last executing test programs:

2.020904117s ago: executing program 1 (id=3524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r5, &(0x7f00000001c0)=""/47, 0x2f)
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
listen(r2, 0x204)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040)=0x1, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.838803827s ago: executing program 1 (id=3529):
socket(0x21, 0x3, 0xa)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
r1 = socket$inet6(0xa, 0x4, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xf}], 0x74)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x1)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

1.509378997s ago: executing program 0 (id=3534):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
socket$inet6(0xa, 0x6, 0x20005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)

452.991116ms ago: executing program 0 (id=3538):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0)

452.677816ms ago: executing program 2 (id=3539):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)

450.808593ms ago: executing program 0 (id=3540):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}})

329.396882ms ago: executing program 2 (id=3541):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x4}, 0x28)

329.027532ms ago: executing program 0 (id=3542):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)

328.730678ms ago: executing program 1 (id=3543):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000300)=0x8)

254.52467ms ago: executing program 2 (id=3544):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'bridge_slave_0\x00'})

254.204796ms ago: executing program 1 (id=3545):
unshare(0x22020400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
pwrite64(r0, 0x0, 0x0, 0x1)

253.652427ms ago: executing program 0 (id=3546):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000590000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000003"], 0x210)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r3, 0x0)
listen(r3, 0x9ce2)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "000500"}}}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, {[@hopopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x69}]}]}}}}}, 0x0)

251.273757ms ago: executing program 1 (id=3547):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x45d2, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x1080, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x18, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = socket$alg(0x26, 0x5, 0x0)
writev(r3, &(0x7f00000005c0)=[{&(0x7f0000001140)="4bc3c120c5c629b850099aaec26333e38a890618ec426d2efef5f514ad6a3578280b6c0b68766654061fcdabec6b1c3632fbb170a57803e5b95419c2d0c7126b40c385adc3090da172d589fcaaa1e4e98110e9123df7a7f9bfaa6fde58451ddc49b79c93001ce6f70ce1243467cf2fdabc66ed1d26c2de6aa4e77142e601e25570dace134aa62038374c791933695c1bb19444ab4a9e0610983a8910401f4938868c2abf14bab25244d43882ad8ed026f1c4b2362e59439d0640f233d0594c0c189d8598e8047e183964", 0xca}, {&(0x7f0000000400)="6f580fab1e2aab95d825da58f8612198", 0x10}, {&(0x7f0000001240)="ef59d8cd1680feb73b48dd293ef6a51d9ff0f1f58325db486d395de02212f93b3b82df1ee3a4a0a6ee8b75420d146e58e169fd0c858dd9b1189bdc6f4493aeabccb294e21663c0fdad74c1c325516533217e4bffc3e1b567fdf70091880dfd94fd88ec722dbadf5e81f8b9e7fdccc556bb93000c71d382aebcb37c509d04045f33fc302f38d3f5b1a10da1d88aa6dd4e1845c8debe34699872ab9bc87e68deaf283b307a802e1d3be4fea0c7fdb4ad4042b0092384b4f35f8b030d4565bf822091f902fb716bc89611bfbc9449fb87012bf40be3d2998180bd9d2f9357d1262429f0731d9277c566eac00926b591e5bb05ea62a103", 0xf5}, {&(0x7f0000001340)="036ca15d38f9d0212e22fcb87eded3704e46c784f193919059ed9d292bb7b2ed5c0752ec81563bbc96bd13619fe5f96555be55849d6dfc64c9726c461bd86fba55ba25b4f2cd181cbc55f85e36793d3058e18925657f5e8742df5db1fc1a0e2e785ac9df8ec6528a7b3ccd81d435d3cae733a20d955b628b83cde183fa20de4933ab93e252339711197db3c5d29b8bd2b756623eb3d1e78ee939151c71a502f4a797214f43bf1e065a8450315424896fb7405687349a9f11aad9abd5f38413d690fdc0718e101fee04c75ecd2c9155663514ffb7e649a904317a0c3ff318658841819d14d967d8d0b9c7880b00b9918e61e2d1966387abe38a170e9adf", 0xfd}], 0x4)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x9, 0x7, 0x4, 0x3ff}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
unshare(0x24020400)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x23, &(0x7f0000000040)="2000fb000980ffff", 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000010000000000000010412b344db17a9ebaa349010f7f4d7eca8d62075b5d7a59b956bbceab5eec002e5471694d3f52cbc0cc4b8b19c475486db6c5212a900026820b39bb"], 0x48)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000440)="482c3a4146296a6295a77f40377d8e14cbfe882e7fedb96aa7bb39b50f3e1e54153ca5f9a26daadc10a47b66a0e0f634a321671a812ae2ed0265d03c72095701b3b54aa7ea2aaa0b683b00000000f9fe3fdbacbbb7a9296e819442856646a8ec11397d9f100df3240bfcb2cc17ccf795448b9ab65c5c2de8f4634fb3563ca24f91666b", 0x83}], 0x1, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ffffff7f00000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000100000000000000000000000005c00aa000000"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r7, 0x4}, 0x38)

129.669098ms ago: executing program 2 (id=3548):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6800000006"], 0x90}}, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)

28.871102ms ago: executing program 2 (id=3549):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0)

12.279736ms ago: executing program 2 (id=3550):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000a2"], 0x48)

11.541364ms ago: executing program 1 (id=3551):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f00", 0x11}, {&(0x7f0000000400)="155fe20c6d", 0x5}], 0x2)

