last executing test programs:

1.335497698s ago: executing program 2 (id=7489):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810540010000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1)

1.265310296s ago: executing program 2 (id=7494):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001040)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x4, 0x8}, &(0x7f0000001100)=0x90)

1.044739768s ago: executing program 0 (id=7502):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r0, 0x29, 0xd2, 0x0, 0x0)

957.743348ms ago: executing program 0 (id=7505):
socket$pppoe(0x18, 0x1, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$rds(0x15, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x3, 0x87)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x840000000002, 0x3, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

886.042984ms ago: executing program 0 (id=7507):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c)

885.797518ms ago: executing program 0 (id=7508):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff6e}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000a380)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48081}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

807.55595ms ago: executing program 0 (id=7511):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYBLOB="c3"], 0x4)

747.789476ms ago: executing program 1 (id=7512):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x7d1}, 0x1c)

747.465784ms ago: executing program 1 (id=7513):
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB='/'], 0x20)

664.949999ms ago: executing program 1 (id=7514):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0xff02, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48, 0x7, 0x29, 0xeffffff2}, {0x6, 0xf8}]})
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x2062)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x6f8, 0x2c, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9ecbc8a24dc1bb17}, {0xfff3, 0xe}, {0xfff1, 0xb}}, [@f_rsvp6={{0xa}, {0x70, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0x2}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x3, 0xc}}, @TCA_RSVP_POLICE={0x1c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xb55, 0x4}, {0xa8c, 0x3, 0x6}, 0x16, 0x7, 0x81}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x0, 0x8000}, {0x81, 0x19c3800, 0x3}, 0x2e76e4ed4d792471, 0x40, 0x8}}]}}, @f_tcindex={{0xc}, {0x43c, 0x2, [@TCA_TCINDEX_POLICE={0x410, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0x0, 0x4, 0xfffffff8, 0x4, 0x7, 0x4af6, 0x6, 0x9, 0xc, 0xffff, 0x3, 0x9, 0x9, 0x0, 0xb, 0x6, 0x5, 0x7fff, 0x8, 0x7, 0x61, 0x6, 0x4, 0x8, 0x5, 0xff, 0x4, 0x9, 0xc518, 0xea5, 0xe676, 0x9, 0x4, 0x5, 0x1, 0x5, 0x8, 0x3, 0x7, 0x1, 0xdf, 0x7fff, 0x80000001, 0x6, 0x7, 0x2, 0x8, 0x0, 0x6, 0x4, 0xa, 0xc, 0x0, 0x7, 0x2aba, 0x0, 0x6, 0x7, 0x9, 0x101, 0x6, 0x7, 0x1, 0xfff, 0x7, 0xb, 0x79385fc8, 0x35, 0xf, 0x7, 0xc02, 0x81, 0x5, 0x80000000, 0xfff, 0xf2, 0x0, 0x3, 0x7fffffff, 0x7, 0x3, 0x8000, 0x78e93492, 0x7, 0x5, 0x5, 0x7fffffff, 0x3, 0x1, 0x8, 0x7, 0x1, 0x2, 0x2, 0xca8, 0x6, 0x2, 0x8001, 0xfffffff8, 0x3a0, 0x0, 0x3, 0x401, 0x6, 0x7, 0x1000, 0xc5, 0x1, 0x5, 0x2, 0x5, 0x0, 0x7, 0x1, 0x1, 0x8, 0x10, 0x9, 0x7328, 0xffff, 0xa, 0x5, 0x59, 0x7, 0x62, 0x9, 0x1, 0xd, 0xffffffff, 0x101, 0xd87e, 0x0, 0x4, 0x826, 0xf8d, 0x1000, 0x2, 0x2e, 0x0, 0x5, 0x4, 0xc9, 0x5, 0x401, 0x5e, 0xa6, 0x36, 0x4, 0x8000, 0x6, 0x9, 0x40, 0x9, 0xffffffff, 0xc, 0x40, 0xc, 0x1, 0x10, 0x1, 0x73d924e, 0x5, 0xb, 0x10000, 0x9, 0x39d3, 0x5, 0x4, 0x0, 0x52, 0x10, 0x2, 0xf129, 0x9, 0x5, 0x3, 0x5, 0x101, 0x9, 0x2, 0x7, 0x4, 0xffffffff, 0xa, 0x0, 0x8, 0x8, 0x5, 0x7ff, 0x7, 0x551, 0x9, 0x10000, 0x2, 0x40, 0x5, 0xffffffff, 0x7f, 0x9, 0x0, 0x5, 0x8001, 0xffff, 0x1, 0x4, 0x4b, 0x3, 0x8, 0x4, 0x6, 0x8, 0xfffff801, 0x9, 0x8e32, 0x0, 0x2, 0x3a, 0x0, 0x10, 0x36b, 0x4, 0xfffffffc, 0x2, 0x3eaa, 0x10000, 0x6, 0x8001, 0x4, 0x7, 0x7, 0x35a3, 0xfff, 0x2, 0x9, 0x1, 0x8001, 0x9, 0x9, 0x7fff, 0x3, 0xbdac, 0x6, 0x6f32, 0x7, 0x289, 0x600000, 0x7da, 0x200, 0xfaf, 0x2, 0x3, 0x5, 0x4, 0x7fff]}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x7786}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_ACT={0x4}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x10001}, @TCA_TCINDEX_POLICE={0x4}]}}, @f_rsvp6={{0xa}, {0x1d4, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0xffff}}, @TCA_RSVP_ACT={0x1c8, 0x6, [@m_skbmod={0x48, 0x12, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="4626e143f3fa"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x10c, 0x1c, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x53, 0x57d, 0x1, 0xa, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xfffffffa, 0xffffffffffffffff}}]}, {0xae, 0x6, "470eb37c09359614af2a00ab46522718529c94499cf83026dadbaa568cf4aad0600daef39ef9df6335c70589e2bd588afd4db47d7408cf9096701db87704858b3dc77ba7cdeff1f6a2a567c71ca37301f2d38c30528c42869e31fca30f35fe8e9547528fb8dcdfc7ffc7178475cab35d48f823c2e6cbde1c8186395714fbe8332dc9db6afd6221950448af442bbbc1d118c8ee5f49ec52e1aad181896f4a1851e8dd9a4bb73aa9c6d0f6"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x44, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}]}, {0xd, 0x6, "9c65dabfb98fd12966"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x2c, 0x20, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}, @f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x5, 0x186}, {0x950, 0x9, 0x98}, 0x2e, 0xa, 0x81}}]}}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x40}, 0x60000880)
poll(&(0x7f0000000000)=[{r4, 0xa404}, {r5, 0x21}], 0x2, 0xfffffffe)
pwrite64(r3, &(0x7f0000000440)="7cf4c7", 0x3, 0x893)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r9=>0x0}, 0x30)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
r12 = openat$cgroup_int(r10, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRESHEX=r9], 0x27)

664.724817ms ago: executing program 0 (id=7515):
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x4, 0x5)

607.808274ms ago: executing program 1 (id=7516):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0)

507.170038ms ago: executing program 1 (id=7517):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

506.756256ms ago: executing program 1 (id=7518):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r0, 0x0, &(0x7f0000000200))
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000010000009500"/24], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9, &(0x7f0000000280)={0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
epoll_create1(0x80000)

386.767831ms ago: executing program 2 (id=7519):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

386.627674ms ago: executing program 2 (id=7520):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
accept4(r0, 0x0, 0x0, 0x80000)

306.59168ms ago: executing program 2 (id=7521):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, r0, 0x800, 0x4, 0x25dedbfb, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)={0x14, r3, 0x1}, 0x14}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
recvmmsg(r7, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000000c0)=""/36, 0x24}, {0x0}], 0x2}, 0xd}], 0x1, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0)

0s ago: executing program 2 (id=7522):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000000c0), 0x1c)

kernel console output (not intermixed with test programs):

