last executing test programs:

1.730410032s ago: executing program 2 (id=2872):
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x8, {{0xa, 0x0, 0x4, @mcast2, 0x2}}}, 0x88)
getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90)

1.641840781s ago: executing program 2 (id=2874):
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffdef)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='b\t'], 0x9)

1.565621322s ago: executing program 2 (id=2875):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="beace62c64a8c41c6c5d24723cfc68c9d5615ec80738ab91168194aeb863b48b0ba1aa055bc022f96767be3223852c0f1e1b8bdbd321c3569f63974157790db9bf1d73baab2da8dbc42ba6be4a37e70fd1d2b13f41e553ac5e0348eb307d01423d54453b861249101c4e94a38dd8471c3f2fb54cd6b837eee73344e20168420616b06f6862c6a57c7cc5debd5842fae0461e051da61ad73bce70f49f6e0f76001900cf8b125aee94", 0xa8}], 0x1)

798.843398ms ago: executing program 0 (id=2880):
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', <r5=>0x0, 0x29, 0x4, 0x5, 0x8000, 0x11, @loopback, @dev={0xfe, 0x80, '\x00', 0x12}, 0x10, 0x20, 0x8, 0xffffff81}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r5, 0x700, 0x80, 0x2, 0x3, {{0x13, 0x4, 0x2, 0xb, 0x4c, 0x64, 0x0, 0x8, 0x0, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0xb, 0x99, [@dev={0xac, 0x14, 0x14, 0x3a}, @local]}, @timestamp_addr={0x44, 0x2c, 0xcb, 0x1, 0x8, [{@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7}, {@local, 0xed6}, {@private=0xa010100, 0x198a}, {@broadcast, 0x6}]}]}}}}})
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c)
r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf000014000380040004000400050008000200000000000c00018008000100000000", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a)

588.511995ms ago: executing program 2 (id=2881):
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0)

569.871539ms ago: executing program 0 (id=2882):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000000)={0x13, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x208}, [@IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x0, 0x3, 0x2}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP2_TO={0x0, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x24008010}, 0x4400d040)

489.647601ms ago: executing program 0 (id=2883):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)

488.909782ms ago: executing program 0 (id=2884):
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x30, 0x4}, 0x80)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a")

378.86648ms ago: executing program 1 (id=2885):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback, 0x80}}, 0x0, 0x7ffe}, 0x90)

378.490453ms ago: executing program 0 (id=2886):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)

378.210386ms ago: executing program 2 (id=2887):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x8)

249.967697ms ago: executing program 1 (id=2888):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000340)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc)

249.605395ms ago: executing program 0 (id=2889):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10101)
socket$inet(0x2, 0x3, 0x30)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, 0x1, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44005}, 0x4001)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xef}]}, {0x4}, {0xfffffffffffffd6c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

141.573845ms ago: executing program 2 (id=2890):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0xc100)
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x704)
splice(r0, 0x0, r3, 0x0, 0x1100000000f336, 0x1)

141.309583ms ago: executing program 1 (id=2891):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x17c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @coaddr={0x14, 0xe, @in=@empty}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xfffffff7}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

65.490575ms ago: executing program 1 (id=2892):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffff"], 0xf8}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633"], 0x6f4}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

65.38211ms ago: executing program 1 (id=2893):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28)