0s ago: executing program 0 (id=3552):
unshare(0x400)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24493' (ED25519) to the list of known hosts.
syzkaller login: [   49.333935][ T5759] cgroup: Unknown subsys name 'net'
[   49.468031][ T5759] cgroup: Unknown subsys name 'cpuset'
[   49.472178][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.003106][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.360070][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.364399][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.368449][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.369278][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.372394][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.377578][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.378194][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.381582][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.384567][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.388412][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.390195][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.395653][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.401434][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.431457][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.436938][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.678620][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   55.766066][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.780897][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   55.813898][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.817383][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.820033][ T5829] bridge_slave_0: entered allmulticast mode
[   55.823976][ T5829] bridge_slave_0: entered promiscuous mode
[   55.843105][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.847701][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.850216][ T5829] bridge_slave_1: entered allmulticast mode
[   55.853118][ T5829] bridge_slave_1: entered promiscuous mode
[   55.926009][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.930024][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.932446][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.935227][ T5832] bridge_slave_0: entered allmulticast mode
[   55.938029][ T5832] bridge_slave_0: entered promiscuous mode
[   55.941104][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.943434][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.947092][ T5835] bridge_slave_0: entered allmulticast mode
[   55.949938][ T5835] bridge_slave_0: entered promiscuous mode
[   55.953028][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.955778][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.958156][ T5835] bridge_slave_1: entered allmulticast mode
[   55.960927][ T5835] bridge_slave_1: entered promiscuous mode
[   55.964307][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.975730][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.978279][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.981273][ T5832] bridge_slave_1: entered allmulticast mode
[   55.984116][ T5832] bridge_slave_1: entered promiscuous mode
[   56.021419][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.035009][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.039736][ T5829] team0: Port device team_slave_0 added
[   56.043436][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.047851][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.058457][ T5829] team0: Port device team_slave_1 added
[   56.101274][ T5832] team0: Port device team_slave_0 added
[   56.104229][ T5835] team0: Port device team_slave_0 added
[   56.107338][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.109573][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.118716][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.124519][ T5832] team0: Port device team_slave_1 added
[   56.135930][ T5835] team0: Port device team_slave_1 added
[   56.138724][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.141640][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.153008][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.204245][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.207563][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.218983][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.223984][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.227024][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.235590][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.241323][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.243688][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.252346][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.263876][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.268339][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.279724][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.293265][ T5829] hsr_slave_0: entered promiscuous mode
[   56.296021][ T5829] hsr_slave_1: entered promiscuous mode
[   56.380305][ T5832] hsr_slave_0: entered promiscuous mode
[   56.383459][ T5832] hsr_slave_1: entered promiscuous mode
[   56.388251][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.391496][ T5832] Cannot create hsr debugfs directory
[   56.406426][ T5835] hsr_slave_0: entered promiscuous mode
[   56.409593][ T5835] hsr_slave_1: entered promiscuous mode
[   56.412548][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.416981][ T5835] Cannot create hsr debugfs directory
[   56.730441][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.741085][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.757724][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.773154][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.812809][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.820043][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.839220][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.844156][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.908475][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.918855][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.934557][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.940954][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.049986][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.058171][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.083758][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.091957][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   57.103480][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.106029][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.114581][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   57.129925][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.133045][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.143950][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.146818][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.161949][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.165052][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.174420][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   57.198891][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.201837][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.208791][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.211207][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.386579][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.432497][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.445762][ T5840] Bluetooth: hci1: command tx timeout
[   57.445830][ T5833] Bluetooth: hci0: command tx timeout
[   57.454054][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.496728][ T5832] veth0_vlan: entered promiscuous mode
[   57.523887][ T5835] veth0_vlan: entered promiscuous mode
[   57.526734][ T5833] Bluetooth: hci2: command tx timeout
[   57.535349][ T5832] veth1_vlan: entered promiscuous mode
[   57.559562][ T5835] veth1_vlan: entered promiscuous mode
[   57.571374][ T5829] veth0_vlan: entered promiscuous mode
[   57.592304][ T5829] veth1_vlan: entered promiscuous mode
[   57.600798][ T5832] veth0_macvtap: entered promiscuous mode
[   57.616162][ T5832] veth1_macvtap: entered promiscuous mode
[   57.624147][ T5835] veth0_macvtap: entered promiscuous mode
[   57.638042][ T5835] veth1_macvtap: entered promiscuous mode
[   57.665689][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.672938][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.683834][ T5829] veth0_macvtap: entered promiscuous mode
[   57.691780][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.703887][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.709704][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.713517][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.736699][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.740938][ T5829] veth1_macvtap: entered promiscuous mode
[   57.749168][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.767220][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.787125][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.791552][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.808133][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.842480][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.847708][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.855901][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.874085][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.901479][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.915473][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.926090][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.929236][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.941554][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.947012][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.993024][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.001407][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.040328][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.047533][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.050173][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.069936][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.091470][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.095953][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.099599][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.287628][ T5911] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.790083][ T5936] tipc: Started in network mode
[   58.792305][ T5936] tipc: Node identity 7ed1ed91845a, cluster identity 4711
[   58.797328][ T5936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.801364][ T5936] syzkaller0: entered promiscuous mode
[   58.804434][ T5936] syzkaller0: entered allmulticast mode
[   58.852932][ T5936] tipc: Resetting bearer <eth:syzkaller0>
[   58.873013][ T5934] tipc: Resetting bearer <eth:syzkaller0>
[   58.883891][ T5934] tipc: Disabling bearer <eth:syzkaller0>
[   58.970363][ T5944] netlink: 14 bytes leftover after parsing attributes in process `syz.1.21'.
[   59.107059][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   59.130432][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   59.156145][ T5944] bond0 (unregistering): Released all slaves
[   59.525773][ T5833] Bluetooth: hci0: command tx timeout
[   59.528014][ T5833] Bluetooth: hci1: command tx timeout
[   59.596744][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'.
[   59.600251][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'.
[   59.606348][ T5833] Bluetooth: hci2: command tx timeout
[   59.848039][ T5987] xt_CT: No such helper "snmp_trap"
[   59.969923][ T5991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.213786][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'.
[   60.223287][ T6004] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   60.234197][ T6002] veth1: entered promiscuous mode
[   60.254853][ T6002] veth1: left promiscuous mode
[   60.479435][ T6026] netlink: 104 bytes leftover after parsing attributes in process `syz.2.56'.
[   60.601053][ T6038] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   60.678918][ T6046] trusted_key: syz.0.64 sent an empty control message without MSG_MORE.
[   60.857267][ T6063] warning: `syz.2.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.882546][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881124c6800: rx timeout, send abort
[   61.363556][ T6094] IPv6: NLM_F_REPLACE set, but no existing node found!
[   61.382830][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881124c4000: rx timeout, send abort
[   61.385963][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881124c6800: abort rx timeout. Force session deactivation
[   61.604936][ T5833] Bluetooth: hci0: command tx timeout
[   61.607489][ T5840] Bluetooth: hci1: command tx timeout
[   61.695870][ T5833] Bluetooth: hci2: command tx timeout
[   61.758775][ T6117] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.98'.
[   61.843103][ T6124] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   61.885682][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881124c4000: abort rx timeout. Force session deactivation
[   61.972424][ T6135] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   61.996866][ T6137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.104254][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'.
[   62.303416][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'.
[   62.363891][ T6165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'.
[   62.798697][ T6190] netlink: 'syz.0.133': attribute type 11 has an invalid length.
[   63.083069][ T6157] Bluetooth: hci0: Opcode 0x080f failed: -4
[   63.186322][ T6222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.503426][ T6249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.506127][ T6249] IPv6: NLM_F_CREATE should be set when creating new route
[   63.509341][ T6249] IPv6: NLM_F_CREATE should be set when creating new route
[   63.512310][ T6249] IPv6: NLM_F_CREATE should be set when creating new route
[   63.531965][ T6249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   63.536621][ T6249] Zero length message leads to an empty skb
[   63.667520][ T6266] __nla_validate_parse: 3 callbacks suppressed
[   63.667530][ T6266] netlink: 64 bytes leftover after parsing attributes in process `syz.1.170'.
[   63.673290][ T6266] netlink: 64 bytes leftover after parsing attributes in process `syz.1.170'.
[   63.686438][ T5833] Bluetooth: hci0: command tx timeout
[   63.688433][ T5840] Bluetooth: hci1: command tx timeout
[   63.774912][ T5840] Bluetooth: hci2: command tx timeout
[   63.866666][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'.
[   64.150011][ T6295] syz.1.183 uses obsolete (PF_INET,SOCK_PACKET)
[   64.218054][ T6299] netlink: 52 bytes leftover after parsing attributes in process `syz.2.185'.
[   64.223864][ T6299] smc: net device bond0 applied user defined pnetid SYZ2
[   64.268750][ T6299] smc: net device bond0 erased user defined pnetid SYZ2
[   64.598654][ T6313] netlink: 104 bytes leftover after parsing attributes in process `syz.1.190'.
[   64.660753][ T6317] netlink: 56 bytes leftover after parsing attributes in process `syz.0.192'.
[   64.760072][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'.
[   64.799659][ T6328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.197'.
[   64.914561][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'.
[   64.938233][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.953402][ T6336] bond0: (slave batadv1): Opening slave failed
[   65.113907][ T6343] openvswitch: netlink: Multiple metadata blocks provided
[   65.248931][ T6349] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.363902][ T6355] pimreg: entered allmulticast mode
[   65.379347][ T6355] pimreg: left allmulticast mode
[   65.528557][ T6364] delete_channel: no stack
[   65.566260][ T6369] netlink: 248 bytes leftover after parsing attributes in process `syz.1.217'.
[   65.620144][ T6373] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.709055][ T6377] netlink: 'syz.1.221': attribute type 12 has an invalid length.
[   65.765559][ T5833] Bluetooth: hci0: command 0x080f tx timeout
[   66.484837][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[   67.162344][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.165945][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.275483][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.286720][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.417884][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.421026][ T6478] lo: entered allmulticast mode
[   67.423103][ T6478] lo: left allmulticast mode
