last executing test programs:

45.230415874s ago: executing program 2 (id=3121):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

44.365504413s ago: executing program 2 (id=3131):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001"], 0xf0}}, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r2=>0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
close(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/ipc\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

44.268210697s ago: executing program 2 (id=3132):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94)

44.207652572s ago: executing program 2 (id=3134):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94)

44.197821878s ago: executing program 2 (id=3136):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0x201, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

44.122937586s ago: executing program 2 (id=3139):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

44.099331315s ago: executing program 32 (id=3139):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)

1.353496902s ago: executing program 0 (id=4822):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)

1.293586814s ago: executing program 0 (id=4824):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100020a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0)

1.293366489s ago: executing program 0 (id=4825):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0xb}, @volatile, @volatile, @volatile={0x2000000, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96, 0x0, 0x0, 0xfffffffe}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

1.240431674s ago: executing program 0 (id=4827):
unshare(0x22020400)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x1a59b000)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)

1.238159405s ago: executing program 0 (id=4830):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r1, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000007380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x44, r4, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

319.739626ms ago: executing program 0 (id=4835):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r12, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)

174.312505ms ago: executing program 1 (id=4842):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="80fd05000000", 0x6}], 0x1, 0x0, 0x0)

123.684714ms ago: executing program 1 (id=4844):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="0213020902000000", 0x8}, {&(0x7f0000000780)="a112fde440109737", 0x8}], 0x2}, 0x400c010)

123.584356ms ago: executing program 3 (id=4845):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f00000003c0)='%', 0x1, 0x8014, 0x0, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200))

123.434577ms ago: executing program 1 (id=4846):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4)
r0 = gettid()
syz_open_procfs$namespace(r0, &(0x7f0000000340))

75.493963ms ago: executing program 3 (id=4847):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "25af22"}})

75.338848ms ago: executing program 1 (id=4848):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803c000400676373286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

75.185604ms ago: executing program 3 (id=4849):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x25dfdbfb, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x0)

1.338914ms ago: executing program 1 (id=4850):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4)

1.076656ms ago: executing program 3 (id=4851):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)

542.297µs ago: executing program 1 (id=4852):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000304000000000020000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB="08001f000c"], 0x40}}, 0x0)

298.586µs ago: executing program 3 (id=4853):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000160700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff3d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa130c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804de25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6aae6a2213f4bb7b72ee19baaa6496c921b500fab987b62bbfd769664875469f58151b5ba0e4b84ea6500aeae078084123b254aeed0055787c01db742ed418ff76ee08d6fe0cc780a1005da7b778501e12cd7a0bb3780196d1fb84e6c12dddc60addc75a1f880bd58e7d1056a4d177e0067aa7c5ec09e1b762390a4f38d15794e698611b97a1bc9bc62513ad5ba767998919ccb61028200000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)

0s ago: executing program 3 (id=4854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010004000000000000008020000900040005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)

kernel console output (not intermixed with test programs):