eam_slave_0 removed
[  166.881558][T11267] team0: Port device team_slave_1 removed
[  166.885399][T11267] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.893361][T11267] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.914684][T11267] netlink: 'syz.1.2284': attribute type 10 has an invalid length.
[  166.920693][T11267] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  166.931302][T11267] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.935779][T11267] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.003215][T11273] netlink: 'syz.0.2287': attribute type 12 has an invalid length.
[  167.560679][T11313] Unsupported ieee802154 address type: 0
[  167.841260][T11336] openvswitch: netlink: Key type 29 is not supported
[  167.847722][T11325] nbd0: detected capacity change from 0 to 63
[  167.850660][T11333] block nbd0: NBD_DISCONNECT
[  167.854156][T11333] block nbd0: Disconnected due to user request.
[  167.867411][T11333] block nbd0: shutting down sockets
[  167.874735][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.878602][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.899152][    C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.900414][T11325] bond4: entered promiscuous mode
[  167.902755][    C1] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.904760][T11325] bond4: entered allmulticast mode
[  167.907900][    C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.913599][    C1] Buffer I/O error on dev nbd0, logical block 2, async page read
[  167.916703][    C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.919656][T11340] netlink: 'syz.2.2318': attribute type 1 has an invalid length.
[  167.920348][    C1] Buffer I/O error on dev nbd0, logical block 3, async page read
[  167.924695][T11325] 8021q: adding VLAN 0 to HW filter on device bond4
[  167.931223][T11104] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.935661][T11104] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.941166][T11104] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.944658][T11104] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.956994][T11104] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.962855][T11104] Buffer I/O error on dev nbd0, logical block 2, async page read
[  167.965959][T11104] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.974170][T11342] __nla_validate_parse: 6 callbacks suppressed
[  167.974186][T11342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2317'.
[  167.980961][T11104] Buffer I/O error on dev nbd0, logical block 3, async page read
[  167.984864][T11104] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.988440][T11342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2317'.
[  167.992079][T11104] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.992261][T11104] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  168.000481][T11104] Buffer I/O error on dev nbd0, logical block 1, async page read
[  168.008361][T11104] ldm_validate_partition_table(): Disk read failed.
[  168.013920][T11104] Dev nbd0: unable to read RDB block 0
[  168.017149][T11342] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2317'.
[  168.018767][T11104]  nbd0: unable to read partition table
[  168.042147][T11104] ldm_validate_partition_table(): Disk read failed.
[  168.046312][T11104] Dev nbd0: unable to read RDB block 0
[  168.052365][T11340] bond2: (slave bridge2): making interface the new active one
[  168.056207][T11340] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  168.078590][T11104]  nbd0: unable to read partition table
[  168.139903][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'.
[  168.162731][T11349] erspan0: entered promiscuous mode
[  168.165315][T11349] macvtap1: entered promiscuous mode
[  168.177307][T11349] macvtap1: entered allmulticast mode
[  168.179426][T11349] erspan0: entered allmulticast mode
[  168.187718][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'.
[  168.199711][T11349] erspan0: left allmulticast mode
[  168.201537][T11349] erspan0: left promiscuous mode
[  168.283923][T11358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2326'.
[  168.289445][T11358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.292336][T11358] IPv6: NLM_F_CREATE should be set when creating new route
[  168.295273][T11358] IPv6: NLM_F_CREATE should be set when creating new route
[  168.587950][T11379] block nbd0: server does not support multiple connections per device.
[  168.593869][T11379] block nbd0: shutting down sockets
[  168.797015][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  168.800056][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2345'.
[  168.827230][T11403] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2345'.
[  168.836952][ T5882] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  168.844322][ T5882] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  168.850205][ T6373] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  168.856548][ T6373] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.013452][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2357'.
[  169.027325][T11425] netlink: 'syz.1.2357': attribute type 18 has an invalid length.
[  169.120344][T11435] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  169.251920][T11451] batadv_slave_1: entered promiscuous mode
[  169.254742][T11451] batadv_slave_1: left promiscuous mode
[  169.733694][T11487] netlink: 'syz.0.2385': attribute type 1 has an invalid length.
[  169.738801][T11487] netlink: 'syz.0.2385': attribute type 1 has an invalid length.
[  170.149701][T11517] netlink: 'syz.0.2399': attribute type 5 has an invalid length.
[  170.213870][T11521] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  170.400091][T11538] netlink: 'syz.0.2410': attribute type 1 has an invalid length.
[  170.751688][T11566] delete_channel: no stack
[  170.844010][T11577] sctp: [Deprecated]: syz.1.2425 (pid 11577) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.844010][T11577] Use struct sctp_sack_info instead
[  171.053249][T11585] netlink: 'syz.0.2426': attribute type 1 has an invalid length.
[  172.549987][T11666] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.611766][T11666] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.663487][T11666] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.714797][T11666] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.772096][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.783200][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.794563][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.805280][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.915454][T11676] xt_l2tp: missing protocol rule (udp|l2tpip)
[  173.386710][T11707] netlink: 'syz.2.2483': attribute type 21 has an invalid length.
[  173.405744][T11707] ipvlan2: entered promiscuous mode
[  173.418740][T11707] bridge0: port 1(ipvlan2) entered blocking state
[  173.421803][T11707] bridge0: port 1(ipvlan2) entered disabled state
[  173.424900][T11707] ipvlan2: entered allmulticast mode
[  173.427026][T11707] gretap0: entered allmulticast mode
[  173.431614][T11707] ipvlan2: left allmulticast mode
[  173.437631][T11707] gretap0: left allmulticast mode
[  173.523674][T11721] __nla_validate_parse: 12 callbacks suppressed
[  173.523686][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2490'.
[  173.688929][T11735] netlink: 'syz.1.2497': attribute type 3 has an invalid length.
[  173.694338][T11735] syz_tun: entered allmulticast mode
[  173.702565][T11735] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  173.713077][T11735] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  173.780008][T11735] 8021q: adding VLAN 0 to HW filter on device team0
[  173.786193][T11735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.830278][T11733] syz_tun: left allmulticast mode
[  173.843854][T11741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2500'.
[  174.045370][T11761] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  174.211366][ T5882] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  174.270966][T11784] netlink: 'syz.1.2516': attribute type 21 has an invalid length.
[  174.274028][T11784] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2516'.
[  174.277675][T11784] netlink: 'syz.1.2516': attribute type 5 has an invalid length.
[  174.280838][T11784] netlink: 'syz.1.2516': attribute type 6 has an invalid length.
[  174.283670][T11784] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2516'.
[  175.144903][T11816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2532'.
[  175.465676][T11846] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.469929][T11846] syzkaller0: entered promiscuous mode
[  175.471690][T11846] syzkaller0: entered allmulticast mode
[  175.476624][T11846] tipc: Resetting bearer <eth:syzkaller0>
[  175.480998][T11845] tipc: Resetting bearer <eth:syzkaller0>
[  175.490350][T11845] tipc: Disabling bearer <eth:syzkaller0>
[  175.515363][T11852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'.
[  175.637280][T11866] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.742284][T11875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2560'.
[  176.024906][T11887] netlink: 'syz.1.2566': attribute type 10 has an invalid length.
[  176.028240][T11887] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  176.399395][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2576'.
[  176.550799][T11916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2579'.
[  177.178096][T11955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2598'.
[  177.279810][T11963] netlink: 'syz.2.2602': attribute type 1 has an invalid length.
[  177.351117][T11963] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  177.355696][T11963] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  177.367204][T11963] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  177.546004][T11985] netlink: 'syz.2.2611': attribute type 21 has an invalid length.
[  177.965584][T11999] ipvlan0: left promiscuous mode
[  177.969247][T11999] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  177.991553][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  177.995097][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.015374][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.019800][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.140421][T12008] netlink: 'syz.1.2619': attribute type 2 has an invalid length.
[  178.796963][T12052] sctp: [Deprecated]: syz.2.2640 (pid 12052) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.796963][T12052] Use struct sctp_sack_info instead
[  178.805402][T12052] sctp: [Deprecated]: syz.2.2640 (pid 12052) Use of struct sctp_assoc_value in delayed_ack socket option.
[  178.805402][T12052] Use struct sctp_sack_info instead
[  181.026478][T12080] __nla_validate_parse: 4 callbacks suppressed
[  181.026495][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'.
[  181.588873][T12107] netlink: 'syz.1.2662': attribute type 1 has an invalid length.
[  181.592086][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'.
[  181.650495][T12111] netlink: 'syz.2.2663': attribute type 23 has an invalid length.
[  181.704969][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'.
[  181.721236][T12105] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  182.603109][T12194] netlink: 'syz.1.2694': attribute type 15 has an invalid length.
[  182.664503][T12199] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.2695'.
[  183.833096][T12250] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2719'.
[  183.874184][T12256] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2722'.
[  183.944515][T12262] v: renamed from ip6_vti0
[  184.895067][T12307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2744'.
[  185.215271][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2757'.
[  186.144031][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'.
[  186.606355][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'.
[  187.467408][T12454] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2808'.
[  187.648049][T12470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.675357][T12470] syzkaller0: entered promiscuous mode
[  187.678536][T12470] syzkaller0: entered allmulticast mode
[  187.682544][T12470] tipc: Resetting bearer <eth:syzkaller0>
[  187.710705][T12469] tipc: Resetting bearer <eth:syzkaller0>
[  188.707301][   T24] tipc: Node number set to 2007777466
[  188.935535][T12469] tipc: Disabling bearer <eth:syzkaller0>
[  189.375395][T12496] netlink: 'syz.2.2824': attribute type 1 has an invalid length.
[  189.408286][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'.
[  189.435230][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2824'.
[  189.814587][T12527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.009466][T12539] bridge8: entered promiscuous mode
[  190.078620][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.083147][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.086411][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.092492][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.096177][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.101220][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.104500][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.110149][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.113403][T12549] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[  190.184715][T12556] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  190.474522][T12570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.479867][T12570] syzkaller0: entered promiscuous mode
[  190.482280][T12570] syzkaller0: entered allmulticast mode
[  190.503787][T12570] tipc: Resetting bearer <eth:syzkaller0>
[  190.509474][T12569] tipc: Resetting bearer <eth:syzkaller0>
[  190.525899][T12569] tipc: Disabling bearer <eth:syzkaller0>
[  190.651253][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'.
[  190.655470][T12574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'.
[  190.699439][T12576] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.975467][T12589] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  190.985347][T12589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.990275][T12589] syzkaller0: entered promiscuous mode
[  190.993173][T12589] syzkaller0: entered allmulticast mode
[  191.000576][T12589] tipc: Resetting bearer <eth:syzkaller0>
[  191.006798][T12588] tipc: Resetting bearer <eth:syzkaller0>
[  191.021418][T12588] tipc: Disabling bearer <eth:syzkaller0>
[  191.099435][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  191.102449][ T5859] Bluetooth: hci1: command 0x0406 tx timeout
[  191.589232][T12628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.592656][T12628] syzkaller0: entered promiscuous mode
[  191.595202][T12628] syzkaller0: entered allmulticast mode
[  191.614569][T12628] tipc: Resetting bearer <eth:syzkaller0>
[  191.619668][T12627] tipc: Resetting bearer <eth:syzkaller0>
[  191.635844][T12627] tipc: Disabling bearer <eth:syzkaller0>
[  191.836431][T12646] lo speed is unknown, defaulting to 1000
[  191.842584][T12646] lo speed is unknown, defaulting to 1000
[  191.845579][T12646] lo speed is unknown, defaulting to 1000
[  191.855264][T12646] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  191.892106][T12646] lo speed is unknown, defaulting to 1000
[  191.901314][T12646] lo speed is unknown, defaulting to 1000
[  191.905373][T12646] lo speed is unknown, defaulting to 1000
[  192.408775][T12676] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  194.311136][T12709] batman_adv: batadv0: Adding interface: ip6gretap2
[  194.313859][T12709] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.324195][T12709] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active
[  194.330391][T12710] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2916'.
[  194.334060][T12710] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2916'.
[  194.476571][T12720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'.
[  194.569955][T12730] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.2927'.
[  194.660630][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2931'.
[  194.901486][T12737] lo speed is unknown, defaulting to 1000
[  195.072144][T12756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.083160][T12756] syzkaller0: entered promiscuous mode
[  195.085137][T12756] syzkaller0: entered allmulticast mode
[  195.111555][T12755] tipc: Resetting bearer <eth:syzkaller0>
[  195.149844][T12755] tipc: Disabling bearer <eth:syzkaller0>
[  195.177735][T12767] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  195.629045][T12804] validate_nla: 32 callbacks suppressed
[  195.629065][T12804] netlink: 'syz.2.2953': attribute type 1 has an invalid length.
[  195.635500][T12804] netlink: 'syz.2.2953': attribute type 4 has an invalid length.
[  195.739751][T12807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.767922][T12807] syzkaller0: entered promiscuous mode
[  195.770127][T12807] syzkaller0: entered allmulticast mode
[  195.807789][T12807] tipc: Resetting bearer <eth:syzkaller0>
[  195.811391][T12807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.814838][T12807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.835938][T12806] tipc: Resetting bearer <eth:syzkaller0>
[  195.865816][T12806] tipc: Disabling bearer <eth:syzkaller0>
[  195.907662][T12816] sctp: [Deprecated]: syz.2.2957 (pid 12816) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.907662][T12816] Use struct sctp_sack_info instead
[  195.975458][T12818] netlink: 'syz.0.2959': attribute type 12 has an invalid length.
[  195.985217][T12818] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.2959'.
[  197.933064][T12907] netlink: 'syz.1.2998': attribute type 39 has an invalid length.
[  197.962133][T12909] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  198.384839][   T55] Bluetooth: hci2: link tx timeout
[  198.388644][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.392514][   T55] Bluetooth: hci2: link tx timeout
[  198.394586][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  198.538150][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  198.548862][T12946] netlink: 'syz.1.3016': attribute type 10 has an invalid length.
