301 - 0
[  114.085125][ T8996] smc: net device bond0 applied user defined pnetid SYZ2
[  114.087672][ T8996] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1284'.
[  114.138338][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'.
[  114.142401][ T9000] netlink: 'syz.1.1285': attribute type 1 has an invalid length.
[  114.168855][ T8996] smc: removing net device bond0 with user defined pnetid SYZ2
[  114.173597][ T8996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.179348][ T8996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.186682][ T8996] bond0 (unregistering): Released all slaves
[  114.213466][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1285'.
[  114.217809][ T9000] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  114.478478][ T9020] netlink: 'syz.0.1294': attribute type 6 has an invalid length.
[  114.483098][ T9020] netlink: 'syz.0.1294': attribute type 5 has an invalid length.
[  114.627932][ T9028] syzkaller1: entered promiscuous mode
[  114.630233][ T9028] syzkaller1: entered allmulticast mode
[  114.778882][ T9034] netlink: 'syz.0.1301': attribute type 1 has an invalid length.
[  114.782362][ T9034] netlink: 'syz.0.1301': attribute type 2 has an invalid length.
[  114.896826][ T9042] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  114.904936][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.909659][ T9042] bond1: (slave bridge1): Releasing active interface
[  114.923044][ T9042] netlink: 'syz.0.1304': attribute type 10 has an invalid length.
[  114.926607][ T9042] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  114.933192][ T9042] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  114.937434][ T9042] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  115.298060][ T9063] openvswitch: netlink: IPv4 tun info is not correct
[  115.603541][ T9082] netlink: 'syz.2.1322': attribute type 1 has an invalid length.
[  115.644231][ T9086] netlink: 'syz.2.1324': attribute type 4 has an invalid length.
[  116.437725][ T9145] __nla_validate_parse: 6 callbacks suppressed
[  116.437740][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'.
[  116.532056][ T9151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1354'.
[  116.535918][ T9153] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1353'.
[  116.732942][ T9163] macvtap0: entered allmulticast mode
[  116.739020][ T9163] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[  116.794001][ T9172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1364'.
[  116.810222][ T9172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1364'.
[  117.938908][ T9230] netlink: 'syz.0.1390': attribute type 4 has an invalid length.
[  117.942360][ T9229] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1389'.
[  117.952609][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1389'.
[  117.956211][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'.
[  117.978900][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1391'.
[  118.132984][ T9248] netlink: 'syz.1.1397': attribute type 9 has an invalid length.
[  118.173818][ T9248] netlink: 'syz.1.1397': attribute type 6 has an invalid length.
[  118.538399][   T47] IPVS: starting estimator thread 0...
[  118.594650][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 51457 - 0
[  118.598501][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 40301 - 0
[  118.606275][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 51457 - 0
[  118.617337][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 40301 - 0
[  118.626353][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 51457 - 0
[  118.630827][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 40301 - 0
[  118.641665][ T9280] IPVS: using max 41 ests per chain, 98400 per kthread
[  118.644800][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 51457 - 0
[  118.649923][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 40301 - 0
[  119.427536][ T9308] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1423'.
[  120.240760][ T9379] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  120.245956][ T9379] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  120.490893][ T9397] macvlan0: entered allmulticast mode
[  120.836377][ T9414] netlink: 'syz.1.1472': attribute type 13 has an invalid length.
[  121.003730][ T9432] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  121.509716][ T9482] Driver unsupported XDP return value 0 on prog  (id 239) dev N/A, expect packet loss!
[  121.631394][ T9487] __nla_validate_parse: 3 callbacks suppressed
[  121.631404][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'.
[  121.636933][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1506'.
[  121.640426][ T9487] netlink: 'syz.0.1506': attribute type 20 has an invalid length.
[  121.798771][ T9492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1507'.
[  122.482380][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'.
[  122.633885][ T9527] ieee802154 phy0 wpan0: encryption failed: -22
[  122.727271][ T9534] syzkaller1: entered promiscuous mode
[  122.729535][ T9534] syzkaller1: entered allmulticast mode
[  122.754432][ T9538] netlink: 'syz.2.1529': attribute type 4 has an invalid length.
[  122.871143][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'.
[  122.898092][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'.
[  122.918352][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1534'.
[  122.922398][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1534'.
[  122.926094][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1534'.
[  122.929645][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1534'.
[  123.088918][ T9572] batadv0: entered promiscuous mode
[  123.092567][ T9572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.097179][ T9570] ip6tnl3: entered promiscuous mode
[  123.259719][ T9587] netlink: 'syz.0.1551': attribute type 1 has an invalid length.
[  123.269606][ T9590] sctp: [Deprecated]: syz.1.1552 (pid 9590) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.269606][ T9590] Use struct sctp_sack_info instead
[  123.279114][ T9587] smc: adding net device bond0 with user defined pnetid SYZ2
[  123.290943][ T9587] netlink: 'syz.0.1551': attribute type 1 has an invalid length.
[  123.637332][ T9621] tc_dump_action: action bad kind
[  123.993267][ T9662] syzkaller0: entered promiscuous mode
[  123.995152][ T9662] syzkaller0: entered allmulticast mode
[  124.000813][   T12] syzkaller0: tun_net_xmit 70
[  124.016424][ T9662] syzkaller0: tun_chr_ioctl cmd 1074025677
[  124.018369][ T9662] syzkaller0: Linktype set failed because interface is up
[  124.239581][ T9684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.242684][ T9684] syzkaller0: entered promiscuous mode
[  124.244704][ T9684] syzkaller0: entered allmulticast mode
[  124.257784][ T9684] tipc: Resetting bearer <eth:syzkaller0>
[  124.260116][ T9684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.267659][ T9683] tipc: Resetting bearer <eth:syzkaller0>
[  124.281913][ T9683] tipc: Disabling bearer <eth:syzkaller0>
[  124.441466][ T9704] netlink: 'syz.1.1605': attribute type 1 has an invalid length.
[  124.471827][ T9704] netlink: 'syz.1.1605': attribute type 1 has an invalid length.
[  124.650400][ T9728] Bluetooth: MGMT ver 1.23
[  125.599797][ T9750] netlink: 'syz.2.1622': attribute type 4 has an invalid length.
[  125.617814][ T9750] netlink: 'syz.2.1622': attribute type 4 has an invalid length.
[  125.872547][ T9772] block nbd0: NBD_DISCONNECT
[  126.065783][ T9798] ieee802154 phy1 wpan1: encryption failed: -22
[  126.536675][ T9844] IPVS: length: 148 != 24
[  127.152896][ T9877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.155911][ T9877] syzkaller0: entered promiscuous mode
[  127.158324][ T9877] syzkaller0: entered allmulticast mode
[  127.175208][ T9877] tipc: Resetting bearer <eth:syzkaller0>
[  127.178438][ T9876] tipc: Resetting bearer <eth:syzkaller0>
[  127.187792][ T9876] tipc: Disabling bearer <eth:syzkaller0>
[  127.327826][ T9887] __nla_validate_parse: 8 callbacks suppressed
[  127.327835][ T9887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'.
[  127.664800][ T9923] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1700'.
[  127.932162][ T9951] sctp: [Deprecated]: syz.2.1713 (pid 9951) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.932162][ T9951] Use struct sctp_sack_info instead
[  128.158889][ T5910] IPVS: starting estimator thread 0...