20][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.171282][ T5872] team0: Port device team_slave_0 added
[   50.191022][ T5872] team0: Port device team_slave_1 added
[   50.195163][ T5869] hsr_slave_0: entered promiscuous mode
[   50.197711][ T5869] hsr_slave_1: entered promiscuous mode
[   50.241409][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.244057][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.254673][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.268246][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.270956][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.274268][ T5875] bridge_slave_0: entered allmulticast mode
[   50.276673][ T5875] bridge_slave_0: entered promiscuous mode
[   50.279611][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.282804][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.285127][ T5875] bridge_slave_1: entered allmulticast mode
[   50.287597][ T5875] bridge_slave_1: entered promiscuous mode
[   50.289928][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.293022][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.301650][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.324175][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.328669][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.353582][ T5875] team0: Port device team_slave_0 added
[   50.356428][ T5875] team0: Port device team_slave_1 added
[   50.375495][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.378139][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.387494][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.397199][ T5872] hsr_slave_0: entered promiscuous mode
[   50.399945][ T5872] hsr_slave_1: entered promiscuous mode
[   50.402965][ T5872] debugfs: 'hsr0' already exists in 'hsr'
[   50.405331][ T5872] Cannot create hsr debugfs directory
[   50.407932][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.410562][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.421047][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.458773][ T5875] hsr_slave_0: entered promiscuous mode
[   50.461305][ T5875] hsr_slave_1: entered promiscuous mode
[   50.463979][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   50.465880][ T5875] Cannot create hsr debugfs directory
[   50.500097][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.505789][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.519746][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.523987][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.590657][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.593835][ T5869] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.596954][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.599871][ T5869] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.615580][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   50.631550][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   50.638325][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   50.643114][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   50.649973][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   50.655530][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   50.672285][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   50.685072][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   50.692707][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.704838][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.707542][ T5872] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.710393][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.712883][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.727666][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.730484][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.736513][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.739549][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.749050][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   50.767475][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.770288][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.790990][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.793534][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.799497][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.819068][ T5872] 8021q: adding VLAN 0 to HW filter on device team0
[   50.831267][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.834373][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.846534][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.849288][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.861238][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.867227][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.892995][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   50.898391][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.901261][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.916498][ T5872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   50.930854][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.933810][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.027693][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.038707][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.080149][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.089174][ T5872] veth0_vlan: entered promiscuous mode
[   51.094573][ T5869] veth0_vlan: entered promiscuous mode
[   51.100984][ T5872] veth1_vlan: entered promiscuous mode
[   51.110390][ T5869] veth1_vlan: entered promiscuous mode
[   51.129183][ T5875] veth0_vlan: entered promiscuous mode
[   51.137720][ T5872] veth0_macvtap: entered promiscuous mode
[   51.143592][ T5875] veth1_vlan: entered promiscuous mode
[   51.147359][ T5872] veth1_macvtap: entered promiscuous mode
[   51.154769][ T5869] veth0_macvtap: entered promiscuous mode
[   51.166969][ T5869] veth1_macvtap: entered promiscuous mode
[   51.174409][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.179438][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.190661][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.197056][ T5880] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.202702][ T5875] veth0_macvtap: entered promiscuous mode
[   51.205884][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.210429][ T5880] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.218102][ T5880] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.222602][ T5875] veth1_macvtap: entered promiscuous mode