[  198.561378][T12946] team0: Port device dummy0 added
[  198.573962][T12946] netlink: 'syz.1.3016': attribute type 10 has an invalid length.
[  198.588031][T12946] team0: Port device dummy0 removed
[  198.991358][T12962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.995244][T12962] syzkaller0: entered promiscuous mode
[  198.998529][T12962] syzkaller0: entered allmulticast mode
[  199.006529][T12962] tipc: Resetting bearer <eth:syzkaller0>
[  199.013900][T12961] tipc: Resetting bearer <eth:syzkaller0>
[  199.028544][T12961] tipc: Disabling bearer <eth:syzkaller0>
[  199.450196][T12973] geneve4: entered promiscuous mode
[  199.453904][ T6373] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.456503][ T6373] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.462228][ T6373] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.472309][ T6373] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.292535][T13017] syz.0.3043: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  200.299364][T13017] CPU: 1 UID: 0 PID: 13017 Comm: syz.0.3043 Not tainted syzkaller #0 PREEMPT(full) 
[  200.299383][T13017] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.299391][T13017] Call Trace:
[  200.299397][T13017]  <TASK>
[  200.299411][T13017]  dump_stack_lvl+0x189/0x250
[  200.299436][T13017]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.299451][T13017]  ? __pfx__printk+0x10/0x10
[  200.299467][T13017]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  200.299483][T13017]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  200.299499][T13017]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  200.299512][T13017]  warn_alloc+0x214/0x310
[  200.299533][T13017]  ? stack_depot_save_flags+0x40/0x860
[  200.299552][T13017]  ? __pfx_warn_alloc+0x10/0x10
[  200.299573][T13017]  ? kasan_save_track+0x4f/0x80
[  200.299591][T13017]  ? xskq_create+0x56/0x170
[  200.299609][T13017]  ? xsk_init_queue+0xb0/0x110
[  200.299626][T13017]  ? xsk_setsockopt+0x4dc/0x8d0
[  200.299640][T13017]  ? do_sock_setsockopt+0x17c/0x1b0
[  200.299653][T13017]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  200.299665][T13017]  ? do_syscall_64+0xfa/0x3b0
[  200.299676][T13017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.299695][T13017]  __vmalloc_node_range_noprof+0x125/0x12f0
[  200.299738][T13017]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  200.299764][T13017]  ? __kasan_kmalloc+0x93/0xb0
[  200.299784][T13017]  vmalloc_user_noprof+0xad/0xf0
[  200.299804][T13017]  ? xskq_create+0xbf/0x170
[  200.299825][T13017]  xskq_create+0xbf/0x170
[  200.299846][T13017]  xsk_init_queue+0xb0/0x110
[  200.299868][T13017]  xsk_setsockopt+0x4dc/0x8d0
[  200.299889][T13017]  ? __pfx_xsk_setsockopt+0x10/0x10
[  200.299907][T13017]  ? __pfx_aa_sk_perm+0x10/0x10
[  200.299932][T13017]  ? aa_sock_opt_perm+0xff/0x1b0
[  200.299948][T13017]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  200.299963][T13017]  ? __pfx_xsk_setsockopt+0x10/0x10
[  200.299983][T13017]  do_sock_setsockopt+0x17c/0x1b0
[  200.300001][T13017]  __x64_sys_setsockopt+0x13f/0x1b0
[  200.300021][T13017]  do_syscall_64+0xfa/0x3b0
[  200.300033][T13017]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.300085][T13017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.300100][T13017]  ? exc_page_fault+0x9f/0xf0
[  200.300122][T13017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.300136][T13017] RIP: 0033:0x7ff6ac18eba9
[  200.300150][T13017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.300161][T13017] RSP: 002b:00007ff6aa3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  200.300176][T13017] RAX: ffffffffffffffda RBX: 00007ff6ac3d5fa0 RCX: 00007ff6ac18eba9
[  200.300187][T13017] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  200.300195][T13017] RBP: 00007ff6ac211e19 R08: 0000000000000004 R09: 0000000000000000
[  200.300204][T13017] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  200.300213][T13017] R13: 00007ff6ac3d6038 R14: 00007ff6ac3d5fa0 R15: 00007ffc5065f258
[  200.300237][T13017]  </TASK>
[  200.300243][T13017] Mem-Info:
[  200.431594][T13025] pimreg: entered allmulticast mode
[  200.439790][T13017] active_anon:5657 inactive_anon:0 isolated_anon:0
[  200.439790][T13017]  active_file:1353 inactive_file:38290 isolated_file:0
[  200.439790][T13017]  unevictable:1768 dirty:189 writeback:0
[  200.439790][T13017]  slab_reclaimable:10489 slab_unreclaimable:68869
[  200.439790][T13017]  mapped:18181 shmem:2429 pagetables:1019
[  200.439790][T13017]  sec_pagetables:0 bounce:0
[  200.439790][T13017]  kernel_misc_reclaimable:0
[  200.439790][T13017]  free:274586 free_pcp:24871 free_cma:0
[  200.489209][T13017] Node 0 active_anon:11328kB inactive_anon:0kB active_file:264kB inactive_file:21760kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45868kB dirty:32kB writeback:0kB shmem:4864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6260kB pagetables:2216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  200.504816][T13017] Node 1 active_anon:11368kB inactive_anon:0kB active_file:5148kB inactive_file:131400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26856kB dirty:724kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6036kB pagetables:1652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  200.517490][T13017] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  200.528654][T13017] lowmem_reserve[]: 0 811 811 811 811
[  200.531096][T13017] Node 0 DMA32 free:357872kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11464kB inactive_anon:0kB active_file:264kB inactive_file:21760kB unevictable:3536kB writepending:32kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:56476kB local_pcp:19844kB free_cma:0kB
[  200.545889][T13017] lowmem_reserve[]: 0 0 0 0 0
[  200.548307][T13017] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  200.568682][T13017] lowmem_reserve[]: 0 0 854 854 854
[  200.570850][T13017] Node 1 Normal free:266496kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11368kB inactive_anon:0kB active_file:5148kB inactive_file:131400kB unevictable:3536kB writepending:724kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42748kB local_pcp:20716kB free_cma:0kB
[  200.584056][T13017] lowmem_reserve[]: 0 0 0 0 0
[  200.585906][T13017] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  200.600073][T13017] Node 0 DMA32: 659*4kB (UM) 661*8kB (UME) 389*16kB (UME) 4*32kB (ME) 4*64kB (ME) 0*128kB 1*256kB (E) 10*512kB (UE) 6*1024kB (UE) 6*2048kB (UM) 78*4096kB (UM) = 357828kB
[  200.606457][T13017] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  200.612408][T13017] Node 1 Normal: 320*4kB (UME) 457*8kB (UME) 436*16kB (UME) 419*32kB (U) 148*64kB (UM) 88*128kB (UME) 40*256kB (UME) 24*512kB (UM) 17*1024kB (UME) 2*2048kB (ME) 43*4096kB (UM) = 266216kB
[  200.619761][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  200.621727][T13017] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  200.624866][T13017] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  200.628557][T13017] 42072 total pagecache pages
[  200.630655][T13017] 0 pages in swap cache
[  200.632004][T13017] Free swap  = 124996kB
[  200.633633][T13017] Total swap = 124996kB
[  200.636605][T13017] 786301 pages RAM
[  200.639495][T13017] 0 pages HighMem/MovableOnly
[  200.641038][T13017] 241343 pages reserved
[  200.642481][T13017] 0 pages cma reserved
[  200.675326][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'.
[  200.775470][T13046] netlink: 'syz.0.3056': attribute type 4 has an invalid length.
[  200.993062][T13062] netlink: 'syz.0.3064': attribute type 1 has an invalid length.
[  201.273892][T13084] netlink: set zone limit has 4 unknown bytes
[  201.503469][T13100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3082'.
[  201.512698][T13100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3082'.
[  201.522404][T13100] ip6gretap0: entered promiscuous mode
[  201.525784][T13100] syz_tun: entered promiscuous mode
[  201.530776][T13100] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  201.535011][T13100] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  202.059324][T13145] netlink: 'syz.1.3103': attribute type 13 has an invalid length.
[  202.062411][T13145] netlink: 'syz.1.3103': attribute type 17 has an invalid length.
[  202.179135][T13145] 8021q: adding VLAN 0 to HW filter on device team0
[  202.197603][T13145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.373549][T13145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.434182][T13148] lo speed is unknown, defaulting to 1000
[  202.780481][T13177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3118'.
[  202.786362][T13177] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3118'.
[  202.793277][T13177] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3118'.
[  203.685209][T13216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3135'.
[  203.836031][T13228] netlink: zone id is out of range
[  203.838397][T13228] netlink: zone id is out of range
[  203.840603][T13228] netlink: zone id is out of range
[  203.842691][T13228] netlink: zone id is out of range
[  203.844775][T13228] netlink: zone id is out of range
[  203.846936][T13228] netlink: zone id is out of range
[  203.856652][T13228] netlink: zone id is out of range
[  203.859654][T13228] netlink: zone id is out of range
[  203.886458][T13232] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3143'.
[  204.305781][T13259] pim6reg1: entered promiscuous mode
[  204.308840][T13259] pim6reg1: entered allmulticast mode
[  204.420800][ T5915] IPVS: starting estimator thread 0...
[  204.511907][T13263] IPVS: using max 39 ests per chain, 93600 per kthread
[  204.533030][T13269] netlink: 'syz.1.3153': attribute type 6 has an invalid length.
[  204.583323][T13270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3155'.
[  204.586460][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'.
[  205.866344][ T5882] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.872243][ T5882] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20001 - 0
[  205.875560][ T5882] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.883042][ T5882] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20001 - 0
[  205.886390][ T5882] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.890374][ T5882] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20001 - 0
[  205.893767][ T5882] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  205.897021][ T5882] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20001 - 0
[  206.800912][T13374] __nla_validate_parse: 1 callbacks suppressed
[  206.800928][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'.
[  206.806939][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'.
[  206.826965][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'.
[  206.833019][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3201'.
[  206.906604][T13380] netlink: 'syz.1.3204': attribute type 1 has an invalid length.
[  206.910639][T13380] NCSI netlink: No device for ifindex 0
[  207.146768][T13395] netlink: 'syz.2.3210': attribute type 4 has an invalid length.
[  207.423760][T13422] net_ratelimit: 14 callbacks suppressed
[  207.423781][T13422] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  207.469690][T13428] delete_channel: no stack
[  207.595117][T13443] xt_l2tp: v2 tid > 0xffff: 37482740
[  207.729280][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'.
[  207.732143][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'.
[  207.735104][T13457] netlink: 'syz.2.3242': attribute type 11 has an invalid length.
[  207.761750][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3243'.
[  207.880035][T13474] macvtap1: entered promiscuous mode
[  207.882833][T13474] vlan0: entered promiscuous mode
[  207.885809][T13474] macvtap1: entered allmulticast mode
[  207.893017][T13474] vlan0: entered allmulticast mode
[  207.895897][T13474] veth0_vlan: entered allmulticast mode
[  207.918803][T13474] macvtap2: entered promiscuous mode
[  207.923277][T13474] macvtap2: entered allmulticast mode
[  208.695963][T13483] netlink: 'syz.0.3255': attribute type 1 has an invalid length.
[  208.703646][T13483] netlink: 'syz.0.3255': attribute type 2 has an invalid length.
[  208.759834][T13490] netlink: 'syz.0.3258': attribute type 12 has an invalid length.
[  209.182064][T13514] tun0: tun_chr_ioctl cmd 1074025675
[  209.186779][T13514] tun0: persist enabled
[  209.191259][T13514] tun0: tun_chr_ioctl cmd 1074025675
[  209.199603][T13514] tun0: persist enabled
[  209.402619][T13527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3274'.
[  209.406341][T13527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3274'.
[  209.416088][T13527] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3274'.
[  209.632101][T13535] macvtap2: entered promiscuous mode
[  209.634242][T13535] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  209.643087][T13535] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  210.322530][T13583] pim6reg: entered allmulticast mode
[  210.329111][T13583] pim6reg: left allmulticast mode
[  210.957930][T13619] syzkaller1: entered promiscuous mode
[  210.960166][T13619] syzkaller1: entered allmulticast mode
[  211.152272][T13626] IPVS: persistence engine module ip_vs_pe_ not found
[  211.266880][T13641] netlink: 'syz.1.3329': attribute type 1 has an invalid length.
[  211.309982][T13641] 8021q: adding VLAN 0 to HW filter on device bond2
[  211.325476][T13641] bond2: entered promiscuous mode
[  211.763619][T13669] lo speed is unknown, defaulting to 1000
[  211.887920][T13681] __nla_validate_parse: 9 callbacks suppressed
[  211.887935][T13681] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3344'.
[  211.894355][T13681] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3344'.
[  212.243390][T13689] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  212.262444][T13689] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  214.206968][T13720] netlink: 'syz.2.3361': attribute type 3 has an invalid length.
[  214.510986][T13741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3369'.
[  214.723089][T13766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'.
[  214.766659][T13770] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3382'.
[  215.013221][T13791] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  215.142629][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'.
[  215.148432][T13802] tipc: Enabled bearer <eth:vlan0>, priority 18
[  215.179378][T13807] openvswitch: netlink: Key type 251 is out of range max 32
[  215.255332][T13814] dvmrp1: tun_chr_ioctl cmd 1074025681
[  215.266557][T13815] netlink: 'syz.2.3404': attribute type 32 has an invalid length.
[  215.650275][T13851] sch_fq: defrate 0 ignored.
[  215.846955][T13866] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3424'.
[  216.581790][T13930] openvswitch: netlink: IPv4 tun info is not correct
[  217.833816][T13948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3459'.
[  218.001133][T13960] syzkaller1: entered promiscuous mode
[  218.003228][T13960] syzkaller1: entered allmulticast mode
[  218.054089][T13967] bridge: RTM_NEWNEIGH with invalid ether address
[  218.206712][T13976] netlink: 'syz.1.3471': attribute type 10 has an invalid length.
[  218.216168][T13976] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  218.506321][T14006] netlink: 'syz.1.3483': attribute type 10 has an invalid length.
[  218.590189][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3486'.
[  218.714324][T14020] pim6reg: entered allmulticast mode
[  218.723957][T14020] pim6reg: left allmulticast mode
[  218.765290][T14023] netlink: 'syz.1.3491': attribute type 1 has an invalid length.
[  218.796726][T14023] 8021q: adding VLAN 0 to HW filter on device bond3
[  218.845875][T14023] 8021q: adding VLAN 0 to HW filter on device bond3
[  218.849734][T14023] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  218.855678][T14023] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  218.929898][T14028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3491'.
[  218.951704][T14027] veth3: entered promiscuous mode
[  218.958289][T14027] bond3: (slave veth3): Enslaving as an active interface with a down link
[  218.962992][T14028] 8021q: adding VLAN 0 to HW filter on device bond3
[  218.977343][  T975] lo speed is unknown, defaulting to 1000
[  218.979919][  T975] syz2: Port: 1 Link ACTIVE
[  219.127208][T14038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3497'.
[  219.178037][T14044] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3500'.
[  219.235130][T14049] netlink: 'syz.0.3502': attribute type 11 has an invalid length.
[  219.385096][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3507'.
[  219.631964][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  219.635133][T14074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'.
[  219.646733][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  219.656630][T14074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'.
[  219.662868][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  219.665869][T14074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'.
[  219.675358][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  219.681110][T14074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3512'.
[  219.684877][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  219.688577][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  219.691908][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  219.695062][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  219.700381][T14074] netlink: 'syz.0.3512': attribute type 1 has an invalid length.
[  221.139966][T14171] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  221.296346][T14186] macvtap2: entered allmulticast mode
[  221.298409][T14186] veth0_macvtap: entered allmulticast mode
[  221.620731][T14217] wg1: entered promiscuous mode
[  221.622694][T14217] wg1: entered allmulticast mode
[  222.471817][T14249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.489590][T14249] syzkaller0: entered promiscuous mode
[  222.491863][T14249] syzkaller0: entered allmulticast mode
[  222.531686][T14249] tipc: Resetting bearer <eth:syzkaller0>
[  222.539635][T14248] tipc: Resetting bearer <eth:syzkaller0>