[  128.215510][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'.
[  128.261729][ T9980] IPVS: using max 43 ests per chain, 103200 per kthread
[  128.683156][T10014] netlink: 'syz.2.1738': attribute type 10 has an invalid length.
[  128.686152][T10014] team0: Cannot enslave team device to itself
[  128.796300][T10018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1740'.
[  129.122514][T10048] trusted_key: syz.2.1754 sent an empty control message without MSG_MORE.
[  129.286656][ T5840] Bluetooth: hci2: link tx timeout
[  129.288788][ T5840] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.296250][ T5845] Bluetooth: hci2: link tx timeout
[  129.298207][ T5845] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.313398][ T5845] Bluetooth: hci2: link tx timeout
[  129.315637][ T5845] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  129.365793][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'.
[  129.608490][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1784'.
[  129.835206][T10116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  129.878601][T10118] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  130.142707][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'.
[  130.208232][T10151] netlink: 'syz.0.1802': attribute type 10 has an invalid length.
[  130.211210][T10151] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1802'.
[  130.215165][T10151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  130.315576][T10159] veth1_to_team: entered allmulticast mode
[  130.466251][T10169] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  130.498795][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'.
[  130.880631][T10197] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  130.893951][T10196] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  130.897117][T10196] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  130.900908][T10196] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  131.042547][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1834'.
[  131.130759][T10225] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  131.374500][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  132.126354][T10288] vlan2: entered promiscuous mode
[  132.128096][T10288] dummy0: entered promiscuous mode
[  132.196472][T10303] openvswitch: netlink: IPv4 tun info is not correct
[  132.285502][T10311] netlink: 'syz.0.1879': attribute type 10 has an invalid length.
[  132.289718][T10311] batadv0: left promiscuous mode
[  132.296398][T10311] netlink: 'syz.0.1879': attribute type 10 has an invalid length.
[  132.308290][T10311] batadv0: entered promiscuous mode
[  132.310045][T10311] batadv0: entered allmulticast mode
[  132.312657][T10311] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  132.516422][T10332] netlink: 'syz.0.1886': attribute type 1 has an invalid length.
[  132.555327][   T33] audit: type=1800 audit(1754485990.015:3): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1887" name=14 dev="tmpfs" ino=3016 res=0 errno=0
[  132.814311][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.214449][T10343] ieee802154 phy1 wpan1: encryption failed: -22
[  133.329381][T10346] __nla_validate_parse: 7 callbacks suppressed
[  133.329392][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'.
[  133.335055][T10346] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  133.338300][T10346] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  133.666760][T10378] netlink: 'syz.1.1906': attribute type 10 has an invalid length.
[  133.670920][T10378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.674292][T10378] batadv0: entered promiscuous mode
[  133.676273][T10378] batadv0: entered allmulticast mode
[  133.678430][T10378] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  133.687038][T10378] netlink: 'syz.1.1906': attribute type 10 has an invalid length.
[  133.689799][T10378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1906'.
[  133.694011][T10378] bond0: (slave batadv0): Releasing backup interface
[  133.698505][T10378] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  135.057829][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'.
[  135.061908][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'.
[  135.377309][T10465] netlink: 'syz.2.1941': attribute type 1 has an invalid length.
[  135.379984][T10465] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1941'.
[  135.383980][T10465] netlink: 'syz.2.1941': attribute type 1 has an invalid length.
[  135.415561][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'.
[  135.540973][T10475] netlink: 'syz.2.1946': attribute type 1 has an invalid length.
[  135.548449][T10475] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1946'.
[  135.651147][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'.
[  135.971656][T10521] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1967'.
[  135.974646][T10521] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1967'.
[  135.987622][T10515] ipvlan2: entered promiscuous mode
[  136.134412][T10524] infiniband syz1: set down
[  136.136954][T10524] infiniband syz1: added batadv_slave_1
[  136.163962][T10524] RDS/IB: syz1: added
[  136.166100][T10524] smc: adding ib device syz1 with port count 1
[  136.168591][T10524] smc:    ib device syz1 port 1 has pnetid 
[  136.169287][T10533] netlink: 'syz.0.1972': attribute type 3 has an invalid length.
[  136.751647][T10561] netlink: 'syz.0.1983': attribute type 1 has an invalid length.
[  136.879254][T10577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.881971][T10577] IPv6: NLM_F_CREATE should be set when creating new route
[  136.884561][T10577] IPv6: NLM_F_CREATE should be set when creating new route
[  136.887119][T10577] IPv6: NLM_F_CREATE should be set when creating new route
[  136.891170][T10577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  136.910788][T10579] bond0: (slave wlan1): Releasing backup interface
[  137.081052][T10591] netlink: 'syz.0.1996': attribute type 1 has an invalid length.
[  137.114015][T10591] 8021q: adding VLAN 0 to HW filter on device bond3
[  137.136375][T10591] bond3: (slave bridge2): making interface the new active one
[  137.140458][T10591] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  137.163191][T10591] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  137.444132][T10618] vti0: entered promiscuous mode
[  137.446068][T10618] vti0: entered allmulticast mode
[  138.021064][T10665] netlink: 'syz.2.2031': attribute type 10 has an invalid length.
[  138.027732][T10665] team0: Port device dummy0 added
[  138.039480][T10665] netlink: 'syz.2.2031': attribute type 10 has an invalid length.
[  138.044303][T10665] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  138.053607][T10665] team0: Failed to send options change via netlink (err -105)
[  138.056462][T10665] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  138.065488][T10665] team0: Port device dummy0 removed
[  138.069474][T10665] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  138.139492][T10677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.143317][T10677] syzkaller0: entered promiscuous mode
[  138.145231][T10677] syzkaller0: entered allmulticast mode
[  138.174321][T10677] tipc: Resetting bearer <eth:syzkaller0>
[  138.177620][T10676] tipc: Resetting bearer <eth:syzkaller0>
[  138.209053][T10676] tipc: Disabling bearer <eth:syzkaller0>
[  138.365633][T10702] netlink: 'syz.2.2047': attribute type 9 has an invalid length.
[  138.369003][T10702] __nla_validate_parse: 4 callbacks suppressed
[  138.369015][T10702] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2047'.
[  138.500467][T10719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2053'.
[  139.372593][T10750] netlink: 'syz.2.2065': attribute type 1 has an invalid length.
[  139.405194][T10752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.408195][T10752] syzkaller0: entered promiscuous mode
[  139.410180][T10752] syzkaller0: entered allmulticast mode
[  139.427008][T10752] tipc: Resetting bearer <eth:syzkaller0>
[  139.431971][T10751] tipc: Resetting bearer <eth:syzkaller0>
[  139.438746][T10751] tipc: Disabling bearer <eth:syzkaller0>
[  139.585767][T10758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2074'.
[  139.739798][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'.
[  139.750383][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'.
[  139.903696][T10793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2085'.
[  140.037494][T10796] ieee802154 phy1 wpan1: encryption failed: -22
[  140.057007][T10793] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  140.395935][T10815] validate_nla: 3 callbacks suppressed
[  140.395946][T10815] netlink: 'syz.2.2092': attribute type 1 has an invalid length.
[  140.400582][T10815] netlink: 'syz.2.2092': attribute type 1 has an invalid length.
[  140.426570][T10819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.724389][T10834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  140.769710][T10838] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2102'.