0s ago: executing program 1 (id=2894):
unshare(0x20000400)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x64, 0xfffffffffffffffd}, 0x33)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44310' (ED25519) to the list of known hosts.
syzkaller login: [   56.643196][ T5547] cgroup: Unknown subsys name 'net'
[   56.721133][ T5547] cgroup: Unknown subsys name 'cpuset'
[   56.728532][ T5547] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.522853][ T5547] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.085316][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.089220][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.092245][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.096162][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.099570][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.127012][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.131992][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.136200][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.141466][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.145225][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.159977][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.163445][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.167876][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.171689][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.174798][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.863768][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.867763][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.870882][ T5619] bridge_slave_0: entered allmulticast mode
[   63.874458][ T5619] bridge_slave_0: entered promiscuous mode
[   63.896824][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.900137][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.903133][ T5619] bridge_slave_1: entered allmulticast mode
[   63.907124][ T5619] bridge_slave_1: entered promiscuous mode
[   63.911111][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.913583][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.916682][ T5623] bridge_slave_0: entered allmulticast mode
[   63.919597][ T5623] bridge_slave_0: entered promiscuous mode
[   63.923489][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.926061][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.928571][ T5623] bridge_slave_1: entered allmulticast mode
[   63.931743][ T5623] bridge_slave_1: entered promiscuous mode
[   63.982207][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.987567][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.000048][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.004687][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.029214][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.031844][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.034669][ T5615] bridge_slave_0: entered allmulticast mode
[   64.037734][ T5615] bridge_slave_0: entered promiscuous mode
[   64.040943][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.043304][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.046185][ T5615] bridge_slave_1: entered allmulticast mode
[   64.048885][ T5615] bridge_slave_1: entered promiscuous mode
[   64.073785][ T5619] team0: Port device team_slave_0 added
[   64.077074][ T5623] team0: Port device team_slave_0 added
[   64.093453][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.099756][ T5619] team0: Port device team_slave_1 added
[   64.103897][ T5623] team0: Port device team_slave_1 added
[   64.107452][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.170795][ T5615] team0: Port device team_slave_0 added
[   64.173896][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.177603][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.188131][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.193970][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.198000][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.208930][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.215943][ T5615] team0: Port device team_slave_1 added
[   64.230315][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.233476][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.243774][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.249167][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.251998][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.262334][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.292715][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.295646][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.306233][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.313959][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.316996][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.326954][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.390725][ T5619] hsr_slave_0: entered promiscuous mode
[   64.393957][ T5619] hsr_slave_1: entered promiscuous mode
[   64.419452][ T5623] hsr_slave_0: entered promiscuous mode
[   64.422026][ T5623] hsr_slave_1: entered promiscuous mode
[   64.424234][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   64.426824][ T5623] Cannot create hsr debugfs directory
[   64.432428][ T5615] hsr_slave_0: entered promiscuous mode
[   64.435013][ T5615] hsr_slave_1: entered promiscuous mode
[   64.437534][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[   64.439394][ T5615] Cannot create hsr debugfs directory
[   64.797181][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.810928][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.815001][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.822013][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.827537][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.834228][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.849487][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.854341][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   64.907357][ T5619] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.913895][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   64.917567][ T5619] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.923198][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   64.926884][ T5619] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.932438][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   64.941389][ T5619] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.949491][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.032061][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.041070][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.049648][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.053801][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.058099][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.062854][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.070583][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.077658][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.140971][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.148536][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.175975][   T53] Bluetooth: hci0: command tx timeout
[   65.175977][ T5617] Bluetooth: hci1: command tx timeout
[   65.179214][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   65.189877][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   65.195729][  T595] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.199044][  T595] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.212915][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.215206][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.219980][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.222341][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.240702][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.243184][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.259960][   T53] Bluetooth: hci2: command tx timeout
[   65.304436][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.329941][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   65.342988][  T595] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.345728][  T595] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.363207][  T595] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.365867][  T595] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.544474][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.592543][ T5619] veth0_vlan: entered promiscuous mode
[   65.602378][ T5619] veth1_vlan: entered promiscuous mode
[   65.620476][ T5619] veth0_macvtap: entered promiscuous mode
[   65.630291][ T5619] veth1_macvtap: entered promiscuous mode
[   65.644082][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.662579][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.674728][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.691177][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.694885][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.704858][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.709865][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.740198][ T5615] veth0_vlan: entered promiscuous mode
[   65.762039][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.770258][ T5615] veth1_vlan: entered promiscuous mode
[   65.814791][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.821733][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.871586][ T5615] veth0_macvtap: entered promiscuous mode
[   65.879236][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.881435][ T5615] veth1_macvtap: entered promiscuous mode
[   65.885823][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.929353][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.933082][ T5623] veth0_vlan: entered promiscuous mode
[   65.953421][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.971959][ T5690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.977454][ T5690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.978234][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.990117][ T5623] veth1_vlan: entered promiscuous mode
[   66.000280][ T5690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.005345][ T5690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.099752][ T5623] veth0_macvtap: entered promiscuous mode
[   66.129190][ T5623] veth1_macvtap: entered promiscuous mode
[   66.198694][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.209920][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.218400][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.272061][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.277910][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.283543][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.287337][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.303578][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.321109][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.327998][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.473804][ T5726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4'.
[   66.485065][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.498403][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.547069][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.553039][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.628709][ T5731] Zero length message leads to an empty skb
[   66.649994][ T5732] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.256563][   T53] Bluetooth: hci1: command tx timeout
[   67.256736][ T5617] Bluetooth: hci0: command tx timeout
[   67.326609][ T5774] syzkaller0: entered promiscuous mode
[   67.330851][ T5774] syzkaller0: entered allmulticast mode
[   67.337149][ T5617] Bluetooth: hci2: command tx timeout
[   67.408228][ T5778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'.
[   67.554224][ T5786] netlink: 244 bytes leftover after parsing attributes in process `syz.2.32'.
[   68.511652][ T5842] netlink: 'syz.1.56': attribute type 1 has an invalid length.
[   68.523904][ T5842] gretap1: entered allmulticast mode
[   68.644958][ T5846] netlink: 'syz.0.58': attribute type 5 has an invalid length.
[   69.335619][ T5617] Bluetooth: hci0: command tx timeout
[   69.340852][ T5617] Bluetooth: hci1: command tx timeout
[   69.345950][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'.
[   69.418794][   T53] Bluetooth: hci2: command tx timeout
[   70.642181][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'.
[   70.702657][ T5902] dvmrp6: entered allmulticast mode
[   70.754351][ T5902] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   70.784930][ T5902] xt_connbytes: Forcing CT accounting to be enabled
[   70.962687][ T5823] Set syz1 is full, maxelem 65536 reached
[   71.203468][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.207607][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.322652][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.351700][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.416352][   T53] Bluetooth: hci1: command tx timeout
[   71.418273][   T53] Bluetooth: hci0: command tx timeout
[   71.483645][ T5922] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[   71.495698][   T53] Bluetooth: hci2: command tx timeout
[   71.542341][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.558837][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.572040][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.576936][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.616158][ T5910] syz.2.85 (5910) used greatest stack depth: 20064 bytes left
[   71.690012][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'.
[   71.741978][ T5931] bond1 (unregistering): Released all slaves
[   72.084128][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.103'.
[   72.224068][ T5961] syz.1.105 uses obsolete (PF_INET,SOCK_PACKET)
[   72.284062][ T5969] netlink: 204 bytes leftover after parsing attributes in process `syz.0.111'.
[   72.293028][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.111'.
[   72.800169][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'.
[   73.040862][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'.
[   73.044557][ T6003] netlink: 60 bytes leftover after parsing attributes in process `syz.2.128'.
[   73.380058][ T5985] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   73.405690][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'.
[   73.594444][ T6040] netlink: 'syz.1.147': attribute type 89 has an invalid length.
[   73.716631][ T6048] netlink: 'syz.1.151': attribute type 6 has an invalid length.
[   73.798863][ T6054] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   73.809932][ T6054] netlink: 96 bytes leftover after parsing attributes in process `syz.1.154'.
[   73.822458][ T6054] netlink: 1 bytes leftover after parsing attributes in process `syz.1.154'.
[   73.831055][ T6054] netlink: 'syz.1.154': attribute type 1 has an invalid length.
[   73.996716][ T6071] syz.0.161: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   74.004491][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: syz.0.161 Not tainted syzkaller #0 PREEMPT(full) 
[   74.004533][ T6071] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.004541][ T6071] Call Trace:
[   74.004547][ T6071]  <TASK>
[   74.004552][ T6071]  dump_stack_lvl+0xe8/0x150
[   74.004570][ T6071]  warn_alloc+0x249/0x340
[   74.004585][ T6071]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   74.004600][ T6071]  ? __pfx_warn_alloc+0x10/0x10
[   74.004614][ T6071]  ? kasan_save_track+0x4f/0x80
[   74.004625][ T6071]  ? kasan_save_track+0x3e/0x80
[   74.004635][ T6071]  ? __kasan_kmalloc+0x93/0xb0