[   67.450058][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.469105][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.472885][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.517944][ T6486] netlink: 'syz.0.264': attribute type 4 has an invalid length.
[   67.523048][ T6468] syz.1.256 (6468) used greatest stack depth: 20104 bytes left
[   67.712486][ T6506] tipc: Failed to remove unknown binding: 66,1,1/0:1225151663/1225151665
[   67.718191][ T6506] tipc: Failed to remove unknown binding: 66,1,1/0:1225151663/1225151665
[   67.720929][ T6506] tipc: Failed to remove unknown binding: 66,1,1/0:1225151663/1225151665
[   67.858795][ T6526] netlink: 'syz.0.284': attribute type 10 has an invalid length.
[   67.882516][ T6526] team0: Port device geneve0 added
[   67.913037][ T6526] syz.0.284 (6526) used greatest stack depth: 20056 bytes left
[   68.053390][ T6540] tipc: Started in network mode
[   68.055739][ T6540] tipc: Node identity eef235c9005f, cluster identity 4711
[   68.058072][ T6540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.068598][ T6540] syzkaller0: entered promiscuous mode
[   68.070504][ T6540] syzkaller0: entered allmulticast mode
[   68.090403][ T6540] tipc: Resetting bearer <eth:syzkaller0>
[   68.095372][ T6539] tipc: Resetting bearer <eth:syzkaller0>
[   68.102328][ T6539] tipc: Disabling bearer <eth:syzkaller0>
[   68.225228][ T1928] IPVS: starting estimator thread 0...
[   68.241591][ T6548] syzkaller1: entered promiscuous mode
[   68.243566][ T6548] syzkaller1: entered allmulticast mode
[   68.316294][ T6549] IPVS: using max 51 ests per chain, 122400 per kthread
[   68.379349][ T6559] netlink: 'syz.0.300': attribute type 10 has an invalid length.
[   68.382378][ T6559] dummy0: entered promiscuous mode
[   68.387147][ T6559] bridge0: port 3(dummy0) entered blocking state
[   68.389624][ T6559] bridge0: port 3(dummy0) entered disabled state
[   68.391823][ T6559] dummy0: entered allmulticast mode
[   68.395626][ T6559] bridge0: port 3(dummy0) entered blocking state
[   68.397880][ T6559] bridge0: port 3(dummy0) entered forwarding state
[   68.401185][ T6561] batadv_slave_1: entered promiscuous mode
[   68.409898][ T6560] batadv_slave_1: left promiscuous mode
[   68.462430][ T6567] netlink: 'syz.2.303': attribute type 11 has an invalid length.
[   68.770827][ T6587] netlink: 'syz.2.314': attribute type 3 has an invalid length.
[   68.783293][ T6587] netlink: 'syz.2.314': attribute type 3 has an invalid length.
[   68.856529][ T6593] lo speed is unknown, defaulting to 1000
[   68.859924][ T6593] lo speed is unknown, defaulting to 1000
[   68.865498][ T6593] lo speed is unknown, defaulting to 1000
[   68.901432][ T6595] Bluetooth: MGMT ver 1.23
[   69.020003][ T6602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.024493][ T6602] syzkaller0: entered promiscuous mode
[   69.031973][ T6602] syzkaller0: entered allmulticast mode
[   69.065302][ T6602] tipc: Resetting bearer <eth:syzkaller0>
[   69.081083][ T6601] tipc: Resetting bearer <eth:syzkaller0>
[   69.116603][ T6601] tipc: Disabling bearer <eth:syzkaller0>
[   69.176794][ T6593] infiniband syz0: set active
[   69.185411][ T5855] lo speed is unknown, defaulting to 1000
[   69.202040][ T6593] infiniband syz0: added lo
[   69.302292][ T6593] RDS/IB: syz0: added
[   69.309656][ T6593] smc: adding ib device syz0 with port count 1
[   69.312639][ T6593] smc:    ib device syz0 port 1 has pnetid 
[   69.327845][  T792] lo speed is unknown, defaulting to 1000
[   69.337336][ T6593] lo speed is unknown, defaulting to 1000
[   69.721060][ T6593] lo speed is unknown, defaulting to 1000
[   70.130731][ T6593] lo speed is unknown, defaulting to 1000
[   70.230636][ T6662] __nla_validate_parse: 9 callbacks suppressed
[   70.230652][ T6662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'.
[   70.517275][ T6678] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.355'.
[   70.543736][ T6593] syz.2.317 (6593) used greatest stack depth: 19936 bytes left
[   70.959395][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'.
[   70.971341][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'.
[   71.094060][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'.
[   71.208106][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.211676][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.418621][ T6731] IPVS: length: 209 != 24
[   71.640299][ T6739] netlink: 'syz.0.383': attribute type 29 has an invalid length.
[   71.643469][ T6739] netlink: 'syz.0.383': attribute type 29 has an invalid length.
[   72.055650][ T6756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'.
[   72.109619][ T6764] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.394'.
[   73.021174][ T6797] openvswitch: netlink: Flow actions attr not present in new flow.
[   73.137678][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[   73.281244][ T6815] Driver unsupported XDP return value 0 on prog  (id 51) dev N/A, expect packet loss!
[   74.970768][ T5835] cgroup: fork rejected by pids controller in /syz2
[   75.359859][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.439680][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.538746][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.610804][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.776551][   T13] bridge_slave_1: left allmulticast mode
[   75.779037][   T13] bridge_slave_1: left promiscuous mode
[   75.782344][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.793527][   T13] bridge_slave_0: left allmulticast mode
[   75.796738][   T13] bridge_slave_0: left promiscuous mode
[   75.799111][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.804233][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.808363][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.812601][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.817314][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.820724][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.062049][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.067106][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.071778][   T13] bond0 (unregistering): Released all slaves
[   76.165924][ T6881] lo speed is unknown, defaulting to 1000
[   76.181897][   T13] tipc: Left network mode
[   76.705882][ T6901] xt_bpf: check failed: parse error
[   76.871379][   T13] hsr_slave_0: left promiscuous mode
[   76.874249][   T13] hsr_slave_1: left promiscuous mode
[   76.877394][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.880535][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   76.884947][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.888026][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.901253][   T13] veth1_macvtap: left promiscuous mode
[   76.903829][   T13] veth0_macvtap: left promiscuous mode
[   76.906796][   T13] veth1_vlan: left promiscuous mode
[   76.909129][   T13] veth0_vlan: left promiscuous mode
[   77.249372][   T13] team0 (unregistering): Port device team_slave_1 removed
[   77.269701][   T13] team0 (unregistering): Port device team_slave_0 removed
[   77.459840][   T53] smc: removing ib device syz0
[   77.470640][ T5855] lo speed is unknown, defaulting to 1000
[   77.472621][ T5855] syz0: Port: 1 Link DOWN
[   77.483878][ T6881] chnl_net:caif_netlink_parms(): no params data found
[   77.560893][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'.
[   77.563880][ T6911] netlink: 92 bytes leftover after parsing attributes in process `syz.1.460'.
[   77.767364][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.771061][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.783320][ T6881] bridge_slave_0: entered allmulticast mode
[   77.798184][ T6881] bridge_slave_0: entered promiscuous mode
[   77.807746][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.812601][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.822163][ T6881] bridge_slave_1: entered allmulticast mode
[   77.842033][ T6881] bridge_slave_1: entered promiscuous mode
[   77.844888][ T5840] Bluetooth: hci2: command tx timeout
[   77.946904][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.968330][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.127601][ T6881] team0: Port device team_slave_0 added
[   78.132904][ T6881] team0: Port device team_slave_1 added
[   78.202966][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.214784][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.225374][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.245138][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.248076][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.272378][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.335902][ T6881] hsr_slave_0: entered promiscuous mode
[   78.339046][ T6881] hsr_slave_1: entered promiscuous mode
[   78.341947][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.347066][ T6881] Cannot create hsr debugfs directory
[   78.674517][ T5855] IPVS: starting estimator thread 0...
[   78.779926][ T6943] IPVS: using max 78 ests per chain, 187200 per kthread
[   78.790781][ T6948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.468'.
[   78.801331][ T6948] unsupported nlmsg_type 40
[   79.079415][ T6881] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.093892][ T6881] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.120239][ T6881] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.155399][ T6881] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.270576][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.311844][ T6881] 8021q: adding VLAN 0 to HW filter on device team0
[   79.331267][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.333810][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.354464][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.357665][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.794394][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.925960][ T5840] Bluetooth: hci2: command tx timeout
[   80.075815][ T6881] veth0_vlan: entered promiscuous mode
[   80.098167][ T6881] veth1_vlan: entered promiscuous mode
[   80.182737][ T6881] veth0_macvtap: entered promiscuous mode
[   80.226761][ T6881] veth1_macvtap: entered promiscuous mode
[   80.302979][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.318198][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.339259][ T5862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.342935][ T5862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.360304][ T5862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.366940][ T5862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.633532][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.642877][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.698477][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.709279][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.089030][ T7045] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   81.220963][ T7020] IPv6: NLM_F_CREATE should be specified when creating new route
[   81.448748][   T10] cfg80211: failed to load regulatory.db
[   81.824216][ T7064] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   81.836034][ T7066] veth0_to_team: entered promiscuous mode
[   81.838053][ T7066] veth0_to_team: entered allmulticast mode
[   81.991332][ T7074] syzkaller1: entered promiscuous mode
[   81.993438][ T7074] syzkaller1: entered allmulticast mode
[   82.005455][ T5840] Bluetooth: hci2: command tx timeout
[   82.201022][ T7087] syz.0.504: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   82.208082][ T7087] CPU: 1 UID: 0 PID: 7087 Comm: syz.0.504 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[   82.208102][ T7087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.208109][ T7087] Call Trace:
[   82.208115][ T7087]  <TASK>
[   82.208121][ T7087]  dump_stack_lvl+0x189/0x250
[   82.208145][ T7087]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.208163][ T7087]  ? __pfx__printk+0x10/0x10
[   82.208181][ T7087]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.208200][ T7087]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   82.208219][ T7087]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   82.208239][ T7087]  warn_alloc+0x214/0x310
[   82.208252][ T7087]  ? stack_depot_save_flags+0x429/0x900
[   82.208269][ T7087]  ? __pfx_warn_alloc+0x10/0x10
[   82.208283][ T7087]  ? kasan_save_track+0x4f/0x80
[   82.208301][ T7087]  ? xskq_create+0x56/0x170
[   82.208313][ T7087]  ? xsk_init_queue+0xb0/0x110
[   82.208323][ T7087]  ? xsk_setsockopt+0x4dc/0x8d0
[   82.208340][ T7087]  ? do_sock_setsockopt+0x17c/0x1b0
[   82.208356][ T7087]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   82.208370][ T7087]  ? do_syscall_64+0xfa/0x3b0
[   82.208384][ T7087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.208437][ T7087]  __vmalloc_node_range_noprof+0x125/0x12f0
[   82.208482][ T7087]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   82.208502][ T7087]  ? xskq_create+0x56/0x170
[   82.208517][ T7087]  ? __kasan_kmalloc+0x93/0xb0
[   82.208538][ T7087]  vmalloc_user_noprof+0xad/0xf0
[   82.208558][ T7087]  ? xskq_create+0xbf/0x170
[   82.208571][ T7087]  xskq_create+0xbf/0x170
[   82.208586][ T7087]  xsk_init_queue+0xb0/0x110
[   82.208600][ T7087]  xsk_setsockopt+0x4dc/0x8d0
[   82.208621][ T7087]  ? __pfx_xsk_setsockopt+0x10/0x10
[   82.208639][ T7087]  ? __pfx_aa_sk_perm+0x10/0x10
[   82.208656][ T7087]  ? aa_sock_opt_perm+0x74/0x110
[   82.208671][ T7087]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   82.208684][ T7087]  ? __pfx_xsk_setsockopt+0x10/0x10
[   82.208704][ T7087]  do_sock_setsockopt+0x17c/0x1b0
[   82.208722][ T7087]  __x64_sys_setsockopt+0x13f/0x1b0
[   82.208741][ T7087]  do_syscall_64+0xfa/0x3b0
[   82.208753][ T7087]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.208765][ T7087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.208776][ T7087]  ? exc_page_fault+0x9f/0xf0
[   82.208790][ T7087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.208801][ T7087] RIP: 0033:0x7f946198e9a9
[   82.208813][ T7087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.208823][ T7087] RSP: 002b:00007f9462896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   82.208837][ T7087] RAX: ffffffffffffffda RBX: 00007f9461bb5fa0 RCX: 00007f946198e9a9
[   82.208845][ T7087] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[   82.208852][ T7087] RBP: 00007f9461a10d69 R08: 0000000000000004 R09: 0000000000000000
[   82.208860][ T7087] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.208867][ T7087] R13: 0000000000000000 R14: 00007f9461bb5fa0 R15: 00007fff3a8449a8
[   82.208889][ T7087]  </TASK>
[   82.208894][ T7087] Mem-Info:
[   82.341042][ T7087] active_anon:5799 inactive_anon:0 isolated_anon:0
[   82.341042][ T7087]  active_file:922 inactive_file:38219 isolated_file:0
[   82.341042][ T7087]  unevictable:1768 dirty:144 writeback:0
[   82.341042][ T7087]  slab_reclaimable:9655 slab_unreclaimable:54326
[   82.341042][ T7087]  mapped:18157 shmem:2442 pagetables:973
[   82.341042][ T7087]  sec_pagetables:0 bounce:0
[   82.341042][ T7087]  kernel_misc_reclaimable:0
[   82.341042][ T7087]  free:292673 free_pcp:21838 free_cma:0
[   82.359246][ T7087] Node 0 active_anon:13460kB inactive_anon:0kB active_file:2204kB inactive_file:150192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:71692kB dirty:152kB writeback:0kB shmem:4696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4528kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.370944][ T7087] Node 1 active_anon:9736kB inactive_anon:0kB active_file:1484kB inactive_file:2684kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:936kB dirty:424kB writeback:0kB shmem:5072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7072kB pagetables:1440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   82.382717][ T7087] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   82.392652][ T7087] lowmem_reserve[]: 0 812 812 812 812
[   82.394888][ T7087] Node 0 DMA32 free:235600kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13460kB inactive_anon:0kB active_file:2204kB inactive_file:150192kB unevictable:3536kB writepending:152kB present:1556484kB managed:831784kB mlocked:0kB bounce:0kB free_pcp:33132kB local_pcp:15372kB free_cma:0kB
[   82.408012][ T7087] lowmem_reserve[]: 0 0 0 0 0
[   82.409761][ T7087] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   82.420610][ T7087] lowmem_reserve[]: 0 0 854 854 854
[   82.422476][ T7087] Node 1 Normal free:461240kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9736kB inactive_anon:0kB active_file:1484kB inactive_file:2684kB unevictable:3536kB writepending:424kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:54536kB local_pcp:21744kB free_cma:0kB