[  140.956798][T10857] netlink: zone id is out of range
[  141.017548][T10864] gtp0: entered promiscuous mode
[  141.110493][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'.
[  141.487392][T10895] netlink: 'syz.0.2130': attribute type 1 has an invalid length.
[  141.490743][T10895] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2130'.
[  141.674205][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2136'.
[  142.348956][T10949] netlink: 'syz.2.2150': attribute type 83 has an invalid length.
[  142.580236][T10965] netlink: 'syz.2.2158': attribute type 18 has an invalid length.
[  143.274506][T11019] netlink: 'syz.2.2184': attribute type 4 has an invalid length.
[  143.495583][T11037] __nla_validate_parse: 4 callbacks suppressed
[  143.495600][T11037] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2191'.
[  143.669322][T11048] netlink: zone id is out of range
[  143.675049][T11048] netlink: zone id is out of range
[  143.688824][T11048] netlink: zone id is out of range
[  143.700035][T11048] netlink: zone id is out of range
[  143.704094][T11048] netlink: zone id is out of range
[  143.705851][T11048] netlink: zone id is out of range
[  143.707589][T11048] netlink: zone id is out of range
[  143.744189][T11048] : entered promiscuous mode
[  143.899747][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'.
[  143.905118][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2212'.
[  143.908444][T11079] netlink: 'syz.2.2212': attribute type 12 has an invalid length.
[  143.918579][T11079] netlink: 'syz.2.2212': attribute type 14 has an invalid length.
[  143.938969][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2213'.
[  144.273798][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'.
[  144.317499][T11132] netlink: 'syz.2.2236': attribute type 21 has an invalid length.
[  144.329801][T11135] netlink: 'syz.0.2237': attribute type 1 has an invalid length.
[  144.332924][T11135] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2237'.
[  144.433893][T11132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2236'.
[  144.567678][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'.
[  144.572922][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2243'.
[  144.637910][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2247'.
[  145.192214][T11196] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.210178][T11196] bond0: (slave rose0): Enslaving as an active interface with an up link
[  145.989116][T11272] geneve0: entered allmulticast mode
[  146.460757][T11291] "syz.1.2296" (11291) uses obsolete ecb(arc4) skcipher
[  146.648896][T11313] validate_nla: 1 callbacks suppressed
[  146.648912][T11313] netlink: 'syz.1.2305': attribute type 2 has an invalid length.
[  146.666066][T11313] netlink: 'syz.1.2305': attribute type 1 has an invalid length.
[  146.869103][T11337] netlink: 'syz.1.2316': attribute type 8 has an invalid length.
[  147.033396][T11358] netlink: 'syz.2.2327': attribute type 1 has an invalid length.
[  147.036018][T11358] netlink: 'syz.2.2327': attribute type 2 has an invalid length.
[  147.810566][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  147.814587][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  147.817863][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  147.820722][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  147.825771][ T7568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.829269][ T7568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.307265][T11458] __nla_validate_parse: 8 callbacks suppressed
[  149.307276][T11458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2369'.
[  149.377487][T11466] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2373'.
[  149.637948][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'.
[  149.808929][T11497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2388'.
[  149.902761][T11516] netlink: 'syz.0.2396': attribute type 11 has an invalid length.
[  149.905592][T11516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2396'.
[  150.195486][T11539] syzkaller1: entered promiscuous mode
[  150.197864][T11539] syzkaller1: entered allmulticast mode
[  150.538488][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2415'.
[  150.548138][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2415'.
[  150.601976][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'.
[  150.682896][T11580] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.706133][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'.
[  150.714936][T11584] geneve3: entered promiscuous mode
[  150.724627][T11584] geneve3: entered allmulticast mode
[  150.729682][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.733403][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.736640][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.740628][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.843671][T11602] netlink: 'syz.1.2435': attribute type 1 has an invalid length.
[  150.879844][T11606] net_ratelimit: 98 callbacks suppressed
[  150.879856][T11606] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  150.899249][T11602] 8021q: adding VLAN 0 to HW filter on device bond3
[  150.919086][T11607] 8021q: adding VLAN 0 to HW filter on device bond3
[  150.922532][T11607] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  150.928325][T11607] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  150.961316][T11602] gretap1: entered promiscuous mode
[  150.966085][T11602] bond3: (slave gretap1): making interface the new active one
[  150.968903][T11602] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  150.977710][T11602] macvlan2: entered promiscuous mode
[  150.980116][T11602] macvlan2: entered allmulticast mode
[  150.986386][T11602] bond3: entered promiscuous mode
[  150.989234][T11602] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  151.001363][T11602] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  151.016504][T11602] bond3: left promiscuous mode
[  151.637904][T11657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2458'.
[  151.678969][T11660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.681777][T11660] syzkaller0: entered promiscuous mode
[  151.683623][T11660] syzkaller0: entered allmulticast mode
[  151.701157][T11660] sch_fq: defrate 257 ignored.
[  151.708371][T11660] tipc: Resetting bearer <eth:syzkaller0>
[  151.720313][T11659] tipc: Resetting bearer <eth:syzkaller0>
[  151.734399][T11659] tipc: Disabling bearer <eth:syzkaller0>
[  151.909952][T11675] netlink: 'syz.2.2468': attribute type 1 has an invalid length.
[  152.192685][T11695] tipc: Enabling of bearer <ib:pimreg> rejected, failed to enable media
[  152.409532][T11715] syzkaller1: entered promiscuous mode
[  152.412159][T11715] syzkaller1: entered allmulticast mode
[  152.511195][T11725] openvswitch: netlink: IP tunnel TTL not specified.
[  152.568102][T11730] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  152.721200][T11744] netlink: 'syz.1.2500': attribute type 10 has an invalid length.
[  152.724858][T11744] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  152.730582][T11744] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  152.735381][T11744] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  152.738630][T11744] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  152.745097][T11743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  153.373896][T11776] tipc: New replicast peer: 255.255.255.255
[  153.384379][T11776] tipc: Enabled bearer <udp:syz2>, priority 10
[  153.393403][T11776] tipc: Disabling bearer <udp:syz2>
[  154.131983][T11774] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  154.598317][T11825] __nla_validate_parse: 4 callbacks suppressed
[  154.598334][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2531'.
[  154.895125][T11849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2543'.
[  154.911941][T11849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2543'.
[  154.924791][T11847] gretap0: mtu less than device minimum
[  155.023121][T11858] netlink: 'syz.2.2547': attribute type 1 has an invalid length.
[  155.025771][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2547'.
[  155.980635][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'.
[  156.589362][T11918] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2571'.
[  156.779223][T11943] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  156.799761][T11941] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  156.829903][T11953] netlink: 'syz.1.2586': attribute type 1 has an invalid length.
[  156.832745][T11953] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2586'.
[  156.915889][T11960] bridge4: entered allmulticast mode
[  156.929779][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2591'.
[  156.934042][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2591'.
[  157.201257][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'.
[  157.914763][T12037] netlink: 'syz.0.2623': attribute type 2 has an invalid length.
[  159.437954][T12171] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  159.580079][T12187] tipc: Invalid UDP bearer configuration
[  159.580109][T12187] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  159.645466][T12195] __nla_validate_parse: 9 callbacks suppressed
[  159.645483][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'.
[  160.200318][T12229] netlink: 'syz.0.2705': attribute type 11 has an invalid length.