[   51.228595][ T5880] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.233220][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.236492][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.239653][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.252935][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.260351][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.264814][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.280314][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.286803][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.293322][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.300083][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.313654][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.316969][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.337033][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.340355][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.360838][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.364661][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.368138][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.375243][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.382271][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.388892][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.395019][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   51.396806][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   51.411512][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   51.621316][ T5950] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.630030][ T5950] bridge0: port 3(bond1) entered blocking state
[   51.635803][ T5950] bridge0: port 3(bond1) entered disabled state
[   51.638760][ T5950] bond1: entered allmulticast mode
[   51.651241][ T5950] bond1: entered promiscuous mode
[   51.654650][ T5950] bridge0: port 3(bond1) entered blocking state
[   51.657504][ T5950] bridge0: port 3(bond1) entered forwarding state
[   51.782588][   T54] Bluetooth: hci1: command tx timeout
[   51.784565][   T54] Bluetooth: hci0: command tx timeout
[   51.809684][   T26] bridge0: port 3(bond1) entered disabled state
[   51.817890][ T5976] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[   51.830576][ T5975] geneve2: entered promiscuous mode
[   51.856182][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'.
[   51.861888][ T5231] Bluetooth: hci2: command tx timeout
[   51.904711][ T5985] netlink: 'syz.0.44': attribute type 1 has an invalid length.
[   51.973051][ T5994] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[   52.199373][ T6018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.60'.
[   52.470350][ T6044] netlink: 'syz.2.72': attribute type 3 has an invalid length.
[   52.476245][ T6044] netlink: 'syz.2.72': attribute type 3 has an invalid length.
[   52.549196][ T6051] dvmrp0: entered allmulticast mode
[   52.604302][ T6054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.76'.
[   52.648173][ T6061] Zero length message leads to an empty skb
[   52.735144][ T6065] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   52.869068][ T6081] netlink: 'syz.2.90': attribute type 1 has an invalid length.
[   52.872533][ T6081] netlink: 224 bytes leftover after parsing attributes in process `syz.2.90'.
[   52.876735][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'.
[   52.906795][ T6078] IPv4: Oversized IP packet from 127.202.26.0
[   52.931888][ T6087] netlink: 'syz.1.92': attribute type 12 has an invalid length.
[   53.155144][ T6114] syz.2.102 uses obsolete (PF_INET,SOCK_PACKET)
[   53.434088][ T6149] warning: `syz.2.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.871769][ T5231] Bluetooth: hci0: command tx timeout
[   53.874054][   T54] Bluetooth: hci1: command tx timeout
[   53.951684][ T5231] Bluetooth: hci2: command tx timeout
[   54.147484][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.137'.
[   54.261458][ T6200] netlink: 'syz.0.142': attribute type 1 has an invalid length.
[   54.275796][ T6198] netlink: 48 bytes leftover after parsing attributes in process `syz.2.141'.
[   54.295650][ T6205] netlink: 256 bytes leftover after parsing attributes in process `syz.1.143'.
[   54.298922][ T6205] netlink: 72 bytes leftover after parsing attributes in process `syz.1.143'.
[   54.350269][ T6207] Illegal XDP return value 4294967283 on prog  (id 13) dev N/A, expect packet loss!
[   55.468876][ T6282] Bluetooth: MGMT ver 1.23
[   55.549439][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'.
[   55.696053][ T6315] sctp: [Deprecated]: syz.1.189 (pid 6315) Use of struct sctp_assoc_value in delayed_ack socket option.
[   55.696053][ T6315] Use struct sctp_sack_info instead
[   55.953222][ T5231] Bluetooth: hci0: command tx timeout
[   55.955546][ T5231] Bluetooth: hci1: command tx timeout
[   56.025074][   T54] Bluetooth: hci2: command tx timeout
[   56.029082][ T6369] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[   56.095787][ T6379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   56.107960][ T6381] syzkaller1: tun_chr_ioctl cmd 1074025677
[   56.110834][ T6381] syzkaller1: linktype set to 778
[   56.541841][ T6463] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   56.546397][ T6463] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   56.617766][ T6476] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   56.626712][ T6477] netlink: 'syz.2.267': attribute type 4 has an invalid length.
[   56.704158][ T6489] tipc: Started in network mode
[   56.706492][ T6489] tipc: Node identity 1e0a1443bc6b, cluster identity 4711
[   56.709647][ T6489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.716191][ T6476] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.724543][ T6476] batadv_slave_0: entered promiscuous mode
[   56.728742][ T6489] syzkaller0: entered promiscuous mode
[   56.734213][ T6489] syzkaller0: entered allmulticast mode
[   56.748504][ T6489] tipc: Resetting bearer <eth:syzkaller0>
[   56.758735][ T6488] tipc: Resetting bearer <eth:syzkaller0>
[   56.768031][ T6488] tipc: Disabling bearer <eth:syzkaller0>
[   57.367705][ T6570] netlink: 'syz.1.303': attribute type 1 has an invalid length.
[   57.378396][ T6570] __nla_validate_parse: 9 callbacks suppressed
[   57.378410][ T6570] netlink: 224 bytes leftover after parsing attributes in process `syz.1.303'.
[   57.424369][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[   57.428225][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'.
[   57.436642][ T6573] netlink: 'syz.2.304': attribute type 18 has an invalid length.
[   57.629858][ T6581] netlink: 'syz.1.307': attribute type 1 has an invalid length.
[   57.656550][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.659804][ T6583] smc: net device bond0 applied user defined pnetid SYZ2