[   74.004646][ T6071]  ? __kmalloc_cache_noprof+0x31c/0x660
[   74.004658][ T6071]  ? xskq_create+0x56/0x170
[   74.004670][ T6071]  ? xsk_setsockopt+0x54c/0x990
[   74.004679][ T6071]  ? do_sock_setsockopt+0x17c/0x1b0
[   74.004692][ T6071]  ? __x64_sys_setsockopt+0x13d/0x1b0
[   74.004703][ T6071]  ? do_syscall_64+0x15f/0xf80
[   74.004717][ T6071]  __vmalloc_node_range_noprof+0x132/0x1750
[   74.004740][ T6071]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   74.004754][ T6071]  ? __kasan_kmalloc+0x93/0xb0
[   74.004766][ T6071]  vmalloc_user_noprof+0xad/0xe0
[   74.004777][ T6071]  ? xskq_create+0xbf/0x170
[   74.004794][ T6071]  xskq_create+0xbf/0x170
[   74.004806][ T6071]  xsk_init_queue+0x8a/0xe0
[   74.004817][ T6071]  xsk_setsockopt+0x54c/0x990
[   74.004828][ T6071]  ? __pfx_xsk_setsockopt+0x10/0x10
[   74.004838][ T6071]  ? __pfx_aa_sk_perm+0x10/0x10
[   74.004850][ T6071]  ? aa_sock_opt_perm+0xff/0x1a0
[   74.004864][ T6071]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   74.004877][ T6071]  ? __pfx_xsk_setsockopt+0x10/0x10
[   74.004887][ T6071]  do_sock_setsockopt+0x17c/0x1b0
[   74.004900][ T6071]  __x64_sys_setsockopt+0x13d/0x1b0
[   74.004911][ T6071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.004920][ T6071]  do_syscall_64+0x15f/0xf80
[   74.004930][ T6071]  ? trace_irq_disable+0x3b/0x140
[   74.004946][ T6071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.004956][ T6071] RIP: 0033:0x7effc7d9cdd9
[   74.004966][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   74.004973][ T6071] RSP: 002b:00007effc8bec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   74.004983][ T6071] RAX: ffffffffffffffda RBX: 00007effc8015fa0 RCX: 00007effc7d9cdd9
[   74.004989][ T6071] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[   74.004994][ T6071] RBP: 00007effc7e32d69 R08: 0000000000000004 R09: 0000000000000000
[   74.004999][ T6071] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   74.005004][ T6071] R13: 00007effc8016038 R14: 00007effc8015fa0 R15: 00007ffd1caed078
[   74.005016][ T6071]  </TASK>
[   74.005020][ T6071] Mem-Info:
[   74.115645][ T6071] active_anon:5066 inactive_anon:0 isolated_anon:0
[   74.115645][ T6071]  active_file:11264 inactive_file:38315 isolated_file:0
[   74.115645][ T6071]  unevictable:1768 dirty:1567 writeback:0
[   74.115645][ T6071]  slab_reclaimable:9452 slab_unreclaimable:81480
[   74.115645][ T6071]  mapped:18152 shmem:2362 pagetables:873
[   74.115645][ T6071]  sec_pagetables:0 bounce:0
[   74.115645][ T6071]  kernel_misc_reclaimable:0
[   74.115645][ T6071]  free:1141281 free_pcp:18498 free_cma:0
[   74.134161][ T6071] Node 0 active_anon:9224kB inactive_anon:0kB active_file:24372kB inactive_file:13672kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39900kB dirty:332kB writeback:0kB shmem:4904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7680kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   74.150149][ T6071] Node 1 active_anon:11040kB inactive_anon:0kB active_file:20684kB inactive_file:139588kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32708kB dirty:5936kB writeback:0kB shmem:4544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3960kB pagetables:1412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   74.164616][ T6071] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   74.174698][ T6071] lowmem_reserve[]: 0 1587 2117 2117 2117
[   74.176690][ T6071] Node 0 DMA32 free:1611512kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625328kB mlocked:0kB bounce:0kB free_pcp:13808kB local_pcp:244kB free_cma:0kB
[   74.189305][ T6071] lowmem_reserve[]: 0 0 530 530 530
[   74.192047][ T6071] Node 0 Normal free:25992kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9276kB inactive_anon:0kB active_file:24372kB inactive_file:13672kB unevictable:3536kB writepending:332kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:9576kB local_pcp:9072kB free_cma:0kB
[   74.202852][ T6071] lowmem_reserve[]: 0 0 0 0 0
[   74.204597][ T6071] Node 1 Normal free:2912164kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11040kB inactive_anon:0kB active_file:20684kB inactive_file:139588kB unevictable:3536kB writepending:5936kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:50276kB local_pcp:30392kB free_cma:0kB
[   74.218622][ T6071] lowmem_reserve[]: 0 0 0 0 0
[   74.222752][ T6071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   74.228501][ T6071] Node 0 DMA32: 6*4kB (UM) 4*8kB (M) 4*16kB (M) 4*32kB (M) 4*64kB (M) 0*128kB 5*256kB (UM) 2*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 390*4096kB (M) = 1611512kB
[   74.235281][ T6071] Node 0 Normal: 30*4kB (UM) 58*8kB (UME) 34*16kB (UME) 140*32kB (UME) 156*64kB (UME) 24*128kB (UM) 5*256kB (U) 3*512kB (UME) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 25576kB
[   74.242579][ T6071] Node 1 Normal: 123*4kB (UME) 515*8kB (UM) 372*16kB (UME) 8*32kB (UME) 27*64kB (UME) 7*128kB (UME) 5*256kB (M) 13*512kB (UME) 9*1024kB (M) 5*2048kB (UM) 701*4096kB (M) = 2912132kB
[   74.251121][ T6071] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   74.254102][ T6071] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   74.257160][ T6071] 51943 total pagecache pages
[   74.258677][ T6071] 0 pages in swap cache
[   74.260119][ T6071] Free swap  = 124996kB
[   74.261457][ T6071] Total swap = 124996kB
[   74.262828][ T6071] 1834877 pages RAM
[   74.264246][ T6071] 0 pages HighMem/MovableOnly
[   74.265911][ T6071] 390246 pages reserved
[   74.267230][ T6071] 0 pages cma reserved
[   74.307443][ T6080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.792104][ T6119] batadv_slave_1: entered promiscuous mode
[   74.796302][ T6118] batadv_slave_1: left promiscuous mode
[   74.859851][ T6121] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   74.889879][ T6125] SET target dimension over the limit!
[   75.068377][ T6140] netlink: 'syz.1.194': attribute type 3 has an invalid length.
[   75.163531][ T6144] bond1: Unable to set peer notification delay as MII monitoring is disabled
[   75.172635][ T6144] bond1 (unregistering): Released all slaves
[   75.463162][ T6159] netlink: 'syz.0.203': attribute type 1 has an invalid length.
[   76.028267][ T6188] netlink: 'syz.2.216': attribute type 2 has an invalid length.
[   76.873656][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[   76.879242][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[   77.869955][ T6320] __nla_validate_parse: 4 callbacks suppressed
[   77.869975][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.247'.
[   78.360930][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'.
[   78.488227][ T6349] netlink: 'syz.2.261': attribute type 3 has an invalid length.
[   78.498007][ T6349] netlink: 'syz.2.261': attribute type 3 has an invalid length.
[   80.429070][ T6460] netlink: 'syz.0.306': attribute type 1 has an invalid length.
[   80.433195][ T6460] netlink: 'syz.0.306': attribute type 2 has an invalid length.
[   80.437947][ T6460] netlink: 'syz.0.306': attribute type 1 has an invalid length.
[   80.441097][ T6460] netlink: 'syz.0.306': attribute type 3 has an invalid length.
[   80.444172][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'.
[   80.621525][ T6474] bridge1: the hash_elasticity option has been deprecated and is always 16
[   80.624561][ T6474] bridge1: entered allmulticast mode
[   80.901324][ T6489] netlink: 'syz.1.319': attribute type 4 has an invalid length.
[   80.914416][  T782] IPVS: starting estimator thread 0...
[   81.006889][ T6497] raw_sendmsg: syz.0.323 forgot to set AF_INET. Fix it!
[   81.010154][ T6491] IPVS: using max 80 ests per chain, 192000 per kthread
[   81.166465][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'.
[   81.351961][ T6519] bond1: Removing last ns target with arp_interval on
[   81.675113][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.347'.
[   81.684460][ T6548] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[   81.875837][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.354'.
[   82.094036][ T6579] openvswitch: netlink: Missing valid actions attribute.
[   82.101611][ T6579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.142885][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'.
[   82.322450][ T6595] netlink: 'syz.1.369': attribute type 1 has an invalid length.
[   82.358704][ T6595] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   82.364033][ T6595] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   82.414545][ T6599] bond2: (slave gretap1): making interface the new active one
[   82.420274][ T6599] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   82.481641][ T6595] bond2: (slave bridge1): Enslaving as an active interface with a down link
[   82.521271][ T6595] macvlan2: entered promiscuous mode
[   82.524843][ T6595] macvlan2: entered allmulticast mode
[   82.529028][ T6595] bond2: entered promiscuous mode
[   82.532942][ T6595] gretap1: entered promiscuous mode
[   82.545102][ T6595] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   82.562817][ T6595] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   82.584308][ T6595] bond2: left promiscuous mode
[   82.586582][ T6595] gretap1: left promiscuous mode
[   82.666811][ T6595] syz.1.369 (6595) used greatest stack depth: 19984 bytes left
[   83.771005][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'.
[   83.821501][ T6685] syzkaller1: entered promiscuous mode
[   83.834090][ T6685] syzkaller1: entered allmulticast mode
[   84.132907][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'.
[   84.140279][ T6697] syzkaller0: entered promiscuous mode
[   84.150063][ T6697] syzkaller0: entered allmulticast mode
[   84.456015][ T6704] block nbd0: server does not support multiple connections per device.
[   84.461177][ T6704] block nbd0: shutting down sockets
[   84.788502][ T6730] syzkaller1: entered promiscuous mode
[   84.795293][ T6730] syzkaller1: entered allmulticast mode
[   85.014235][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'.
[   85.254502][ T6748] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   85.833940][ T6772] xt_l2tp: v2 tid > 0xffff: 37482740
[   85.985046][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.437'.
[   86.088443][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'.
[   86.188573][ T6801] tipc: Trying to set illegal importance in message
[   86.290152][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[   86.760113][ T6840] netlink: 17 bytes leftover after parsing attributes in process `syz.1.464'.
[   87.107418][  T941] cfg80211: failed to load regulatory.db
[   87.459215][ T6878] ip6tnl1: entered allmulticast mode
[   87.546159][ T6884] syzkaller0: entered promiscuous mode
[   87.559303][ T6884] syzkaller0: entered allmulticast mode
[   87.766299][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.777530][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.795722][  T783] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   87.912696][ T6903] netlink: 80 bytes leftover after parsing attributes in process `syz.1.495'.
[   87.962813][ T6911] ieee802154 phy0 wpan0: encryption failed: -22
[   88.146757][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'.
[   88.170513][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'.
[   88.268505][   T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   88.775979][  T783] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   89.001300][ T6962] ipt_REJECT: ECHOREPLY no longer supported.
[   89.103311][ T6973] __nla_validate_parse: 4 callbacks suppressed
[   89.103328][ T6973] netlink: 52 bytes leftover after parsing attributes in process `syz.0.520'.
[   89.110147][ T6973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.909253][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'.
[   90.031984][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'.
[   90.035013][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[   90.046214][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'.
[   90.049505][ T5690] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.049918][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[   90.053903][ T5690] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.061784][ T5690] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.065051][ T5690] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.238905][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.544'.
[   90.243572][ T7040] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   90.740313][ T7060] ipvlan3: entered promiscuous mode
[   91.453252][ T7106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.464803][ T7106] IPVS: Unknown mcast interface: .
[   91.582833][ T7113] bridge0: port 3(vlan2) entered blocking state
[   91.585996][ T7113] bridge0: port 3(vlan2) entered disabled state
[   91.588752][ T7113] vlan2: entered allmulticast mode
[   91.590957][ T7113] geneve0: entered allmulticast mode
[   91.594663][ T7113] vlan2: entered promiscuous mode
[   91.596961][ T7113] geneve0: entered promiscuous mode
[   91.646830][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'.
[   91.652413][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.576'.
[   91.846293][ T7123] netlink: 'syz.2.580': attribute type 10 has an invalid length.
[   91.860693][ T7123] team0: Failed to send options change via netlink (err -105)
[   91.863962][ T7123] team0: Port device dummy0 added
[   91.869871][ T7123] netlink: 'syz.2.580': attribute type 10 has an invalid length.
[   91.874260][ T7123] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   91.884149][ T7123] team0: Failed to send options change via netlink (err -105)
[   91.887843][ T7123] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   91.892050][ T7123] team0: Port device dummy0 removed
[   91.902495][ T7123] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   91.984681][ T7127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.055928][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   92.108977][ T7127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.202132][ T7138] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   92.221739][ T7127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.248755][ T6987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   92.331652][ T7127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.372427][ T7146] netlink: 'syz.0.588': attribute type 13 has an invalid length.
[   92.383796][ T7146] netlink: 'syz.0.588': attribute type 17 has an invalid length.
[   92.397601][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.400682][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.486421][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.495011][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.553408][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'.
[   92.635282][ T7146] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.638539][ T7146] 8021q: adding VLAN 0 to HW filter on device team0
[   92.644995][ T7146] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.669699][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.672048][ T7146] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.678004][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.680372][ T7146] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.692558][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.697507][ T7146] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.715724][ T7146] veth1_vlan: left promiscuous mode
[   92.718450][ T7146] veth0_vlan: left promiscuous mode
[   92.721142][ T7146] veth0_vlan: entered promiscuous mode