[  160.310758][T12235] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  160.360986][T12237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.367474][T12237] syzkaller0: entered promiscuous mode
[  160.369822][T12237] syzkaller0: entered allmulticast mode
[  160.386845][T12237] tipc: Resetting bearer <eth:syzkaller0>
[  160.392778][T12236] tipc: Resetting bearer <eth:syzkaller0>
[  160.405554][T12236] tipc: Disabling bearer <eth:syzkaller0>
[  160.649064][T12259] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  160.667635][T12258] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  160.769236][T12269] batadv_slave_1: entered promiscuous mode
[  160.774633][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'.
[  160.832398][T12272] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.324551][T12302] openvswitch: netlink: Missing valid actions attribute.
[  161.327052][T12302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.451920][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  161.454450][ T5840] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  161.547716][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'.
[  161.551994][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2747'.
[  161.610857][T12324] netlink: 'syz.2.2749': attribute type 7 has an invalid length.
[  161.614197][T12324] netlink: 'syz.2.2749': attribute type 8 has an invalid length.
[  161.850730][T12348] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  161.873642][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.876955][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.880166][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.891460][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.196293][T12417] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2791'.
[  163.554085][T12447] netlink: 'syz.0.2801': attribute type 4 has an invalid length.
[  163.557434][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2801'.
[  163.954394][T12470] IPVS: length: 163 != 8
[  164.067137][T12476] syz_tun: entered allmulticast mode
[  164.076812][T12475] syz_tun: left allmulticast mode
[  164.184426][T12482] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  164.396737][T12500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2824'.
[  164.506850][T12510] netlink: 'syz.0.2828': attribute type 3 has an invalid length.
[  164.648258][T12528] syz_tun: entered allmulticast mode
[  164.651446][T12527] syz_tun: left allmulticast mode
[  164.666457][T12531] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  164.708139][T12537] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2842'.
[  164.745493][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'.
[  164.754462][T12540] netlink: 'syz.2.2843': attribute type 1 has an invalid length.
[  164.789009][T12540] 8021q: adding VLAN 0 to HW filter on device bond4
[  164.820274][T12540] bond4: (slave veth7): Enslaving as an active interface with a down link
[  164.841389][T12539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.351916][T12582] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2861'.
[  165.708041][T12605] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  166.069977][T12609] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  166.452490][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2876'.
[  166.515585][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2880'.
[  166.515913][T12627] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2879'.
[  166.527821][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2879'.
[  166.533372][T12627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2879'.
[  166.700675][T12645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'.
[  166.989636][T12662] netlink: 'syz.1.2896': attribute type 1 has an invalid length.
[  166.993722][T12662] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2896'.
[  167.555947][T12712] rdma_rxe: rxe_newlink: failed to add lo
[  167.579624][T12712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  167.593753][T12715] geneve4: entered promiscuous mode
[  167.607405][T12712] syz.0.2919 (12712) used greatest stack depth: 18912 bytes left
[  167.684412][T12723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.688664][T12723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.809706][T12723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.836181][T12723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.919621][T12723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  167.931636][T12723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.044063][T12723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  168.058210][T12723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.160896][ T5867] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  168.164302][ T5867] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.187428][ T5867] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  168.190314][ T5867] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.206126][ T5867] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  168.208802][ T5867] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.269393][ T5867] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  168.276116][ T5867] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.445152][T12760] team0: Port device gtp1 added
[  168.961439][T12807] netlink: 'syz.1.2959': attribute type 1 has an invalid length.
[  168.980368][T12809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.379919][T12846] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  169.385532][T12846] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  169.388467][T12846] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  169.416103][T12846] tipc: Resetting bearer <eth:syzkaller0>
[  170.399394][T12896] netlink: 'syz.2.2997': attribute type 7 has an invalid length.
[  170.437281][T12898] __nla_validate_parse: 5 callbacks suppressed
[  170.437293][T12898] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2998'.
[  170.444867][T12898] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2998'.
[  170.453293][T12898] rdma_rxe: rxe_newlink: failed to add lo
[  170.475889][T12898] 8021q: adding VLAN 0 to HW filter on device team0
[  170.482644][T12898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.512171][ T2329] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.522959][T12898] syz.2.2998 (12898) used greatest stack depth: 18720 bytes left
[  170.551845][ T5867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.782046][T12907] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3002'.
[  170.832307][ T2329] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  170.912716][T12913] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  171.044145][T12913] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  171.129151][T12913] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  171.207417][T12913] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  171.315541][ T5850] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  171.336609][ T5850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  171.346757][ T5850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  171.368323][ T5850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  171.545014][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'.
[  171.580300][T12951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  171.621902][ T5867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  171.624652][ T5867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  171.711380][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'.
[  171.843018][T12971] syzkaller0: entered promiscuous mode
[  171.845614][T12971] syzkaller0: entered allmulticast mode
[  171.857056][T12971] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  171.909144][T12979] netlink: 'syz.1.3032': attribute type 2 has an invalid length.
[  171.914955][T12979] netlink: 'syz.1.3032': attribute type 1 has an invalid length.
[  172.033991][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'.
[  172.164623][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  172.224852][T13008] bond3: (slave bridge2): Releasing active interface
[  172.304909][T13016] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3048'.
[  172.569385][T13042] netlink: 'syz.0.3060': attribute type 6 has an invalid length.
[  172.626411][T13047] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  172.654731][T13045] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  172.960100][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'.
[  172.964293][T13067] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3070'.
[  173.038030][T13073] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  173.346595][T13088] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  173.350208][T13088] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  173.526161][T13102] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  173.635420][T13114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3092'.
[  173.639058][T13114] netlink: 'syz.2.3092': attribute type 7 has an invalid length.
[  173.644164][T13114] netlink: 'syz.2.3092': attribute type 8 has an invalid length.
[  173.669319][T13116] macsec1: entered promiscuous mode
[  173.674409][T13116] macvlan1: entered promiscuous mode
[  173.677103][T13116] macsec1: entered allmulticast mode
[  173.679520][T13116] macvlan1: entered allmulticast mode
[  173.693373][T13116] macvlan1: left allmulticast mode
[  173.695166][T13116] macvlan1: left promiscuous mode
[  173.709176][T13118] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.713379][T13118] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.800773][T13118] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.818770][T13118] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.884600][T13131] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  173.892499][T13118] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.896986][T13118] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.947693][T13118] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.952561][T13118] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.472482][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  174.476139][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.509010][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  174.513020][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.528193][ T5867] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  174.532006][ T5867] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.548655][ T5867] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  174.552683][ T5867] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.693193][T13163] IPVS: Scheduler module ip_vs_sip not found
[  175.171343][T13221] netlink: 'syz.2.3135': attribute type 2 has an invalid length.
[  175.417617][T13244] syzkaller1: entered promiscuous mode
[  175.424369][T13244] syzkaller1: entered allmulticast mode
[  175.513868][T13251] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  175.531653][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  175.547005][T13251] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  175.611973][T13251] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  175.655640][T13251] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  175.712558][ T5850] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  175.724892][ T5850] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  175.737065][ T5850] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  175.747765][ T5850] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  175.821318][T13278] __nla_validate_parse: 5 callbacks suppressed
[  175.821334][T13278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3162'.
[  175.914656][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3168'.
[  176.389282][T13351] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.455580][T13357] netlink: 'syz.0.3197': attribute type 4 has an invalid length.