[   57.673946][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.677125][ T6581] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   57.683682][ T6581] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   57.749347][ T6584] veth3: entered promiscuous mode
[   57.756358][ T6584] bond1: (slave veth3): Enslaving as an active interface with a down link
[   57.764885][ T6586] netlink: 96 bytes leftover after parsing attributes in process `syz.2.308'.
[   57.765517][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.307'.
[   57.775645][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.876126][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'.
[   57.905216][ T6600] netlink: 248 bytes leftover after parsing attributes in process `syz.2.315'.
[   58.021696][   T54] Bluetooth: hci1: command tx timeout
[   58.023788][   T54] Bluetooth: hci0: command tx timeout
[   58.101806][   T54] Bluetooth: hci2: command tx timeout
[   58.284337][ T6647] syzkaller0: entered promiscuous mode
[   58.286607][ T6647] syzkaller0: entered allmulticast mode
[   58.395183][ T6665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.346'.
[   58.476066][ T6667] tipc: Started in network mode
[   58.478305][ T6667] tipc: Node identity fa1a12ec243e, cluster identity 4711
[   58.482839][ T6667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.490347][ T6667] syzkaller0: entered promiscuous mode
[   58.494033][ T6667] syzkaller0: entered allmulticast mode
[   58.511951][ T6667] tipc: Resetting bearer <eth:syzkaller0>
[   58.518182][ T6666] tipc: Resetting bearer <eth:syzkaller0>
[   58.523167][ T6666] tipc: Disabling bearer <eth:syzkaller0>
[   58.529916][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.581279][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[   58.654219][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'.
[   59.054013][ T6738] netlink: 'syz.0.380': attribute type 2 has an invalid length.
[   59.243537][ T6763] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   59.371769][ T6775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.375453][ T6775] syzkaller0: entered promiscuous mode
[   59.377886][ T6775] syzkaller0: entered allmulticast mode
[   59.388736][ T6775] tipc: Resetting bearer <eth:syzkaller0>
[   59.393504][ T6774] tipc: Resetting bearer <eth:syzkaller0>
[   59.397150][ T6774] tipc: Disabling bearer <eth:syzkaller0>
[   59.643171][ T6784] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   59.837323][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.840667][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.933683][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.953521][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.068235][ T6793] geneve2: left promiscuous mode
[   60.075054][ T6793] veth3: left promiscuous mode
[   60.083915][ T5880] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.088175][ T5880] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.097599][ T5880] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.101860][ T5880] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.142424][ T6808] syz_tun: entered promiscuous mode
[   60.147864][ T6808] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.154763][ T6808] hsr1: entered allmulticast mode
[   60.157037][ T6808] syz_tun: entered allmulticast mode
[   60.159148][ T6808] batadv_slave_0: entered allmulticast mode
[   60.187433][ T6819] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.222518][ T6824] pim6reg1: entered promiscuous mode
[   60.224789][ T6824] pim6reg1: entered allmulticast mode
[   60.496710][ T6845] TCP: TCP_TX_DELAY enabled
[   60.640651][ T6866] netlink: 'syz.1.433': attribute type 3 has an invalid length.
[   60.753770][ T6881] vxcan1: entered allmulticast mode
[   60.756372][ T6881] vxcan1: left allmulticast mode
[   60.893673][ T6882] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.899473][ T6882] raw_sendmsg: syz.0.438 forgot to set AF_INET. Fix it!
[   61.791579][ T6898] block nbd0: server does not support multiple connections per device.
[   61.795366][ T6898] block nbd0: shutting down sockets
[   61.841449][ T6907] syzkaller1: entered allmulticast mode
[   61.971553][ T6927] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   62.186833][ T5929] IPVS: starting estimator thread 0...
[   62.271408][ T6950] IPVS: using max 135 ests per chain, 324000 per kthread
[   62.290448][ T6963] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   62.414633][ T6980] __nla_validate_parse: 6 callbacks suppressed
[   62.414647][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'.
[   62.430021][ T6980] team0 (unregistering): Port device team_slave_0 removed
[   62.438492][ T6980] team0 (unregistering): Port device team_slave_1 removed
[   62.922807][ T7009] netlink: 172 bytes leftover after parsing attributes in process `syz.2.494'.
[   62.926595][ T7009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   63.471916][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'.
[   64.341441][   T54] Bluetooth: hci0: command tx timeout
[   64.647120][ T7097] netlink: 108 bytes leftover after parsing attributes in process `syz.1.535'.
[   64.651250][ T7097] netlink: 108 bytes leftover after parsing attributes in process `syz.1.535'.
[   64.655374][ T7097] netlink: 84 bytes leftover after parsing attributes in process `syz.1.535'.
[   65.006373][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'.
[   65.100924][ T7121] gretap0: entered promiscuous mode
[   65.118597][ T7121] gretap0: left promiscuous mode
[   65.276838][ T7135] dvmrp1: entered allmulticast mode
[   65.281462][ T7135] dvmrp1: left allmulticast mode
[   65.346522][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'.
[   65.465633][ T7157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.564'.
[   65.537481][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[   65.616375][ T7170] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   65.678546][ T7178] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   66.273546][ T7252] netlink: 'syz.2.605': attribute type 30 has an invalid length.
[   66.277264][ T7252] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   66.281312][ T7252] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   66.405038][ T7267] netlink: 'syz.2.612': attribute type 6 has an invalid length.
[   66.589618][ T7283] delete_channel: no stack
[   66.710643][ T7299] netlink: 'syz.0.624': attribute type 13 has an invalid length.
[   66.714930][ T7299] netlink: 'syz.0.624': attribute type 17 has an invalid length.
[   66.932585][ T7308] netlink: 'syz.0.627': attribute type 1 has an invalid length.
[   66.941182][ T7308] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.954667][ T7308] 8021q: adding VLAN 0 to HW filter on device bond2