[   92.726136][ T7146] veth1_vlan: entered promiscuous mode
[   92.734371][ T7146] veth1_macvtap: left promiscuous mode
[   92.738220][ T7146] veth0_macvtap: left promiscuous mode
[   92.741154][ T7146] veth0_macvtap: entered promiscuous mode
[   92.752694][ T7146] veth1_macvtap: entered promiscuous mode
[   92.759835][ T7146] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.765564][ T7146] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.771378][ T7146] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.778504][ T7146] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.787608][ T7146] bridge1: left allmulticast mode
[   92.790950][ T7146] ip6tnl1: left allmulticast mode
[   92.865109][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.888720][ T5690] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.896902][ T5690] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.912209][ T5690] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.390137][ T7177] syzkaller0: entered promiscuous mode
[   93.392521][ T7177] syzkaller0: entered allmulticast mode
[   93.400292][ T7177] 0: reclassify loop, rule prio 0, protocol 800
[   93.422605][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   94.840697][ T7194] bridge2: entered promiscuous mode
[   94.842540][ T7194] bridge2: entered allmulticast mode
[   94.948854][ T7202] netlink: 'syz.2.613': attribute type 8 has an invalid length.
[   94.951316][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'.
[   94.960455][ T7202] bond0: entered promiscuous mode
[   94.962231][ T7202] bond_slave_0: entered promiscuous mode
[   94.964550][ T7202] bond_slave_1: entered promiscuous mode
[   94.966878][ T7202] dummy0: entered promiscuous mode
[   94.976934][ T7202] gretap0: entered promiscuous mode
[   94.980162][ T7202] team0: entered promiscuous mode
[   94.982360][ T7202] team_slave_0: entered promiscuous mode
[   94.984889][ T7202] team_slave_1: entered promiscuous mode
[   94.989703][ T7202] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   94.993979][ T7202] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[   95.000174][ T7202] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network
[   95.005026][ T7202] hsr1: entered promiscuous mode
[   95.172775][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'.
[   95.248988][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'.
[   95.257921][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'.
[   95.353855][ T7233] netlink: 'syz.0.629': attribute type 21 has an invalid length.
[   95.360382][ T7233] netlink: 'syz.0.629': attribute type 22 has an invalid length.
[   95.370539][ T7233] netlink: 'syz.0.629': attribute type 23 has an invalid length.
[   95.375250][ T7233] netlink: 136 bytes leftover after parsing attributes in process `syz.0.629'.
[   95.718535][ T7252] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[   95.820541][ T7254] syzkaller0: entered promiscuous mode
[   95.825256][ T7254] syzkaller0: entered allmulticast mode
[   95.962572][ T7259] tipc: Started in network mode
[   95.968791][ T7259] tipc: Node identity 426bd5e100aa, cluster identity 4711
[   95.978688][ T7259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.007934][ T7262] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.641'.
[   96.013796][ T7259] syzkaller0: entered promiscuous mode
[   96.016982][ T7259] syzkaller0: entered allmulticast mode
[   96.020776][ T7259] tipc: Resetting bearer <eth:syzkaller0>
[   96.030115][ T7257] tipc: Resetting bearer <eth:syzkaller0>
[   97.548209][ T7257] tipc: Disabling bearer <eth:syzkaller0>
[   97.552978][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'.
[   97.579644][  T782] tipc: Node number set to 1119999457
[   97.687207][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'.
[   97.814571][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'.
[   97.818583][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   98.251218][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[   98.302954][ T7325] netlink: 'syz.2.672': attribute type 32 has an invalid length.
[   98.311688][ T7325] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   98.490326][ T7335] bridge0: entered allmulticast mode
[   98.493945][ T7335] bridge0: left allmulticast mode
[   98.676794][ T7345] Cannot find del_set index 14804 as target
[   98.938564][ T7352] bridge4: entered promiscuous mode
[   98.940878][ T7352] bridge4: entered allmulticast mode
[   98.948002][ T7352] team0: Port device bridge4 added
[   99.648736][ T7352] bridge0: port 3(team0) entered blocking state
[   99.652581][ T7352] bridge0: port 3(team0) entered disabled state
[   99.656312][ T7352] team0: entered allmulticast mode
[   99.661097][ T7352] team_slave_0: entered allmulticast mode
[   99.664933][ T7352] team_slave_1: entered allmulticast mode
[   99.681728][ T7356] xt_hashlimit: size too large, truncated to 1048576
[   99.704062][ T7352] team0: entered promiscuous mode
[   99.707083][ T7352] team_slave_0: entered promiscuous mode
[   99.711194][ T7352] team_slave_1: entered promiscuous mode
[   99.719186][ T7352] bridge0: port 3(team0) entered blocking state
[   99.722986][ T7352] bridge0: port 3(team0) entered forwarding state
[   99.954657][ T7369] bridge0: entered allmulticast mode
[   99.968812][ T7369] pim6reg: entered allmulticast mode
[   99.971450][ T7356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.185223][ T7387] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  100.802892][ T7444] syzkaller0: entered promiscuous mode
[  100.805056][ T7444] syzkaller0: entered allmulticast mode
[  101.434684][ T7455] set match dimension is over the limit!
[  101.599392][ T7469] openvswitch: netlink: IP tunnel dst address not specified
[  101.637725][ T7473] __nla_validate_parse: 6 callbacks suppressed
[  101.637736][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'.
[  101.643681][ T7473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.658407][ T7473] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.002023][ T7491] xt_l2tp: v2 sid > 0xffff: 8388608
[  102.045938][ T7493] netlink: 'syz.0.747': attribute type 1 has an invalid length.
[  102.052899][ T7493] netlink: 'syz.0.747': attribute type 4 has an invalid length.
[  102.057341][ T7493] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.747'.
[  102.119285][ T7496] syzkaller1: entered promiscuous mode
[  102.125991][ T7496] syzkaller1: entered allmulticast mode
[  102.605873][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'.
[  102.613951][ T7517] netlink: 580 bytes leftover after parsing attributes in process `syz.0.757'.
[  102.670293][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'.
[  102.837336][ T7535] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  103.218877][ T7571] x_tables: duplicate underflow at hook 1
[  103.281086][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'.
[  103.304280][ T7577] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.788'.
[  103.448130][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'.
[  103.590981][ T7599] tipc: Failed to remove unknown binding: 66,1,1/0:2741162618/2741162620
[  103.724016][ T7607] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.876926][ T7616] netlink: 'syz.2.805': attribute type 1 has an invalid length.
[  104.053499][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'.
[  104.172630][ T7638] netlink: 488 bytes leftover after parsing attributes in process `syz.2.814'.
[  104.818397][ T7674] netlink: 'syz.0.830': attribute type 5 has an invalid length.
[  104.881535][ T7676] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.964592][ T7676] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.023509][ T7676] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.119348][ T7676] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.225693][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.240018][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.262809][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.278127][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.596862][ T7699] netlink: 'syz.0.840': attribute type 1 has an invalid length.
[  105.612588][ T7699] 8021q: adding VLAN 0 to HW filter on device bond1
[  105.631506][ T7699] vlan2: entered promiscuous mode
[  105.633751][ T7699] bond1: entered promiscuous mode
[  105.636377][ T7699] vlan2: entered allmulticast mode
[  105.638231][ T7699] bond1: entered allmulticast mode
[  105.657057][ T7699] bond1: (slave bridge5): making interface the new active one
[  105.659869][ T7699] bridge5: entered promiscuous mode
[  105.662205][ T7699] bridge5: entered allmulticast mode
[  105.666827][ T7699] bond1: (slave bridge5): Enslaving as an active interface with an up link
[  106.295569][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  106.717540][ T7749] __nla_validate_parse: 6 callbacks suppressed
[  106.717560][ T7749] netlink: 36 bytes leftover after parsing attributes in process `syz.2.859'.
[  107.011324][ T7773] netlink: 'syz.0.868': attribute type 1 has an invalid length.
[  107.118779][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'.
[  108.069910][ T7850] netlink: 'syz.1.898': attribute type 1 has an invalid length.
[  108.093119][ T7850] 8021q: adding VLAN 0 to HW filter on device bond3
[  108.138201][ T7850] bond3: (slave veth3): Enslaving as an active interface with a down link
[  108.154147][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv1
[  108.165345][ T7850] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  108.302776][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'.
[  108.380864][ T7867] netlink: 'syz.1.905': attribute type 12 has an invalid length.
[  108.408951][   T53] Bluetooth: hci2: link tx timeout
[  108.411538][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.559291][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'.
[  108.562304][ T7880] netlink: 'syz.1.911': attribute type 12 has an invalid length.
[  108.564210][ T7878] bridge6: entered promiscuous mode
[  108.584934][ T5690] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.588637][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'.
[  108.591968][ T5690] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.595023][ T7880] netlink: 'syz.1.911': attribute type 12 has an invalid length.
[  108.598243][ T5690] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.604018][ T5690] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.627030][ T5617] Bluetooth: hci2: link tx timeout
[  108.629079][ T5617] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.973432][ T7904] dvmrp6: left allmulticast mode
[  109.113870][ T7916] netlink: 'syz.2.926': attribute type 12 has an invalid length.
[  109.378220][ T7923] block nbd0: server does not support multiple connections per device.
[  109.392296][ T7923] block nbd0: shutting down sockets
[  109.552781][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.935'.
[  109.565201][ T7941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'.
[  109.655307][ T7948] syzkaller0: entered promiscuous mode
[  109.658782][ T7948] syzkaller0: entered allmulticast mode
[  110.461804][ T5617] Bluetooth: hci2: command 0x0406 tx timeout
[  111.000983][ T8022] netlink: 100 bytes leftover after parsing attributes in process `syz.0.958'.
[  111.004040][ T8022] netlink: 100 bytes leftover after parsing attributes in process `syz.0.958'.
[  111.330298][ T8042] netlink: 'syz.2.969': attribute type 1 has an invalid length.
[  111.420009][ T8042] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.426955][ T8042] bond1: (slave bond2): making interface the new active one
[  111.430912][ T8042] bond1: (slave bond2): Enslaving as an active interface with an up link
[  111.453441][ T8042] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  111.462636][ T8042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.969'.
[  111.468565][ T8042] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.767042][ T8067] netlink: 64 bytes leftover after parsing attributes in process `syz.0.980'.
[  111.778879][ T8067] netlink: 64 bytes leftover after parsing attributes in process `syz.0.980'.
[  111.993836][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'.
[  112.116715][ T8095] openvswitch: netlink: IP tunnel dst address not specified
[  112.120209][ T8097] netlink: 'syz.2.993': attribute type 1 has an invalid length.
[  112.324095][ T8111] netlink: 'syz.2.998': attribute type 5 has an invalid length.
[  112.542494][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  112.921308][ T8138] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1007'.
[  112.927940][ T8138] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  112.932268][ T8138] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  112.942910][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'.
[  112.949842][ T8142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1009'.
[  113.136632][ T8150] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1012'.
[  113.261024][ T8117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.514798][ T8169] netlink: 'syz.1.1019': attribute type 1 has an invalid length.
[  113.520172][ T8169] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1019'.
[  113.731425][ T8187] syzkaller1: entered promiscuous mode
[  113.737844][ T8187] syzkaller1: entered allmulticast mode
[  113.883153][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1034'.
[  113.887341][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1034'.
[  114.112498][ T8222] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  114.120205][ T8222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.157244][ T8225] netlink: 'syz.1.1043': attribute type 4 has an invalid length.
[  114.517060][ T8250] No such timeout policy "syz1"
[  114.657896][ T8259] bond3: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  114.678521][ T8259] bond3 (unregistering): Released all slaves
[  114.765263][ T8270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.864006][ T8276] tipc: Started in network mode
[  114.866381][ T8276] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711
[  114.870293][ T8276] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  115.265212][ T8304] syzkaller0: entered promiscuous mode
[  115.267956][ T8304] syzkaller0: entered allmulticast mode
[  115.819349][ T5690] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.825016][ T5690] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.829248][ T5690] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.833245][ T5690] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  115.960241][ T8334] bridge_slave_0 (unregistering): left allmulticast mode
[  115.963436][ T8334] bridge_slave_0 (unregistering): left promiscuous mode
[  115.967168][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.537533][ T8364] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  116.773370][ T8382] ieee802154 phy0 wpan0: encryption failed: -22
[  116.819714][ T8387] __nla_validate_parse: 5 callbacks suppressed
[  116.819728][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'.
[  116.842981][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'.
[  116.862199][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'.
[  116.874418][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'.
[  117.283644][ T8425] ipt_ECN: cannot use operation on non-tcp rule
[  117.426733][ T8439] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  117.507626][ T8442] syzkaller1: entered promiscuous mode
[  117.512675][ T8442] syzkaller1: entered allmulticast mode