[  176.643539][T13366] bridge5: the hash_elasticity option has been deprecated and is always 16
[  176.680880][T13367] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  177.250818][T13379] veth0_to_bridge: entered promiscuous mode
[  177.255124][T13379] veth0_to_bridge: left promiscuous mode
[  177.407859][T13358] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  177.769231][T13394] netlink: 'syz.0.3213': attribute type 3 has an invalid length.
[  177.772326][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3213'.
[  177.824900][T13396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3214'.
[  177.827944][T13396] netlink: 'syz.0.3214': attribute type 7 has an invalid length.
[  177.830625][T13396] netlink: 'syz.0.3214': attribute type 8 has an invalid length.
[  177.836555][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'.
[  177.857813][T13396] gretap0: entered promiscuous mode
[  177.870913][T13396] gretap0: left promiscuous mode
[  177.961189][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3217'.
[  178.113936][T13407] syzkaller0: entered promiscuous mode
[  178.116370][T13407] syzkaller0: entered allmulticast mode
[  178.522450][T13446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3236'.
[  178.728170][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'.
[  178.737158][T13471] smc: removing ib device syz1
[  178.828179][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'.
[  178.945559][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3255'.
[  179.008741][T13488] netlink: 'syz.2.3255': attribute type 1 has an invalid length.
[  179.771064][T13556] netlink: 'syz.1.3288': attribute type 1 has an invalid length.
[  180.868364][T13603] __nla_validate_parse: 3 callbacks suppressed
[  180.868381][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3307'.
[  180.876181][T13603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3307'.
[  181.147439][T13625] netlink: 'syz.2.3318': attribute type 1 has an invalid length.
[  181.157659][T13625] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3318'.
[  181.397416][T13646] netlink: 'syz.1.3328': attribute type 21 has an invalid length.
[  181.449201][T13655] netlink: 'syz.0.3332': attribute type 2 has an invalid length.
[  181.460310][T13655] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3332'.
[  181.474145][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3333'.
[  181.544612][T13663] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  181.593070][T13662] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  181.722660][T13680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3345'.
[  181.870933][T13698] syzkaller1: entered promiscuous mode
[  181.874655][T13698] syzkaller1: entered allmulticast mode
[  182.336870][T13718] netlink: 'syz.2.3358': attribute type 15 has an invalid length.
[  182.430289][T13724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'.
[  182.982596][T13775] netlink: 'syz.1.3368': attribute type 1 has an invalid length.
[  183.017234][T13781] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3367'.
[  183.371764][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  183.478334][T13825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3382'.
[  183.482791][T13825] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  183.738721][T13851] netlink: 'syz.2.3395': attribute type 1 has an invalid length.
[  183.783811][T13851] bond5: entered promiscuous mode
[  183.785629][T13851] bond5: entered allmulticast mode
[  183.787672][T13851] 8021q: adding VLAN 0 to HW filter on device bond5
[  183.812005][T13851] bridge5: entered promiscuous mode
[  183.814352][T13851] bridge5: entered allmulticast mode
[  183.822520][T13851] bond5: (slave bridge5): Enslaving as a backup interface with an up link
[  183.902503][ T5838] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  183.970710][ T5838] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.981562][ T5838] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.991644][ T5838] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.999702][ T5838] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.013358][ T5838] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.017260][ T5838] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.024244][T13869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3403'.
[  184.024827][ T5838] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  184.030884][ T5838] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  184.193744][T13883] openvswitch: netlink: IP tunnel dst address not specified
[  184.611409][T13912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.619739][T13912] syzkaller0: entered promiscuous mode
[  184.622954][T13912] syzkaller0: entered allmulticast mode
[  184.643851][T13912] tipc: Resetting bearer <eth:syzkaller0>
[  184.649119][T13910] tipc: Resetting bearer <eth:syzkaller0>
[  184.669168][T13910] tipc: Disabling bearer <eth:syzkaller0>
[  184.828009][T13922] batadv0: left promiscuous mode
[  184.830283][T13922] batadv0: left allmulticast mode
[  184.836677][T13922] veth1_to_team: left allmulticast mode
[  184.862084][T13922] bridge4: left allmulticast mode
[  184.938551][T13932] macvlan0: left allmulticast mode
[  185.243465][T13963] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  185.245947][T13963] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  186.091745][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  186.507368][T14021] __nla_validate_parse: 3 callbacks suppressed
[  186.507381][T14021] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3473'.
[  186.550646][T14023] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3474'.
[  187.164767][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3486'.
[  187.278499][T14056] netlink: 'syz.1.3490': attribute type 4 has an invalid length.
[  187.285367][T14056] netlink: 'syz.1.3490': attribute type 4 has an invalid length.
[  187.334452][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3493'.
[  187.459888][T14081] bond3: (slave gretap1): Releasing active interface
[  187.487008][T14081] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  187.571004][T14090] delete_channel: no stack
[  187.737089][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3503'.
[  188.132291][T14126] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  188.985269][T14125] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  189.065008][T14165] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3540'.
[  189.240901][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3550'.
[  189.244259][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3550'.
[  189.247361][T14188] netlink: 'syz.1.3550': attribute type 18 has an invalid length.
[  189.280341][T14190] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  189.380152][T14192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3552'.
[  189.463122][T14198] netlink: 'syz.1.3555': attribute type 9 has an invalid length.
[  189.582660][T14208] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[  189.597823][T14208] 8021q: adding VLAN 0 to HW filter on device bond4
[  189.683829][T14215] netlink: 'syz.1.3563': attribute type 11 has an invalid length.
[  189.686653][T14215] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3563'.
[  189.714908][T14217] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.718763][T14217] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  189.721364][T14217] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  189.873992][T14227] netlink: 'syz.1.3569': attribute type 72 has an invalid length.
[  189.923715][T14231] netlink: 'syz.0.3571': attribute type 1 has an invalid length.
[  189.926667][T14231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.077222][T14246] batman_adv: batadv0: Adding interface: ipvlan3
[  190.080205][T14246] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.096719][T14246] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  190.160012][T14259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.275779][T14269] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  190.347333][T14275] lo speed is unknown, defaulting to 1000
[  190.349381][T14275] lo speed is unknown, defaulting to 1000
[  190.353255][T14275] lo speed is unknown, defaulting to 1000
[  190.360643][T14275] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  190.383104][T14275] lo speed is unknown, defaulting to 1000
[  190.388033][T14275] lo speed is unknown, defaulting to 1000
[  190.390756][T14275] lo speed is unknown, defaulting to 1000
[  190.414352][T14275] ipvlan4: entered promiscuous mode
[  190.430036][T14283] netlink: 'syz.0.3594': attribute type 3 has an invalid length.
[  192.161070][T14381] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  192.572547][T14413] netlink: 'syz.0.3645': attribute type 1 has an invalid length.
[  192.575161][T14413] netlink: 'syz.0.3645': attribute type 4 has an invalid length.
[  192.579838][T14413] __nla_validate_parse: 9 callbacks suppressed
[  192.579846][T14413] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.3645'.
[  192.716781][T14422] IPv6: NLM_F_REPLACE set, but no existing node found!
[  192.762396][T14425] netlink: 'syz.0.3649': attribute type 2 has an invalid length.