[  222.551696][T14255] sctp: [Deprecated]: syz.1.3592 (pid 14255) Use of int in maxseg socket option.
[  222.551696][T14255] Use struct sctp_assoc_value instead
[  222.558592][T14248] tipc: Disabling bearer <eth:syzkaller0>
[  222.921403][T14285] __nla_validate_parse: 113 callbacks suppressed
[  222.921420][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3604'.
[  222.928425][T14280] syzkaller0: create flow: hash 3232840045 index 1
[  222.973349][T14280] syzkaller0: delete flow: hash 3232840045 index 1
[  223.083770][T14291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3607'.
[  224.479400][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3612'.
[  224.657676][T14320] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3617'.
[  224.804624][T14334] validate_nla: 99 callbacks suppressed
[  224.804641][T14334] netlink: 'syz.0.3625': attribute type 7 has an invalid length.
[  224.968207][T14347] sctp: [Deprecated]: syz.1.3631 (pid 14347) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.968207][T14347] Use struct sctp_sack_info instead
[  225.020725][T14352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3633'.
[  225.545021][T14396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3653'.
[  225.548477][T14398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3654'.
[  225.604813][T14402] netlink: 'syz.0.3655': attribute type 1 has an invalid length.
[  225.662850][T14402] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  225.671717][T14402] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  225.683599][T14402] bond5: (slave vti0): making interface the new active one
[  225.691084][T14402] bond5: (slave vti0): Enslaving as an active interface with an up link
[  225.695458][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'.
[  225.709683][T14407] netlink: 620 bytes leftover after parsing attributes in process `syz.1.3658'.
[  225.713272][T14407] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3658'.
[  225.774274][T14412] netem: invalid attributes len -16
[  225.776396][T14412] netem: change failed
[  226.072169][T14432] netlink: 'syz.1.3669': attribute type 62 has an invalid length.
[  226.078827][T14430] : entered promiscuous mode
[  226.839942][T14456] netlink: 'syz.0.3681': attribute type 2 has an invalid length.
[  227.001093][T14473] netlink: set zone limit has 4 unknown bytes
[  227.193819][T14487] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.198151][T14487] syzkaller0: entered promiscuous mode
[  227.200647][T14487] syzkaller0: entered allmulticast mode
[  227.302965][T14487] tipc: Resetting bearer <eth:syzkaller0>
[  227.307864][T14486] tipc: Resetting bearer <eth:syzkaller0>
[  227.321747][T14486] tipc: Disabling bearer <eth:syzkaller0>
[  227.531005][T14492] syzkaller1: entered promiscuous mode
[  227.532975][T14492] syzkaller1: entered allmulticast mode
[  227.762514][T14517] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  227.936212][T14532] __nla_validate_parse: 6 callbacks suppressed
[  227.936228][T14532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3715'.
[  227.939544][T14534] openvswitch: netlink: Multiple metadata blocks provided
[  228.103111][T14543] netlink: 516 bytes leftover after parsing attributes in process `syz.2.3720'.
[  228.694749][T14568] netlink: 'syz.1.3732': attribute type 1 has an invalid length.
[  228.698575][T14568] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3732'.
[  228.976137][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3739'.
[  229.114354][T14590] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3743'.
[  229.543558][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3752'.
[  230.438371][T14637] vlan5: entered promiscuous mode
[  230.440681][T14637] hsr_slave_1: entered promiscuous mode
[  230.443139][T14637] vlan5: entered allmulticast mode
[  230.445300][T14637] hsr_slave_1: entered allmulticast mode
[  230.499670][T14639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.509436][T14639] syzkaller0: entered promiscuous mode
[  230.512985][T14639] syzkaller0: entered allmulticast mode
[  230.520946][T14639] tipc: Resetting bearer <eth:syzkaller0>
[  230.523959][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'.
[  230.529010][T14638] tipc: Resetting bearer <eth:syzkaller0>
[  230.543426][T14638] tipc: Disabling bearer <eth:syzkaller0>
[  230.621082][T14635] lo speed is unknown, defaulting to 1000
[  231.136816][T14670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.227659][T14677] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3782'.
[  231.256413][T14678] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3781'.
[  231.272300][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3781'.
[  232.123442][T14738] lo speed is unknown, defaulting to 1000
[  232.921650][T14794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.924749][T14794] syzkaller0: entered promiscuous mode
[  232.926470][T14794] syzkaller0: entered allmulticast mode
[  232.942189][T14794] tipc: Resetting bearer <eth:syzkaller0>
[  232.946357][T14793] tipc: Resetting bearer <eth:syzkaller0>
[  232.959398][T14793] tipc: Disabling bearer <eth:syzkaller0>
[  233.117751][T14812] __nla_validate_parse: 8 callbacks suppressed
[  233.117763][T14812] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3841'.
[  233.226920][T14820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.232595][T14820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3845'.
[  233.434041][T14834] bond5: (slave vti0): Releasing backup interface
[  233.446164][T14834] netlink: 'syz.0.3850': attribute type 10 has an invalid length.
[  233.450221][T14834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3850'.
[  233.453984][T14834] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  233.655712][T14844] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3854'.
[  234.141501][T14880] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3871'.
[  234.145927][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'.
[  234.258791][T14886] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.3874'.
[  234.716349][T14915] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  234.774556][T14919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.973851][T14938] netlink: 'syz.0.3896': attribute type 10 has an invalid length.
[  235.007375][T14942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3899'.
[  235.100516][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'.
[  235.282371][T14961] netlink: 'syz.1.3908': attribute type 1 has an invalid length.
[  235.391639][T14965] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  235.495043][T14974] batadv_slave_1: entered promiscuous mode
[  235.517835][T14974] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3914'.
[  235.709017][T14972] batadv_slave_1: left promiscuous mode
[  236.011668][T14983] delete_channel: no stack
[  237.008759][T15060] tipc: Trying to set illegal importance in message
[  237.148705][   T24] lo speed is unknown, defaulting to 1000
[  237.152597][   T24] syz2: Port: 1 Link DOWN
[  237.166390][T15066] geneve4: entered promiscuous mode
[  237.169037][T15066] geneve4: entered allmulticast mode
[  237.174757][ T5882] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  237.177892][ T5882] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  237.181070][ T5882] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  237.184124][ T5882] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  237.649112][T15098] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  238.269547][T15150] netlink: 'syz.1.3994': attribute type 2 has an invalid length.
[  238.559047][T15166] openvswitch: netlink: Message has 20 unknown bytes.
[  238.561709][T15166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.691601][T15176] __nla_validate_parse: 5 callbacks suppressed
[  238.691621][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'.
[  239.021236][T15199] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.057826][T15199] syzkaller0: entered promiscuous mode
[  239.059747][T15199] syzkaller0: entered allmulticast mode
[  239.061971][T15199] tipc: Resetting bearer <eth:syzkaller0>
[  239.080476][T15198] tipc: Resetting bearer <eth:syzkaller0>
[  240.070302][ T1272] tipc: Node number set to 3699813226
[  240.441274][T15198] tipc: Disabling bearer <eth:syzkaller0>
[  240.453408][T15227] bond0: entered promiscuous mode
[  240.456203][T15227] batadv0: entered promiscuous mode
[  240.459562][T15227] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  240.462980][T15227] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  240.468420][T15227] 8021q: adding VLAN 0 to HW filter on device hsr2
[  240.472417][T15228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.622823][T15234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4030'.
[  240.626153][T15238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4029'.
[  240.778562][T15248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4034'.
[  240.785087][T15248] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  241.226613][T15281] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4048'.
[  241.236851][T15281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4048'.
[  241.791406][T15319] netlink: 'syz.2.4068': attribute type 32 has an invalid length.
[  241.868233][T15327] sctp: [Deprecated]: syz.0.4070 (pid 15327) Use of struct sctp_assoc_value in delayed_ack socket option.
[  241.868233][T15327] Use struct sctp_sack_info instead
[  241.933826][T15334] netlink: 'syz.1.4075': attribute type 11 has an invalid length.
[  242.318528][T15358] netlink: 'syz.1.4086': attribute type 1 has an invalid length.
[  242.346747][T15358] 8021q: adding VLAN 0 to HW filter on device bond4
[  242.359620][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4086'.
[  243.112958][T15401] netlink: 'syz.2.4103': attribute type 10 has an invalid length.
[  243.258291][T15408] syzkaller0: entered promiscuous mode
[  243.261447][T15408] syzkaller0: entered allmulticast mode
[  243.731231][T15442] delete_channel: no stack
[  243.766804][T15444] netlink: 'syz.0.4123': attribute type 42 has an invalid length.
[  243.882824][T15456] veth5: entered promiscuous mode
[  243.929604][T15461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4130'.
[  243.939918][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4130'.
[  244.099903][T15469] block nbd0: server does not support multiple connections per device.
[  244.105468][T15469] block nbd0: shutting down sockets
[  244.165041][T15483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4141'.
[  244.168623][T15483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4141'.
[  244.621219][T15511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4154'.
[  244.655759][T15511] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4154'.
[  244.713238][T15515] netlink: 'syz.2.4156': attribute type 1 has an invalid length.
[  244.716424][T15515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.762096][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4157'.
[  244.987909][T15530] netlink: 'syz.2.4162': attribute type 21 has an invalid length.
[  244.990734][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4162'.
[  244.998224][T15530] netlink: 'syz.2.4162': attribute type 21 has an invalid length.
[  245.001434][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4162'.
[  245.153348][T15545] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  245.193936][T15551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4171'.
[  245.228721][T15545] batadv_slave_0: entered promiscuous mode
[  246.177731][T15635] tipc: MTU too low for tipc bearer
[  246.342200][T15646] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  246.943277][T15700] pim6reg1: entered promiscuous mode
[  246.945476][T15700] pim6reg1: entered allmulticast mode
[  247.895285][T15713] macsec0: entered promiscuous mode
[  247.901307][T15713] macsec0: entered allmulticast mode
[  248.020775][T15726] netlink: 'syz.2.4246': attribute type 1 has an invalid length.
[  248.023217][T15726] netlink: 'syz.2.4246': attribute type 2 has an invalid length.
[  248.025983][T15726] netlink: 'syz.2.4246': attribute type 1 has an invalid length.
[  248.276732][T15749] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  248.337922][T15749] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  248.363639][T15749] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  248.421198][T15749] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  248.502267][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  248.511418][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  248.521344][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  248.532672][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  249.491830][T15821] __nla_validate_parse: 9 callbacks suppressed
[  249.492241][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4288'.
[  249.813495][T15837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4296'.
[  249.824174][T15837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4296'.
[  249.832667][T15837] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4296'.
[  250.092880][T15857] openvswitch: netlink: IPv6 tunnel dst address is zero
[  250.115459][ T5882] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  250.153986][T15860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'.
[  250.189180][T15860] vlan3: entered allmulticast mode
[  250.190939][T15860] bridge0: entered allmulticast mode
[  250.192760][T15860] bridge12: port 1(vlan3) entered blocking state
[  250.196174][T15860] bridge12: port 1(vlan3) entered disabled state
[  250.201565][T15860] vlan3: entered promiscuous mode
[  250.203585][T15860] bridge0: entered promiscuous mode
[  250.212677][T15860] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  250.269640][T15868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4307'.
[  250.441948][T15882] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4315'.
[  250.560770][T15892] tipc: New replicast peer: 0.0.0.0
[  250.563346][T15892] tipc: Enabled bearer <udp:syz2>, priority 26
[  250.566577][T15892] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  250.763215][T15908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4327'.
[  250.935246][T15919] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4331'.
[  250.953319][T15929] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4334'.
[  251.246608][T15945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.282816][T15949] netlink: 'syz.2.4343': attribute type 1 has an invalid length.
[  251.878233][T15975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.881181][T15975] IPv6: NLM_F_CREATE should be set when creating new route
[  251.885732][T15975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  251.888769][T15975] IPv6: NLM_F_CREATE should be set when creating new route
[  252.025041][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  253.499600][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  253.794788][T16023] netlink: 'syz.2.4374': attribute type 3 has an invalid length.
[  253.801870][T16023] netlink: 'syz.2.4374': attribute type 1 has an invalid length.
[  254.063146][T16041] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  254.140779][T16047] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  254.403757][T16069] syzkaller0: entered promiscuous mode
[  254.405867][T16069] syzkaller0: entered allmulticast mode
[  254.701733][T16089] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  254.706413][T16089] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  255.339378][T16111] __nla_validate_parse: 10 callbacks suppressed
[  255.339431][T16111] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4417'.
[  255.504137][T16118] netlink: 'syz.2.4421': attribute type 3 has an invalid length.
[  255.652910][T16136] policy can only be matched on NF_INET_PRE_ROUTING
[  255.652935][T16136] unable to load match
[  255.763861][T16147] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4432'.
[  256.099501][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4446'.
[  256.214721][T16189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  256.340912][T16204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4457'.
[  256.344010][T16204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4457'.
[  256.374441][T16206] block nbd2: not configured, cannot reconfigure
[  256.707347][T16227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4468'.
[  256.756732][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4469'.
[  256.783232][T16231] vlan6: entered promiscuous mode
[  256.785441][T16231] bond0: entered promiscuous mode
[  256.828509][T16232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4468'.
[  257.055162][T16238] IPVS: Unknown mcast interface: hsr0
[  257.102575][T16236] lo speed is unknown, defaulting to 1000
[  257.255063][T16242] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  257.328562][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4473'.
[  257.421600][T16250] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  257.426413][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'.
[  257.476242][T16252] netlink: 'syz.1.4477': attribute type 4 has an invalid length.
[  257.496003][T16252] netlink: 'syz.1.4477': attribute type 4 has an invalid length.
[  257.555389][T16256] netlink: 'syz.1.4479': attribute type 11 has an invalid length.
[  258.137656][T16304] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1815685925)
[  258.141924][T16304] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  258.229575][T16308] openvswitch: netlink: Duplicate or invalid key (type 0).
[  258.231973][T16308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.509323][T16328] netlink: 'syz.1.4513': attribute type 19 has an invalid length.
[  258.712589][T16342] netlink: 'syz.0.4520': attribute type 9 has an invalid length.
[  258.889799][T16356] netlink: 'syz.0.4527': attribute type 5 has an invalid length.
[  259.171415][T16384] netlink: 'syz.0.4539': attribute type 2 has an invalid length.
[  259.760482][   T33] audit: type=1800 audit(1757688548.199:3): pid=16427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4559" name="memory.events" dev="tmpfs" ino=8168 res=0 errno=0