[  117.677621][ T8457] netlink: 'syz.1.1141': attribute type 21 has an invalid length.
[  117.883940][ T8474] netlink: 'syz.0.1148': attribute type 12 has an invalid length.
[  117.887255][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'.
[  117.890319][ T8474] bond0: option primary_reselect: invalid value (191)
[  117.899241][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'.
[  117.969463][ T8483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.096235][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'.
[  118.351089][ T8506] netlink: 'syz.2.1163': attribute type 21 has an invalid length.
[  118.361869][ T8506] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1163'.
[  118.387439][ T8506] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1163'.
[  118.402285][ T8509] netlink: 'syz.1.1164': attribute type 1 has an invalid length.
[  118.469254][ T8514] xt_TCPMSS: Only works on TCP SYN packets
[  118.471700][ T8509] bond4: entered promiscuous mode
[  118.475769][ T8509] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.501368][ T8513] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.507126][ T8513] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  118.511966][ T8513] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  118.535236][ T8513] bond4: (slave wireguard0): making interface the new active one
[  118.541145][ T8513] wireguard0: entered promiscuous mode
[  118.544876][ T8513] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  118.624009][ T8517] dvmrp0: entered allmulticast mode
[  118.632191][ T8509] bond4: (slave wireguard1): The slave device specified does not support setting the MAC address
[  118.644440][ T8509] bond4: (slave wireguard1): Enslaving as a backup interface with an up link
[  118.718569][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'.
[  119.560745][ T8577] netlink: 'syz.2.1188': attribute type 1 has an invalid length.
[  119.564230][ T8577] netlink: 'syz.2.1188': attribute type 1 has an invalid length.
[  119.570574][ T8577] netlink: 'syz.2.1188': attribute type 8 has an invalid length.
[  119.780958][ T8588] Bluetooth: MGMT ver 1.23
[  119.971176][   T33] audit: type=1107 audit(1778554010.799:2): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  120.615066][   T54] block nbd0: Receive control failed (result -32)
[  121.256950][ T8689] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  121.272845][ T8695] netlink: 'syz.0.1233': attribute type 1 has an invalid length.
[  121.613917][ T8725] netlink: 'syz.1.1248': attribute type 6 has an invalid length.
[  121.915124][ T8747] vlan2: entered promiscuous mode
[  121.917781][ T8747] geneve1: entered promiscuous mode
[  121.920245][ T8747] vlan2: entered allmulticast mode
[  121.922435][ T8747] geneve1: entered allmulticast mode
[  122.318662][ T8767] __nla_validate_parse: 8 callbacks suppressed
[  122.318681][ T8767] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1266'.
[  122.417301][ T8769] bond5: option ad_select: invalid value (34)
[  122.421590][ T8769] bond5 (unregistering): Released all slaves
[  122.576210][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'.
[  122.621435][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  122.653745][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  122.712551][ T8786] netlink: 'syz.2.1275': attribute type 11 has an invalid length.
[  123.026206][ T8814] xfrm2: entered allmulticast mode
[  123.495110][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'.
[  123.499114][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'.
[  123.562135][ T8848] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.585906][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  123.676538][ T8852] SET target dimension over the limit!
[  123.762716][ T8856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'.
[  123.787974][ T8856] bond0: entered promiscuous mode
[  123.789642][ T8856] bond_slave_0: entered promiscuous mode
[  123.791585][ T8856] bond_slave_1: entered promiscuous mode
[  123.797778][ T8856] batadv0: entered promiscuous mode
[  123.800693][ T8856] debugfs: 'hsr1' already exists in 'hsr'
[  123.803126][ T8856] Cannot create hsr debugfs directory
[  123.856140][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  123.935069][ T8868] netlink: 'syz.1.1313': attribute type 1 has an invalid length.
[  124.065075][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'.
[  124.424626][ T8916] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  124.460215][ T8918] veth5: entered promiscuous mode
[  124.464235][ T8918] team0: Port device veth5 added
[  124.861588][ T8957] netlink: 'syz.2.1354': attribute type 83 has an invalid length.
[  124.871686][ T8953] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.908161][ T8953] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.941586][ T8961] ip6_vti0: entered promiscuous mode
[  124.948236][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'.
[  125.117891][ T8968] syzkaller0: entered promiscuous mode
[  125.120748][ T8968] syzkaller0: entered allmulticast mode
[  125.135054][ T8968] tc action pedit offset must be on 32 bit boundaries
[  125.182748][ T8978] netlink: 'syz.0.1364': attribute type 7 has an invalid length.
[  125.185478][ T8978] netlink: 'syz.0.1364': attribute type 8 has an invalid length.
[  125.673208][ T9009] bond5: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  125.690174][ T9009] bond5 (unregistering): Released all slaves
[  125.894550][ T9026] netlink: 'syz.1.1384': attribute type 1 has an invalid length.
[  126.069597][ T9042] netlink: 'syz.1.1390': attribute type 15 has an invalid length.
[  126.072107][ T9042] netlink: 'syz.1.1390': attribute type 25 has an invalid length.
[  129.020507][ T9036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  129.101363][ T9065] __nla_validate_parse: 9 callbacks suppressed
[  129.101394][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'.
[  129.111867][ T9067] bridge0: port 3(team0) entered disabled state
[  129.116926][ T9067] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.120038][ T9067] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.494646][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'.
[  129.749909][ T9111] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1422'.
[  130.086484][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'.
[  130.930126][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'.
[  130.949145][ T9187] Bluetooth: MGMT ver 1.23
[  130.956045][ T9187] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  131.049682][ T9198] netlink: 'syz.1.1461': attribute type 1 has an invalid length.
[  131.293685][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1471'.
[  131.344216][ T9221] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  131.349597][ T9219] syzkaller0: entered promiscuous mode
[  131.357652][ T9219] syzkaller0: entered allmulticast mode
[  131.377634][ T9219] 0: reclassify loop, rule prio 0, protocol 800
[  132.330829][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.354592][ T9274] bridge_slave_0 (unregistering): left allmulticast mode
[  132.362108][ T9274] bridge_slave_0 (unregistering): left promiscuous mode
[  132.367658][ T9274] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.538732][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1497'.
[  133.180733][ T9329] tipc: Started in network mode
[  133.184592][ T9329] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  133.191638][ T9329] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  133.204106][ T9332] tipc: Failed to remove unknown binding: 66,1,1/0:1502790756/1502790758
[  133.208303][ T9332] tipc: Failed to remove unknown binding: 66,1,1/0:1502790756/1502790758
[  133.254870][ T9335] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  133.791270][ T9370] xt_hashlimit: size too large, truncated to 1048576
[  134.132598][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.136841][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.138803][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.140704][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.142626][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.144539][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.146754][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.149221][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.151179][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.153119][ T9381] tc action pedit 'at' offset 9 out of bounds
[  134.155265][ T9381] TC_ACT_REPEAT abuse ?
[  134.306145][ T5689] tipc: Node number set to 10463914
[  134.357677][ T9394] netlink: 'syz.1.1547': attribute type 12 has an invalid length.
[  134.462468][ T9405] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  135.019825][ T9449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1572'.
[  135.031259][ T9449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1572'.
[  135.034775][ T9449] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1572'.
[  135.123231][ T9457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1576'.
[  135.168899][ T9462] netlink: 'syz.0.1579': attribute type 28 has an invalid length.
[  135.253800][ T9467] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1580'.
[  135.329296][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1582'.
[  135.582794][ T9487] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1590'.
[  135.630911][ T9489] syzkaller0: entered promiscuous mode
[  135.633288][ T9489] syzkaller0: entered allmulticast mode
[  135.724752][ T9493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.728157][ T9493] syzkaller0: entered promiscuous mode
[  135.730227][ T9493] syzkaller0: entered allmulticast mode
[  135.752621][ T9493] tipc: Resetting bearer <eth:syzkaller0>
[  135.757647][ T9492] tipc: Resetting bearer <eth:syzkaller0>
[  135.784208][ T9492] tipc: Disabling bearer <eth:syzkaller0>
[  136.088251][ T9524] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1607'.
[  136.116776][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1603'.
[  136.286664][ T9537] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1613'.
[  136.298633][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.321596][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.324024][ T9537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.340970][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.392456][ T9545] syzkaller0: entered promiscuous mode
[  136.394513][ T9545] syzkaller0: entered allmulticast mode
[  136.597927][ T9558] netlink: 'syz.1.1623': attribute type 1 has an invalid length.
[  137.452944][ T9606] ip6_vti0: left promiscuous mode
[  137.459405][ T9606] bridge0: port 3(team0) entered blocking state
[  137.461817][ T9606] bridge0: port 3(team0) entered forwarding state
[  137.464670][ T9606] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.467719][ T9606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.470965][ T9606] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.474051][ T9606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.510597][ T9606] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  137.554026][ T9620] xt_hashlimit: overflow, rate too high: 0
[  138.362158][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[  138.364623][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  138.549239][ T9624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.813587][ T9665] syzkaller0: entered promiscuous mode
[  138.818654][ T9665] syzkaller0: entered allmulticast mode
[  139.142316][ T9691] syzkaller0: entered promiscuous mode
[  139.144752][ T9691] syzkaller0: entered allmulticast mode
[  139.649951][ T9714] syzkaller0: entered promiscuous mode
[  139.652396][ T9714] syzkaller0: entered allmulticast mode
[  139.678371][ T9714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.689527][ T9714] tipc: Resetting bearer <eth:syzkaller0>
[  139.692244][ T9714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.697950][ T9714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  139.703213][ T9713] tipc: Resetting bearer <eth:syzkaller0>
[  139.722097][ T9713] tipc: Disabling bearer <eth:syzkaller0>
[  140.351986][ T9748] netlink: 'syz.1.1707': attribute type 4 has an invalid length.
[  140.360143][ T9748] __nla_validate_parse: 11 callbacks suppressed
[  140.360164][ T9748] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1707'.
[  140.382011][ T9750] netlink: 'syz.2.1708': attribute type 2 has an invalid length.
[  140.384647][ T9750] netlink: 'syz.2.1708': attribute type 1 has an invalid length.
[  140.388026][ T9750] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1708'.
[  140.566738][ T9765] netlink: 'syz.1.1714': attribute type 1 has an invalid length.
[  140.591432][ T9765] bond5: entered promiscuous mode
[  140.594568][ T9765] 8021q: adding VLAN 0 to HW filter on device bond5
[  140.620463][ T9765] bond5: (slave bridge3): making interface the new active one
[  140.626799][ T9765] bridge3: entered promiscuous mode
[  140.634561][ T9765] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  140.681142][ T9765] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  140.692128][ T9765] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  140.752626][ T9761] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.762158][ T9761] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.120326][ T9788] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  141.141121][ T9788] netlink: 'syz.1.1720': attribute type 1 has an invalid length.
[  141.143972][ T9788] netlink: 'syz.1.1720': attribute type 1 has an invalid length.
[  141.149430][ T9788] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1720'.
[  141.153356][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'.
[  141.157337][ T9788] netlink: 'syz.1.1720': attribute type 1 has an invalid length.
[  141.160035][ T9788] netlink: 'syz.1.1720': attribute type 1 has an invalid length.
[  141.162763][ T9788] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1720'.
[  141.167105][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'.
[  141.291748][ T9794] batadv_slave_1: entered promiscuous mode
[  141.296494][ T9793] batadv_slave_1: left promiscuous mode
[  141.344865][ T9796] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1724'.
[  141.481551][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'.
[  141.797529][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'.
[  141.836547][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'.
[  142.150753][ T9859] netlink: 'syz.0.1752': attribute type 1 has an invalid length.
[  142.187345][ T9861] netlink: 'syz.1.1753': attribute type 1 has an invalid length.
[  142.240748][ T9861] bond6: (slave bridge4): making interface the new active one
[  142.245971][ T9861] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  142.318503][ T9861] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  142.342784][ T9865] No such timeout policy "syz1"
[  142.512520][ T9876] x_tables: duplicate entry at hook 2
[  142.558606][ T9880] Cannot find del_set index 49151 as target
[  143.273699][ T9928] netlink: 'syz.0.1783': attribute type 2 has an invalid length.
[  143.278195][ T9928] netlink: 'syz.0.1783': attribute type 2 has an invalid length.
[  143.744248][ T9959] openvswitch: netlink: Key type 769 is out of range max 32
[  143.785193][ T9961] netlink: 'syz.0.1799': attribute type 1 has an invalid length.
[  143.791346][ T9961] netlink: 'syz.0.1799': attribute type 1 has an invalid length.
[  143.837538][ T9969] netlink: 'syz.2.1802': attribute type 2 has an invalid length.