[  192.774508][T14425] k*]: entered promiscuous mode
[  192.836015][T14425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.890134][T14425] veth0_to_team: entered promiscuous mode
[  192.893269][T14425] veth0_to_team: entered allmulticast mode
[  192.951363][T14435] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  193.050686][T14443] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  193.099145][T14440] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  193.218777][T14446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3653'.
[  193.617125][T14468] batadv0: left promiscuous mode
[  193.619034][T14468] batadv0: left allmulticast mode
[  193.624699][T14468] batadv_slave_1: left promiscuous mode
[  193.628415][T14468] vlan0: left promiscuous mode
[  193.631424][T14468] geneve0: left allmulticast mode
[  193.644787][T14468] bridge2: left promiscuous mode
[  193.646655][T14468] bridge2: left allmulticast mode
[  193.648860][T14468] veth3: left promiscuous mode
[  193.650910][T14468] vlan2: left promiscuous mode
[  193.653477][T14468] bond0: left promiscuous mode
[  193.655495][T14468] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  193.658887][T14468] vlan2: left allmulticast mode
[  193.661167][T14468] bond0: left allmulticast mode
[  193.665644][T14468] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  193.669658][T14468] ip6tnl3: left promiscuous mode
[  193.673863][T14468] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  193.677097][T14468] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  193.688951][T14468] gretap1: left promiscuous mode
[  193.691642][ T5213] Bluetooth: hci2: command 0x0406 tx timeout
[  193.714113][T14468] ipvlan4: left promiscuous mode
[  193.723480][ T1270] lo speed is unknown, defaulting to 1000
[  193.726461][ T1270] syz1: Port: 1 Link DOWN
[  193.728670][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  193.733554][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  193.737243][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  193.740979][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  194.137208][T14511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3683'.
[  194.141213][T14511] netlink: 'syz.2.3683': attribute type 2 has an invalid length.
[  194.149272][T14511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3683'.
[  194.149615][T14506] lo speed is unknown, defaulting to 1000
[  194.173834][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  194.404367][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'.
[  194.408239][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'.
[  194.459150][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3693'.
[  194.466086][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3693'.
[  195.072222][T14572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.246696][T14589] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  195.287512][T14588] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  195.352711][T14595] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  195.384103][T14594] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  195.529646][T14605] geneve3: entered promiscuous mode
[  195.535122][ T5838] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.553299][ T5838] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.556904][ T5838] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.560424][ T5838] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.598385][T14613] netlink: 'syz.1.3729': attribute type 10 has an invalid length.
[  195.680227][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'.
[  195.685460][T14619] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  195.810538][T14640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3742'.
[  196.196236][T14689] netlink: 'syz.2.3764': attribute type 1 has an invalid length.
[  196.241012][T14685] veth0_to_team: left promiscuous mode
[  196.243846][T14685] veth0_to_team: left allmulticast mode
[  196.280800][T14697] netlink: 'syz.0.3768': attribute type 10 has an invalid length.
[  196.285745][T14697] syz_tun: entered promiscuous mode
[  196.389859][T14707] syzkaller0: entered promiscuous mode
[  196.396204][T14707] syzkaller0: entered allmulticast mode
[  197.383658][T14710] netlink: 'syz.0.3774': attribute type 2 has an invalid length.
[  197.490482][T14744] sit0: entered allmulticast mode
[  197.493572][T14744] macvlan0: entered allmulticast mode
[  197.513849][T14744] macvlan0 (unregistering): left allmulticast mode
[  197.626274][T14756] __nla_validate_parse: 2 callbacks suppressed
[  197.626286][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3797'.
[  197.989879][T14784] geneve2: left promiscuous mode
[  197.993489][T14784] geneve2: left allmulticast mode
[  197.999783][T14784] vti0: left promiscuous mode
[  198.006172][T14784] vti0: left allmulticast mode
[  198.008818][T14784] gtp0: left promiscuous mode
[  198.010741][T14784] geneve3: left promiscuous mode
[  198.013730][T14784] geneve3: left allmulticast mode
[  198.017051][T14784] geneve4: left promiscuous mode
[  198.019630][T14784] bond5: left promiscuous mode
[  198.021242][T14784] bridge5: left promiscuous mode
[  198.032072][T14784] bond5: left allmulticast mode
[  198.035052][T14784] bridge5: left allmulticast mode
[  198.183768][T14806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3819'.
[  198.715667][T14830] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  198.869108][T14832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3831'.
[  199.177716][T14862] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  199.181155][T14861] IPVS: stopping backup sync thread 14862 ...
[  199.186059][T14861] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3845'.
[  199.193869][T14861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3845'.
[  199.196792][T14861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3845'.
[  199.237004][T14866] netlink: 'syz.0.3847': attribute type 8 has an invalid length.
[  199.267441][T14869] tipc: Trying to set illegal importance in message
[  199.337861][T14875] ==================================================================
[  199.340780][T14875] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  199.343588][T14875] Read of size 4 at addr ffff888029c240c4 by task syz.0.3852/14875
[  199.346960][T14875] 
[  199.347789][T14875] CPU: 0 UID: 0 PID: 14875 Comm: syz.0.3852 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  199.347801][T14875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.347808][T14875] Call Trace:
[  199.347811][T14875]  <TASK>
[  199.347815][T14875]  dump_stack_lvl+0x189/0x250
[  199.347828][T14875]  ? __kasan_check_byte+0x12/0x40
[  199.347843][T14875]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.347850][T14875]  ? lock_release+0x4b/0x3e0
[  199.347864][T14875]  ? __virt_addr_valid+0x4a5/0x5c0
[  199.347875][T14875]  print_report+0xca/0x240
[  199.347888][T14875]  ? xfrm_alloc_spi+0x570/0xf30
[  199.347896][T14875]  kasan_report+0x118/0x150
[  199.347907][T14875]  ? xfrm_alloc_spi+0x570/0xf30
[  199.347916][T14875]  xfrm_alloc_spi+0x570/0xf30
[  199.347924][T14875]  ? xfrm_alloc_spi+0x2a0/0xf30
[  199.347934][T14875]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  199.347941][T14875]  ? xfrm_find_acq+0x87/0xa0
[  199.347950][T14875]  xfrm_alloc_userspi+0x70b/0xc90