[  259.922759][T16443] 8021q: adding VLAN 0 to HW filter on device bond6
[  259.925577][T16448] netlink: 'syz.2.4569': attribute type 5 has an invalid length.
[  259.946958][T16443] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  259.958195][T16443] bond6: (slave macvlan2): Enslaving as a backup interface with a down link
[  259.981035][T16443] bond6: (slave macvlan2): Releasing backup interface
[  260.055975][T16460] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  260.275032][T16483] netlink: 'syz.2.4585': attribute type 1 has an invalid length.
[  260.642139][T16522] syzkaller1: entered promiscuous mode
[  260.644024][T16522] syzkaller1: entered allmulticast mode
[  260.845805][T16538] netlink: 'syz.0.4611': attribute type 4 has an invalid length.
[  261.014580][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0
[  261.018042][T16546] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  261.020964][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0
[  261.024317][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0
[  261.029136][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0
[  262.303681][T16599] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.306308][T16599] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  262.313451][ T1272] lo speed is unknown, defaulting to 1000
[  262.327529][ T1272] syz2: Port: 1 Link ACTIVE
[  262.338100][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.477455][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  262.593959][T16615] __nla_validate_parse: 13 callbacks suppressed
[  262.593975][T16615] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4643'.
[  262.835654][T16635] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.4650'.
[  262.844498][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4651'.
[  263.023506][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  264.122958][ T6373] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  264.126733][ T6373] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  264.192191][T16675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.319519][T16685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4672'.
[  264.390366][T16693] : renamed from veth0_to_bond
[  264.410648][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  264.496267][T16704] tipc: Invalid UDP bearer configuration
[  264.496298][T16704] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  264.504409][T16705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.564078][T16710] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4684'.
[  264.653974][T16719] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4689'.
[  265.831358][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4722'.
[  265.834947][T16787] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4722'.
[  266.059369][T16795] netlink: 'syz.0.4725': attribute type 23 has an invalid length.
[  266.094226][T16798] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4715'.
[  266.100252][T16800] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  266.150322][T16804] syzkaller1: entered promiscuous mode
[  266.152930][T16804] syzkaller1: entered allmulticast mode
[  266.472175][T16841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4745'.
[  266.479334][T16841] netlink: 'syz.2.4745': attribute type 5 has an invalid length.
[  266.553790][T16848] IPVS: Scheduler module ip_vs_sip not found
[  266.606061][T16855] netlink: 'syz.1.4750': attribute type 15 has an invalid length.
[  266.691663][T16841] lo speed is unknown, defaulting to 1000
[  266.771099][ T5882] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.775090][ T5882] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.822274][ T5882] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  266.827801][ T5882] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  266.956508][T16877] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  267.177988][T16883] netlink: 'syz.0.4763': attribute type 1 has an invalid length.
[  267.181424][T16883] nbd: error processing sock list
[  267.185038][T16883] block nbd0: shutting down sockets
[  267.479666][T16896] lo speed is unknown, defaulting to 1000
[  267.813398][T16926] __nla_validate_parse: 16 callbacks suppressed
[  267.813419][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4781'.
[  268.214219][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4792'.
[  268.297200][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  269.720577][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4822'.
[  269.734838][T17012] netlink: 'syz.0.4822': attribute type 15 has an invalid length.
[  269.745927][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4822'.
[  269.751490][T17012] netlink: 'syz.0.4822': attribute type 15 has an invalid length.
[  270.125049][T17030] netlink: 'syz.1.4830': attribute type 4 has an invalid length.
[  270.229099][T17032] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  270.299192][T17034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4832'.
[  270.376340][T17035] vlan4: entered promiscuous mode
[  270.450841][T17035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4832'.
[  270.744958][T17069] netlink: 'syz.0.4847': attribute type 7 has an invalid length.
[  270.751627][T17069] netlink: 'syz.0.4847': attribute type 8 has an invalid length.
[  270.795990][T17073] netlink: 'syz.0.4849': attribute type 1 has an invalid length.
[  270.824601][T17073] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  270.832292][T17073] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  270.848355][T17078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  270.851516][T17078] syzkaller0: entered promiscuous mode
[  270.853606][T17078] syzkaller0: entered allmulticast mode
[  270.862871][T17078] tipc: Resetting bearer <eth:syzkaller0>
[  270.866811][T17077] tipc: Resetting bearer <eth:syzkaller0>
[  270.883897][T17077] tipc: Disabling bearer <eth:syzkaller0>
[  270.894214][T17079] gretap1: entered promiscuous mode
[  270.899673][T17079] bond7: (slave gretap1): making interface the new active one
[  270.902699][T17079] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  270.924221][T17073] macvlan3: entered promiscuous mode
[  270.926283][T17073] macvlan3: entered allmulticast mode
[  270.928768][T17073] bond7: entered promiscuous mode
[  270.932139][T17073] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  270.943888][T17073] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  270.960946][T17073] bond7: left promiscuous mode
[  271.046622][T17083] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  271.152344][T17088] netlink: 'syz.2.4854': attribute type 10 has an invalid length.
[  271.173732][T17088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.195426][T17088] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  271.202498][T17090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4856'.
[  271.216022][T17088] netlink: 'syz.2.4854': attribute type 10 has an invalid length.
[  271.226091][T17088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4854'.
[  271.230294][T17092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4857'.
[  271.234142][T17088] batadv0: entered promiscuous mode
[  271.238601][T17088] batadv0: entered allmulticast mode
[  271.249854][T17088] bond0: (slave batadv0): Releasing backup interface
[  271.253736][T17088] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  271.260815][T17092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4857'.
[  271.266196][T17094] netlink: 'syz.1.4858': attribute type 7 has an invalid length.
[  271.269854][T17094] netlink: 'syz.1.4858': attribute type 8 has an invalid length.
[  271.466218][T17085] lo speed is unknown, defaulting to 1000
[  271.624714][T17118] openvswitch: netlink: nsh attr 0 has unexpected len 60 expected 0
[  271.630339][T17118] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.138865][T17213] __nla_validate_parse: 12 callbacks suppressed
[  273.138916][T17213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4907'.
[  273.268076][T17218] netlink: 'syz.1.4909': attribute type 13 has an invalid length.
[  273.271142][T17218] netlink: 'syz.1.4909': attribute type 17 has an invalid length.
[  273.280809][T17218] 8021q: adding VLAN 0 to HW filter on device team0
[  273.288381][T17218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.373227][T17218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4909'.
[  273.378720][T17218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.441330][T17218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.503455][T17217] lo speed is unknown, defaulting to 1000
[  273.695333][T17229] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.702777][T17229] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.758540][T17229] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.762484][T17229] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.837316][T17229] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.842007][T17229] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  273.890142][T17229] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  273.894082][T17229] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  274.009090][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  274.013995][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  274.039420][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  274.047368][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  274.085549][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  274.090779][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  274.113005][ T6373] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.120015][ T6373] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  274.412288][T17267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4931'.
[  274.460875][T17271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4932'.
[  274.582932][T17279] netlink: 'syz.0.4935': attribute type 10 has an invalid length.
[  274.586283][T17279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4935'.
[  274.590470][T17279] dummy0: entered promiscuous mode
[  274.594295][T17279] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  274.651066][T17282] syz_tun: entered allmulticast mode
[  274.654851][T17281] syz_tun: left allmulticast mode
[  274.694307][T17286] block nbd0: Unsupported socket: shutdown callout must be supported.
[  274.891249][T17304] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  275.241387][T17324] tipc: Enabled bearer <udp:s>, priority 26
[  275.611853][T17344] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  275.719548][T17350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.724867][T17354] vlan1: entered allmulticast mode
[  275.726840][T17354] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  275.734699][T17350] syzkaller0: entered promiscuous mode
[  275.744348][T17350] syzkaller0: entered allmulticast mode
[  275.776516][T17350] tipc: Resetting bearer <eth:syzkaller0>
[  275.784614][T17349] tipc: Resetting bearer <eth:syzkaller0>
[  275.819225][T17349] tipc: Disabling bearer <eth:syzkaller0>
[  275.831754][T17361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4972'.
[  275.840162][T17362] netlink: 'syz.1.4973': attribute type 1 has an invalid length.
[  275.842855][T17362] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4973'.
[  275.845703][T17362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4973'.
[  276.106791][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4979'.
[  276.123455][T17377] erspan0: entered promiscuous mode
[  276.125937][T17377] macvtap0: entered promiscuous mode
[  276.128712][T17377] macvtap0: entered allmulticast mode
[  276.130890][T17377] erspan0: entered allmulticast mode
[  276.146849][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'.
[  276.163310][T17364] lo speed is unknown, defaulting to 1000
[  276.280851][T17386] netlink: del zone limit has 4 unknown bytes
[  276.334868][T17388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.338781][T17388] syzkaller0: entered promiscuous mode
[  276.341219][T17388] syzkaller0: entered allmulticast mode
[  276.399744][T17388] tipc: Resetting bearer <eth:syzkaller0>
[  276.402358][T17388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.420071][T17387] tipc: Resetting bearer <eth:syzkaller0>
[  276.435682][T17387] tipc: Disabling bearer <eth:syzkaller0>
[  276.443203][T17370] lo speed is unknown, defaulting to 1000
[  276.697233][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  276.785710][T17418] netlink: 'syz.2.4998': attribute type 5 has an invalid length.
[  277.120471][T17436] lo speed is unknown, defaulting to 1000
[  277.270588][T17456] delete_channel: no stack
[  278.308768][T17548] dvmrp1: tun_chr_ioctl cmd 1074025677
[  278.311153][T17548] dvmrp1: linktype set to 805
[  278.401293][T17556] netlink: 'syz.0.5059': attribute type 2 has an invalid length.
[  278.424154][T17556] netlink: 'syz.0.5059': attribute type 9 has an invalid length.
[  278.430705][T17556] __nla_validate_parse: 4 callbacks suppressed
[  278.430721][T17556] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.5059'.
[  278.507335][T17564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5062'.
[  278.680949][T17580] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.5070'.
[  278.761844][T17586] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5073'.
[  278.876583][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5077'.
[  279.017842][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5083'.
[  279.056375][T17576] lo speed is unknown, defaulting to 1000
[  279.528756][T17607] lo speed is unknown, defaulting to 1000
[  279.641791][T17631] syzkaller1: entered promiscuous mode
[  279.646442][T17631] syzkaller1: entered allmulticast mode
[  279.926157][T17643] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.5097'.
[  279.932856][T17643] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  279.936224][T17643] openvswitch: netlink: Message has 252 unknown bytes.
[  280.124322][T17657] netlink: 'syz.2.5103': attribute type 13 has an invalid length.
[  280.128346][T17657] netlink: 'syz.2.5103': attribute type 17 has an invalid length.
[  280.142977][T17657] team0: left promiscuous mode
[  280.146317][T17657] team0: left allmulticast mode
[  280.153419][T17657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.296150][T17663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.481579][T17657] lo speed is unknown, defaulting to 1000
[  280.882119][T17669] sctp: [Deprecated]: syz.1.5107 (pid 17669) Use of int in maxseg socket option.
[  280.882119][T17669] Use struct sctp_assoc_value instead
[  281.406851][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5120'.
[  281.602326][T17715] netlink: 'syz.1.5128': attribute type 10 has an invalid length.
[  281.681576][T17722] vlan4: entered promiscuous mode
[  281.683612][T17722] team0: entered promiscuous mode
[  281.713806][T17724] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5132'.
[  281.992622][T17742] sock: sock_timestamping_bind_phc: sock not bind to device
[  282.861654][T17791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5162'.
[  283.195741][T17814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.456595][T17830] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5181'.
[  283.479491][T17830] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5181'.
[  283.825960][T17854] vcan0: tx drop: invalid sa for name 0x0000800000000001
[  283.830301][T17855] netlink: 22 bytes leftover after parsing attributes in process `syz.1.5193'.
[  284.280374][T17900] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5212'.
[  284.283852][T17900] netem: unknown loss type 12
[  284.286492][T17900] netem: change failed
[  284.561401][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5222'.
[  284.564841][T17923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5222'.
[  284.577253][T17923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5222'.
[  284.863388][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5235'.
[  284.866835][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5235'.
[  285.119711][T17967] netlink: 'syz.1.5242': attribute type 8 has an invalid length.
[  285.356020][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5249'.
[  285.431534][T17989] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  285.431934][   T13] bond0: (slave dummy0): interface is now down
[  285.443375][   T13] bond0: now running without any active interface!
[  285.599315][T17984] netlink: 'syz.2.5249': attribute type 3 has an invalid length.
[  285.602477][T17984] netlink: 'syz.2.5249': attribute type 1 has an invalid length.
[  286.738244][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  286.742329][T18062] delete_channel: no stack
[  286.783757][T18047] lo speed is unknown, defaulting to 1000
[  287.851082][T18130] netlink: 'syz.1.5309': attribute type 1 has an invalid length.
[  287.883548][T18133] sctp: [Deprecated]: syz.2.5310 (pid 18133) Use of int in max_burst socket option.
[  287.883548][T18133] Use struct sctp_assoc_value instead
[  287.933253][T18137] vlan0: entered allmulticast mode
[  287.935414][T18137] dummy0: entered allmulticast mode
[  288.001930][T18139] netlink: 'syz.1.5313': attribute type 3 has an invalid length.
[  288.354382][T18165] netlink: 'syz.2.5326': attribute type 1 has an invalid length.
[  288.722681][T18188] netlink: 'syz.1.5336': attribute type 15 has an invalid length.
[  288.725920][T18188] __nla_validate_parse: 7 callbacks suppressed
[  288.725933][T18188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5336'.
[  289.336503][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5359'.
[  289.886066][T18277] IPVS: length: 163 != 8
[  289.894073][T18279] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5376'.
[  290.485577][T18314] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5392'.
[  290.600769][T18320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5395'.
[  290.706237][T18324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.717360][T18324] syzkaller0: entered promiscuous mode