[  144.116880][ T9993] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  144.144437][ T9995] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  144.216309][T10001] netlink: 'syz.0.1816': attribute type 11 has an invalid length.
[  144.649124][T10036] openvswitch: netlink: Message has 4 unknown bytes.
[  144.688962][T10037] syzkaller0: entered promiscuous mode
[  144.695868][T10037] syzkaller0: entered allmulticast mode
[  144.700518][   T12] syzkaller0: tun_net_xmit 70
[  144.707520][T10037] syzkaller0: tun_net_xmit 14
[  144.715064][T10041] tipc: New replicast peer: 255.255.255.255
[  144.722200][T10041] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.818657][T10047] IPv6: NLM_F_CREATE should be specified when creating new route
[  145.389662][T10097] netlink: 'syz.0.1862': attribute type 1 has an invalid length.
[  145.404219][T10097] netlink: 'syz.0.1862': attribute type 11 has an invalid length.
[  145.415684][T10097] __nla_validate_parse: 13 callbacks suppressed
[  145.415699][T10097] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1862'.
[  145.454106][T10102] bridge0: port 3(team0) entered disabled state
[  145.458984][T10102] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.462497][T10102] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.566687][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1869'.
[  146.024461][T10155] netlink: 'syz.0.1890': attribute type 1 has an invalid length.
[  146.239110][T10167] syzkaller0: entered promiscuous mode
[  146.241338][T10167] syzkaller0: entered allmulticast mode
[  146.567899][T10190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'.
[  146.629406][T10195] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1908'.
[  146.632431][T10195] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1908'.
[  146.636924][T10195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1908'.
[  146.667970][T10199] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1910'.
[  146.672109][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1910'.
[  146.675308][T10199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1910'.
[  146.679057][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1910'.
[  146.719191][T10203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.370479][T10260] validate_nla: 1 callbacks suppressed
[  147.370495][T10260] netlink: 'syz.0.1938': attribute type 1 has an invalid length.
[  147.858071][T10276] tcf_pedit_act: 22 callbacks suppressed
[  147.858097][T10276] tc action pedit 'at' offset 6 out of bounds
[  149.158621][T10347] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  149.163450][T10347] bond3 (unregistering): Released all slaves
[  149.712904][T10373] syzkaller0: entered promiscuous mode
[  149.714987][T10373] syzkaller0: entered allmulticast mode
[  149.852455][T10375] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  149.863513][T10375] bond3 (unregistering): Released all slaves
[  150.356547][T10258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.484325][T10398] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.899623][T10436] __nla_validate_parse: 5 callbacks suppressed
[  150.899647][T10436] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.2013'.
[  150.960056][T10442] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2015'.
[  150.963202][T10442] netlink: 'syz.0.2015': attribute type 2 has an invalid length.
[  151.181181][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2024'.
[  151.254072][T10461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2025'.
[  151.622266][T10479] openvswitch: netlink: IP tunnel dst address not specified
[  151.887909][T10496] veth0: entered promiscuous mode
[  151.892833][T10496] veth0: left promiscuous mode
[  151.957439][T10454] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  151.960606][T10454] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  152.309876][T10525] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  152.419793][T10528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.427890][T10528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.430247][T10528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.432510][T10528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.434670][T10528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.437634][T10528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.440343][T10528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.442760][T10528] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  152.487187][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'.
[  152.493506][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'.
[  152.497483][T10529] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2053'.
[  152.501860][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'.
[  152.512301][T10529] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2053'.
[  152.528241][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2053'.
[  153.370998][T10558] netlink: 'syz.1.2066': attribute type 1 has an invalid length.
[  153.396132][T10558] 8021q: adding VLAN 0 to HW filter on device bond7
[  156.855831][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  157.229329][T10622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.434522][T10660] syzkaller0: entered promiscuous mode
[  157.436834][T10660] syzkaller0: entered allmulticast mode
[  157.513576][T10664] bond8: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  157.521027][T10664] bond8: entered promiscuous mode
[  157.524003][T10664] 8021q: adding VLAN 0 to HW filter on device bond8
[  157.703622][T10683] net_ratelimit: 3323 callbacks suppressed
[  157.703673][T10683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.680394][T10678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  160.684315][T10688] netlink: 'syz.2.2120': attribute type 1 has an invalid length.
[  160.764204][T10692] IPVS: Unknown mcast interface: bridge_slave_0
[  160.986078][T10707] trusted_key: syz.1.2127 sent an empty control message without MSG_MORE.
[  161.280837][T10720] __nla_validate_parse: 5 callbacks suppressed
[  161.280866][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2132'.
[  161.306992][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'.
[  161.450918][T10724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2134'.
[  161.495020][T10726] syzkaller0: entered promiscuous mode
[  161.498191][T10726] syzkaller0: entered allmulticast mode
[  161.999744][T10737] openvswitch: netlink: Actions may not be safe on all matching packets
[  162.116666][T10747] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  162.580020][T10775] tap0: tun_chr_ioctl cmd 1074025676
[  162.584008][T10775] tap0: owner set to 0
[  163.398875][T10816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.433881][T10816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.948327][ T5923] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.953146][ T5923] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.958893][ T5923] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.962398][ T5923] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.969682][ T5923] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.981427][ T5923] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.994400][ T5923] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.010384][ T5923] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.864444][T10875] netlink: 'syz.1.2196': attribute type 13 has an invalid length.
[  164.872259][T10875] netlink: 'syz.1.2196': attribute type 17 has an invalid length.
[  165.139418][T10875] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.144006][T10875] 8021q: adding VLAN 0 to HW filter on device team0
[  165.162877][T10875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.239263][T10875] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.247910][T10875] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.260309][T10875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  165.264423][T10875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.273268][T10875] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  165.328692][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.332328][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.412909][T10896] xt_limit: Overflow, try lower: 268435456/134217728
[  165.649720][T10898] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2205'.
[  165.677519][T10898] syzkaller0: entered promiscuous mode
[  165.681718][T10898] syzkaller0: entered allmulticast mode
[  165.703264][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.706440][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.708933][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.711516][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.714056][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.716685][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.719199][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.721818][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.724423][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.727063][T10898] tc action pedit 'at' offset 8666 out of bounds
[  165.729732][T10898] TC_ACT_REPEAT abuse ?
[  165.814886][T10911] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2207'.
[  165.836271][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2207'.
[  167.003010][T10963] syzkaller0: entered promiscuous mode
[  167.004958][T10963] syzkaller0: entered allmulticast mode
[  167.576473][   T53] Bluetooth: hci2: link tx timeout
[  167.578218][   T53] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  167.908164][T11006] netlink: 'syz.2.2255': attribute type 1 has an invalid length.
[  167.911485][T11006] netlink: 'syz.2.2255': attribute type 2 has an invalid length.
[  168.102326][T11015] ieee802154 phy0 wpan0: encryption failed: -22
[  168.382929][T11035] netlink: 'syz.1.2266': attribute type 1 has an invalid length.
[  168.387528][T11035] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2266'.
[  168.541912][T11043] netlink: 'syz.0.2269': attribute type 1 has an invalid length.
[  169.657658][ T5617] Bluetooth: hci2: command 0x0406 tx timeout
[  171.344848][T11030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  171.844559][T11109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.454572][T11123] netlink: 'syz.1.2287': attribute type 9 has an invalid length.
[  173.011253][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'.
[  173.137212][T11136] tipc: MTU too low for tipc bearer
[  173.453388][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2299'.
[  173.457535][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2299'.
[  173.474170][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2299'.
[  173.479933][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2299'.
[  173.494194][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2299'.
[  173.506649][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2299'.
[  174.438040][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2312'.
[  174.441979][T11181] netlink: 'syz.2.2312': attribute type 5 has an invalid length.
[  174.449115][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2312'.
[  174.780433][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'.
[  174.783550][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'.
[  174.797356][T11194] team0 (unregistering): left allmulticast mode
[  174.802994][T11194] team_slave_0: left allmulticast mode
[  174.806653][T11194] team_slave_1: left allmulticast mode
[  174.808770][T11194] team0 (unregistering): left promiscuous mode
[  174.810835][T11194] team_slave_0: left promiscuous mode
[  174.812923][T11194] team_slave_1: left promiscuous mode
[  174.815153][T11194] bridge0: port 3(team0) entered disabled state
[  174.846195][T11194] team0 (unregistering): Port device team_slave_0 removed
[  174.912540][T11194] team0 (unregistering): Port device team_slave_1 removed
[  174.944790][T11202] netlink: 'syz.2.2320': attribute type 1 has an invalid length.
[  174.948993][T11194] team0 (unregistering): Port device bridge4 removed
[  174.992062][T11202] 8021q: adding VLAN 0 to HW filter on device bond4
[  175.018041][T11202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.036623][T11202] bond4: (slave ip6gretap1): making interface the new active one
[  175.041416][T11202] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  175.724363][T11222] sctp: [Deprecated]: syz.1.2329 (pid 11222) Use of int in maxseg socket option.
[  175.724363][T11222] Use struct sctp_assoc_value instead
[  175.837653][T11227] 8021q: adding VLAN 0 to HW filter on device bond5
[  175.913232][T11234] syzkaller0: entered promiscuous mode
[  175.915086][T11234] syzkaller0: entered allmulticast mode
[  176.053497][T11240] netlink: 'syz.1.2337': attribute type 3 has an invalid length.
[  176.183901][T11246] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  176.204919][T11246] netlink: 'syz.1.2339': attribute type 2 has an invalid length.
[  176.213907][T11246] netlink: 'syz.1.2339': attribute type 1 has an invalid length.
[  176.220289][T11246] netlink: 'syz.1.2339': attribute type 3 has an invalid length.
[  176.645239][T11263] syzkaller0: entered promiscuous mode
[  176.648474][T11263] syzkaller0: entered allmulticast mode
[  176.999429][T11287] netlink: 'syz.2.2358': attribute type 4 has an invalid length.
[  177.002246][T11287] netlink: 'syz.2.2358': attribute type 1 has an invalid length.
[  178.442418][T11351] netlink: 'syz.0.2385': attribute type 21 has an invalid length.
[  178.874537][T11361] __nla_validate_parse: 11 callbacks suppressed
[  178.874563][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'.
[  179.351981][T11375] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  179.371052][T11372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.407318][T11372] syzkaller0: entered promiscuous mode
[  179.414958][T11372] syzkaller0: entered allmulticast mode
[  179.494122][T11372] tipc: Resetting bearer <eth:syzkaller0>
[  179.548110][T11371] tipc: Resetting bearer <eth:syzkaller0>
[  179.607699][T11371] tipc: Disabling bearer <eth:syzkaller0>
[  179.869587][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2404'.
[  180.165245][T11404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.232936][T11406] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2410'.
[  181.669560][T11434] smc: net device wlan0 applied user defined pnetid SYZ0
[  182.382543][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2433'.
[  182.534542][T11471] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2431'.
[  184.330210][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2460'.
[  184.334249][T11533] netlink: 121 bytes leftover after parsing attributes in process `syz.0.2460'.
[  184.589531][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'.
[  185.011885][T11581] ip6tnl2: entered allmulticast mode
[  185.016280][ T5488] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  185.024292][ T5488] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  185.037855][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  185.132304][T11590] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  185.466907][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  185.625749][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  186.455675][ T5617] Bluetooth: hci1: command 0x0406 tx timeout
[  188.509145][T11683] validate_nla: 1 callbacks suppressed
[  188.509160][T11683] netlink: 'syz.1.2525': attribute type 1 has an invalid length.
[  188.513542][T11683] netlink: 'syz.1.2525': attribute type 2 has an invalid length.