[   66.957474][ T7308] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   66.962524][ T7308] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   67.011238][ T7310] veth3: entered promiscuous mode
[   67.016666][ T7310] bond2: (slave veth3): Enslaving as an active interface with a down link
[   67.233947][ T7322] netlink: 'syz.0.632': attribute type 13 has an invalid length.
[   67.236788][ T7322] netlink: 'syz.0.632': attribute type 17 has an invalid length.
[   67.247783][ T7322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.352638][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.490232][ T7347] __nla_validate_parse: 6 callbacks suppressed
[   67.490246][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[   67.509655][ T7347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.644'.
[   67.648406][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'.
[   67.653532][ T7367] netlink: 84 bytes leftover after parsing attributes in process `syz.1.654'.
[   68.125774][ T7415] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[   68.379604][ T7432] sit0: entered promiscuous mode
[   68.396567][ T7432] netlink: 'syz.2.682': attribute type 1 has an invalid length.
[   68.399876][ T7432] netlink: 1 bytes leftover after parsing attributes in process `syz.2.682'.
[   69.121193][ T7471] netlink: 'syz.0.701': attribute type 303 has an invalid length.
[   69.126579][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'.
[   69.233291][ T7402] Set syz1 is full, maxelem 65536 reached
[   69.259154][ T7474] netlink: 'syz.1.702': attribute type 1 has an invalid length.
[   69.327953][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.705'.
[   69.909353][   T10] cfg80211: failed to load regulatory.db
[   70.050923][ T7527] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[   70.627078][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'.
[   70.887349][ T7607] netlink: 48 bytes leftover after parsing attributes in process `syz.0.759'.
[   70.906288][ T7609] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[   70.910136][ T7609] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   71.169310][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'.
[   71.222798][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.849125][ T7674] validate_nla: 1 callbacks suppressed
[   71.849137][ T7674] netlink: 'syz.2.787': attribute type 1 has an invalid length.
[   72.134204][ T7690] sit0: left promiscuous mode
[   72.155473][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.159046][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.294567][ T7690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.325848][ T7690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.448326][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.453303][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.462041][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.465354][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.671567][ T7720] bridge0: port 4(batadv1) entered blocking state
[   72.674550][ T7720] bridge0: port 4(batadv1) entered disabled state
[   72.677480][ T7720] batadv1: entered allmulticast mode
[   72.680689][ T7720] batadv1: entered promiscuous mode
[   72.766728][  T794] IPVS: starting estimator thread 0...
[   72.769961][ T7727] ieee802154 phy0 wpan0: encryption failed: -22
[   72.780080][  T794] IPVS: starting estimator thread 0...
[   72.862550][ T7734] IPVS: using max 73 ests per chain, 175200 per kthread
[   72.879186][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'.
[   72.894681][ T7735] IPVS: using max 133 ests per chain, 319200 per kthread
[   72.928776][ T7743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.093172][ T7748] netlink: 'syz.1.813': attribute type 1 has an invalid length.
[   73.113893][ T7748] netlink: 224 bytes leftover after parsing attributes in process `syz.1.813'.
[   73.156109][   T13] IPVS: stop unused estimator thread 0...
[   73.172538][ T5904] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   73.176533][ T5904] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   73.596057][ T7778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.828'.
[   73.665741][ T7784] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   73.707839][ T7792] netlink: 248 bytes leftover after parsing attributes in process `syz.0.835'.
[   73.881063][ T7819] lo speed is unknown, defaulting to 1000
[   73.891708][ T7819] lo speed is unknown, defaulting to 1000
[   73.894228][ T7819] lo speed is unknown, defaulting to 1000
[   73.979074][ T7819] infiniband syz0: set down
[   73.981195][ T7819] infiniband syz0: added lo
[   73.985346][ T5915] lo speed is unknown, defaulting to 1000
[   74.002235][ T7819] RDS/IB: syz0: added
[   74.004221][ T7819] smc: adding ib device syz0 with port count 1
[   74.007065][ T7819] smc:    ib device syz0 port 1 has pnetid 
[   74.010274][ T5915] lo speed is unknown, defaulting to 1000
[   74.013519][ T7819] lo speed is unknown, defaulting to 1000
[   74.060751][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'.
[   74.074467][ T7819] lo speed is unknown, defaulting to 1000
[   74.099761][ T7832] netlink: 68 bytes leftover after parsing attributes in process `syz.0.853'.
[   74.139448][ T7819] lo speed is unknown, defaulting to 1000
[   74.207315][ T7819] lo speed is unknown, defaulting to 1000
[   74.272479][ T7840] netlink: 'syz.0.854': attribute type 4 has an invalid length.
[   74.491792][ T7857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.864'.
[   74.496950][ T7857] netlink: 20 bytes leftover after parsing attributes in process `syz.0.864'.
[   74.504595][ T7857] netlink: 104 bytes leftover after parsing attributes in process `syz.0.864'.
[   74.532451][ T7866] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   74.540719][ T7868] netlink: 'syz.0.869': attribute type 1 has an invalid length.
[   74.544340][ T7868] netlink: 204 bytes leftover after parsing attributes in process `syz.0.869'.
[   74.548738][ T7868] netlink: 'syz.0.869': attribute type 1 has an invalid length.
[   76.662264][ T8013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.715538][ T8017] unknown channel width for channel at 909000KHz?
[   76.718432][ T8017] unknown channel width for channel at 909000KHz?
[   76.723140][ T8017] unknown channel width for channel at 909000KHz?
[   76.914491][ T8029] sctp: [Deprecated]: syz.1.945 (pid 8029) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.914491][ T8029] Use struct sctp_sack_info instead
[   77.538101][ T8065] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.541745][ T8065] syzkaller0: entered promiscuous mode
[   77.544121][ T8065] syzkaller0: entered allmulticast mode