[  290.720010][T18324] syzkaller0: entered allmulticast mode
[  290.743353][T18324] tipc: Resetting bearer <eth:syzkaller0>
[  290.749753][T18323] tipc: Resetting bearer <eth:syzkaller0>
[  290.777562][T18323] tipc: Disabling bearer <eth:syzkaller0>
[  290.803351][T18330] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5400'.
[  290.806513][T18330] netlink: 59 bytes leftover after parsing attributes in process `syz.2.5400'.
[  290.810173][T18330] netlink: 59 bytes leftover after parsing attributes in process `syz.2.5400'.
[  290.883128][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5401'.
[  291.085815][T18356] IPv6: sit2: Disabled Multicast RS
[  291.233705][T18370] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5419'.
[  291.375418][T18382] tipc: Failed to remove unknown binding: 66,1,1/2007777466:4131102763/4131102765
[  291.383315][T18382] tipc: Failed to remove unknown binding: 66,1,1/2007777466:4131102763/4131102765
[  291.461959][T18388] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  291.728478][T18394] lo speed is unknown, defaulting to 1000
[  292.196133][T18414] lo speed is unknown, defaulting to 1000
[  292.549620][T18439] netlink: 'syz.0.5449': attribute type 1 has an invalid length.
[  292.585697][T18439] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  292.603275][   T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  292.604057][T18439] 8021q: adding VLAN 0 to HW filter on device bond8
[  292.697348][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  292.746631][T18439] bond8 (unregistering): (slave ip6gretap2): Removing an active aggregator
[  292.756435][T18439] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface
[  292.769132][T18439] bond8 (unregistering): Released all slaves
[  293.171582][   T56] block nbd0: Receive control failed (result -104)
[  293.532632][T18506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.535882][T18506] syzkaller0: entered promiscuous mode
[  293.538327][T18506] syzkaller0: entered allmulticast mode
[  293.564513][T18506] tipc: Resetting bearer <eth:syzkaller0>
[  293.571024][T18505] tipc: Resetting bearer <eth:syzkaller0>
[  293.589263][T18505] tipc: Disabling bearer <eth:syzkaller0>
[  293.754763][T18526] openvswitch: netlink: Duplicate or invalid key (type 0).
[  293.758769][T18526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.010278][T18553] wg1 speed is unknown, defaulting to 1000
[  294.012155][T18553] wg1 speed is unknown, defaulting to 1000
[  294.014447][T18553] wg1 speed is unknown, defaulting to 1000
[  294.041613][T18553] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  294.109743][T18553] wg1 speed is unknown, defaulting to 1000
[  294.114730][T18553] wg1 speed is unknown, defaulting to 1000
[  294.118911][T18553] wg1 speed is unknown, defaulting to 1000
[  294.312490][T18572] __nla_validate_parse: 6 callbacks suppressed
[  294.312509][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5511'.
[  294.338545][T18572] syz_tun (unregistering): left promiscuous mode
[  294.431882][T18581] netlink: 'syz.1.5515': attribute type 10 has an invalid length.
[  294.450577][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5516'.
[  294.502280][T18587] netlink: 'syz.2.5519': attribute type 1 has an invalid length.
[  294.505599][T18587] netlink: 'syz.2.5519': attribute type 1 has an invalid length.
[  294.693934][T18605] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5525'.
[  294.698563][T18605] netlink: 'syz.2.5525': attribute type 3 has an invalid length.
[  294.881924][T18621] netlink: 'syz.2.5533': attribute type 1 has an invalid length.
[  294.888913][T18621] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5533'.
[  295.055494][T18635] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.058763][T18635] syzkaller0: entered promiscuous mode
[  295.060776][T18635] syzkaller0: entered allmulticast mode
[  295.106290][T18635] tipc: Resetting bearer <eth:syzkaller0>
[  295.111399][T18633] tipc: Resetting bearer <eth:syzkaller0>
[  295.129781][T18633] tipc: Disabling bearer <eth:syzkaller0>
[  295.269127][T18648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5546'.
[  295.293743][T18648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5546'.
[  295.638726][T18657] lo speed is unknown, defaulting to 1000
[  295.642392][T18657] wg1 speed is unknown, defaulting to 1000
[  295.916896][T18690] netlink: 'syz.2.5562': attribute type 1 has an invalid length.
[  296.292027][T18706] bond0: Unable to set up delay as MII monitoring is disabled
[  296.353024][T18712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5572'.
[  296.627956][T18720] lo speed is unknown, defaulting to 1000
[  296.630774][T18720] wg1 speed is unknown, defaulting to 1000
[  297.273142][T18765] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  297.750126][T18795] bond0: default FDB implementation only supports local addresses
[  298.079405][T18822] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5620'.
[  298.123361][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5621'.
[  298.151103][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5621'.
[  298.201070][T18830] ip6tnl2: entered promiscuous mode
[  298.203366][T18830] ip6tnl2: entered allmulticast mode
[  298.206296][T18830] team0: Refused to change device type
[  299.516098][T18904] siw: device registration error -23
[  299.744398][T18923] __nla_validate_parse: 1 callbacks suppressed
[  299.744417][T18923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5666'.
[  300.134752][T18951] dummy0: left promiscuous mode
[  300.143562][T18951] wg1: left promiscuous mode
[  300.145823][T18951] wg1: left allmulticast mode
[  300.151388][T18951] bond3: left promiscuous mode
[  300.153172][T18951] nicvf0: left promiscuous mode
[  300.155113][T18951] ip6gre2: left allmulticast mode
[  300.156890][T18951] bond4: left promiscuous mode
[  300.160234][T18951] bond4: left allmulticast mode
[  300.165717][T18951] geneve4: left promiscuous mode
[  300.171505][T18951] geneve4: left allmulticast mode
[  300.176652][T18951] gretap1: left promiscuous mode
[  300.181017][T18951] erspan0: left allmulticast mode
[  300.182993][T18951] macvtap0: left promiscuous mode
[  300.184667][T18951] macvtap0: left allmulticast mode
[  300.202341][   T24] lo speed is unknown, defaulting to 1000
[  300.204648][   T24] syz2: Port: 1 Link DOWN
[  300.541925][T18977] netlink: 'syz.2.5688': attribute type 30 has an invalid length.
[  300.845402][T18990] syzkaller1: entered promiscuous mode
[  300.850210][T18990] syzkaller1: entered allmulticast mode
[  301.465635][T19011] netlink: 'syz.0.5702': attribute type 11 has an invalid length.
[  301.469388][T19011] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5702'.
[  301.515843][T19013] netlink: 'syz.0.5703': attribute type 1 has an invalid length.
[  301.554963][T19013] 8021q: adding VLAN 0 to HW filter on device bond9
[  301.571619][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'.
[  302.239152][T19045] bond0: (slave rose0): Error: Device can not be enslaved while up
[  302.243391][T19045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5719'.
[  302.700743][T19058] netlink: 'syz.2.5723': attribute type 2 has an invalid length.
[  302.703953][T19058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5723'.
[  302.713302][T19058] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  303.022441][T19084] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5733'.
[  303.760383][T19158] pim6reg1: entered promiscuous mode
[  303.762526][T19158] pim6reg1: entered allmulticast mode
[  303.834582][T19165] tap0: tun_chr_ioctl cmd 1074025677
[  303.836937][T19165] tap0: linktype set to 270
[  303.956732][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5771'.
[  304.793370][T19195] bond3: (slave veth3): Releasing active interface
[  304.802073][T19195] vlan3: left promiscuous mode
[  304.804315][T19195] bridge0: left promiscuous mode
[  304.806865][T19195] bridge12: port 1(vlan3) entered disabled state
[  304.832457][T19196] syzkaller0: entered promiscuous mode
[  304.835512][T19196] syzkaller0: entered allmulticast mode
[  304.846039][T19196] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  305.012321][T19208] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  305.265499][T19239] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5800'.
[  305.380423][T19247] netlink: 'syz.1.5804': attribute type 21 has an invalid length.
[  305.383910][T19247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5804'.
[  305.501278][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5808'.
[  305.873791][T19280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5819'.
[  305.880546][T19269] lo speed is unknown, defaulting to 1000
[  305.884311][T19269] wg1 speed is unknown, defaulting to 1000
[  306.048524][T19288] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.055776][T19288] syzkaller0: entered promiscuous mode
[  306.065389][T19288] syzkaller0: entered allmulticast mode
[  306.084722][T19288] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  306.120868][T19288] tipc: Resetting bearer <eth:syzkaller0>
[  306.142050][T19287] tipc: Resetting bearer <eth:syzkaller0>
[  306.162551][T19287] tipc: Disabling bearer <eth:syzkaller0>
[  306.729333][T19316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.733840][T19316] syzkaller0: MTU too low for tipc bearer
[  306.736063][T19316] tipc: Disabling bearer <eth:syzkaller0>
[  306.912946][T19322] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  306.994868][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5839'.
[  307.525587][T19367] netlink: 'syz.2.5857': attribute type 1 has an invalid length.
[  307.529464][T19367] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5857'.
[  307.945304][T19395] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5868'.
[  308.262991][T19428] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0
[  308.270383][T19428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5884'.
[  308.375976][T19438] netlink: 'syz.2.5888': attribute type 4 has an invalid length.
[  308.543684][T19447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5892'.
[  308.551774][T19451] gretap0: Device is already in use.
[  308.567653][T19447] netlink: 'syz.2.5892': attribute type 2 has an invalid length.
[  308.572739][T19447] netlink: 'syz.2.5892': attribute type 1 has an invalid length.
[  308.577974][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5892'.
[  309.665590][T19487] tipc: New replicast peer: 0.0.0.0
[  309.671155][T19487] tipc: Enabled bearer <udp:syz2>, priority 26
[  309.680159][T19487] tipc: New replicast peer: 255.255.255.255
[  309.829128][T19489] vlan0: left allmulticast mode
[  309.891905][ T6373] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.894585][ T6373] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.897452][ T6373] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.903939][ T6373] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.914112][ T6373] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.919467][ T6373] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  309.927828][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  309.930440][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.793453][T19531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.822490][T19531] __nla_validate_parse: 6 callbacks suppressed
[  310.822510][T19531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5929'.
[  310.830950][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5928'.
[  310.916109][T19526] lo speed is unknown, defaulting to 1000
[  310.955022][T19526] wg1 speed is unknown, defaulting to 1000
[  311.112110][T19526] netlink: 'syz.2.5927': attribute type 2 has an invalid length.
[  311.120016][T19526] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5927'.
[  311.128537][T19526] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  311.526199][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5936'.
[  311.553276][T19561] 8021q: adding VLAN 0 to HW filter on device bond1
[  311.606832][T19561] bond1: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  311.659387][ T5727] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  311.666788][T19566] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5941'.
[  311.778924][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  311.803398][T19576] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  312.002946][T19592] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  313.002392][   T33] audit: type=1800 audit(1757688601.439:4): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5970" name="blkio.bfq.time_recursive" dev="tmpfs" ino=9656 res=0 errno=0
[  313.390341][T19659] netlink: 'syz.1.5981': attribute type 1 has an invalid length.
[  313.554438][T19674] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5989'.
[  313.560096][T19674] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5989'.
[  313.951502][T19713] macsec0: entered promiscuous mode
[  313.953557][T19713] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  313.956228][T19713] macsec0: entered allmulticast mode
[  313.959731][T19713] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  313.971855][ T5242] Bluetooth: hci2: link tx timeout
[  313.973838][ T5242] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  313.978211][ T5242] Bluetooth: hci2: link tx timeout
[  313.980195][ T5242] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  314.238809][T19727] netlink: 'syz.0.6012': attribute type 32 has an invalid length.
[  314.241340][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6012'.
[  314.244814][T19727] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  314.474478][T19749] netlink: 'syz.2.6022': attribute type 3 has an invalid length.
[  314.555556][T19759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6026'.
[  314.716597][T19775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6034'.
[  314.853248][T19783] veth0: entered promiscuous mode
[  314.857216][T19783] veth0: left promiscuous mode
[  315.084737][T19809] batadv1: entered allmulticast mode
[  315.088083][T19809] 8021q: adding VLAN 0 to HW filter on device batadv1
[  316.057822][ T5242] Bluetooth: hci2: command 0x0405 tx timeout
[  317.496738][T19893] __nla_validate_parse: 1 callbacks suppressed
[  317.496756][T19893] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6085'.
[  317.912690][T19897] lo speed is unknown, defaulting to 1000
[  317.916715][T19897] wg1 speed is unknown, defaulting to 1000
[  318.116651][T19915] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  318.347699][T19931] 8021q: adding VLAN 0 to HW filter on device batadv1
[  318.354906][T19931] batadv1: entered promiscuous mode
[  318.367651][T19931] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  318.380599][T19931] team0: Failed to send options change via netlink (err -105)
[  318.383736][T19931] team0: Port device batadv1 added
[  318.533657][T19936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  318.725651][T19941] lo speed is unknown, defaulting to 1000
[  318.733742][T19941] wg1 speed is unknown, defaulting to 1000
[  319.306710][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6116'.
[  319.322165][T19974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6116'.
[  319.362083][T19980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6120'.
[  319.581598][T19999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.584511][T19999] IPv6: NLM_F_CREATE should be set when creating new route
[  319.587370][T19999] IPv6: NLM_F_CREATE should be set when creating new route
[  319.671267][T20007] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  319.794707][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6139'.
[  320.445249][T20081] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  320.727555][T20097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6174'.
[  320.991855][T20104] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  320.995803][T20104] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  321.315657][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6180'.
[  321.320835][T20113] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6180'.
[  321.326497][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6180'.
[  321.472338][T20121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6185'.
[  322.020348][T20158] netlink: 'syz.0.6202': attribute type 1 has an invalid length.
[  322.191803][T20174] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  322.209477][T20174] syzkaller0: entered promiscuous mode
[  322.211365][T20174] syzkaller0: entered allmulticast mode
[  322.432766][T20193] netlink: 'syz.0.6219': attribute type 6 has an invalid length.
[  322.539537][T20200] pimreg3: entered allmulticast mode
[  322.658878][T20209] netlink: 'syz.0.6226': attribute type 4 has an invalid length.
[  322.745849][T20217] netlink: 'syz.2.6230': attribute type 21 has an invalid length.
[  322.749195][T20217] __nla_validate_parse: 1 callbacks suppressed
[  322.749210][T20217] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6230'.
[  322.761734][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6230'.
[  322.996636][T20234] syzkaller1: entered promiscuous mode
[  322.999117][T20234] syzkaller1: entered allmulticast mode
[  323.050599][T20238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6241'.
[  323.106882][T20240] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6242'.
[  323.254326][T20251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6247'.
[  323.438536][T20270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.883574][T20313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'.
[  324.032889][   T33] audit: type=1800 audit(1757688612.469:5): pid=20321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6278" name="blkio.bfq.time_recursive" dev="tmpfs" ino=11301 res=0 errno=0
[  324.310896][T20323] lo speed is unknown, defaulting to 1000
[  324.314064][T20323] wg1 speed is unknown, defaulting to 1000
[  324.633009][T20348] netlink: 'syz.0.6291': attribute type 16 has an invalid length.
[  324.635493][T20348] netlink: 'syz.0.6291': attribute type 3 has an invalid length.
[  324.644805][T20348] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.6291'.