[  188.542455][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'.
[  188.545601][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2526'.
[  188.623774][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2529'.
[  188.627548][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'.
[  188.759543][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2533'.
[  188.849589][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2536'.
[  189.175781][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  189.376577][T11729] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  189.408047][T11733] batadv_slave_1: entered promiscuous mode
[  189.410813][T11732] batadv_slave_1: left promiscuous mode
[  189.415933][T11729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.545817][T11735] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2547'.
[  189.660619][T11737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2548'.
[  189.860748][T11743] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  190.081380][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'.
[  190.190778][T11756] syzkaller0: entered promiscuous mode
[  190.193174][T11756] syzkaller0: entered allmulticast mode
[  190.349291][T11758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2557'.
[  190.518951][T11768] tipc: MTU too low for tipc bearer
[  190.696278][T11780] xt_cgroup: path and classid specified
[  191.127556][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'.
[  191.403344][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2576'.
[  191.680196][T11805] ipvlan3: left promiscuous mode
[  191.689341][T11805] bridge2: left promiscuous mode
[  191.694550][T11805] bridge2: left allmulticast mode
[  191.698579][T11805] hsr1: left promiscuous mode
[  191.930980][T11815] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2580'.
[  192.031409][T11823] bridge6: entered promiscuous mode
[  192.039639][T11823] bridge6: entered allmulticast mode
[  192.046336][T11823] team0: Port device bridge6 added
[  192.052016][T11823] bridge0: port 1(team0) entered blocking state
[  192.054258][T11823] bridge0: port 1(team0) entered disabled state
[  192.059698][T11823] team0: entered allmulticast mode
[  192.061464][T11823] team_slave_0: entered allmulticast mode
[  192.063351][T11823] team_slave_1: entered allmulticast mode
[  192.066954][T11823] team0: entered promiscuous mode
[  192.068638][T11823] team_slave_0: entered promiscuous mode
[  192.070516][T11823] team_slave_1: entered promiscuous mode
[  192.074740][T11823] bridge0: port 1(team0) entered blocking state
[  192.077028][T11823] bridge0: port 1(team0) entered forwarding state
[  192.313996][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2591'.
[  192.484272][T11842] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  192.549979][T11845] syzkaller1: entered promiscuous mode
[  192.552244][T11845] syzkaller1: entered allmulticast mode
[  192.619139][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2595'.
[  192.640724][T11849] macvtap1: entered promiscuous mode
[  192.645839][T11849] macvtap1: entered allmulticast mode
[  192.648426][T11849] veth1_vlan: entered allmulticast mode
[  192.669985][T11849] macvtap2: entered promiscuous mode
[  192.672187][T11849] macvtap2: entered allmulticast mode
[  192.854820][T11857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2601'.
[  192.860836][T11857] netlink: 'syz.2.2601': attribute type 7 has an invalid length.
[  192.864171][T11857] netlink: 'syz.2.2601': attribute type 8 has an invalid length.
[  193.187897][   T62] wlan1: Trigger new scan to find an IBSS to join
[  193.540679][T11886] tcf_pedit_act: 22 callbacks suppressed
[  193.540702][T11886] tc action pedit 'at' offset 9 out of bounds
[  193.776852][T11883] netlink: 'syz.2.2610': attribute type 6 has an invalid length.
[  193.782197][T11883] netlink: 'syz.2.2610': attribute type 23 has an invalid length.
[  193.792392][T11883] IPv6: NLM_F_CREATE should be specified when creating new route
[  193.989189][T11896] vlan2: left allmulticast mode
[  193.991031][T11896] geneve0: left allmulticast mode
[  193.992875][T11896] vlan2: left promiscuous mode
[  193.994760][T11896] geneve0: left promiscuous mode
[  193.998949][T11896] bridge0: port 3(vlan2) entered disabled state
[  194.008311][T11896] bridge_slave_1: left allmulticast mode
[  194.010645][T11896] bridge_slave_1: left promiscuous mode
[  194.012867][T11896] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.244303][T11903] syzkaller1: entered promiscuous mode
[  194.252356][T11903] syzkaller1: entered allmulticast mode
[  194.422354][T11913] netlink: 'syz.2.2626': attribute type 4 has an invalid length.
[  194.586579][T11919] __nla_validate_parse: 2 callbacks suppressed
[  194.586603][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2627'.
[  194.910746][T11929] ip6erspan0: entered allmulticast mode
[  195.781741][T11971] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.847227][T11971] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.904360][T11971] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.983968][T11971] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.060028][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.072591][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.139169][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.151891][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.216110][ T1026] wlan1: Trigger new scan to find an IBSS to join
[  196.852415][T12008] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  196.864002][T12009] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  197.074054][T12020] SET target dimension over the limit!
[  197.175543][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  197.208958][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.328515][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2685'.
[  197.554832][T12046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2687'.
[  197.807386][T12060] syzkaller0: entered promiscuous mode
[  197.809876][T12060] syzkaller0: entered allmulticast mode
[  197.989854][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2698'.
[  199.186327][T12130] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2726'.
[  199.777254][ T1384] ieee802154 phy0 wpan0: encryption failed: -22
[  200.041931][T12169] netlink: 'syz.0.2740': attribute type 4 has an invalid length.
[  200.211136][T12176] xt_hashlimit: max too large, truncated to 1048576
[  200.258594][T12179] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  200.491164][T12196] pim6reg1: entered promiscuous mode
[  200.493499][T12196] pim6reg1: entered allmulticast mode
[  200.564249][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2755'.
[  200.702571][T12206] ip6t_rpfilter: unknown options
[  200.909452][T12220] IPv6: addrconf: prefix option has invalid lifetime
[  200.995628][T12225] IPv6: addrconf: prefix option has invalid lifetime
[  201.150577][T12231] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96
[  201.261012][T12235] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2771'.
[  201.264280][T12233] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.284732][T12233] syzkaller0: entered promiscuous mode
[  201.288724][T12233] syzkaller0: entered allmulticast mode
[  201.304660][T12233] tipc: Resetting bearer <eth:syzkaller0>
[  201.312133][T12233] tipc: Resetting bearer <eth:syzkaller0>
[  201.348898][T12233] tipc: Disabling bearer <eth:syzkaller0>
[  201.519544][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'.
[  202.698363][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'.
[  202.883160][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2798'.
[  203.766986][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2814'.
[  203.840321][T12346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.296118][T12400] only policy match revision 0 supported
[  205.296134][T12400] unable to load match
[  205.594623][T12411] netlink: 'syz.1.2840': attribute type 10 has an invalid length.
[  205.630902][T12411] dummy0: entered promiscuous mode
[  205.633427][T12411] dummy0: entered allmulticast mode
[  205.638970][T12411] team0: Port device dummy0 added
[  205.656995][T12415] netlink: 'syz.2.2842': attribute type 3 has an invalid length.
[  205.662874][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'.
[  205.777616][T12419] netlink: 'syz.1.2840': attribute type 10 has an invalid length.
[  205.783646][T12419] dummy0: left promiscuous mode
[  205.791401][T12419] dummy0: left allmulticast mode
[  205.846331][T12419] team0: Port device dummy0 removed
[  206.090300][T12411] nbd1: detected capacity change from 0 to 63
[  206.138734][   T54] block nbd1: Receive control failed (result -32)
[  206.144079][ T8656] block nbd1: Receive control failed (result -32)
[  206.178648][ T5618] block nbd1: Send control failed (result -32)
[  206.191596][ T5618] block nbd1: Request send failed, requeueing
[  206.268930][   T97] block nbd1: Dead connection, failed to find a fallback
[  206.276657][   T97] block nbd1: shutting down sockets
[  206.280462][   T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.286821][   T97] Buffer I/O error on dev nbd1, logical block 0, async page read
[  206.294948][ T5618] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.301113][ T5618] Buffer I/O error on dev nbd1, logical block 1, async page read
[  206.309341][ T5618] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.316086][ T5618] Buffer I/O error on dev nbd1, logical block 2, async page read
[  206.324533][ T5618] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.332033][ T5618] Buffer I/O error on dev nbd1, logical block 3, async page read
[  206.339618][ T5618] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.343837][ T5618] Buffer I/O error on dev nbd1, logical block 0, async page read
[  206.349867][ T5618] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.355313][ T5618] Buffer I/O error on dev nbd1, logical block 1, async page read
[  206.362913][ T5618] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.368475][ T5618] Buffer I/O error on dev nbd1, logical block 2, async page read
[  206.373960][ T5618] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.385035][ T5618] Buffer I/O error on dev nbd1, logical block 3, async page read
[  206.392045][ T5618] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.398865][ T5618] Buffer I/O error on dev nbd1, logical block 0, async page read
[  206.403741][ T5618] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  206.410680][ T5618] Buffer I/O error on dev nbd1, logical block 1, async page read
[  206.429874][T12438] netlink: 'syz.1.2850': attribute type 12 has an invalid length.
[  206.445528][ T5618] ldm_validate_partition_table(): Disk read failed.
[  206.454857][ T5618] Dev nbd1: unable to read RDB block 0
[  206.493763][ T5618]  nbd1: unable to read partition table
[  206.498480][T12440] syzkaller0: entered promiscuous mode
[  206.501462][T12440] syzkaller0: entered allmulticast mode
[  206.620986][ T5618] ldm_validate_partition_table(): Disk read failed.
[  206.650355][ T5618] Dev nbd1: unable to read RDB block 0
[  206.665215][ T5618]  nbd1: unable to read partition table
[  207.171773][ T5488] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  207.182072][ T5488] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  207.192980][ T5488] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  207.200729][T12465] netlink: 'syz.2.2863': attribute type 2 has an invalid length.
[  207.200975][ T5488] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  207.208916][T12465] netlink: 'syz.2.2863': attribute type 1 has an invalid length.
[  207.220378][T12465] netlink: 'syz.2.2863': attribute type 1 has an invalid length.
[  207.255816][T12464] pim6reg1: entered allmulticast mode
[  207.459459][T12477] netlink: 'syz.2.2869': attribute type 3 has an invalid length.
[  207.462476][T12477] netlink: 'syz.2.2869': attribute type 3 has an invalid length.
[  207.471347][T12477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2869'.
[  208.121203][T12501] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  208.128640][T12501] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  208.284232][T12497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2877'.
[  208.287455][T12497] netem: change failed
[  208.517580][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  208.557624][T12508] syzkaller1: entered promiscuous mode
[  208.559992][T12508] syzkaller1: entered allmulticast mode
[  208.805290][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'.
[  208.811776][T12515] netlink: 'syz.2.2881': attribute type 30 has an invalid length.
[  208.820681][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'.
[  209.153075][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'.
[  209.159799][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'.
[  209.176512][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  209.280190][T12536] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2892'.
[  209.424168][T12530] 
[  209.424970][T12530] ======================================================
[  209.427067][T12530] WARNING: possible circular locking dependency detected
[  209.429341][T12530] syzkaller #0 Not tainted
[  209.431210][T12530] ------------------------------------------------------
[  209.433986][T12530] syz.0.2889/12530 is trying to acquire lock:
[  209.436717][T12530] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  209.440950][T12530] 
[  209.440950][T12530] but task is already holding lock:
[  209.444612][T12530] ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  209.449461][T12530] 
[  209.449461][T12530] which lock already depends on the new lock.
[  209.449461][T12530] 
[  209.453415][T12530] 
[  209.453415][T12530] the existing dependency chain (in reverse order) is:
[  209.456992][T12530] 
[  209.456992][T12530] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  209.460653][T12530]        down_read+0x47/0x2e0
[  209.462642][T12530]        kernfs_remove_by_name_ns+0x3f/0x140
[  209.465202][T12530]        internal_create_group+0x587/0x1180
[  209.467183][T12530]        sysfs_update_groups+0x60/0x130
[  209.469140][T12530]        pmu_dev_alloc+0x29b/0x300
[  209.471349][T12530]        perf_event_sysfs_init+0x76/0x100
[  209.473992][T12530]        do_one_initcall+0x250/0x870
[  209.476721][T12530]        do_initcall_level+0x104/0x190
[  209.479095][T12530]        do_initcalls+0x59/0xa0
[  209.481053][T12530]        kernel_init_freeable+0x2a6/0x3e0
[  209.483378][T12530]        kernel_init+0x1d/0x1d0
[  209.485339][T12530]        ret_from_fork+0x514/0xb70
[  209.487382][T12530]        ret_from_fork_asm+0x1a/0x30
[  209.489473][T12530] 
[  209.489473][T12530] -> #10 (pmus_lock){+.+.}-{4:4}:
[  209.492070][T12530]        __mutex_lock+0x1a3/0x1550
[  209.493711][T12530]        perf_event_init_cpu+0x1df/0x7c0
[  209.495544][T12530]        cpuhp_invoke_callback+0x445/0x860
[  209.497416][T12530]        cpuhp_thread_fun+0x36b/0x780
[  209.499074][T12530]        smpboot_thread_fn+0x541/0xa50
[  209.500762][T12530]        kthread+0x388/0x470
[  209.502270][T12530]        ret_from_fork+0x514/0xb70
[  209.503878][T12530]        ret_from_fork_asm+0x1a/0x30
[  209.505581][T12530] 
[  209.505581][T12530] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  209.508074][T12530]        cpuhp_thread_fun+0x127/0x780
[  209.509798][T12530]        smpboot_thread_fn+0x541/0xa50
[  209.511535][T12530]        kthread+0x388/0x470