[   82.434214][ T7087] lowmem_reserve[]: 0 0 0 0 0
[   82.436106][ T7087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   82.440331][ T7087] Node 0 DMA32: 492*4kB (UM) 82*8kB (UME) 119*16kB (UME) 312*32kB (UME) 96*64kB (UM) 21*128kB (UME) 9*256kB (UME) 12*512kB (UME) 9*1024kB (M) 5*2048kB (M) 45*4096kB (M) = 235568kB
[   82.447650][ T7087] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   82.453107][ T7087] Node 1 Normal: 1554*4kB (UME) 812*8kB (UME) 567*16kB (UME) 27*32kB (UM) 36*64kB (UM) 54*128kB (UME) 25*256kB (UME) 16*512kB (UM) 13*1024kB (UME) 6*2048kB (UME) 95*4096kB (M) = 461176kB
[   82.459589][ T7087] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.462873][ T7087] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   82.468485][ T7087] 41583 total pagecache pages
[   82.470178][ T7087] 0 pages in swap cache
[   82.471688][ T7087] Free swap  = 124996kB
[   82.473139][ T7087] Total swap = 124996kB
[   82.475113][ T7087] 786301 pages RAM
[   82.476344][ T7087] 0 pages HighMem/MovableOnly
[   82.477863][ T7087] 241107 pages reserved
[   82.479244][ T7087] 0 pages cma reserved
[   82.622726][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[   82.737636][ T7093] syzkaller0: entered promiscuous mode
[   82.740047][ T7093] syzkaller0: entered allmulticast mode
[   82.877849][ T7095] netlink: 'syz.1.508': attribute type 9 has an invalid length.
[   82.881079][ T7095] netlink: 'syz.1.508': attribute type 7 has an invalid length.
[   82.884171][ T7095] netlink: 'syz.1.508': attribute type 8 has an invalid length.
[   83.017539][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'.
[   83.021620][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'.
[   83.732455][ T7100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.043222][ T7149] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   84.087513][ T5840] Bluetooth: hci2: command tx timeout
[   84.501256][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'.
[   84.504107][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'.
[   85.183255][ T7222] netlink: 'syz.1.566': attribute type 1 has an invalid length.
[   85.199552][ T7224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.568'.
[   85.202315][ T7222] netlink: 'syz.1.566': attribute type 2 has an invalid length.
[   85.203611][ T7224] netem: unknown loss type 13
[   85.211067][ T7224] netem: change failed
[   85.418165][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.578'.
[   85.687968][   T40] wlan1: Trigger new scan to find an IBSS to join
[   87.427904][ T7318] lo speed is unknown, defaulting to 1000
[   87.430316][ T7318] lo speed is unknown, defaulting to 1000
[   87.432659][ T7318] lo speed is unknown, defaulting to 1000
[   87.566433][ T7332] netlink: 'syz.1.618': attribute type 1 has an invalid length.
[   87.661353][ T7318] infiniband syz0: set active
[   87.663243][   T24] lo speed is unknown, defaulting to 1000
[   87.666535][ T7318] infiniband syz0: added lo
[   87.679128][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.1.621'.
[   87.683672][ T7340] netlink: 'syz.1.621': attribute type 7 has an invalid length.
[   87.694985][ T7340] netlink: 'syz.1.621': attribute type 8 has an invalid length.
[   87.698607][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.621'.
[   87.700415][ T7318] RDS/IB: syz0: added
[   87.708824][ T7318] smc: adding ib device syz0 with port count 1
[   87.711082][ T7318] smc:    ib device syz0 port 1 has pnetid 
[   87.747758][   T10] lo speed is unknown, defaulting to 1000
[   87.750428][ T7318] lo speed is unknown, defaulting to 1000
[   87.752016][ T7343] netlink: 'syz.1.622': attribute type 72 has an invalid length.
[   87.758998][ T7343] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.622'.
[   87.904408][ T7318] lo speed is unknown, defaulting to 1000
[   88.037815][ T7318] lo speed is unknown, defaulting to 1000
[   88.647843][   T27] wlan1: Trigger new scan to find an IBSS to join
[   89.526073][   T65] wlan1: Creating new IBSS network, BSSID b2:f7:86:09:08:40
[   89.666389][ T7425] xt_l2tp: missing protocol rule (udp|l2tpip)
[   89.795758][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'.
[   89.797328][ T5855] IPVS: starting estimator thread 0...
[   89.803722][ T7435] tipc: Started in network mode
[   89.808764][ T7435] tipc: Node identity ac1414aa, cluster identity 4711
[   89.816223][ T7435] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   89.819393][ T7435] tipc: Enabled bearer <udp:s>, priority 10
[   89.875566][ T7440] lo speed is unknown, defaulting to 1000
[   89.905595][ T7436] IPVS: using max 79 ests per chain, 189600 per kthread
[   89.955963][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.050393][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'.
[   90.094719][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.167723][ T7463] gretap0: entered promiscuous mode
[   90.171800][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'.
[   90.244768][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.336629][ T7445] lo speed is unknown, defaulting to 1000
[   90.384821][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.534740][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.674757][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.825738][   T10] tipc: Node number set to 2886997162
[   90.974858][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   90.994589][ T7490] syz.0.688 (7490) used greatest stack depth: 19000 bytes left
[   91.070807][ T7503] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.691'.
[   91.095762][ T7503] netlink: zone id is out of range
[   91.098040][ T7503] netlink: zone id is out of range
[   91.134826][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'.
[   91.259185][ T7516] nbd: must specify at least one socket
[   91.268615][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'.
[   91.298950][ T7519] netlink: 'syz.1.697': attribute type 13 has an invalid length.
[   91.302259][ T7519] netlink: 'syz.1.697': attribute type 17 has an invalid length.
[   91.468581][ T7513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'.
[   91.496511][ T7519] 8021q: adding VLAN 0 to HW filter on device team0
[   91.531417][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.566962][ T7522] lo speed is unknown, defaulting to 1000
[   91.591526][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.648840][ T7519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.968628][ T7544] netlink: 'syz.0.705': attribute type 30 has an invalid length.
[   91.978522][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.978534][ T7544] netlink: 'syz.0.705': attribute type 30 has an invalid length.
[   91.981881][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.988094][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.998676][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.230922][ T7554] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.235915][ T7554] D: renamed from syzkaller0
[   92.239539][ T7554] tipc: Disabling bearer <eth:syzkaller0>
[   92.542874][ T7569] tipc: New replicast peer: 255.255.255.255
[   92.551374][ T7569] tipc: Enabled bearer <udp:syz2>, priority 10
[   93.061879][ T7595] __nla_validate_parse: 2 callbacks suppressed
[   93.061893][ T7595] netlink: 52 bytes leftover after parsing attributes in process `syz.1.729'.
[   93.131953][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'.
[   93.138445][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.729'.
[   93.142836][ T7600] netlink: 'syz.1.729': attribute type 3 has an invalid length.
[   93.149523][ T7600] xt_CT: You must specify a L4 protocol and not use inversions on it
[   93.647356][ T7625] netlink: 47 bytes leftover after parsing attributes in process `syz.0.741'.
[   93.784739][ T7631] TCP: TCP_TX_DELAY enabled
[   94.090921][ T7644] netlink: 'syz.2.748': attribute type 13 has an invalid length.
[   94.094273][ T7644] netlink: 'syz.2.748': attribute type 17 has an invalid length.
[   94.106497][ T7644] gretap0: left promiscuous mode
[   94.182129][ T7646] !: renamed from dummy0 (while UP)
[   94.247872][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.251096][ T7646] lo speed is unknown, defaulting to 1000
[   94.318252][ T7641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.380288][ T7644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.884810][    C0] net_ratelimit: 8 callbacks suppressed
[   94.884821][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   95.271227][ T7700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.406334][ T7700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.514493][ T7700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.581798][ T7700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.643791][ T5847] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.658621][ T5847] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.670477][ T5847] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.689069][ T5847] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.934831][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   96.179122][ T7743] netlink: 'syz.0.759': attribute type 22 has an invalid length.
[   96.280220][ T7747] netlink: 'syz.1.761': attribute type 2 has an invalid length.
[   96.283625][ T7747] netlink: 51 bytes leftover after parsing attributes in process `syz.1.761'.
[   96.964744][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   96.972845][ T7767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'.
[   97.039195][ T7772] netlink: 270 bytes leftover after parsing attributes in process `syz.1.769'.
[   97.241407][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'.
[   97.258899][ T7786] netlink: 'syz.2.776': attribute type 1 has an invalid length.
[   97.262232][ T7786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.776'.
[   97.286531][ T7790] batadv1: entered allmulticast mode
[   97.297699][ T7790] 8021q: adding VLAN 0 to HW filter on device batadv1
[   97.541434][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.789'.
[   97.860529][ T7839] smc: net device bond0 applied user defined pnetid SYZ2
[   97.863741][ T7839] smc: net device bond0 erased user defined pnetid SYZ2
[   98.014732][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   98.203309][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.817'.
[   98.339521][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[   98.344418][ T7883] netlink: 312 bytes leftover after parsing attributes in process `syz.1.822'.
[   98.352608][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.822'.
[   98.402566][ T7887] netlink: 'syz.0.820': attribute type 13 has an invalid length.
[   98.406092][ T7887] netlink: 'syz.0.820': attribute type 17 has an invalid length.
[   98.574588][ T7901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.583209][ T7901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.680125][ T7887] batadv1: left allmulticast mode
[   98.684357][   T96] lo speed is unknown, defaulting to 1000
[   98.783658][ T7911] netlink: 164 bytes leftover after parsing attributes in process `syz.1.826'.
[   99.045552][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   99.172146][ T7937] netlink: 'syz.1.838': attribute type 4 has an invalid length.
[   99.493626][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'.
[   99.508604][ T7962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.850'.
[   99.883079][ T7992] netlink: 'syz.2.865': attribute type 1 has an invalid length.
[   99.885985][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'.
[   99.887128][ T7992] netlink: 'syz.2.865': attribute type 4 has an invalid length.
[   99.893072][ T7992] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.865'.
[   99.989681][ T8000] lo speed is unknown, defaulting to 1000
[  100.085406][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  100.444118][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.447527][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.711676][ T8032] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.879'.
[  101.124918][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  101.613959][ T8085] xt_l2tp: wrong L2TP version: 0
[  101.998423][ T8100] bridge0: port 4(syz_tun) entered blocking state
[  102.001533][ T8100] bridge0: port 4(syz_tun) entered disabled state
[  102.003917][ T8100] syz_tun: entered allmulticast mode
[  102.006811][ T8100] syz_tun: entered promiscuous mode
[  102.009144][ T8100] bridge0: port 4(syz_tun) entered blocking state
[  102.011555][ T8100] bridge0: port 4(syz_tun) entered forwarding state
[  102.164756][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  102.416388][ T8129] netlink: 'syz.0.916': attribute type 8 has an invalid length.
[  102.507007][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.589108][ T8143] xt_CT: No such helper "snmp"
[  102.716345][ T8146] netlink: 'syz.0.924': attribute type 12 has an invalid length.
[  103.107796][ T8184] netlink: 'syz.2.941': attribute type 83 has an invalid length.
[  103.214794][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  103.257026][ T8199] netlink: 'syz.1.949': attribute type 13 has an invalid length.
[  103.265769][ T8199] __nla_validate_parse: 7 callbacks suppressed
[  103.265780][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.949'.
[  103.279426][ T8199] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  103.372549][ T8203] lo speed is unknown, defaulting to 1000
[  103.577259][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.957'.
[  103.629570][ T8224] netlink: 564 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.633486][ T8224] netlink: 171 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.637707][ T8224] netlink: 5 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.641515][ T8224] netlink: 9 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.647894][ T8224] netlink: 102 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.651883][ T8224] netlink: 4728 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.656421][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'.
[  103.736364][ T8229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.751494][ T8229] syzkaller0: entered promiscuous mode
[  103.753608][ T8229] syzkaller0: entered allmulticast mode
[  103.790948][ T8229] tipc: Resetting bearer <eth:syzkaller0>
[  103.797599][ T8228] tipc: Resetting bearer <eth:syzkaller0>
[  103.807665][ T8228] tipc: Disabling bearer <eth:syzkaller0>
[  103.814521][ T8231] lo speed is unknown, defaulting to 1000
[  103.943259][ T8241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'.
[  103.997615][ T8241] batman_adv: batadv0: Adding interface: dummy0
[  103.999882][ T8241] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.017131][ T8241] batman_adv: batadv0: Interface activated: dummy0
[  104.083438][ T8241] batadv0: mtu less than device minimum
[  104.089614][ T8241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.095155][ T8241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.100633][ T8241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.106083][ T8241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.111361][ T8241] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  104.289904][ T8248] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  104.632611][ T8266] netlink: 'syz.2.974': attribute type 4 has an invalid length.
[  104.715978][ T8268] vlan0: entered promiscuous mode
[  104.731848][ T8268] team0: Port device vlan0 added
[  105.134613][ T8291] xt_l2tp: v2 doesn't support IP mode
[  105.161153][ T8292] erspan0: entered promiscuous mode
[  105.260169][ T8298] tipc: Started in network mode
[  105.262540][ T8298] tipc: Node identity f69438f81ead, cluster identity 4711
[  105.266607][ T8298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.278376][ T8298] syzkaller0: entered promiscuous mode
[  105.280750][ T8298] syzkaller0: entered allmulticast mode
[  105.285532][    C0] net_ratelimit: 16 callbacks suppressed
[  105.285548][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  105.315645][ T8298] tipc: Resetting bearer <eth:syzkaller0>
[  105.340381][ T8297] tipc: Resetting bearer <eth:syzkaller0>
[  105.372924][ T8297] tipc: Disabling bearer <eth:syzkaller0>
[  105.481628][ T8314] netlink: 'syz.2.999': attribute type 4 has an invalid length.
[  105.856878][ T8348] openvswitch: netlink: IP tunnel dst address not specified
[  106.324845][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.214591][ T8404] openvswitch: netlink: IPv6 tunnel dst address is zero