[  324.710768][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6292'.
[  324.795815][T20358] pim6reg1: entered promiscuous mode
[  324.800027][T20358] pim6reg1: entered allmulticast mode
[  324.966019][T20368] IPVS: Scheduler module ip_vs_sip not found
[  324.976895][T20377] xt_HMARK: spi-set and port-set can't be combined
[  324.992223][T20379] sock: sock_timestamping_bind_phc: sock not bind to device
[  325.074980][T20385] netlink: 332 bytes leftover after parsing attributes in process `syz.2.6308'.
[  325.082657][T20385] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6308'.
[  325.120303][T20392] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  325.880369][T20459] netlink: 'syz.1.6340': attribute type 8 has an invalid length.
[  326.192971][T20482] netlink: 'syz.0.6351': attribute type 5 has an invalid length.
[  326.385367][T20500] netlink: 'syz.0.6360': attribute type 1 has an invalid length.
[  326.749683][T20533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.132887][T20566] syzkaller0: left promiscuous mode
[  327.134728][T20566] syzkaller0: left allmulticast mode
[  327.273467][T20565] lo speed is unknown, defaulting to 1000
[  327.276424][T20565] wg1 speed is unknown, defaulting to 1000
[  327.706408][T20579] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  327.708838][T20579] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  327.711474][T20579] macsec0: left promiscuous mode
[  327.713144][T20579] macsec0: left allmulticast mode
[  327.717468][T20579] batadv1: left allmulticast mode
[  328.325637][T20612] __nla_validate_parse: 12 callbacks suppressed
[  328.325648][T20612] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6413'.
[  328.471064][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6417'.
[  329.379524][T20644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  329.400328][T20648] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6428'.
[  329.404021][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6428'.
[  329.692978][T20656] lo speed is unknown, defaulting to 1000
[  329.695723][T20656] wg1 speed is unknown, defaulting to 1000
[  329.931838][T20697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6451'.
[  330.069229][T20705] netlink: 'syz.0.6454': attribute type 1 has an invalid length.
[  330.723067][T20727] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  330.728784][T20727] syzkaller0: entered promiscuous mode
[  330.731168][T20727] syzkaller0: entered allmulticast mode
[  330.736956][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6464'.
[  330.801397][T20729] netlink: 'syz.1.6465': attribute type 1 has an invalid length.
[  330.903250][T20733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6467'.
[  331.312828][   T56] block nbd1: Receive control failed (result -32)
[  331.560635][T20775] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6487'.
[  331.743945][T20786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6492'.
[  331.747207][T20786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6492'.
[  331.803839][T20790] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  332.331059][T20834] openvswitch: netlink: IPv4 tun info is not correct
[  333.131052][T20902] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.184387][T20902] syzkaller0: entered promiscuous mode
[  333.186179][T20902] syzkaller0: entered allmulticast mode
[  333.189522][T20902] tipc: Resetting bearer <eth:syzkaller0>
[  333.206938][T20901] tipc: Resetting bearer <eth:syzkaller0>
[  334.332089][T20901] tipc: Disabling bearer <eth:syzkaller0>
[  334.338032][T20910] __nla_validate_parse: 6 callbacks suppressed
[  334.338042][T20910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6546'.
[  334.503820][T20930] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  334.663090][T20948] netlink: 134820 bytes leftover after parsing attributes in process `syz.2.6564'.
[  334.753110][T20962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.815872][T20970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6575'.
[  334.902319][T20980] netlink: 'syz.0.6580': attribute type 15 has an invalid length.
[  335.179467][T21013] netlink: 'syz.0.6596': attribute type 1 has an invalid length.
[  335.196217][T21013] 8021q: adding VLAN 0 to HW filter on device bond11
[  335.255803][T21022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6600'.
[  335.404773][T21035] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  335.443176][T21041] netlink: 'syz.2.6608': attribute type 2 has an invalid length.
[  335.463744][T21043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6610'.
[  335.502679][T21047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6612'.
[  335.625853][   T33] audit: type=1800 audit(1757688624.059:6): pid=21051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6611" name="memory.events" dev="tmpfs" ino=10583 res=0 errno=0
[  336.511116][T21063] netlink: 'syz.2.6617': attribute type 1 has an invalid length.
[  336.521273][T21063] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6617'.
[  337.043290][T21122] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6644'.
[  337.181555][T21120] lo speed is unknown, defaulting to 1000
[  337.184580][T21120] wg1 speed is unknown, defaulting to 1000
[  338.103245][T21147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6654'.
[  338.185040][T21156] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  338.233191][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6660'.
[  338.421273][T21182] nft_compat: unsupported protocol 0
[  338.510516][T21192] team0: No ports can be present during mode change
[  338.514327][T21192] tipc: Resetting bearer <eth:vlan0>
[  338.517272][T21192] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  338.690821][T21213] netlink: 'syz.2.6686': attribute type 5 has an invalid length.
[  338.708898][T21215] lo: entered promiscuous mode
[  338.712864][T21215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  338.785683][ T6373] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  338.793600][ T6373] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  338.796811][ T6373] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  338.802078][ T6373] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  338.952437][T21237] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  339.468233][T21270] netlink: 'syz.2.6712': attribute type 1 has an invalid length.
[  339.477143][T21270] netlink: 'syz.2.6712': attribute type 1 has an invalid length.
[  339.540225][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.549741][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.554481][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.557341][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.603648][T21267] lo speed is unknown, defaulting to 1000
[  339.606349][T21267] wg1 speed is unknown, defaulting to 1000
[  339.642353][T21282] __nla_validate_parse: 2 callbacks suppressed
[  339.642369][T21282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6715'.
[  339.852748][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6721'.
[  340.985181][T21341] sctp: [Deprecated]: syz.0.6743 (pid 21341) Use of struct sctp_assoc_value in delayed_ack socket option.
[  340.985181][T21341] Use struct sctp_sack_info instead
[  341.051083][T21348] netlink: 'syz.0.6747': attribute type 1 has an invalid length.
[  341.054087][T21348] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6747'.
[  341.325499][T21374] pim6reg: entered allmulticast mode
[  341.332062][T21374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6758'.
[  341.802359][T21397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6769'.
[  341.879449][T21401] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6771'.
[  341.882541][T21401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6771'.
[  342.072599][T21412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6776'.
[  342.394754][T21439] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6786'.
[  342.913000][T21445] IPv6: sit3: Disabled Multicast RS
[  342.915377][T21445] sit3: entered allmulticast mode
[  343.006393][T21447] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  343.298908][T21476] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6803'.
[  343.505725][T21504] netlink: 'syz.2.6816': attribute type 1 has an invalid length.
[  343.522574][T21504] 8021q: adding VLAN 0 to HW filter on device bond5
[  343.563323][T21504] 8021q: adding VLAN 0 to HW filter on device bond5
[  343.567224][T21504] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  343.571402][T21504] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  343.613217][T21512] veth11: entered promiscuous mode
[  343.618190][T21512] bond5: (slave veth11): Enslaving as an active interface with a down link
[  343.859092][T21528] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  343.924737][T21525] netlink: 'syz.1.6822': attribute type 10 has an invalid length.
[  344.034733][T21539] netlink: 'syz.1.6828': attribute type 1 has an invalid length.
[  345.135301][T21571] __nla_validate_parse: 3 callbacks suppressed
[  345.135317][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6842'.
[  345.152071][T21570] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.156327][T21570] syzkaller0: entered promiscuous mode
[  345.159079][T21570] syzkaller0: entered allmulticast mode
[  345.183371][T21570] tipc: Resetting bearer <eth:syzkaller0>
[  345.189838][T21568] tipc: Resetting bearer <eth:syzkaller0>
[  345.209436][T21568] tipc: Disabling bearer <eth:syzkaller0>
[  345.240442][T21577] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6845'.
[  345.292247][T21582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6848'.
[  345.445293][T21602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6856'.
[  345.501973][T21598] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  345.508185][T21598] bond0 (unregistering): Released all slaves
[  345.528095][T21605] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  345.670611][T21618] netlink: 'syz.2.6862': attribute type 1 has an invalid length.
[  345.927547][T21638] netlink: 'syz.2.6871': attribute type 1 has an invalid length.
[  345.971098][T21638] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.003040][T21638] bond0: (slave geneve3): making interface the new active one
[  346.008964][T21638] bond0: (slave geneve3): Enslaving as an active interface with an up link
[  346.012530][ T6373] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  346.021539][ T6373] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  346.031092][ T6373] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  346.034395][ T6373] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  346.605192][T21665] lo speed is unknown, defaulting to 1000
[  346.609351][T21665] wg1 speed is unknown, defaulting to 1000
[  346.673390][T21689] netem: change failed
[  346.990316][T21687] lo speed is unknown, defaulting to 1000
[  346.994144][T21687] wg1 speed is unknown, defaulting to 1000
[  347.163899][T21714] net veth1_virt_wifi : renamed from virt_wifi0
[  347.558148][T21733] netlink: 'syz.1.6911': attribute type 1 has an invalid length.
[  347.560567][T21733] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6911'.
[  348.034144][T21759] netlink: 'syz.1.6924': attribute type 14 has an invalid length.
[  348.052159][T21762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6925'.
[  348.077996][T21759] netlink: 'syz.1.6924': attribute type 14 has an invalid length.
[  348.106962][T21767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6926'.
[  348.118658][T21767] netlink: 'syz.0.6926': attribute type 29 has an invalid length.
[  348.121580][T21767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6926'.
[  348.280867][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6935'.
[  348.479272][T21802] only policy match revision 0 supported
[  348.479285][T21802] unable to load match
[  348.894368][T21838] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6957'.
[  348.994216][T21842] tipc: Failed to remove unknown binding: 66,1,1/2766508339:995098780/995098782
[  349.001834][T21842] tipc: Failed to remove unknown binding: 66,1,1/2766508339:995098780/995098782
[  349.005163][T21842] tipc: Failed to remove unknown binding: 66,1,1/2766508339:995098780/995098782
[  349.279060][T21854] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  349.481851][T21866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.485603][T21866] syzkaller0: entered promiscuous mode
[  349.489080][T21866] syzkaller0: entered allmulticast mode
[  349.508389][T21866] tipc: Resetting bearer <eth:syzkaller0>
[  349.512652][T21865] tipc: Resetting bearer <eth:syzkaller0>
[  349.524951][T21865] tipc: Disabling bearer <eth:syzkaller0>
[  349.752093][T21880] syzkaller1: entered promiscuous mode
[  349.754310][T21880] syzkaller1: entered allmulticast mode
[  350.039036][T21902] syz_tun: entered allmulticast mode
[  350.045763][T21902] dvmrp8: entered allmulticast mode
[  350.053284][T21902] syz_tun: left allmulticast mode
[  350.055084][T21902] dvmrp8: left allmulticast mode
[  350.119813][T21902] netlink: 'syz.0.6986': attribute type 23 has an invalid length.
[  350.177763][T21913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.220058][T21919] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  350.581639][T21949] __nla_validate_parse: 6 callbacks suppressed
[  350.581655][T21949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7009'.
[  350.855989][T21956] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  351.311470][T21971] netlink: 'syz.1.7016': attribute type 1 has an invalid length.
[  351.551744][T21995] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  351.918533][T22025] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  352.034526][T22034] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.090255][T22036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7047'.
[  352.100033][T22036] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  352.104356][T22036] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  352.319897][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7053'.
[  352.328454][T22052] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7054'.
[  352.720959][T22076] lo speed is unknown, defaulting to 1000
[  352.732799][T22076] wg1 speed is unknown, defaulting to 1000
[  353.009493][T22099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7075'.
[  353.078314][T22099] nbd: socks must be embedded in a SOCK_ITEM attr
[  353.094269][T22105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7078'.
[  353.443538][T22117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7080'.
[  353.946388][T22157] sch_tbf: burst 0 is lower than device ip6gre0 mtu (65485) !
[  354.050284][T22163] netlink: 'syz.2.7101': attribute type 83 has an invalid length.
[  354.086882][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7105'.
[  354.093475][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7105'.
[  355.053212][T22221] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.7124'.
[  355.174438][T22231] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  355.483453][T22216] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  355.635695][T22275] __nla_validate_parse: 1 callbacks suppressed
[  355.635708][T22275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7150'.
[  355.648900][T22275] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7150'.
[  355.649992][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7149'.
[  355.652402][T22275] netlink: 'syz.2.7150': attribute type 5 has an invalid length.
[  355.663271][T22275] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7150'.
[  355.681111][T22277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7151'.
[  355.830090][T22291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7158'.
[  355.929345][T22301] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  356.001889][T22301] bond6: entered promiscuous mode
[  356.004005][T22301] bond6: entered allmulticast mode
[  356.007485][T22301] 8021q: adding VLAN 0 to HW filter on device bond6
[  356.043453][T22310] netlink: 'syz.1.7167': attribute type 1 has an invalid length.
[  356.046494][T22310] netlink: 'syz.1.7167': attribute type 2 has an invalid length.
[  356.363258][T22347] openvswitch: netlink: Message has 1 unknown bytes.
[  356.377969][T22347] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.463363][T22355] netlink: 'syz.2.7187': attribute type 1 has an invalid length.
[  356.480693][T22355] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7187'.
[  356.887622][T22381] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7198'.
[  356.948059][T22373] lo speed is unknown, defaulting to 1000
[  356.951286][T22373] wg1 speed is unknown, defaulting to 1000
[  357.677200][T22438] batadv_slave_0: entered promiscuous mode
[  357.680969][T22437] batadv_slave_0: left promiscuous mode
[  357.780244][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7223'.
[  357.783875][T22441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7223'.
[  357.928357][T22443] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  357.932521][T22443] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  358.092200][T22455] tipc: Enabling of bearer <eth:ipvlan1> rejected, failed to enable media
[  358.996456][T22525] netlink: 'syz.1.7263': attribute type 27 has an invalid length.
[  359.049584][T22525] 8021q: adding VLAN 0 to HW filter on device team0
[  359.058716][T22525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  359.300659][T22549] netlink: 'syz.0.7273': attribute type 4 has an invalid length.
[  359.310871][T22549] : renamed from bond0
[  359.449823][T22567] vlan0: entered promiscuous mode
[  359.451477][T22567] team0: entered promiscuous mode
[  359.493665][T22571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.518312][T22571] syzkaller0: entered promiscuous mode
[  359.528241][T22571] syzkaller0: entered allmulticast mode
[  359.528402][T22576] netlink: zone id is out of range
[  359.532381][T22576] netlink: zone id is out of range
[  359.534290][T22576] netlink: zone id is out of range
[  359.536269][T22576] netlink: zone id is out of range