[   77.550350][ T8065] tipc: Resetting bearer <eth:syzkaller0>
[   77.554116][ T8064] tipc: Resetting bearer <eth:syzkaller0>
[   77.557930][ T8064] tipc: Disabling bearer <eth:syzkaller0>
[   77.690099][ T8069] netlink: 'syz.2.963': attribute type 27 has an invalid length.
[   77.709200][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.714491][ T8069] 8021q: adding VLAN 0 to HW filter on device team0
[   77.719731][ T8069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.085761][ T8094] __nla_validate_parse: 7 callbacks suppressed
[   78.085772][ T8094] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.975'.
[   78.100189][ T8094] netlink: 'syz.1.975': attribute type 10 has an invalid length.
[   78.104571][ T8094] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   78.152648][ T8098] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.156092][ T8097] tipc: Resetting bearer <eth:syzkaller0>
[   78.200104][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'.
[   78.200307][ T8097] tipc: Disabling bearer <eth:syzkaller0>
[   78.209886][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'.
[   79.539669][ T8189] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   79.544640][ T8189] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   79.576182][ T8193] vxcan3: entered allmulticast mode
[   79.736798][ T8203] bond0: (slave dummy0): Releasing backup interface
[   79.743032][ T8203] bridge_slave_0: left allmulticast mode
[   79.745727][ T8203] bridge_slave_0: left promiscuous mode
[   79.748451][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.754123][ T8203] bridge_slave_1: left allmulticast mode
[   79.756736][ T8203] bridge_slave_1: left promiscuous mode
[   79.759427][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.765819][ T8203] bond0: (slave bond_slave_0): Releasing backup interface
[   79.769993][ T8203] bond0: (slave bond_slave_1): Releasing backup interface
[   79.775925][ T8203] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.779467][ T8203] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.783961][ T8203] bond1: (slave veth3): Releasing active interface
[   79.810023][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1022'.
[   80.047723][ T8228] netlink: 'syz.0.1033': attribute type 10 has an invalid length.
[   80.055324][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.059981][ T8228] team0: Port device bond0 added
[   80.120060][ T8236] netlink: 'syz.2.1037': attribute type 4 has an invalid length.
[   80.124113][ T8236] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1037'.
[   80.130786][ T8236] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   80.167839][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[   80.211630][ T8248] delete_channel: no stack
[   80.322098][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1047'.
[   80.335237][ T8260] sctp: [Deprecated]: syz.2.1048 (pid 8260) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.335237][ T8260] Use struct sctp_sack_info instead
[   80.342444][ T8260] sctp: [Deprecated]: syz.2.1048 (pid 8260) Use of struct sctp_assoc_value in delayed_ack socket option.
[   80.342444][ T8260] Use struct sctp_sack_info instead
[   80.380759][ T8264] team0: Port device bond0 removed
[   80.386989][ T8264] bridge_slave_0: left allmulticast mode
[   80.389131][ T8264] bridge_slave_0: left promiscuous mode
[   80.392061][ T8264] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.396477][ T8264] bridge_slave_1: left allmulticast mode
[   80.398548][ T8264] bridge_slave_1: left promiscuous mode
[   80.400525][ T8264] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.407728][ T8264] bond0: (slave bond_slave_0): Releasing backup interface
[   80.415627][ T8264] bond0: (slave bond_slave_1): Releasing backup interface
[   80.423586][ T8264] team0: Port device team_slave_0 removed
[   80.430333][ T8264] team0: Port device team_slave_1 removed
[   80.433674][ T8264] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.437252][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.440203][ T8264] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.447182][ T8264] bond1: left allmulticast mode
[   80.449065][ T8264] bond1: left promiscuous mode
[   80.451193][ T8264] bridge0: port 3(bond1) entered disabled state
[   80.457094][ T8264] bond2: (slave veth3): Releasing active interface
[   80.473658][ T8264] batadv1: left allmulticast mode
[   80.478796][ T8264] batadv1: left promiscuous mode
[   80.480708][ T8264] bridge0: port 4(batadv1) entered disabled state
[   80.491739][ T8272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1049'.
[   80.498856][ T8272] team0: Failed to send options change via netlink (err -105)
[   80.504049][ T8272] team0: Mode changed to "loadbalance"
[   80.604985][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'.
[   80.608674][ T8291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1062'.
[   80.759909][ T8295] lo speed is unknown, defaulting to 1000
[   81.050243][ T8317] debugfs: 'netdev:nicvf0' already exists in 'phy4'
[   81.393578][ T8339] netlink: 'syz.1.1080': attribute type 6 has an invalid length.
[   81.544666][ T8354] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   81.776429][ T8391] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   81.782214][ T8391] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.923034][ T8449] netlink: 'syz.0.1129': attribute type 6 has an invalid length.
[   83.108109][ T8464] __nla_validate_parse: 6 callbacks suppressed
[   83.108119][ T8464] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1136'.
[   83.359427][ T8482] netlink: 'syz.2.1145': attribute type 1 has an invalid length.
[   83.364701][ T8482] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1145'.
[   83.368256][ T8482] netlink: 'syz.2.1145': attribute type 1 has an invalid length.
[   83.598510][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1151'.
[   83.683881][ T8507] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1156'.
[   83.820806][ T5930] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   83.823751][ T5930] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   83.826466][ T5930] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe
[   83.829186][ T5930] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 16/18
[   83.832888][ T5930] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22
[   84.767776][ T8595] lo speed is unknown, defaulting to 1000
[   85.127507][ T8622] lo speed is unknown, defaulting to 1000
[   85.207042][ T8631] vlan2: entered promiscuous mode
[   85.209023][ T8631] bond0: entered promiscuous mode
[   85.213459][ T8631] vlan2: entered allmulticast mode