[  107.364852][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  107.423581][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.032809][ T8462] tap0: tun_chr_ioctl cmd 1074025680
[  108.055833][ T8462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.060623][ T8462] D: renamed from syzkaller0
[  108.064164][ T8462] tipc: Disabling bearer <eth:syzkaller0>
[  108.404727][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  108.467805][ T8496] lo speed is unknown, defaulting to 1000
[  108.638764][ T8510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.706106][ T8512] vlan2: entered promiscuous mode
[  108.707866][ T8512] bridge0: entered promiscuous mode
[  108.709685][ T8512] vlan2: entered allmulticast mode
[  108.711579][ T8512] bridge0: entered allmulticast mode
[  108.858837][ T8520] __nla_validate_parse: 10 callbacks suppressed
[  108.858850][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1090'.
[  108.902705][ T8520] lo speed is unknown, defaulting to 1000
[  109.444900][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  109.531203][ T8556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.541080][ T8556] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  109.555385][ T8556] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  109.591080][ T8556] tipc: Resetting bearer <eth:syzkaller0>
[  109.922372][ T8582] netlink: 'syz.1.1118': attribute type 21 has an invalid length.
[  109.926054][ T8582] netlink: 'syz.1.1118': attribute type 22 has an invalid length.
[  109.929412][ T8582] netlink: 'syz.1.1118': attribute type 23 has an invalid length.
[  109.932711][ T8582] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1118'.
[  110.172905][ T8602] Cannot find add_set index 3 as target
[  110.218117][ T8607] IPv6: NLM_F_CREATE should be specified when creating new route
[  110.370202][ T8616] syz_tun: entered promiscuous mode
[  110.372779][ T8616] vlan2: entered promiscuous mode
[  110.494857][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  110.608980][ T8628] xt_TPROXY: Can be used only with -p tcp or -p udp
[  110.674464][ T8634] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  110.735692][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'.
[  110.738842][ T8639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.769706][ T8643] tipc: Enabled bearer <eth:gre0>, priority 10
[  111.351960][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'.
[  111.410600][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'.
[  111.484997][ T8717] netlink: 'syz.1.1184': attribute type 21 has an invalid length.
[  111.490917][ T8718] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.493574][ T8717] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1184'.
[  111.509771][ T8718] syzkaller0: entered promiscuous mode
[  111.511987][ T8718] syzkaller0: entered allmulticast mode
[  111.525097][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  111.532913][ T8718] tipc: Resetting bearer <eth:syzkaller0>
[  111.540281][ T8716] tipc: Resetting bearer <eth:syzkaller0>
[  111.554070][ T8716] tipc: Disabling bearer <eth:syzkaller0>
[  111.739536][ T8742] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  111.742114][ T8742] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  111.765168][   T10] tipc: Node number set to 3896064248
[  112.088569][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'.
[  112.164596][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'.
[  112.226201][ T8783] netlink: 'syz.1.1216': attribute type 21 has an invalid length.
[  112.229624][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'.
[  112.457918][ T8799] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  112.461365][ T8799] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  112.464173][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'.
[  112.475529][ T8799] block nbd0: shutting down sockets
[  112.565084][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  112.587302][ T8812] netlink: 'syz.1.1231': attribute type 1 has an invalid length.
[  112.664113][ T8820] nbd: socks must be embedded in a SOCK_ITEM attr
[  113.146972][ T8862] tap0: tun_chr_ioctl cmd 1074025675
[  113.148785][ T8862] tap0: persist disabled
[  113.604921][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  113.741840][ T8922] dvmrp1: tun_chr_ioctl cmd 1074025677
[  113.744589][ T8922] dvmrp1: linktype set to 805
[  113.846633][ T8930] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  113.957815][ T8937] __nla_validate_parse: 8 callbacks suppressed
[  113.957833][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'.
[  113.963637][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1289'.
[  113.971932][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'.
[  113.987786][ T8920] IPv6: NLM_F_REPLACE set, but no existing node found!
[  114.061218][ T8946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.279995][ T8961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1301'.
[  114.420719][ T8968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  114.654817][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  114.699040][ T8980] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  115.094525][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'.
[  115.694699][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  115.740960][ T9039] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  115.778017][ T9039] bond1: entered promiscuous mode
[  115.780164][ T9039] bond1: entered allmulticast mode
[  115.783823][ T9039] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.730585][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  116.939772][ T9110] xt_cgroup: xt_cgroup: no path or classid specified
[  117.204901][ T9126] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  117.436629][ T9138] bridge0: port 3(vxlan1) entered blocking state
[  117.440890][ T9138] bridge0: port 3(vxlan1) entered disabled state
[  117.444565][ T9138] vxlan1: entered allmulticast mode
[  117.449334][ T9138] vxlan1: entered promiscuous mode
[  117.451737][ T9140] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1385'.
[  117.458312][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'.
[  117.572260][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'.
[  117.764792][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  118.217504][ T9183] openvswitch: netlink: Flow key attribute not present in set flow.
[  118.393932][ T9194] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1412'.
[  118.402967][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'.
[  118.701974][ T9212] validate_nla: 1 callbacks suppressed
[  118.701985][ T9212] netlink: 'syz.1.1421': attribute type 1 has an invalid length.
[  118.713483][ T9214] syz_tun: left allmulticast mode
[  118.727491][ T9214] syz_tun: left promiscuous mode
[  118.729844][ T9214] bridge0: port 4(syz_tun) entered disabled state
[  118.756429][ T9214] dummy0: left allmulticast mode
[  118.758064][ T9214] dummy0: left promiscuous mode
[  118.760174][ T9214] bridge0: port 3(dummy0) entered disabled state
[  118.774043][ T9214] bridge_slave_0: left allmulticast mode
[  118.776254][ T9214] bridge_slave_0: left promiscuous mode
[  118.778456][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.799516][ T9214] bridge_slave_1: left allmulticast mode
[  118.801566][ T9214] bridge_slave_1: left promiscuous mode
[  118.805590][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.812361][ T9214] bond0: (slave bond_slave_0): Releasing backup interface
[  118.814782][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  118.821992][ T9214] bond0: (slave bond_slave_1): Releasing backup interface
[  118.840719][ T9214] team0: Port device team_slave_0 removed
[  118.847223][ T9214] team0: Port device team_slave_1 removed
[  118.849599][ T9214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.852513][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.858631][ T9214] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.861140][ T9214] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.871202][ T9214] team0: Port device geneve0 removed
[  118.877710][ T9219] team0: Mode changed to "activebackup"
[  118.886387][ T9226] vlan0: entered promiscuous mode
[  118.898948][ T9226] team0: Port device vlan0 added
[  118.903743][ T9229] tipc: Enabled bearer <eth:team0>, priority 0
[  119.189252][ T9259] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  119.232721][ T9259] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  119.240624][ T9262] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  119.843047][ T9299] __nla_validate_parse: 1 callbacks suppressed
[  119.843095][ T9299] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1461'.
[  119.846543][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  119.855872][ T9299] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1461'.
[  119.894744][ T5855] tipc: Node number set to 4004328905
[  120.419764][ T9323] lo speed is unknown, defaulting to 1000
[  120.451360][    C0] Unknown status report in ack skb
[  120.702619][ T9344] netlink: 'syz.0.1481': attribute type 1 has an invalid length.
[  120.741255][ T9339] lo speed is unknown, defaulting to 1000
[  120.828857][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1483'.
[  120.884922][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  120.932126][ T9357] netlink: 'syz.2.1486': attribute type 21 has an invalid length.
[  121.431463][ T9389] sctp: [Deprecated]: syz.1.1502 (pid 9389) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.431463][ T9389] Use struct sctp_sack_info instead
[  121.529522][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'.
[  121.533238][ T9399] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  121.592674][ T9405] xt_CT: No such helper "snmp"
[  121.838352][ T9418] lo speed is unknown, defaulting to 1000
[  121.924886][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  122.308728][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1525'.
[  122.326930][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'.
[  122.475575][ T9456] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  122.554383][ T9467] veth0_to_team: left promiscuous mode
[  122.557211][ T9467] veth0_to_team: left allmulticast mode
[  122.561197][ T9467] netlink: 'syz.1.1537': attribute type 10 has an invalid length.
[  122.573971][ T9467] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1537'.
[  122.612631][ T9471] netlink: 'syz.2.1538': attribute type 4 has an invalid length.
[  122.654117][ T9473] xt_connbytes: Forcing CT accounting to be enabled
[  122.664515][ T9473] xt_bpf: check failed: parse error
[  122.705114][ T9479] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1542'.
[  122.964855][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  124.004827][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  124.349979][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1570'.
[  124.468884][ T9548] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  125.044783][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  125.072111][ T9562] lo speed is unknown, defaulting to 1000
[  125.122136][ T9563] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  125.125312][ T9563] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  125.521897][ T9578] syzkaller1: entered promiscuous mode
[  125.524161][ T9578] syzkaller1: entered allmulticast mode
[  125.569495][ T9578] netlink: 'syz.0.1582': attribute type 15 has an invalid length.
[  125.742590][ T9599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1587'.
[  126.084882][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  126.101260][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1601'.
[  126.116413][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'.
[  126.155949][ T9629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1604'.
[  126.213570][ T9622] tipc: Resetting bearer <eth:team0>
[  126.365636][ T9622] vlan0: left promiscuous mode
[  126.433209][ T9622] vlan2: left promiscuous mode
[  126.444688][ T9622] bridge0: left promiscuous mode
[  126.446485][ T9622] vlan2: left allmulticast mode
[  126.448141][ T9622] bridge0: left allmulticast mode
[  126.461900][ T9622] bond1: left promiscuous mode
[  126.463642][ T9622] bond1: left allmulticast mode
[  126.466715][   T96] lo speed is unknown, defaulting to 1000
[  126.469283][   T96] syz0: Port: 1 Link DOWN
[  126.500133][ T5862] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.503514][ T5862] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.514209][   T96] lo speed is unknown, defaulting to 1000
[  126.514251][ T5862] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.524519][ T5862] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.793306][ T9657] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1614'.
[  126.881115][ T9657] bond0 (unregistering): Released all slaves
[  126.929808][ T9666] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1617'.
[  126.935143][ T9666] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1617'.
[  127.037301][ T9670] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  127.042248][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1619'.
[  127.057420][ T9670] bridge2: entered promiscuous mode
[  127.059853][ T9670] bridge2: entered allmulticast mode
[  127.065411][ T9670] team0: Port device bridge2 added
[  127.091568][ T9672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.134777][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  127.340275][ T9682] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  127.344327][ T9682] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  127.346967][ T9682] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  127.433974][ T9684] batman_adv: batadv0: Interface deactivated: dummy0
[  127.439017][ T9684] batman_adv: batadv0: Removing interface: dummy0
[  127.444574][ T9684] bridge_slave_0: left allmulticast mode
[  127.447823][ T9684] bridge_slave_0: left promiscuous mode
[  127.450480][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.463886][ T9684] bridge_slave_1: left allmulticast mode
[  127.468569][ T9684] bridge_slave_1: left promiscuous mode
[  127.471091][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.479429][ T9684] bond0: (slave bond_slave_0): Releasing backup interface
[  127.482736][ T9687] netlink: 'syz.2.1626': attribute type 10 has an invalid length.
[  127.492941][ T9684] bond0: (slave bond_slave_1): Releasing backup interface
[  127.508519][ T9684] team0: Port device team_slave_0 removed
[  127.519986][ T9684] team0: Port device team_slave_1 removed
[  127.523358][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.527429][ T9684] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.531782][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.536330][ T9684] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.550620][ T9684] team0: Port device vlan0 removed
[  127.557566][ T9684] vxlan1: left allmulticast mode
[  127.559677][ T9684] vxlan1: left promiscuous mode
[  127.561916][ T9684] bridge0: port 3(vxlan1) entered disabled state
[  127.578451][ T9684] team0: Port device bridge2 removed
[  127.599321][ T9687] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  127.666575][ T9690] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1627'.
[  127.738808][ T9692] lo speed is unknown, defaulting to 1000
[  128.174909][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  128.550683][ T9726] lo speed is unknown, defaulting to 1000
[  128.555205][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'.
[  129.204718][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  129.685333][   T65] wlan0: Trigger new scan to find an IBSS to join
[  129.845434][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  130.254756][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  130.559678][ T9901] netlink: 'syz.2.1700': attribute type 14 has an invalid length.
[  130.798853][ T9928] __nla_validate_parse: 5 callbacks suppressed
[  130.798870][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'.
[  130.805424][ T9928] netlink: 'syz.1.1712': attribute type 2 has an invalid length.
[  130.808069][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1712'.
[  130.901540][ T9934] lo speed is unknown, defaulting to 1000
[  131.294766][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  131.470099][ T9961] netlink: 'syz.0.1726': attribute type 64 has an invalid length.
[  131.535105][ T9963] netlink: 'syz.2.1727': attribute type 1 has an invalid length.
[  131.538005][ T9963] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1727'.
[  131.579931][ T9969] tc_dump_action: action bad kind
[  131.618472][ T9972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'.