[  199.347959][T14875]  ? __pfx_aa_get_newest_label+0x10/0x10
[  199.347973][T14875]  ? apparmor_capable+0x137/0x1b0
[  199.347980][T14875]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  199.347989][T14875]  ? __nla_parse+0x40/0x60
[  199.347998][T14875]  xfrm_user_rcv_msg+0x7a3/0xab0
[  199.348008][T14875]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  199.348022][T14875]  ? __pfx___mutex_trylock_common+0x10/0x10
[  199.348030][T14875]  ? rcu_is_watching+0x15/0xb0
[  199.348041][T14875]  ? trace_contention_end+0x39/0x120
[  199.348048][T14875]  ? __mutex_lock+0x335/0x1340
[  199.348062][T14875]  netlink_rcv_skb+0x208/0x470
[  199.348074][T14875]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  199.348082][T14875]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.348094][T14875]  ? netlink_deliver_tap+0x2e/0x1b0
[  199.348104][T14875]  ? netlink_deliver_tap+0x2e/0x1b0
[  199.348114][T14875]  xfrm_netlink_rcv+0x79/0x90
[  199.348123][T14875]  netlink_unicast+0x82f/0x9e0
[  199.348133][T14875]  ? __pfx_netlink_unicast+0x10/0x10
[  199.348142][T14875]  ? netlink_sendmsg+0x642/0xb30
[  199.348153][T14875]  ? skb_put+0x11b/0x210
[  199.348160][T14875]  netlink_sendmsg+0x805/0xb30
[  199.348172][T14875]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.348183][T14875]  ? aa_sock_msg_perm+0x94/0x160
[  199.348192][T14875]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.348202][T14875]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.348214][T14875]  __sock_sendmsg+0x21c/0x270
[  199.348224][T14875]  ____sys_sendmsg+0x505/0x830
[  199.348233][T14875]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.348241][T14875]  ? import_iovec+0x74/0xa0
[  199.348252][T14875]  ___sys_sendmsg+0x21f/0x2a0
[  199.348259][T14875]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.348294][T14875]  ? __fget_files+0x2a/0x420
[  199.348305][T14875]  ? __fget_files+0x3a0/0x420
[  199.348314][T14875]  __x64_sys_sendmsg+0x19b/0x260
[  199.348323][T14875]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.348333][T14875]  ? rcu_is_watching+0x15/0xb0
[  199.348346][T14875]  ? do_syscall_64+0xbe/0x3b0
[  199.348359][T14875]  do_syscall_64+0xfa/0x3b0
[  199.348370][T14875]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.348381][T14875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.348389][T14875]  ? exc_page_fault+0x9f/0xf0
[  199.348398][T14875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.348405][T14875] RIP: 0033:0x7fd237b8ebe9
[  199.348413][T14875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.348420][T14875] RSP: 002b:00007fd23893a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.348429][T14875] RAX: ffffffffffffffda RBX: 00007fd237db5fa0 RCX: 00007fd237b8ebe9
[  199.348434][T14875] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003
[  199.348439][T14875] RBP: 00007fd237c11e19 R08: 0000000000000000 R09: 0000000000000000
[  199.348443][T14875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.348448][T14875] R13: 00007fd237db6038 R14: 00007fd237db5fa0 R15: 00007ffc3c6e9088
[  199.348456][T14875]  </TASK>
[  199.348458][T14875] 
[  199.492940][T14875] Allocated by task 6849:
[  199.494698][T14875]  kasan_save_track+0x3e/0x80
[  199.496432][T14875]  __kasan_slab_alloc+0x6c/0x80
[  199.498621][T14875]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  199.500809][T14875]  xfrm_state_alloc+0x24/0x2f0
[  199.502493][T14875]  __find_acq_core+0x8a7/0x1c00
[  199.504239][T14875]  xfrm_find_acq+0x78/0xa0
[  199.505934][T14875]  xfrm_alloc_userspi+0x6b3/0xc90
[  199.508152][T14875]  xfrm_user_rcv_msg+0x7a3/0xab0
[  199.510356][T14875]  netlink_rcv_skb+0x208/0x470
[  199.512404][T14875]  xfrm_netlink_rcv+0x79/0x90
[  199.514479][T14875]  netlink_unicast+0x82f/0x9e0
[  199.516483][T14875]  netlink_sendmsg+0x805/0xb30
[  199.518576][T14875]  __sock_sendmsg+0x21c/0x270
[  199.520571][T14875]  ____sys_sendmsg+0x505/0x830
[  199.522372][T14875]  ___sys_sendmsg+0x21f/0x2a0
[  199.523959][T14875]  __x64_sys_sendmsg+0x19b/0x260
[  199.525846][T14875]  do_syscall_64+0xfa/0x3b0
[  199.527404][T14875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.529343][T14875] 
[  199.530122][T14875] Freed by task 5868:
[  199.531676][T14875]  kasan_save_track+0x3e/0x80
[  199.533763][T14875]  kasan_save_free_info+0x46/0x50
[  199.535942][T14875]  __kasan_slab_free+0x62/0x70
[  199.538000][T14875]  kmem_cache_free+0x18f/0x400
[  199.540106][T14875]  xfrm_state_gc_task+0x518/0x6a0
[  199.542308][T14875]  process_scheduled_works+0xae1/0x17b0
[  199.544724][T14875]  worker_thread+0x8a0/0xda0
[  199.546769][T14875]  kthread+0x711/0x8a0
[  199.548560][T14875]  ret_from_fork+0x3fc/0x770
[  199.550165][T14875]  ret_from_fork_asm+0x1a/0x30
[  199.551803][T14875] 
[  199.552841][T14875] The buggy address belongs to the object at ffff888029c24000
[  199.552841][T14875]  which belongs to the cache xfrm_state of size 928
[  199.558313][T14875] The buggy address is located 196 bytes inside of
[  199.558313][T14875]  freed 928-byte region [ffff888029c24000, ffff888029c243a0)
[  199.564061][T14875] 
[  199.565134][T14875] The buggy address belongs to the physical page:
[  199.567747][T14875] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029c25680 pfn:0x29c24
[  199.571772][T14875] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  199.575417][T14875] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  199.579099][T14875] page_type: f5(slab)
[  199.580829][T14875] raw: 00fff00000000240 ffff88801af9e640 ffff88801af9d648 ffffea0000ab9010
[  199.584555][T14875] raw: ffff888029c25680 00000000000e0000 00000000f5000000 0000000000000000
[  199.588256][T14875] head: 00fff00000000240 ffff88801af9e640 ffff88801af9d648 ffffea0000ab9010
[  199.592009][T14875] head: ffff888029c25680 00000000000e0000 00000000f5000000 0000000000000000
[  199.595736][T14875] head: 00fff00000000002 ffffea0000a70901 00000000ffffffff 00000000ffffffff
[  199.599401][T14875] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  199.603016][T14875] page dumped because: kasan: bad access detected
[  199.605789][T14875] page_owner tracks the page as allocated
[  199.608253][T14875] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6663, tgid 6662 (syz.1.343), ts 77135118177, free_ts 33071650172
[  199.616251][T14875]  post_alloc_hook+0x240/0x2a0
[  199.618397][T14875]  get_page_from_freelist+0x21e4/0x22c0
[  199.620764][T14875]  __alloc_frozen_pages_noprof+0x181/0x370
[  199.623325][T14875]  alloc_pages_mpol+0x232/0x4a0
[  199.625458][T14875]  allocate_slab+0x8a/0x3b0
[  199.627454][T14875]  ___slab_alloc+0xbfc/0x1480
[  199.629516][T14875]  kmem_cache_alloc_noprof+0x283/0x3c0
[  199.631880][T14875]  xfrm_state_alloc+0x24/0x2f0
[  199.633981][T14875]  xfrm_state_find+0x37d4/0x5400
[  199.635993][T14875]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  199.638371][T14875]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  199.640212][T14875]  ndisc_send_skb+0x41f/0x1440
[  199.641908][T14875]  addrconf_rs_timer+0x369/0x670
[  199.643614][T14875]  call_timer_fn+0x17e/0x5f0
[  199.645305][T14875]  __run_timer_base+0x61a/0x860
[  199.647258][T14875]  run_timer_softirq+0xb7/0x180
[  199.649396][T14875] page last free pid 0 tgid 0 stack trace:
[  199.651888][T14875]  __free_frozen_pages+0xc71/0xe70
[  199.654088][T14875]  rcu_core+0xca8/0x1710
[  199.655914][T14875]  handle_softirqs+0x286/0x870