[   85.216818][ T8631] bond0: entered allmulticast mode
[   85.243919][ T8633] lo speed is unknown, defaulting to 1000
[   85.500448][ T8680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1209'.
[   85.565429][ T8693] netlink: 'syz.2.1213': attribute type 4 has an invalid length.
[   85.639546][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'.
[   85.649564][ T8710] macvlan2: entered promiscuous mode
[   85.653973][ T8710] bond0: entered promiscuous mode
[   85.656473][ T8710] bond_slave_0: entered promiscuous mode
[   85.660160][ T8710] bond_slave_1: entered promiscuous mode
[   85.665567][ T8710] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.781503][ T5231] Bluetooth: hci2: command 0x0405 tx timeout
[   85.850111][ T8745] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1224'.
[   85.883095][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1225'.
[   85.888393][ T8751] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   86.185758][ T8817] tipc: Started in network mode
[   86.187703][ T8817] tipc: Node identity , cluster identity 4711
[   86.190445][ T8817] tipc: Failed to obtain node identity
[   86.196204][ T8817] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[   86.347773][ T8833] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   86.352459][ T8833] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1243'.
[   86.360928][ T8833] bond0 (unregistering): Released all slaves
[   86.717725][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'.
[   87.304557][ T8927] syzkaller1: entered promiscuous mode
[   87.306597][ T8927] syzkaller1: entered allmulticast mode
[   87.799906][ T8986] netlink: 'syz.0.1315': attribute type 1 has an invalid length.
[   87.814160][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.832227][ T8986] bond0: (slave gretap1): making interface the new active one
[   87.836710][ T8986] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   88.146759][ T9015] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   88.149961][ T9015] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   88.465381][ T9040] netlink: 'syz.0.1339': attribute type 13 has an invalid length.
[   88.468434][ T9040] netlink: 'syz.0.1339': attribute type 17 has an invalid length.
[   88.501616][ T9040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.528043][ T9040] lo speed is unknown, defaulting to 1000
[   88.634469][ T9054] __nla_validate_parse: 5 callbacks suppressed
[   88.634479][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'.
[   88.643941][ T9040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.755914][ T9060] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   88.823028][ T9066] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[   88.998857][ T9078] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.1355'.
[   89.274333][ T9095] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649
[   89.280287][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1363'.
[   89.283858][ T9097] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1363'.
[   89.429169][ T9106] lo speed is unknown, defaulting to 1000
[   89.479077][ T9111] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[   89.483116][ T9111] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[   89.656960][ T9134] syzkaller1: entered promiscuous mode
[   89.659464][ T9134] syzkaller1: entered allmulticast mode
[   89.812528][ T9154] netlink: 'syz.2.1389': attribute type 15 has an invalid length.
[   89.858052][ T9160] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[   89.861325][ T9160] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   90.105455][ T9193] openvswitch: netlink: Missing valid actions attribute.
[   90.107996][ T9193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.129609][ T9197] netlink: 'syz.2.1410': attribute type 39 has an invalid length.
[   90.139073][ T9199] netlink: 'syz.1.1411': attribute type 1 has an invalid length.
[   90.142505][ T9199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1411'.
[   90.374879][ T9232] lo speed is unknown, defaulting to 1000
[   90.654266][ T9261] netlink: 'syz.0.1438': attribute type 2 has an invalid length.
[   90.657159][ T9261] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1438'.
[   90.731568][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'.
[   90.859173][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'.
[   90.865352][ T9277] macsec0: entered allmulticast mode
[   90.867824][ T9277] veth1_macvtap: entered allmulticast mode
[   91.147449][ T9296] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1455'.
[   91.327604][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1470'.
[   91.556859][ T5904] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   91.562629][ T5904] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   91.566178][ T5904] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   91.569395][ T5904] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.626373][ T9332] lo speed is unknown, defaulting to 1000
[   91.778681][ T9348] gretap0: entered promiscuous mode
[   91.782800][ T9348] gretap0: left promiscuous mode
[   91.964385][ T9359] : entered promiscuous mode
[   92.077419][ T9369] macvtap1: entered promiscuous mode
[   92.079844][ T9369] team0: entered promiscuous mode
[   92.082740][ T9369] macvtap1: entered allmulticast mode
[   92.084622][ T9369] team0: entered allmulticast mode
[   92.087344][ T9369] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   93.256745][ T9453] netlink: 'syz.0.1526': attribute type 2 has an invalid length.
[   93.273507][ T9455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.333476][ T9463] netlink: 'syz.0.1531': attribute type 1 has an invalid length.
[   93.566012][ T9476] delete_channel: no stack
[   93.647910][ T9490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.653093][ T9490] syzkaller0: entered promiscuous mode
[   93.655518][ T9490] syzkaller0: entered allmulticast mode
[   93.663659][ T9490] tipc: Resetting bearer <eth:syzkaller0>
[   93.667744][ T9489] tipc: Resetting bearer <eth:syzkaller0>
[   93.670449][ T9489] tipc: Disabling bearer <eth:syzkaller0>
[   93.689975][ T9494] __nla_validate_parse: 16 callbacks suppressed
[   93.689984][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'.
[   93.840456][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1556'.
[   93.840534][ T9517] netlink: 'syz.2.1557': attribute type 58 has an invalid length.
[   93.847409][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1557'.
[   94.839177][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'.
[   95.714757][ T9595] netlink: 464 bytes leftover after parsing attributes in process `syz.1.1591'.