[  131.782809][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'.
[  131.874109][ T9989] IPVS: Scheduler module ip_vs_sip not found
[  131.910025][T10001] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1745'.
[  132.043470][T10012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.097434][T10012] syzkaller0: entered promiscuous mode
[  132.099595][T10012] syzkaller0: entered allmulticast mode
[  132.117171][T10012] tipc: Resetting bearer <eth:syzkaller0>
[  132.146927][T10011] tipc: Resetting bearer <eth:syzkaller0>
[  132.334715][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  132.649046][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.734839][ T1090] wlan0: Trigger new scan to find an IBSS to join
[  133.115357][T10011] tipc: Disabling bearer <eth:syzkaller0>
[  133.121311][T10025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  133.124103][T10028] syzkaller0: entered promiscuous mode
[  133.126920][T10028] syzkaller0: entered allmulticast mode
[  133.129784][T10035] bridge: RTM_NEWNEIGH with invalid ether address
[  133.156466][T10038] tipc: Resetting bearer <eth:syzkaller0>
[  133.160799][T10019] tipc: Resetting bearer <eth:syzkaller0>
[  133.177109][T10019] tipc: Disabling bearer <eth:syzkaller0>
[  133.243633][T10042] geneve2: entered promiscuous mode
[  133.257780][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.262181][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.281645][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.285380][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.364855][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  133.408049][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'.
[  133.865021][ T5862] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.870124][ T5862] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.872978][ T5862] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  133.886799][T10076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1774'.
[  133.895623][ T5862] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.088674][T10097] netlink: 'syz.2.1785': attribute type 10 has an invalid length.
[  134.091219][T10097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1785'.
[  134.105803][T10097] team0: Port device geneve0 added
[  134.108048][ T5862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.113547][ T5862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.120443][ T5862] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.126180][ T5862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.152811][T10100] syzkaller1: tun_chr_ioctl cmd 1074025672
[  134.161978][T10100] syzkaller1: ignored: set checksum disabled
[  134.391672][T10123] netlink: 'syz.2.1794': attribute type 3 has an invalid length.
[  134.394377][T10123] netlink: 'syz.2.1794': attribute type 3 has an invalid length.
[  134.414775][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  134.527339][T10137] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.1801'.
[  135.331545][T10195] netlink: 'syz.2.1829': attribute type 10 has an invalid length.
[  135.348633][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.358506][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.361947][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.377724][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.402611][T10199] netlink: 'syz.1.1831': attribute type 1 has an invalid length.
[  135.408524][T10199] netlink: 'syz.1.1831': attribute type 1 has an invalid length.
[  135.444844][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  135.557273][T10209] xt_CT: No such helper "pptp"
[  135.686588][ T7489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.848638][T10227] __nla_validate_parse: 2 callbacks suppressed
[  135.848656][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'.
[  135.896653][T10239] batadv_slave_0: entered promiscuous mode
[  135.960416][T10243] batadv_slave_1: entered promiscuous mode
[  135.962656][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'.
[  136.030751][T10246] lo speed is unknown, defaulting to 1000
[  136.277431][T10268] netlink: 'syz.0.1863': attribute type 10 has an invalid length.
[  136.282699][T10268] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1863'.
[  136.289757][T10268] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1863'.
[  136.308626][T10270] Unknown options in mask 700
[  136.395455][T10279] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1867'.
[  136.479440][T10282] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  136.484860][    C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  136.812533][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'.
[  136.876442][T10303] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.011016][T10313] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  137.064355][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'.
[  137.283695][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1891'.
[  137.400026][T10343] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1897'.
[  137.600292][T10359] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1906'.
[  137.780033][T10372] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  137.783097][T10372] bridge0: port 1(macvlan3) entered blocking state
[  137.785955][T10372] bridge0: port 1(macvlan3) entered disabled state
[  137.788260][T10372] macvlan3: entered allmulticast mode
[  137.790395][T10372] team0: entered allmulticast mode
[  137.792481][T10372] geneve0: entered allmulticast mode
[  137.808699][T10372] macvlan3: entered promiscuous mode
[  137.810934][T10372] team0: entered promiscuous mode
[  137.813218][T10372] geneve0: entered promiscuous mode
[  138.511008][T10446] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  138.513596][T10446] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.722524][T10484] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  140.168312][T10516] pim6reg1: entered promiscuous mode
[  140.170574][T10516] pim6reg1: entered allmulticast mode
[  140.380268][T10526] gretap1: entered promiscuous mode
[  140.382187][T10526] gretap1: entered allmulticast mode
[  140.771159][T10553] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.774240][T10553] bridge0: port 3(bond1) entered blocking state
[  140.779596][T10553] bridge0: port 3(bond1) entered disabled state
[  140.782241][T10553] bond1: entered allmulticast mode
[  140.792948][T10553] bond1: entered promiscuous mode
[  140.795942][T10553] bridge0: port 3(bond1) entered blocking state
[  140.799812][T10553] bridge0: port 3(bond1) entered forwarding state
[  140.816600][   T27] bridge0: port 3(bond1) entered disabled state
[  140.836695][T10553] !: entered promiscuous mode
[  140.839412][T10553] team0: entered promiscuous mode
[  140.841092][T10553] team_slave_0: entered promiscuous mode
[  140.843181][T10553] team_slave_1: entered promiscuous mode
[  140.853602][T10553] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  140.860686][T10553] bridge0: port 4(hsr1) entered blocking state
[  140.863383][T10553] bridge0: port 4(hsr1) entered disabled state
[  140.868270][T10553] hsr1: entered allmulticast mode
[  140.870390][T10553] !: entered allmulticast mode
[  140.872196][T10553] team0: entered allmulticast mode
[  140.874408][T10553] team_slave_0: entered allmulticast mode
[  140.878222][T10553] team_slave_1: entered allmulticast mode
[  140.882275][T10553] hsr1: entered promiscuous mode
[  140.886314][T10553] bridge0: port 4(hsr1) entered blocking state
[  140.888496][T10553] bridge0: port 4(hsr1) entered forwarding state
[  140.891347][T10561] netlink: 'syz.0.2001': attribute type 12 has an invalid length.
[  140.896555][T10561] __nla_validate_parse: 11 callbacks suppressed
[  140.896563][T10561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2001'.
[  141.014098][T10574] syzkaller0: entered promiscuous mode
[  141.017332][T10574] syzkaller0: entered allmulticast mode
[  141.046093][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'.
[  141.103745][T10576] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  141.106687][T10576] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  141.764851][T10580] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2007'.
[  141.768719][T10580] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2007'.
[  141.785755][T10580] rdma_rxe: rxe_newlink: failed to add lo
[  141.841184][T10580] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.844556][T10580] 8021q: adding VLAN 0 to HW filter on device team0
[  141.858282][T10580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.134032][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'.
[  142.151421][T10605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2016'.
[  142.157908][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2016'.
[  142.167475][T10605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2016'.
[  142.170389][T10605] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2016'.
[  142.208133][T10609] netlink: 'syz.1.2019': attribute type 2 has an invalid length.
[  142.211514][T10609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2019'.
[  142.453408][T10633] tipc: Resetting bearer <eth:gre0>
[  142.480198][T10633] bridge0: port 4(hsr1) entered disabled state
[  142.590050][T10640] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  142.669750][T10644] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  142.753469][T10653] bridge_slave_0: invalid flags given to default FDB implementation
[  143.672141][T10694] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  143.676347][T10694] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  143.814350][T10706] netlink: 'syz.2.2064': attribute type 30 has an invalid length.
[  144.083685][T10726] infiniband syz1: set active
[  144.087861][T10726] infiniband syz1: added bond0
[  144.108776][T10726] RDS/IB: syz1: added
[  144.110375][T10726] smc: adding ib device syz1 with port count 1
[  144.112474][T10726] smc:    ib device syz1 port 1 has pnetid 
[  144.164193][T10738] nbd: must specify at least one socket
[  144.667028][T10762] geneve0: left promiscuous mode
[  144.668966][T10762] geneve0: left allmulticast mode
[  144.682800][T10762] team0: Port device geneve0 removed
[  144.690144][T10762] bond0: (slave wlan1): Releasing backup interface
[  144.703064][T10762] macvlan3: left allmulticast mode
[  144.715961][T10762] team0: left allmulticast mode
[  144.717749][T10762] macvlan3: left promiscuous mode
[  144.719408][T10762] team0: left promiscuous mode
[  144.737036][T10762] bridge0: port 1(macvlan3) entered disabled state
[  145.368631][T10818] Cannot find add_set index 2 as target
[  145.613652][T10835] netlink: 'syz.1.2123': attribute type 1 has an invalid length.
[  145.897766][T10867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.938276][T10870] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  145.942260][T10870] syzkaller1: tun_chr_ioctl cmd 1074025677
[  145.944414][T10870] syzkaller1: linktype set to 778
[  145.948023][T10869] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  146.042541][T10879] netlink: 'syz.2.2143': attribute type 1 has an invalid length.
[  146.242478][T10898] lo speed is unknown, defaulting to 1000
[  146.743190][T10916] __nla_validate_parse: 13 callbacks suppressed
[  146.743203][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.750648][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.753801][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.760546][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.763804][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.770723][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.775217][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.779743][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.783418][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  146.787430][T10916] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2161'.
[  147.087847][T10940] tc_dump_action: action bad kind
[  147.393320][T10979] netlink: 'syz.2.2191': attribute type 4 has an invalid length.
[  147.593862][T11000] netlink: 'syz.0.2201': attribute type 12 has an invalid length.
[  147.651110][T11005] tipc: Trying to set illegal importance in message
[  148.057179][T11039] netlink: 'syz.2.2219': attribute type 3 has an invalid length.
[  148.138717][T11037] lo speed is unknown, defaulting to 1000
[  149.355036][T11082] sctp: [Deprecated]: syz.2.2234 (pid 11082) Use of int in max_burst socket option.
[  149.355036][T11082] Use struct sctp_assoc_value instead
[  149.928833][T11110] netlink: 'syz.1.2246': attribute type 23 has an invalid length.
[  150.478923][T11137] netem: change failed
[  150.837069][T11181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.320665][T11217] No such timeout policy "syz1"
[  151.526749][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  152.107356][T11219] __nla_validate_parse: 41 callbacks suppressed
[  152.107368][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2294'.
[  152.210463][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2299'.
[  152.249272][T11229] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2299'.
[  152.361809][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2303'.
[  152.365141][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2303'.
[  152.417590][T11241] xt_NFQUEUE: number of total queues is 0
[  152.570300][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'.
[  152.691798][T11251] bridge: RTM_NEWNEIGH with invalid ether address
[  152.893320][T11259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2312'.
[  152.928453][   T33] audit: type=1800 audit(1753405480.837:2): pid=11247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2307" name="cgroup.controllers" dev="tmpfs" ino=3443 res=0 errno=0
[  153.253530][T11288] sctp: [Deprecated]: syz.0.2327 (pid 11288) Use of struct sctp_assoc_value in delayed_ack socket option.
[  153.253530][T11288] Use struct sctp_sack_info instead
[  153.412643][T11305] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2332'.
[  153.491894][T11308] lo speed is unknown, defaulting to 1000
[  153.548283][T11310] netlink: 'syz.2.2336': attribute type 4 has an invalid length.
[  153.589844][T11310] netlink: 'syz.2.2336': attribute type 4 has an invalid length.
[  153.919886][T11303] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2333'.
[  154.046547][T11338] netlink: 'syz.1.2342': attribute type 7 has an invalid length.
[  155.227497][T11384] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  155.430367][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'.
[  156.231530][T11467] netlink: 'syz.2.2406': attribute type 1 has an invalid length.
[  156.322983][T11468] tipc: New replicast peer: 255.255.255.255
[  156.331048][T11468] tipc: Enabled bearer <udp:syz2>, priority 10
[  156.346205][T11468] tipc: Disabling bearer <udp:syz2>
[  157.115978][T11473] __nla_validate_parse: 4 callbacks suppressed
[  157.115990][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2408'.
[  157.176418][T11478] rdma_op ffff88811a1951f0 conn xmit_rdma 0000000000000000
[  157.191670][T11479] delete_channel: no stack
[  157.208085][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'.
[  157.416450][T11498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.420964][T11498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.446025][T11502] unknown channel width for channel at 909000KHz?
[  157.449155][T11502] unknown channel width for channel at 909000KHz?
[  157.451944][T11502] unknown channel width for channel at 909000KHz?
[  157.521192][T11498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.527108][T11498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.603514][T11498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.623546][T11498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.629295][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'.
[  157.783405][T11498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  157.788048][T11498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.843239][T11519] netlink: zone id is out of range
[  157.847518][T11519] netlink: zone id is out of range
[  157.872862][T11519] netlink: zone id is out of range
[  157.876045][T11519] netlink: zone id is out of range
[  157.878693][T11519] netlink: zone id is out of range
[  157.880879][ T5847] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.884309][ T5847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.890378][T11519] netlink: zone id is out of range
[  157.892804][T11519] netlink: zone id is out of range
[  157.895873][T11519] netlink: zone id is out of range