[  359.541048][T22576] netlink: zone id is out of range
[  359.543180][T22576] netlink: zone id is out of range
[  359.551351][T22571] tipc: Resetting bearer <eth:syzkaller0>
[  359.560446][T22570] tipc: Resetting bearer <eth:syzkaller0>
[  359.573185][T22570] tipc: Disabling bearer <eth:syzkaller0>
[  360.300467][T22652] netem: change failed
[  360.721323][T22659] lo speed is unknown, defaulting to 1000
[  360.733780][T22659] wg1 speed is unknown, defaulting to 1000
[  360.942799][T22673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.953314][T22673] syzkaller0: entered promiscuous mode
[  360.955565][T22673] syzkaller0: entered allmulticast mode
[  360.999398][T22673] tipc: Resetting bearer <eth:syzkaller0>
[  361.018462][T22663] lo speed is unknown, defaulting to 1000
[  361.021415][T22663] wg1 speed is unknown, defaulting to 1000
[  361.061335][T22672] tipc: Resetting bearer <eth:syzkaller0>
[  361.080839][T22672] tipc: Disabling bearer <eth:syzkaller0>
[  361.410619][T22697] __nla_validate_parse: 7 callbacks suppressed
[  361.410632][T22697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7340'.
[  362.122415][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7359'.
[  362.248546][T22748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7362'.
[  362.351562][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7365'.
[  362.355191][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7365'.
[  362.454140][T22761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7367'.
[  362.727766][T22779] netlink: 308 bytes leftover after parsing attributes in process `syz.2.7376'.
[  362.731516][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7376'.
[  362.735055][T22779] net_ratelimit: 18 callbacks suppressed
[  362.735069][T22779] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  363.163821][T22807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7383'.
[  363.205983][T22792] lo speed is unknown, defaulting to 1000
[  363.209165][T22792] wg1 speed is unknown, defaulting to 1000
[  363.241204][T22809] netlink: 'syz.1.7383': attribute type 4 has an invalid length.
[  363.249440][T22809] netlink: 'syz.1.7383': attribute type 4 has an invalid length.
[  363.368469][T22817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7388'.
[  363.473176][T22821] netlink: 'syz.2.7390': attribute type 11 has an invalid length.
[  363.476394][T22821] netlink: 'syz.2.7390': attribute type 11 has an invalid length.
[  364.554818][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.558294][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.562095][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.571762][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.720356][T22941] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.821553][T23033] bridge0: port 1(hsr_slave_0) entered blocking state
[  365.824195][T23033] bridge0: port 1(hsr_slave_0) entered disabled state
[  365.829711][T23033] hsr_slave_0: entered allmulticast mode
[  365.834050][T23033] hsr_slave_0: entered promiscuous mode
[  366.081390][T23059] netlink: 'syz.0.7498': attribute type 1 has an invalid length.
[  366.955495][T23105] lo speed is unknown, defaulting to 1000
[  366.959269][T23105] wg1 speed is unknown, defaulting to 1000
[  367.273893][T23119] ==================================================================
[  367.276646][T23119] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  367.279110][T23119] Read of size 1 at addr ffff888029240c30 by task syz.2.7522/23119
[  367.282734][T23119] 
[  367.284054][T23119] CPU: 0 UID: 0 PID: 23119 Comm: syz.2.7522 Not tainted syzkaller #0 PREEMPT(full) 
[  367.284066][T23119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.284074][T23119] Call Trace:
[  367.284079][T23119]  <TASK>
[  367.284084][T23119]  dump_stack_lvl+0x189/0x250
[  367.284100][T23119]  ? __kasan_check_byte+0x12/0x40
[  367.284115][T23119]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.284124][T23119]  ? lock_release+0x4b/0x3e0
[  367.284138][T23119]  ? __virt_addr_valid+0x4a5/0x5c0
[  367.284150][T23119]  print_report+0xca/0x240
[  367.284159][T23119]  ? xfrm_state_find+0x2cf2/0x5400
[  367.284166][T23119]  kasan_report+0x118/0x150
[  367.284177][T23119]  ? xfrm_state_find+0x2cf2/0x5400
[  367.284186][T23119]  xfrm_state_find+0x2cf2/0x5400
[  367.284199][T23119]  ? xfrm_state_find+0x1da/0x5400
[  367.284217][T23119]  ? __pfx_xfrm_state_find+0x10/0x10
[  367.284226][T23119]  ? ip6_pol_route+0x547/0x1180
[  367.284237][T23119]  ? fib6_rule_saddr+0xc0/0x420
[  367.284248][T23119]  ? __pfx_ip6_pol_route+0x10/0x10
[  367.284259][T23119]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  367.284275][T23119]  ? ipv6_addr_label+0x1b5/0x240
[  367.284288][T23119]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  367.284297][T23119]  ? __lock_acquire+0xab9/0xd20
[  367.284312][T23119]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  367.284323][T23119]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  367.284333][T23119]  ? xfrm_expand_policies+0x41f/0x6a0
[  367.284343][T23119]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  367.284353][T23119]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  367.284364][T23119]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  367.284376][T23119]  xfrm_lookup_route+0x3c/0x1c0
[  367.284385][T23119]  ? ip6_datagram_dst_update+0x511/0xcb0
[  367.284396][T23119]  ip6_datagram_dst_update+0x75c/0xcb0
[  367.284408][T23119]  ? __pfx_ip6_datagram_dst_update+0x10/0x10
[  367.284418][T23119]  ? futex_private_hash_put+0x4b/0x280
[  367.284428][T23119]  ? __lock_acquire+0xab9/0xd20
[  367.284439][T23119]  ? __ip6_datagram_connect+0xb92/0x1150
[  367.284450][T23119]  __ip6_datagram_connect+0xbd1/0x1150
[  367.284465][T23119]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  367.284475][T23119]  ? __local_bh_enable_ip+0x12d/0x1c0
[  367.284483][T23119]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  367.284492][T23119]  ip6_datagram_connect_v6_only+0x63/0xa0
[  367.284503][T23119]  __sys_connect+0x316/0x440
[  367.284512][T23119]  ? __pfx___sys_connect+0x10/0x10
[  367.284521][T23119]  ? rcu_is_watching+0x15/0xb0
[  367.284530][T23119]  __x64_sys_connect+0x7a/0x90
[  367.284537][T23119]  do_syscall_64+0xfa/0x3b0
[  367.284546][T23119]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.284556][T23119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.284564][T23119]  ? exc_page_fault+0x9f/0xf0
[  367.284575][T23119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.284583][T23119] RIP: 0033:0x7f2db8d8eba9
[  367.284592][T23119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.284600][T23119] RSP: 002b:00007f2db6ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  367.284609][T23119] RAX: ffffffffffffffda RBX: 00007f2db8fd5fa0 RCX: 00007f2db8d8eba9
[  367.284616][T23119] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003
[  367.284621][T23119] RBP: 00007f2db8e11e19 R08: 0000000000000000 R09: 0000000000000000
[  367.284626][T23119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  367.284631][T23119] R13: 00007f2db8fd6038 R14: 00007f2db8fd5fa0 R15: 00007ffe898e28e8
[  367.284641][T23119]  </TASK>
[  367.284645][T23119] 
[  367.400100][T23119] Allocated by task 16764:
[  367.401765][T23119]  kasan_save_track+0x3e/0x80
[  367.403551][T23119]  __kasan_slab_alloc+0x6c/0x80
[  367.405137][T23119]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  367.406885][T23119]  xfrm_state_alloc+0x24/0x2f0
[  367.408457][T23119]  __find_acq_core+0x8a7/0x1c00
[  367.410048][T23119]  xfrm_find_acq+0x78/0xa0
[  367.411498][T23119]  xfrm_alloc_userspi+0x6b3/0xc90
[  367.413124][T23119]  xfrm_user_rcv_msg+0x7a3/0xab0
[  367.414739][T23119]  netlink_rcv_skb+0x208/0x470
[  367.416280][T23119]  xfrm_netlink_rcv+0x79/0x90
[  367.417890][T23119]  netlink_unicast+0x82f/0x9e0
[  367.419446][T23119]  netlink_sendmsg+0x805/0xb30
[  367.421002][T23119]  __sock_sendmsg+0x21c/0x270
[  367.422535][T23119]  ____sys_sendmsg+0x505/0x830
[  367.424033][T23119]  ___sys_sendmsg+0x21f/0x2a0
[  367.425496][T23119]  __x64_sys_sendmsg+0x19b/0x260
[  367.427046][T23119]  do_syscall_64+0xfa/0x3b0
[  367.428566][T23119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.430518][T23119] 
[  367.431376][T23119] Freed by task 5915:
[  367.432694][T23119]  kasan_save_track+0x3e/0x80
[  367.434509][T23119]  kasan_save_free_info+0x46/0x50
[  367.436561][T23119]  __kasan_slab_free+0x5b/0x80
[  367.438506][T23119]  kmem_cache_free+0x18f/0x400
[  367.440470][T23119]  xfrm_state_gc_task+0x52d/0x6b0
[  367.442119][T23119]  process_scheduled_works+0xae1/0x17b0
[  367.443850][T23119]  worker_thread+0x8a0/0xda0
[  367.445286][T23119]  kthread+0x711/0x8a0
[  367.446554][T23119]  ret_from_fork+0x3fc/0x770
[  367.448004][T23119]  ret_from_fork_asm+0x1a/0x30
[  367.449517][T23119] 
[  367.450281][T23119] The buggy address belongs to the object at ffff888029240900
[  367.450281][T23119]  which belongs to the cache xfrm_state of size 928
[  367.454708][T23119] The buggy address is located 816 bytes inside of
[  367.454708][T23119]  freed 928-byte region [ffff888029240900, ffff888029240ca0)
[  367.458972][T23119] 
[  367.459732][T23119] The buggy address belongs to the physical page:
[  367.461749][T23119] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029243a80 pfn:0x29240
[  367.465445][T23119] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  367.468251][T23119] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  367.470554][T23119] page_type: f5(slab)
[  367.471810][T23119] raw: 00fff00000000040 ffff88801af2e640 dead000000000122 0000000000000000
[  367.474480][T23119] raw: ffff888029243a80 00000000800e000a 00000000f5000000 0000000000000000
[  367.477458][T23119] head: 00fff00000000040 ffff88801af2e640 dead000000000122 0000000000000000
[  367.480807][T23119] head: ffff888029243a80 00000000800e000a 00000000f5000000 0000000000000000
[  367.484137][T23119] head: 00fff00000000002 ffffea0000a49001 00000000ffffffff 00000000ffffffff
[  367.487439][T23119] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  367.490625][T23119] page dumped because: kasan: bad access detected
[  367.493089][T23119] page_owner tracks the page as allocated
[  367.495263][T23119] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8105, tgid 8095 (syz.0.927), ts 108693882095, free_ts 96202658183
[  367.502122][T23119]  post_alloc_hook+0x240/0x2a0
[  367.503971][T23119]  get_page_from_freelist+0x21e4/0x22c0
[  367.506093][T23119]  __alloc_frozen_pages_noprof+0x181/0x370
[  367.507997][T23119]  alloc_pages_mpol+0x232/0x4a0
[  367.509572][T23119]  allocate_slab+0x8a/0x370
[  367.511022][T23119]  ___slab_alloc+0xbeb/0x1420
[  367.512485][T23119]  kmem_cache_alloc_noprof+0x283/0x3c0
[  367.514174][T23119]  xfrm_state_alloc+0x24/0x2f0
[  367.515656][T23119]  xfrm_state_find+0x37d4/0x5400
[  367.517526][T23119]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  367.519915][T23119]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  367.521697][T23119]  xfrm_lookup_route+0x3c/0x1c0
[  367.523319][T23119]  udp_sendmsg+0x142e/0x2170
[  367.524801][T23119]  __sock_sendmsg+0x19c/0x270
[  367.526354][T23119]  ____sys_sendmsg+0x52d/0x830
[  367.527906][T23119]  ___sys_sendmsg+0x21f/0x2a0
[  367.529424][T23119] page last free pid 7343 tgid 7343 stack trace:
[  367.531591][T23119]  __free_frozen_pages+0xbc4/0xd30
[  367.533662][T23119]  vfree+0x25a/0x400
[  367.535254][T23119]  xskq_destroy+0x40/0x60
[  367.536907][T23119]  xsk_release+0x671/0x8b0
[  367.538375][T23119]  sock_close+0xc3/0x240
[  367.540074][T23119]  __fput+0x44c/0xa70
[  367.541666][T23119]  task_work_run+0x1d4/0x260
[  367.543236][T23119]  exit_to_user_mode_loop+0xec/0x110
[  367.544877][T23119]  do_syscall_64+0x2bd/0x3b0
[  367.546611][T23119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.548861][T23119] 
[  367.549651][T23119] Memory state around the buggy address:
[  367.551399][T23119]  ffff888029240b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  367.553832][T23119]  ffff888029240b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  367.556862][T23119] >ffff888029240c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  367.559970][T23119]                                      ^
[  367.561776][T23119]  ffff888029240c80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  367.564341][T23119]  ffff888029240d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  367.566865][T23119] ==================================================================
[  367.576139][T23119] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  367.578447][T23119] CPU: 0 UID: 0 PID: 23119 Comm: syz.2.7522 Not tainted syzkaller #0 PREEMPT(full) 
[  367.582178][T23119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.586141][T23119] Call Trace:
[  367.587249][T23119]  <TASK>
[  367.588473][T23119]  dump_stack_lvl+0x99/0x250
[  367.590001][T23119]  ? __asan_memcpy+0x40/0x70
[  367.591446][T23119]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.593068][T23119]  ? __pfx__printk+0x10/0x10
[  367.594501][T23119]  vpanic+0x281/0x750
[  367.595744][T23119]  ? preempt_schedule+0xae/0xc0
[  367.597276][T23119]  ? __pfx_vpanic+0x10/0x10
[  367.598815][T23119]  ? preempt_schedule_common+0x83/0xd0
[  367.601026][T23119]  ? preempt_schedule+0xae/0xc0
[  367.602992][T23119]  ? __pfx_preempt_schedule+0x10/0x10
[  367.604994][T23119]  panic+0xb9/0xc0
[  367.606173][T23119]  ? __pfx_panic+0x10/0x10
[  367.607571][T23119]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  367.609456][T23119]  ? xfrm_state_find+0x2cf2/0x5400
[  367.611063][T23119]  check_panic_on_warn+0x89/0xb0
[  367.612593][T23119]  ? xfrm_state_find+0x2cf2/0x5400
[  367.614169][T23119]  end_report+0x78/0x160
[  367.615457][T23119]  kasan_report+0x129/0x150
[  367.616958][T23119]  ? xfrm_state_find+0x2cf2/0x5400
[  367.618700][T23119]  xfrm_state_find+0x2cf2/0x5400
[  367.620627][T23119]  ? xfrm_state_find+0x1da/0x5400
[  367.622686][T23119]  ? __pfx_xfrm_state_find+0x10/0x10
[  367.624681][T23119]  ? ip6_pol_route+0x547/0x1180
[  367.626245][T23119]  ? fib6_rule_saddr+0xc0/0x420
[  367.627782][T23119]  ? __pfx_ip6_pol_route+0x10/0x10
[  367.629494][T23119]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  367.631442][T23119]  ? ipv6_addr_label+0x1b5/0x240
[  367.632991][T23119]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  367.635035][T23119]  ? __lock_acquire+0xab9/0xd20
[  367.636539][T23119]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  367.638232][T23119]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  367.640357][T23119]  ? xfrm_expand_policies+0x41f/0x6a0
[  367.642484][T23119]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  367.644512][T23119]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  367.646458][T23119]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  367.648583][T23119]  xfrm_lookup_route+0x3c/0x1c0
[  367.650554][T23119]  ? ip6_datagram_dst_update+0x511/0xcb0
[  367.652825][T23119]  ip6_datagram_dst_update+0x75c/0xcb0
[  367.655055][T23119]  ? __pfx_ip6_datagram_dst_update+0x10/0x10
[  367.657266][T23119]  ? futex_private_hash_put+0x4b/0x280
[  367.659122][T23119]  ? __lock_acquire+0xab9/0xd20
[  367.660653][T23119]  ? __ip6_datagram_connect+0xb92/0x1150
[  367.662442][T23119]  __ip6_datagram_connect+0xbd1/0x1150
[  367.664172][T23119]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  367.666032][T23119]  ? __local_bh_enable_ip+0x12d/0x1c0
[  367.667717][T23119]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  367.669441][T23119]  ip6_datagram_connect_v6_only+0x63/0xa0
[  367.671268][T23119]  __sys_connect+0x316/0x440
[  367.672741][T23119]  ? __pfx___sys_connect+0x10/0x10
[  367.674494][T23119]  ? rcu_is_watching+0x15/0xb0
[  367.676279][T23119]  __x64_sys_connect+0x7a/0x90
[  367.678232][T23119]  do_syscall_64+0xfa/0x3b0
[  367.679943][T23119]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.681567][T23119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.683448][T23119]  ? exc_page_fault+0x9f/0xf0
[  367.684938][T23119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.686761][T23119] RIP: 0033:0x7f2db8d8eba9
[  367.688159][T23119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.694013][T23119] RSP: 002b:00007f2db6ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  367.696590][T23119] RAX: ffffffffffffffda RBX: 00007f2db8fd5fa0 RCX: 00007f2db8d8eba9
[  367.699090][T23119] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003
[  367.701547][T23119] RBP: 00007f2db8e11e19 R08: 0000000000000000 R09: 0000000000000000
[  367.704324][T23119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  367.707617][T23119] R13: 00007f2db8fd6038 R14: 00007f2db8fd5fa0 R15: 00007ffe898e28e8
[  367.710784][T23119]  </TASK>
[  367.712606][T23119] Kernel Offset: disabled
[  367.714071][T23119] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:50:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000177c RDI=000000000000177d RBP=00000000000003f8 RSP=ffffc90006f06cb0
R8 =ffff88801fcc0237 R9 =1ffff11003f98046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd915 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2db6ff66c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2db6ff5fc8 CR3=0000000120c46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2db8fa7498 00007f2db8fa7470 XMM03=00007f2db8fa74a8 00007f2db8fa74a0
XMM04=00007f2db9b0d100 00007f2db8fa7460 XMM05=00007f2db8fa7478 00007f2db8fa74c0
XMM06=00007f2db8fa74b8 00007f2db8fa74b0 XMM07=00007f2db8fa74a8 00007f2db8fa74a0
XMM08=0000000000000000 00007f2db8e12ee7 XMM09=0000000000000000 00007f2db8e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a842e3dbe207db00 RBX=ffffffff819683f8 RCX=a842e3dbe207db00 RDX=0000000000000001
RSI=ffffffff8d9b8dc3 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39830 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7a03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32d22ff8 CR3=0000000022eba000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2db8e12e53
XMM06=0000000000000000 00007f2db8e12e4d XMM07=0000000000000000 00007f2db8e12e61
XMM08=0000000000000000 00007f2db8e12ee7 XMM09=0000000000000000 00007f2db8e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