[  209.513199][T12530]        ret_from_fork+0x514/0xb70
[  209.514855][T12530]        ret_from_fork_asm+0x1a/0x30
[  209.516534][T12530] 
[  209.516534][T12530] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  209.518944][T12530]        cpus_read_lock+0x42/0x160
[  209.520600][T12530]        static_key_slow_inc+0x12/0x30
[  209.522337][T12530]        setup_udp_tunnel_sock+0x2fd/0x510
[  209.524190][T12530]        l2tp_tunnel_register+0xde2/0x1490
[  209.526164][T12530]        pppol2tp_connect+0x8b7/0x17c0
[  209.527991][T12530]        __sys_connect+0x312/0x450
[  209.530008][T12530]        __x64_sys_connect+0x7a/0x90
[  209.531733][T12530]        do_syscall_64+0x15f/0xf80
[  209.533420][T12530]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.535676][T12530] 
[  209.535676][T12530] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  209.538253][T12530]        lock_sock_nested+0x41/0x100
[  209.540093][T12530]        inet_shutdown+0x6a/0x390
[  209.541856][T12530]        nbd_mark_nsock_dead+0x2e9/0x560
[  209.543710][T12530]        sock_shutdown+0x15e/0x260
[  209.545471][T12530]        nbd_clear_sock+0x24/0x170
[  209.547367][T12530]        nbd_config_put+0x2dd/0x580
[  209.549722][T12530]        nbd_genl_connect+0x19d5/0x1cf0
[  209.551940][T12530]        genl_family_rcv_msg_doit+0x22a/0x330
[  209.554389][T12530]        genl_rcv_msg+0x61c/0x7a0
[  209.556051][T12530]        netlink_rcv_skb+0x232/0x4b0
[  209.557824][T12530]        genl_rcv+0x28/0x40
[  209.559222][T12530]        netlink_unicast+0x75c/0x8e0
[  209.561004][T12530]        netlink_sendmsg+0x813/0xb40
[  209.562775][T12530]        ____sys_sendmsg+0x972/0x9f0
[  209.564550][T12530]        ___sys_sendmsg+0x2a5/0x360
[  209.566278][T12530]        __x64_sys_sendmsg+0x1bd/0x2a0
[  209.568042][T12530]        do_syscall_64+0x15f/0xf80
[  209.569816][T12530]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.571931][T12530] 
[  209.571931][T12530] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  209.575040][T12530]        __mutex_lock+0x1a3/0x1550
[  209.576884][T12530]        nbd_queue_rq+0x37b/0x1100
[  209.578710][T12530]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  209.580926][T12530]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  209.583617][T12530]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  209.585745][T12530]        blk_mq_run_hw_queue+0x348/0x4f0
[  209.587565][T12530]        blk_mq_dispatch_list+0xd16/0xe10
[  209.589545][T12530]        blk_mq_flush_plug_list+0x48d/0x570
[  209.591907][T12530]        __blk_flush_plug+0x3ed/0x4d0
[  209.594104][T12530]        __submit_bio+0x28d/0x580
[  209.596218][T12530]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  209.598729][T12530]        block_read_full_folio+0x599/0x830
[  209.601172][T12530]        filemap_read_folio+0x137/0x3b0
[  209.603462][T12530]        do_read_cache_folio+0x358/0x590
[  209.605790][T12530]        read_part_sector+0xb6/0x2b0
[  209.608018][T12530]        adfspart_check_ICS+0xb1/0x960
[  209.610256][T12530]        bdev_disk_changed+0x817/0x1770
[  209.612502][T12530]        blkdev_get_whole+0x380/0x510
[  209.614832][T12530]        bdev_open+0x31e/0xd30
[  209.616851][T12530]        blkdev_open+0x470/0x610
[  209.618653][T12530]        do_dentry_open+0x785/0x14e0
[  209.620730][T12530]        vfs_open+0x3b/0x340
[  209.622333][T12530]        path_openat+0x2e08/0x3860
[  209.624394][T12530]        do_file_open+0x23e/0x4a0
[  209.626388][T12530]        do_sys_openat2+0x113/0x200
[  209.628496][T12530]        __x64_sys_openat+0x138/0x170
[  209.630667][T12530]        do_syscall_64+0x15f/0xf80
[  209.632792][T12530]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.635509][T12530] 
[  209.635509][T12530] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  209.638386][T12530]        __mutex_lock+0x1a3/0x1550
[  209.640448][T12530]        nbd_queue_rq+0xc6/0x1100
[  209.642462][T12530]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  209.644517][T12530]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  209.646723][T12530]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  209.648845][T12530]        blk_mq_run_hw_queue+0x348/0x4f0
[  209.650874][T12530]        blk_mq_dispatch_list+0xd16/0xe10
[  209.653176][T12530]        blk_mq_flush_plug_list+0x48d/0x570
[  209.655579][T12530]        __blk_flush_plug+0x3ed/0x4d0
[  209.657832][T12530]        __submit_bio+0x28d/0x580
[  209.659901][T12530]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  209.662439][T12530]        block_read_full_folio+0x599/0x830
[  209.664841][T12530]        filemap_read_folio+0x137/0x3b0
[  209.667104][T12530]        do_read_cache_folio+0x358/0x590
[  209.669374][T12530]        read_part_sector+0xb6/0x2b0
[  209.671472][T12530]        adfspart_check_ICS+0xb1/0x960
[  209.673371][T12530]        bdev_disk_changed+0x817/0x1770
[  209.675638][T12530]        blkdev_get_whole+0x380/0x510
[  209.677829][T12530]        bdev_open+0x31e/0xd30
[  209.679761][T12530]        blkdev_open+0x470/0x610
[  209.681771][T12530]        do_dentry_open+0x785/0x14e0
[  209.683704][T12530]        vfs_open+0x3b/0x340
[  209.685397][T12530]        path_openat+0x2e08/0x3860
[  209.687408][T12530]        do_file_open+0x23e/0x4a0
[  209.689037][T12530]        do_sys_openat2+0x113/0x200
[  209.690740][T12530]        __x64_sys_openat+0x138/0x170
[  209.692418][T12530]        do_syscall_64+0x15f/0xf80
[  209.694015][T12530]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.695976][T12530] 
[  209.695976][T12530] -> #4 (set->srcu){.+.+}-{0:0}:
[  209.698273][T12530]        __synchronize_srcu+0xca/0x300
[  209.700272][T12530]        elevator_switch+0x1e8/0x7a0
[  209.701934][T12530]        elevator_change+0x2cc/0x450
[  209.703597][T12530]        elevator_set_default+0x36c/0x430
[  209.705373][T12530]        blk_register_queue+0x3e9/0x4e0
[  209.707132][T12530]        __add_disk+0x677/0xd50
[  209.708784][T12530]        add_disk_fwnode+0xfb/0x480
[  209.710541][T12530]        nbd_dev_add+0x72c/0xb50
[  209.712155][T12530]        nbd_init+0x168/0x1f0
[  209.713670][T12530]        do_one_initcall+0x250/0x870
[  209.715364][T12530]        do_initcall_level+0x104/0x190
[  209.717099][T12530]        do_initcalls+0x59/0xa0
[  209.718667][T12530]        kernel_init_freeable+0x2a6/0x3e0
[  209.720411][T12530]        kernel_init+0x1d/0x1d0
[  209.721890][T12530]        ret_from_fork+0x514/0xb70
[  209.723489][T12530]        ret_from_fork_asm+0x1a/0x30
[  209.725074][T12530] 
[  209.725074][T12530] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  209.727557][T12530]        __mutex_lock+0x1a3/0x1550
[  209.729187][T12530]        elevator_change+0x1b3/0x450
[  209.730850][T12530]        elevator_set_none+0xb5/0x140
[  209.732560][T12530]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  209.734556][T12530]        nbd_start_device+0x17f/0xb10
[  209.736306][T12530]        nbd_genl_connect+0x165b/0x1cf0
[  209.738261][T12530]        genl_family_rcv_msg_doit+0x22a/0x330
[  209.740272][T12530]        genl_rcv_msg+0x61c/0x7a0
[  209.741883][T12530]        netlink_rcv_skb+0x232/0x4b0
[  209.743608][T12530]        genl_rcv+0x28/0x40
[  209.745162][T12530]        netlink_unicast+0x75c/0x8e0
[  209.747102][T12530]        netlink_sendmsg+0x813/0xb40
[  209.749188][T12530]        ____sys_sendmsg+0x972/0x9f0
[  209.751267][T12530]        ___sys_sendmsg+0x2a5/0x360
[  209.753486][T12530]        __x64_sys_sendmsg+0x1bd/0x2a0
[  209.755612][T12530]        do_syscall_64+0x15f/0xf80
[  209.757564][T12530]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.760169][T12530] 
[  209.760169][T12530] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  209.763515][T12530]        blk_alloc_queue+0x546/0x680
[  209.765616][T12530]        __blk_mq_alloc_disk+0x197/0x390
[  209.767815][T12530]        nbd_dev_add+0x499/0xb50
[  209.769780][T12530]        nbd_init+0x168/0x1f0
[  209.771292][T12530]        do_one_initcall+0x250/0x870
[  209.773416][T12530]        do_initcall_level+0x104/0x190
[  209.775172][T12530]        do_initcalls+0x59/0xa0
[  209.776673][T12530]        kernel_init_freeable+0x2a6/0x3e0
[  209.778462][T12530]        kernel_init+0x1d/0x1d0
[  209.779986][T12530]        ret_from_fork+0x514/0xb70
[  209.781612][T12530]        ret_from_fork_asm+0x1a/0x30
[  209.783254][T12530] 
[  209.783254][T12530] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  209.785746][T12530]        fs_reclaim_acquire+0x71/0x100
[  209.787916][T12530]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  209.790366][T12530]        alloc_inode+0xb8/0x1b0
[  209.792403][T12530]        iget_locked+0x131/0x6a0
[  209.794521][T12530]        kernfs_get_inode+0x4f/0x780
[  209.796643][T12530]        kernfs_get_tree+0x5cd/0x980
[  209.798748][T12530]        sysfs_get_tree+0x46/0x110
[  209.800784][T12530]        vfs_get_tree+0x92/0x2a0
[  209.802788][T12530]        do_new_mount+0x341/0xd30
[  209.804969][T12530]        __se_sys_mount+0x31d/0x420
[  209.807137][T12530]        do_syscall_64+0x15f/0xf80
[  209.809146][T12530]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.811704][T12530] 
[  209.811704][T12530] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  209.814672][T12530]        __lock_acquire+0x15a5/0x2cf0
[  209.816503][T12530]        lock_acquire+0x106/0x350
[  209.818082][T12530]        down_write+0x96/0x200
[  209.819578][T12530]        kernfs_remove_by_name_ns+0x4e/0x140
[  209.821377][T12530]        _cfg80211_unregister_wdev+0x130/0x570
[  209.823270][T12530]        ieee80211_if_remove+0x299/0x350
[  209.825003][T12530]        ieee80211_del_iface+0x19/0x30
[  209.826759][T12530]        cfg80211_remove_virtual_intf+0x221/0x3f0
[  209.829083][T12530]        genl_family_rcv_msg_doit+0x22a/0x330
[  209.831153][T12530]        genl_rcv_msg+0x61c/0x7a0
[  209.832671][T12530]        netlink_rcv_skb+0x232/0x4b0
[  209.834341][T12530]        genl_rcv+0x28/0x40
[  209.835766][T12530]        netlink_unicast+0x75c/0x8e0
[  209.837448][T12530]        netlink_sendmsg+0x813/0xb40
[  209.839307][T12530]        ____sys_sendmsg+0x972/0x9f0
[  209.841387][T12530]        ___sys_sendmsg+0x2a5/0x360
[  209.843259][T12530]        __x64_sys_sendmsg+0x1bd/0x2a0
[  209.844937][T12530]        do_syscall_64+0x15f/0xf80
[  209.846706][T12530]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.848990][T12530] 
[  209.848990][T12530] other info that might help us debug this:
[  209.848990][T12530] 
[  209.852493][T12530] Chain exists of:
[  209.852493][T12530]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  209.852493][T12530] 
[  209.856870][T12530]  Possible unsafe locking scenario:
[  209.856870][T12530] 
[  209.859201][T12530]        CPU0                    CPU1
[  209.860871][T12530]        ----                    ----
[  209.862963][T12530]   rlock(&root->kernfs_supers_rwsem);
[  209.865097][T12530]                                lock(pmus_lock);
[  209.867636][T12530]                                lock(&root->kernfs_supers_rwsem);
[  209.870711][T12530]   lock(&root->kernfs_rwsem);
[  209.872634][T12530] 
[  209.872634][T12530]  *** DEADLOCK ***
[  209.872634][T12530] 
[  209.875360][T12530] 4 locks held by syz.0.2889/12530:
[  209.876973][T12530]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  209.879542][T12530]  #1: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[  209.882422][T12530]  #2: ffff888171850780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x126/0x140
[  209.885582][T12530]  #3: ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  209.889071][T12530] 
[  209.889071][T12530] stack backtrace:
[  209.890918][T12530] CPU: 0 UID: 0 PID: 12530 Comm: syz.0.2889 Not tainted syzkaller #0 PREEMPT(full) 
[  209.890930][T12530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.890935][T12530] Call Trace:
[  209.890942][T12530]  <TASK>
[  209.890950][T12530]  dump_stack_lvl+0xe8/0x150
[  209.890963][T12530]  print_circular_bug+0x2e1/0x300
[  209.890978][T12530]  check_noncircular+0x12e/0x150
[  209.890992][T12530]  __lock_acquire+0x15a5/0x2cf0
[  209.891008][T12530]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  209.891022][T12530]  lock_acquire+0x106/0x350
[  209.891031][T12530]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  209.891047][T12530]  down_write+0x96/0x200
[  209.891056][T12530]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  209.891067][T12530]  ? __pfx_down_write+0x10/0x10
[  209.891075][T12530]  ? down_read+0x270/0x2e0
[  209.891082][T12530]  kernfs_remove_by_name_ns+0x4e/0x140
[  209.891094][T12530]  _cfg80211_unregister_wdev+0x130/0x570
[  209.891130][T12530]  ieee80211_if_remove+0x299/0x350
[  209.891142][T12530]  ieee80211_del_iface+0x19/0x30
[  209.891151][T12530]  cfg80211_remove_virtual_intf+0x221/0x3f0
[  209.891163][T12530]  genl_family_rcv_msg_doit+0x22a/0x330
[  209.891174][T12530]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  209.891186][T12530]  ? bpf_lsm_capable+0x9/0x20
[  209.891197][T12530]  ? security_capable+0x7e/0x2c0
[  209.891208][T12530]  genl_rcv_msg+0x61c/0x7a0
[  209.891217][T12530]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.891224][T12530]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  209.891234][T12530]  ? __pfx_nl80211_del_interface+0x10/0x10
[  209.891243][T12530]  ? __pfx_nl80211_post_doit+0x10/0x10
[  209.891255][T12530]  netlink_rcv_skb+0x232/0x4b0
[  209.891267][T12530]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.891276][T12530]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  209.891290][T12530]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.891300][T12530]  genl_rcv+0x28/0x40
[  209.891308][T12530]  netlink_unicast+0x75c/0x8e0
[  209.891322][T12530]  netlink_sendmsg+0x813/0xb40
[  209.891341][T12530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.891351][T12530]  ? aa_sock_msg_perm+0xf1/0x1b0
[  209.891362][T12530]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.891373][T12530]  ____sys_sendmsg+0x972/0x9f0
[  209.891385][T12530]  ? __might_fault+0xaf/0x130
[  209.891397][T12530]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.891409][T12530]  ? import_iovec+0x73/0xa0
[  209.891424][T12530]  ___sys_sendmsg+0x2a5/0x360
[  209.891434][T12530]  ? __lock_acquire+0x6b5/0x2cf0
[  209.891443][T12530]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.891454][T12530]  ? futex_wait+0x2a2/0x390
[  209.891469][T12530]  ? __fget_files+0x2a/0x420
[  209.891479][T12530]  ? __fget_files+0x3a0/0x420
[  209.891489][T12530]  __x64_sys_sendmsg+0x1bd/0x2a0
[  209.891500][T12530]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.891512][T12530]  ? rcu_is_watching+0x15/0xb0
[  209.891525][T12530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.891534][T12530]  do_syscall_64+0x15f/0xf80
[  209.891546][T12530]  ? trace_irq_disable+0x3b/0x140
[  209.891558][T12530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.891567][T12530] RIP: 0033:0x7effc7d9cdd9
[  209.891577][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.891584][T12530] RSP: 002b:00007effc8bec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.891593][T12530] RAX: ffffffffffffffda RBX: 00007effc8015fa0 RCX: 00007effc7d9cdd9
[  209.891599][T12530] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  209.891604][T12530] RBP: 00007effc7e32d69 R08: 0000000000000000 R09: 0000000000000000
[  209.891609][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.891614][T12530] R13: 00007effc8016038 R14: 00007effc8015fa0 R15: 00007ffd1caed078
[  209.891623][T12530]  </TASK>
[  213.815732][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