[  157.898225][T11519] netlink: zone id is out of range
[  157.900545][T11519] netlink: zone id is out of range
[  157.905552][ T5847] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.909043][ T5847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.921895][T11519] netlink: 'syz.1.2430': attribute type 2 has an invalid length.
[  157.930436][ T5847] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.933115][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2430'.
[  157.933121][ T5847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.953992][ T5847] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.970962][ T5847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.236495][ T7689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.239286][ T7689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.324245][T11535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.333913][T11535] syzkaller0: entered promiscuous mode
[  158.337186][T11535] syzkaller0: entered allmulticast mode
[  158.374744][T11535] tipc: Resetting bearer <eth:syzkaller0>
[  158.378825][T11534] tipc: Resetting bearer <eth:syzkaller0>
[  158.392470][T11534] tipc: Disabling bearer <eth:syzkaller0>
[  158.498220][T11539] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2438'.
[  158.953898][T11559] tc_dump_action: action bad kind
[  159.063867][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'.
[  159.127535][T11567] block nbd0: server does not support multiple connections per device.
[  159.131560][T11567] block nbd0: shutting down sockets
[  159.184082][T11574] lo speed is unknown, defaulting to 1000
[  159.722804][T11615] netlink: 'syz.0.2472': attribute type 1 has an invalid length.
[  159.731305][T11615] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2472'.
[  159.769403][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2471'.
[  159.789379][T11613] lo speed is unknown, defaulting to 1000
[  159.826640][T11621] xt_CT: You must specify a L4 protocol and not use inversions on it
[  159.869206][T11620] : entered promiscuous mode
[  159.892862][T11619] syzkaller1: entered promiscuous mode
[  159.895903][T11619] syzkaller1: entered allmulticast mode
[  160.067093][T11629] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2478'.
[  160.217985][T11637] netlink: 'syz.0.2481': attribute type 1 has an invalid length.
[  160.220532][T11637] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2481'.
[  160.322099][T11641] dvmrp0: entered allmulticast mode
[  160.926557][T11679] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.929709][T11679] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  160.932265][T11679] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  161.022282][T11692] vti0: entered promiscuous mode
[  161.087046][T11698] netlink: 'syz.0.2509': attribute type 20 has an invalid length.
[  161.120930][T11698] veth0_macvtap: left promiscuous mode
[  161.143523][T11705] netlink: 'syz.2.2512': attribute type 11 has an invalid length.
[  161.175454][T11705] netlink: 'syz.2.2512': attribute type 11 has an invalid length.
[  162.197385][T11777] __nla_validate_parse: 3 callbacks suppressed
[  162.197396][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'.
[  162.317037][T11783] netlink: 'syz.1.2546': attribute type 1 has an invalid length.
[  162.320068][T11783] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2546'.
[  162.323306][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  162.587198][T11795] netlink: 'syz.1.2551': attribute type 1 has an invalid length.
[  162.589742][T11795] netlink: 'syz.1.2551': attribute type 11 has an invalid length.
[  162.592501][T11795] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2551'.
[  162.690138][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'.
[  162.693234][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'.
[  162.696610][T11805] netlink: 'syz.0.2556': attribute type 12 has an invalid length.
[  162.901349][T11823] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2566'.
[  162.905584][T11823] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2566'.
[  163.025625][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2569'.
[  163.202052][T11851] syzkaller0: entered promiscuous mode
[  163.204472][T11851] syzkaller0: entered allmulticast mode
[  163.209504][T11851] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  163.338367][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2585'.
[  163.389000][T11872] netlink: 'syz.2.2588': attribute type 1 has an invalid length.
[  163.428314][T11874] netlink: 'syz.0.2589': attribute type 1 has an invalid length.
[  163.584472][   T33] audit: type=1800 audit(1753405491.487:3): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2596" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4296 res=0 errno=0
[  163.601400][   T33] audit: type=1800 audit(1753405491.507:4): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2596" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4296 res=0 errno=0
[  163.713537][T11900] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  163.743003][T11899] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  164.137830][T11930] : renamed from bridge_slave_0
[  164.404164][T11939] lo speed is unknown, defaulting to 1000
[  164.437856][T11951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.494333][T11936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.608689][T11951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.833639][T11977] lo speed is unknown, defaulting to 1000
[  165.826808][T12004] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  165.896866][T12003] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  166.037683][T12020] net_ratelimit: 95 callbacks suppressed
[  166.037695][T12020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.247783][T12038] syzkaller1: entered promiscuous mode
[  166.250131][T12038] syzkaller1: entered allmulticast mode
[  166.260393][T12040] No such timeout policy "syz0"
[  166.519803][T12060] netlink: 'syz.0.2669': attribute type 1 has an invalid length.
[  166.580869][T12060] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.623701][T12067] netlink: 'syz.1.2670': attribute type 16 has an invalid length.
[  166.630330][T12067] netlink: 'syz.1.2670': attribute type 17 has an invalid length.
[  166.637772][T12066] bond0: (slave veth7): Enslaving as an active interface with a down link
[  166.657339][T12060] vlan3: entered allmulticast mode
[  166.659021][T12060] veth1: entered allmulticast mode
[  166.660992][T12060] bond0: (slave vlan3): Opening slave failed
[  166.738659][T12059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.750483][T12075] netlink: 'syz.2.2675': attribute type 1 has an invalid length.
[  166.807237][T12079] bridge0: port 1(erspan0) entered blocking state
[  166.810091][T12079] bridge0: port 1(erspan0) entered disabled state
[  166.812935][T12079] erspan0: entered allmulticast mode
[  166.815958][T12079] erspan0: entered promiscuous mode
[  166.819499][T12079] bridge0: port 1(erspan0) entered blocking state
[  166.822452][T12079] bridge0: port 1(erspan0) entered forwarding state
[  166.832301][T12079] erspan0: left allmulticast mode
[  166.834144][T12079] erspan0: left promiscuous mode
[  166.836508][T12079] bridge0: port 1(erspan0) entered disabled state
[  167.310932][T12083] xt_policy: neither incoming nor outgoing policy selected
[  168.212243][T12106] netlink: 'syz.2.2689': attribute type 1 has an invalid length.
[  168.731406][T12150] __nla_validate_parse: 9 callbacks suppressed
[  168.731422][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2708'.
[  168.747586][T12150] geneve2: entered promiscuous mode
[  168.750039][T12150] geneve2: entered allmulticast mode
[  168.770468][ T5847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.774464][ T5847] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.781051][ T5847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.785104][ T5847] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.832694][T12154] Cannot find add_set index 0 as target
[  168.887163][T12150] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2708'.
[  168.983199][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'.
[  168.989579][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'.
[  169.579758][T12216] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2732'.
[  169.582931][T12216] 0: renamed from hsr_slave_1
[  169.589953][T12216] 0: entered allmulticast mode
[  169.592105][T12216] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  169.900044][T12246] netlink: 'syz.1.2746': attribute type 11 has an invalid length.
[  169.903798][T12246] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2746'.
[  170.528351][T12282] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2764'.
[  170.703929][T12284] netlink: 'syz.2.2765': attribute type 1 has an invalid length.
[  171.400647][T12285] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  171.408549][T12286] bond1: (slave ip6gretap1): Releasing backup interface
[  171.442444][T12288] lo speed is unknown, defaulting to 1000
[  171.576014][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2771'.
[  171.579779][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2771'.
[  171.892009][T12328] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  172.292339][T12346] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  172.673892][T12348] veth6: entered allmulticast mode
[  172.981450][T12362] netlink: 'syz.1.2797': attribute type 13 has an invalid length.
[  172.985522][T12362] netlink: 'syz.1.2797': attribute type 17 has an invalid length.
[  173.014110][T12362] lo speed is unknown, defaulting to 1000
[  173.090490][T12344] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  173.116911][T12368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.190463][T12365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.201907][T12372] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2800'.
[  173.252410][T12365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.424242][T12387] lo speed is unknown, defaulting to 1000
[  173.466073][T12388] netlink: 'syz.0.2807': attribute type 21 has an invalid length.
[  173.469141][T12388] netlink: 'syz.0.2807': attribute type 6 has an invalid length.
[  174.100837][T12402] __nla_validate_parse: 4 callbacks suppressed
[  174.100848][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'.
[  174.141303][T12406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2814'.
[  174.144592][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'.
[  174.156193][T12402] macvlan3: entered allmulticast mode
[  174.158309][T12402] veth1_vlan: entered allmulticast mode
[  174.171823][T12406] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  174.299724][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2819'.
[  174.610126][T12432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'.
[  174.615602][T12434] Bluetooth: MGMT ver 1.23
[  174.672086][T12438] netlink: 'syz.0.2831': attribute type 1 has an invalid length.
[  174.682619][T12438] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2831'.
[  174.714609][T12442] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2834'.
[  175.089222][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'.
[  175.109293][T12472] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  175.303235][T12499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2861'.
[  175.374505][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'.
[  175.378608][T12505] bond0: option miimon: invalid value (18446744073709551615)
[  175.381447][T12505] bond0: option miimon: allowed values 0 - 2147483647
[  175.411842][T12507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.415895][T12507] syzkaller0: entered promiscuous mode
[  175.418310][T12507] syzkaller0: entered allmulticast mode
[  175.442819][T12507] tipc: Resetting bearer <eth:syzkaller0>
[  175.455499][T12506] tipc: Resetting bearer <eth:syzkaller0>
[  175.472321][T12506] tipc: Disabling bearer <eth:syzkaller0>
[  175.500800][T12513] netlink: 'syz.2.2868': attribute type 11 has an invalid length.
[  175.837765][T12546] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  175.893486][T12553] netlink: 'syz.0.2888': attribute type 1 has an invalid length.
[  176.037128][T12567] bridge_slave_0: entered promiscuous mode
[  176.302287][T12592] Cannot find del_set index 0 as target
[  176.383877][T12594] netlink: 'syz.2.2908': attribute type 2 has an invalid length.
[  176.449317][T12602] netlink: 'syz.0.2912': attribute type 2 has an invalid length.
[  176.452052][T12602] netlink: 'syz.0.2912': attribute type 1 has an invalid length.
[  177.169501][T12642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.777213][T12685] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  177.782911][T12685] syzkaller1: entered promiscuous mode
[  177.788048][T12685] syzkaller1: entered allmulticast mode
[  177.809968][T12683] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  178.254508][T12722] dummy0: entered promiscuous mode
[  178.262602][T12722] batman_adv: batadv1: Adding interface: macvlan4
[  178.267503][T12722] batman_adv: batadv1: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.280992][T12722] batman_adv: batadv1: Interface activated: macvlan4
[  178.443512][T12731] validate_nla: 2 callbacks suppressed
[  178.443555][T12731] netlink: 'syz.2.2974': attribute type 1 has an invalid length.
[  178.450105][T12731] netlink: 'syz.2.2974': attribute type 1 has an invalid length.
[  178.805374][T12761] nbd: couldn't find device at index 536870912
[  179.004575][T12777] rdma_rxe: rxe_newlink: failed to add veth1_to_bond
[  179.310060][T12802] __nla_validate_parse: 13 callbacks suppressed
[  179.310077][T12802] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3007'.
[  179.322866][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'.
[  179.560346][T12820] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.3016'.
[  179.808486][T12845] Cannot find add_set index 3 as target
[  179.821695][T12845] vlan0: left promiscuous mode
[  179.825864][T12845] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  179.829062][T12845] bridge2: left promiscuous mode
[  179.856756][T12845] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  179.899443][T12845] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3028'.
[  180.089012][T12871] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  180.091478][T12871] bridge2: left allmulticast mode
[  180.539113][T12902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3055'.
[  180.711329][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3061'.
[  180.805260][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  180.820867][T12925] lo speed is unknown, defaulting to 1000
[  180.868300][T12931] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3068'.
[  181.061147][T12939] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3072'.
[  181.412331][T12957] lo speed is unknown, defaulting to 1000
[  181.593539][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'.
[  181.732230][T12961] syzkaller1: entered promiscuous mode
[  181.734576][T12961] syzkaller1: entered allmulticast mode
[  182.158291][ T7689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.161370][ T7689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.239301][T12989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.327600][T13000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3099'.
[  183.051658][T13037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.054366][T13037] syzkaller0: entered promiscuous mode
[  183.057354][T13037] syzkaller0: entered allmulticast mode
[  183.073752][T13037] tipc: Resetting bearer <eth:syzkaller0>
[  183.081575][T13035] tipc: Resetting bearer <eth:syzkaller0>
[  183.095075][T13035] tipc: Disabling bearer <eth:syzkaller0>
[  183.170953][T13046] lo speed is unknown, defaulting to 1000
[  183.453642][T13065] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.493910][T13067] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  183.503621][T13065] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.569684][T13068] 8021q: adding VLAN 0 to HW filter on device team0
[  183.577322][T13068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  183.618594][T13065] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.677423][T13065] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.844934][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  184.055534][T13103] syzkaller1: entered promiscuous mode
[  184.057928][T13103] syzkaller1: entered allmulticast mode