[  199.657931][T14875]  __irq_exit_rcu+0xca/0x1f0
[  199.659940][T14875]  irq_exit_rcu+0x9/0x30
[  199.661806][T14875]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  199.664300][T14875]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  199.666885][T14875] 
[  199.667948][T14875] Memory state around the buggy address:
[  199.669954][T14875]  ffff888029c23f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  199.673401][T14875]  ffff888029c24000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.676842][T14875] >ffff888029c24080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.680295][T14875]                                            ^
[  199.682836][T14875]  ffff888029c24100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.686232][T14875]  ffff888029c24180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  199.689633][T14875] ==================================================================
[  199.693362][T14875] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  199.696490][T14875] CPU: 0 UID: 0 PID: 14875 Comm: syz.0.3852 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f-dirty #0 PREEMPT(full) 
[  199.701784][T14875] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.706188][T14875] Call Trace:
[  199.707684][T14875]  <TASK>
[  199.709000][T14875]  dump_stack_lvl+0x99/0x250
[  199.711060][T14875]  ? __asan_memcpy+0x40/0x70
[  199.713120][T14875]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.715417][T14875]  ? __pfx__printk+0x10/0x10
[  199.717471][T14875]  panic+0x2db/0x790
[  199.719197][T14875]  ? __pfx_panic+0x10/0x10
[  199.721191][T14875]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  199.723793][T14875]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  199.726408][T14875]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  199.729161][T14875]  ? print_memory_metadata+0x314/0x400
[  199.731556][T14875]  ? xfrm_alloc_spi+0x570/0xf30
[  199.733714][T14875]  check_panic_on_warn+0x89/0xb0
[  199.735913][T14875]  ? xfrm_alloc_spi+0x570/0xf30
[  199.738055][T14875]  end_report+0x78/0x160
[  199.739909][T14875]  kasan_report+0x129/0x150
[  199.741928][T14875]  ? xfrm_alloc_spi+0x570/0xf30
[  199.744074][T14875]  xfrm_alloc_spi+0x570/0xf30
[  199.746154][T14875]  ? xfrm_alloc_spi+0x2a0/0xf30
[  199.748330][T14875]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  199.750587][T14875]  ? xfrm_find_acq+0x87/0xa0
[  199.752625][T14875]  xfrm_alloc_userspi+0x70b/0xc90
[  199.754857][T14875]  ? __pfx_aa_get_newest_label+0x10/0x10
[  199.757313][T14875]  ? apparmor_capable+0x137/0x1b0
[  199.759522][T14875]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  199.761960][T14875]  ? __nla_parse+0x40/0x60
[  199.763969][T14875]  xfrm_user_rcv_msg+0x7a3/0xab0
[  199.766155][T14875]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  199.768568][T14875]  ? __pfx___mutex_trylock_common+0x10/0x10
[  199.771168][T14875]  ? rcu_is_watching+0x15/0xb0
[  199.773304][T14875]  ? trace_contention_end+0x39/0x120
[  199.775621][T14875]  ? __mutex_lock+0x335/0x1340
[  199.777730][T14875]  netlink_rcv_skb+0x208/0x470
[  199.779358][T14875]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  199.781188][T14875]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  199.782907][T14875]  ? netlink_deliver_tap+0x2e/0x1b0
[  199.784722][T14875]  ? netlink_deliver_tap+0x2e/0x1b0
[  199.786503][T14875]  xfrm_netlink_rcv+0x79/0x90
[  199.788125][T14875]  netlink_unicast+0x82f/0x9e0
[  199.789677][T14875]  ? __pfx_netlink_unicast+0x10/0x10
[  199.791487][T14875]  ? netlink_sendmsg+0x642/0xb30
[  199.793188][T14875]  ? skb_put+0x11b/0x210
[  199.794659][T14875]  netlink_sendmsg+0x805/0xb30
[  199.796451][T14875]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.798751][T14875]  ? aa_sock_msg_perm+0x94/0x160
[  199.800501][T14875]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.802325][T14875]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.804198][T14875]  __sock_sendmsg+0x21c/0x270
[  199.806173][T14875]  ____sys_sendmsg+0x505/0x830
[  199.807815][T14875]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.809590][T14875]  ? import_iovec+0x74/0xa0
[  199.811124][T14875]  ___sys_sendmsg+0x21f/0x2a0
[  199.812786][T14875]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.814933][T14875]  ? __fget_files+0x2a/0x420
[  199.816881][T14875]  ? __fget_files+0x3a0/0x420
[  199.818863][T14875]  __x64_sys_sendmsg+0x19b/0x260
[  199.820937][T14875]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.823242][T14875]  ? rcu_is_watching+0x15/0xb0
[  199.825292][T14875]  ? do_syscall_64+0xbe/0x3b0
[  199.827289][T14875]  do_syscall_64+0xfa/0x3b0
[  199.829167][T14875]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.831354][T14875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.833968][T14875]  ? exc_page_fault+0x9f/0xf0
[  199.835631][T14875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.838128][T14875] RIP: 0033:0x7fd237b8ebe9
[  199.839898][T14875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.847789][T14875] RSP: 002b:00007fd23893a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.851305][T14875] RAX: ffffffffffffffda RBX: 00007fd237db5fa0 RCX: 00007fd237b8ebe9
[  199.854646][T14875] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000003
[  199.857982][T14875] RBP: 00007fd237c11e19 R08: 0000000000000000 R09: 0000000000000000
[  199.861311][T14875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.864614][T14875] R13: 00007fd237db6038 R14: 00007fd237db5fa0 R15: 00007ffc3c6e9088
[  199.867938][T14875]  </TASK>
[  199.869986][T14875] Kernel Offset: disabled
[  199.871793][T14875] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:14:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010ba RDI=00000000000010bb RBP=00000000000003f8 RSP=ffffc90003e0e9f0
R8 =ffff888020720237 R9 =1ffff110040e4046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95923 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd23893a6c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000240 CR3=0000000028114000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd237d87498 00007fd237d87470 XMM03=00007fd237d874a8 00007fd237d874a0
XMM04=00007fd2388ed100 00007fd237d87460 XMM05=00007fd237d87478 00007fd237d874c0
XMM06=00007fd237d874b8 00007fd237d874b0 XMM07=00007fd237d874a8 00007fd237d874a0
XMM08=0000000000000000 00007fd237c12ee7 XMM09=0000000000000000 00007fd237c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4451b RBX=1ffff11009608385 RCX=ffff888021ffb980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900032af6c0 RSP=ffffc900032af540
R8 =ffffffff8fa07af7 R9 =1ffffffff1f40f5e R10=dffffc0000000000 R11=fffffbfff1f40f5f
R12=ffff88804b041c28 R13=dffffc0000000000 R14=ffff88813663b180 R15=0000000000000000
RIP=ffffffff81b44503 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558e13e500 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa78b2e56c0 CR3=0000000111ef0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff817491c2 ffffffff81688e7f
XMM02=00007f88eb187498 ffffffff81688e7f XMM03=00007f88eb1874a8 00007f88eb1874a0
XMM04=00007f88ebced100 00007f88eb187460 XMM05=00007f88eb187478 00007f88eb1874c0
XMM06=00007f88eb1874b8 00007f88eb1874b0 XMM07=00007f88eb1874a8 00007f88eb1874a0
XMM08=0000000000000000 00007f88eb012ee7 XMM09=0000000000000000 00007f88eb012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