[  184.103554][ T5847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.129356][ T5847] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.165629][ T5847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.178937][ T5847] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.357217][T13117] syzkaller1: entered promiscuous mode
[  184.359559][T13117] syzkaller1: entered allmulticast mode
[  184.465169][T13121] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  184.468606][T13121] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  184.522551][T13125] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  184.525314][T13125] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  184.809291][T13138] __nla_validate_parse: 3 callbacks suppressed
[  184.809303][T13138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3162'.
[  184.827904][T13138] dvmrp8: entered allmulticast mode
[  184.848319][T13136] dvmrp8: left allmulticast mode
[  184.940972][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3164'.
[  184.966241][T13142] netlink: 'syz.0.3164': attribute type 1 has an invalid length.
[  185.136695][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3169'.
[  185.140493][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3169'.
[  185.213604][T13160] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  185.223346][T13160] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  185.454593][T13181] SET target dimension over the limit!
[  185.502523][T13184] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  185.509324][T13183] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  186.593277][ T5882] hid-generic 0005:0B57:1010.0001: item fetching failed at offset 0/1
[  186.598241][ T5882] hid-generic 0005:0B57:1010.0001: probe with driver hid-generic failed with error -22
[  186.713612][T13220] netlink: 'syz.1.3199': attribute type 1 has an invalid length.
[  186.742527][T13220] 8021q: adding VLAN 0 to HW filter on device bond2
[  186.748312][T13220] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  186.756939][T13220] bond2: (slave wlan0): Enslaving as an active interface with a down link
[  186.769678][T13220] vlan2: entered allmulticast mode
[  186.772057][T13220] veth1: entered allmulticast mode
[  186.775178][T13220] bond2: (slave vlan2): Opening slave failed
[  186.869114][T13234] 0: reclassify loop, rule prio 0, protocol 800
[  187.061822][T13245] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  187.085670][T13244] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  187.260373][T13247] syz0: rxe_newlink: already configured on lo
[  187.899904][T13273] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3222'.
[  187.903014][T13273] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3222'.
[  188.082464][T13284] netlink: 'syz.1.3228': attribute type 1 has an invalid length.
[  188.086985][T13284] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3228'.
[  188.088184][T13285] openvswitch: netlink: IP tunnel dst address not specified
[  188.152244][T13289] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3231'.
[  188.480267][T13319] xt_policy: output policy not valid in PREROUTING and INPUT
[  188.806330][T13353] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3260'.
[  188.838651][T13357] 0: reclassify loop, rule prio 0, protocol 800
[  188.881218][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'.
[  188.918841][T13365] ip6t_srh: unknown srh match flags  4000
[  189.036670][T13375] netlink: 'syz.2.3270': attribute type 20 has an invalid length.
[  189.048098][T13375] netlink: 'syz.2.3270': attribute type 20 has an invalid length.
[  189.051277][ T5847] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  189.054006][ T5862] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  189.062185][ T5862] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  189.071512][ T5862] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  189.246578][T13397] ..@: renamed from bond_slave_0
[  189.281045][T13399] netlink: 'syz.2.3282': attribute type 20 has an invalid length.
[  189.284536][T13399] netlink: 'syz.2.3282': attribute type 20 has an invalid length.
[  189.400715][T13414] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  189.551244][T13428] netlink: 'syz.1.3297': attribute type 9 has an invalid length.
[  189.934886][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  189.937301][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  190.139350][T13464] netlink: 'syz.1.3312': attribute type 1 has an invalid length.
[  190.142122][T13464] __nla_validate_parse: 8 callbacks suppressed
[  190.142130][T13464] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3312'.
[  190.209932][T13470] netlink: 'syz.2.3314': attribute type 33 has an invalid length.
[  190.213480][T13470] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3314'.
[  190.399344][T13483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3321'.
[  190.868094][T13514] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  190.896243][T13514] netlink: 'syz.2.3337': attribute type 10 has an invalid length.
[  190.913126][T13514] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  190.921758][T13514] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  190.946585][T13514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  190.950752][T13514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  191.071634][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3341'.
[  191.234990][T13535] syzkaller1: entered promiscuous mode
[  191.237075][T13535] syzkaller1: entered allmulticast mode
[  191.477269][T13547] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3352'.
[  191.781236][T13571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3364'.
[  191.901688][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3366'.
[  192.003260][T13600] smc: net device bond0 applied user defined pnetid SYZ2
[  192.008352][T13600] smc: net device bond0 erased user defined pnetid SYZ2
[  192.011720][T13600] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0
[  192.118674][T13611] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  192.341111][T13629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3389'.
[  192.354941][T13629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3389'.
[  192.444460][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'.
[  192.589851][T13647] lo speed is unknown, defaulting to 1000
[  192.643506][ T5840] Bluetooth: hci2: link tx timeout
[  192.647017][ T5840] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  193.726732][T13711] sctp: [Deprecated]: syz.1.3421 (pid 13711) Use of int in maxseg socket option.
[  193.726732][T13711] Use struct sctp_assoc_value instead
[  193.754156][T13715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.084905][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  194.095188][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.462993][T13772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  194.725934][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  195.167702][T13815] __nla_validate_parse: 10 callbacks suppressed
[  195.167720][T13815] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3469'.
[  195.371158][T13831] netlink: 'syz.0.3477': attribute type 1 has an invalid length.
[  195.374582][T13831] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3477'.
[  195.382193][ T5882] 0: reclassify loop, rule prio 0, protocol 800
[  195.497779][T13833] lo speed is unknown, defaulting to 1000
[  195.505062][T13836] syzkaller1: entered promiscuous mode
[  195.506936][T13836] syzkaller1: entered allmulticast mode
[  195.955717][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3488'.
[  195.964005][T13855] erspan0: entered promiscuous mode
[  195.966695][T13855] macvtap1: entered promiscuous mode
[  195.968994][T13855] macvtap1: entered allmulticast mode
[  195.971057][T13855] erspan0: entered allmulticast mode
[  196.004820][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  196.007705][    C0] 0: reclassify loop, rule prio 0, protocol 800
[  196.013889][T13855] erspan0: left allmulticast mode
[  196.017573][T13855] erspan0: left promiscuous mode
[  196.029910][T13860] batadv_slave_1: entered promiscuous mode
[  196.039445][T13859] batadv_slave_1: left promiscuous mode
[  196.206466][T13872] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  196.228859][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3497'.
[  196.331521][T13879] 0: reclassify loop, rule prio 0, protocol 800
[  196.380918][T13871] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  196.771582][T13915] xt_CT: No such helper "snmp"
[  196.801779][T13922] xt_hashlimit: overflow, try lower: 2/0
[  196.848552][T13928] netlink: 'syz.2.3523': attribute type 1 has an invalid length.
[  196.851429][T13928] netlink: 'syz.2.3523': attribute type 2 has an invalid length.
[  196.864541][T13928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3523'.
[  196.914012][T13933] netlink: 'syz.2.3526': attribute type 64 has an invalid length.
[  196.917871][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'.
[  197.142912][T13946] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.178234][T13951] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3530'.
[  197.226759][T13946] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.292846][T13946] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.307837][T13954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3531'.
[  197.311560][T13954] openvswitch: netlink: Flow actions attr not present in new flow.
[  197.378215][T13962] netlink: 'syz.2.3535': attribute type 1 has an invalid length.
[  197.381604][T13962] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3535'.
[  197.463132][T13965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3536'.
[  197.467966][T13961] bond0 (unregistering): (slave veth7): Releasing active interface
[  197.476841][T13961] bond0 (unregistering): Released all slaves
[  197.500465][T13946] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.431975][ T5847] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.461304][ T5847] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.493311][ T5847] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.513373][ T5847] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.983483][T14003] Oops: general protection fault, probably for non-canonical address 0xebe827c82b7b114c: 0000 [#1] SMP KASAN PTI
[  198.987647][T14003] KASAN: maybe wild-memory-access in range [0x5f415e415bd88a60-0x5f415e415bd88a67]
[  198.991272][T14003] CPU: 1 UID: 0 PID: 14003 Comm: syz.0.3554 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[  198.995914][T14003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  198.999140][T14003] RIP: 0010:__xfrm_state_lookup+0x30c/0x8d0
[  199.001146][T14003] Code: 18 48 8d 48 08 48 c1 e8 03 48 89 44 24 30 48 89 4c 24 38 48 c1 e9 03 48 89 4c 24 50 4c 8d b3 42 01 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 7c 03 00 00 45 0f b7 36 44 89 f7 44 89
[  199.007322][T14003] RSP: 0018:ffffc90006957520 EFLAGS: 00010202
[  199.009288][T14003] RAX: 0be82bc82b7b114c RBX: 5f415e415bd88920 RCX: 0000000000080000
[  199.011899][T14003] RDX: ffffc900038a1000 RSI: 00000000000000d9 RDI: 00000000000000da
[  199.014580][T14003] RBP: ffffc90006957620 R08: ffff88810a00d640 R09: 0000000000000002
[  199.017225][T14003] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000
[  199.019911][T14003] R13: 0000000000000002 R14: 5f415e415bd88a62 R15: 00000000d3040000
[  199.022899][T14003] FS:  00007f94628966c0(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  199.025944][T14003] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.028159][T14003] CR2: 0000200000000040 CR3: 000000010d762000 CR4: 00000000000006f0
[  199.030938][T14003] Call Trace:
[  199.032112][T14003]  <TASK>
[  199.033130][T14003]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  199.035087][T14003]  ? xfrm_state_lookup+0x45/0x1e0
[  199.036761][T14003]  xfrm_state_lookup+0x11e/0x1e0
[  199.038440][T14003]  pfkey_delete+0x357/0x6d0
[  199.040023][T14003]  ? __pfx_pfkey_delete+0x10/0x10
[  199.041827][T14003]  ? kmem_cache_free+0x18f/0x400
[  199.043550][T14003]  pfkey_sendmsg+0xbfe/0x1090
[  199.045172][T14003]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  199.046951][T14003]  ? aa_sock_msg_perm+0x94/0x160
[  199.048686][T14003]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.050503][T14003]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  199.052476][T14003]  __sock_sendmsg+0x21c/0x270
[  199.054180][T14003]  ____sys_sendmsg+0x505/0x830
[  199.055807][T14003]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.057617][T14003]  ? import_iovec+0x74/0xa0
[  199.059179][T14003]  ___sys_sendmsg+0x21f/0x2a0
[  199.060890][T14003]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.062800][T14003]  ? __fget_files+0x2a/0x420
[  199.064371][T14003]  ? __fget_files+0x3a0/0x420
[  199.065987][T14003]  __x64_sys_sendmsg+0x19b/0x260
[  199.067709][T14003]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.069563][T14003]  ? rcu_is_watching+0x15/0xb0
[  199.071203][T14003]  ? do_syscall_64+0xbe/0x3b0
[  199.072853][T14003]  do_syscall_64+0xfa/0x3b0
[  199.074398][T14003]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.076165][T14003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.078130][T14003]  ? exc_page_fault+0x9f/0xf0
[  199.079740][T14003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.081673][T14003] RIP: 0033:0x7f946198e9a9
[  199.083181][T14003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.089655][T14003] RSP: 002b:00007f9462896038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.092465][T14003] RAX: ffffffffffffffda RBX: 00007f9461bb5fa0 RCX: 00007f946198e9a9
[  199.095053][T14003] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  199.097649][T14003] RBP: 00007f9461a10d69 R08: 0000000000000000 R09: 0000000000000000
[  199.100204][T14003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.103046][T14003] R13: 0000000000000000 R14: 00007f9461bb5fa0 R15: 00007fff3a8449a8
[  199.105751][T14003]  </TASK>
[  199.106821][T14003] Modules linked in:
[  199.108805][T14003] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  199.124001][T14003] RIP: 0010:__xfrm_state_lookup+0x30c/0x8d0
[  199.126712][T14003] Code: 18 48 8d 48 08 48 c1 e8 03 48 89 44 24 30 48 89 4c 24 38 48 c1 e9 03 48 89 4c 24 50 4c 8d b3 42 01 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 7c 03 00 00 45 0f b7 36 44 89 f7 44 89
[  199.133486][T14003] RSP: 0018:ffffc90006957520 EFLAGS: 00010202
[  199.136034][T14003] RAX: 0be82bc82b7b114c RBX: 5f415e415bd88920 RCX: 0000000000080000
[  199.138893][T14003] RDX: ffffc900038a1000 RSI: 00000000000000d9 RDI: 00000000000000da
[  199.141659][T14003] RBP: ffffc90006957620 R08: ffff88810a00d640 R09: 0000000000000002
[  199.144354][T14003] R10: 000000000000000a R11: 0000000000000002 R12: dffffc0000000000
[  199.148096][T14003] R13: 0000000000000002 R14: 5f415e415bd88a62 R15: 00000000d3040000
[  199.150916][T14003] FS:  00007f94628966c0(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  199.154048][T14003] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.156633][T14003] CR2: 00007febc14e7d60 CR3: 000000010d762000 CR4: 00000000000006f0
[  199.159565][T14003] Kernel panic - not syncing: Fatal exception
[  199.162713][T14003] Kernel Offset: disabled
[  199.164436][T14003] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:05:27  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82196e5c RBX=ffffea000068e3c0 RCX=ffff88803ce53980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900069b7988 RSP=ffffc900069b76c0
R8 =ffffea000068e387 R9 =1ffffd40000d1c70 R10=dffffc0000000000 R11=fffff940000d1c71
R12=dffffc0000000000 R13=1ffffd40000d1c79 R14=ffffea000068e3c8 R15=ffffea000068e388
RIP=ffffffff8b732360 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556fb08500 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c39454a CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2efea11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013b7 RDI=00000000000013b8 RBP=00000000000003f8 RSP=ffffc90006956cb0
R8 =ffff888020e88237 R9 =1ffff110041d1046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99aff882 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f94628966c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000010d762000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9461b86478 00007f9461b86450 XMM03=00007f9461b86488 00007f9461b86480
XMM04=00007f94626ed100 00007f9461b86440 XMM05=00007f9461b86458 00007f9461b864a0
XMM06=00007f9461b86498 00007f9461b86490 XMM07=00007f9461b86488 00007f9461b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9461a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