[   95.762596][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'.
[   96.269521][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'.
[   96.276316][ T9626] batadv0: entered promiscuous mode
[   96.279304][ T9626] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   96.283678][ T9626] batadv0: left promiscuous mode
[   96.465460][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'.
[   96.765951][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1618'.
[   96.796638][ T9668] bond0: Device is already in use.
[   96.836815][ T9672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1622'.
[   96.840056][ T9672] netlink: 'syz.1.1622': attribute type 7 has an invalid length.
[   96.843051][ T9672] netlink: 'syz.1.1622': attribute type 8 has an invalid length.
[   97.014012][ T9692] tipc: Started in network mode
[   97.016360][ T9692] tipc: Node identity 080211, cluster identity 4711
[   97.019364][ T9692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.030201][ T9692] tipc: Resetting bearer <eth:syzkaller0>
[   98.022307][  T794] tipc: Node number set to 134353152
[   98.172768][ T9747] netlink: 'syz.0.1654': attribute type 2 has an invalid length.
[   98.552213][ T9790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.554999][ T9790] syzkaller0: entered promiscuous mode
[   98.556936][ T9790] syzkaller0: entered allmulticast mode
[   98.561811][ T9790] tipc: Resetting bearer <eth:syzkaller0>
[   98.564638][ T9789] tipc: Resetting bearer <eth:syzkaller0>
[   98.567643][ T9789] tipc: Disabling bearer <eth:syzkaller0>
[   98.674362][ T9800] syzkaller0: entered promiscuous mode
[   98.676797][ T9800] syzkaller0: entered allmulticast mode
[   98.809127][   T54] Bluetooth: hci2: link tx timeout
[   98.811067][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   98.828090][ T9805] veth3: entered promiscuous mode
[   99.073146][ T9812] __nla_validate_parse: 6 callbacks suppressed
[   99.073161][ T9812] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1683'.
[   99.245943][ T9828] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1691'.
[   99.303832][ T9836] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1695'.
[   99.528128][ T9860] bond0: (slave gretap1): Releasing active interface
[   99.572080][ T9860] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[   99.677928][ T9875] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1713'.
[   99.684773][ T9875] gretap0: entered promiscuous mode
[   99.715846][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'.
[   99.720396][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1714'.
[   99.753930][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1715'.
[   99.862453][ T9889] netlink: 'syz.0.1718': attribute type 11 has an invalid length.
[  100.083108][ T9909] netlink: 'syz.0.1728': attribute type 12 has an invalid length.
[  100.146362][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1734'.
[  100.161103][ T9923] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.169292][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1735'.
[  100.176594][ T9923] bond3: (slave wlan0): Enslaving as an active interface with an up link
[  100.186824][ T9926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1735'.
[  100.541175][ T9960] lo speed is unknown, defaulting to 1000
[  100.812680][ T9960] netlink: 'syz.2.1748': attribute type 13 has an invalid length.
[  100.821572][ T9960] netlink: 'syz.2.1748': attribute type 17 has an invalid length.
[  100.824503][ T5231] Bluetooth: hci2: command 0x0405 tx timeout
[  100.847565][ T9960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.921274][ T9998] netlink: zone id is out of range
[  100.924514][ T9998] netlink: zone id is out of range
[  100.927488][ T9998] netlink: zone id is out of range
[  100.929659][ T9998] netlink: zone id is out of range
[  100.935809][ T9998] netlink: zone id is out of range
[  100.938107][ T9998] netlink: zone id is out of range
[  100.939861][ T9998] netlink: zone id is out of range
[  100.944688][ T9998] netlink: zone id is out of range
[  101.077319][T10015] sctp: [Deprecated]: syz.0.1774 (pid 10015) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.077319][T10015] Use struct sctp_sack_info instead
[  101.865437][T10074] netlink: 'syz.1.1797': attribute type 10 has an invalid length.
[  101.868379][T10074] bond0: (slave wlan1): refused to change device type
[  101.872365][T10074] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  101.875960][T10074] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.604595][T10071] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  102.671846][T10147] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  102.911504][ T5231] Bluetooth: hci2: command 0x0405 tx timeout
[  103.487057][T10159] batadv_slave_1: entered promiscuous mode
[  103.593686][T10173] netlink: 'syz.2.1845': attribute type 1 has an invalid length.
[  103.617628][T10178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.620809][T10178] IPv6: NLM_F_CREATE should be set when creating new route
[  103.623990][T10178] IPv6: NLM_F_CREATE should be set when creating new route
[  104.062998][T10248] netlink: 'syz.2.1881': attribute type 10 has an invalid length.
[  104.068116][T10248] 8021q: adding VLAN 0 to HW filter on device team0
[  104.071164][T10248] team0: entered promiscuous mode
[  104.073108][T10248] team_slave_0: entered promiscuous mode
[  104.075341][T10248] team_slave_1: entered promiscuous mode
[  104.104935][T10252] bridge0: port 3(veth0_to_team) entered blocking state
[  104.107448][T10252] bridge0: port 3(veth0_to_team) entered disabled state
[  104.109886][T10252] veth0_to_team: entered allmulticast mode
[  104.114104][T10252] veth0_to_team: entered promiscuous mode
[  104.117699][T10252] veth0_to_team: left allmulticast mode
[  104.119999][T10252] veth0_to_team: left promiscuous mode
[  104.122445][T10252] bridge0: port 3(veth0_to_team) entered disabled state
[  104.173657][T10256] netlink: 'syz.2.1885': attribute type 10 has an invalid length.
[  104.202801][T10262] __nla_validate_parse: 18 callbacks suppressed
[  104.202814][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'.
[  104.650059][T10298] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1903'.
[  104.679465][T10300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1904'.
[  104.751007][T10308] netlink: 'syz.2.1908': attribute type 12 has an invalid length.
[  104.754136][T10308] netlink: 'syz.2.1908': attribute type 29 has an invalid length.
[  104.756885][T10308] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1908'.
[  104.759677][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'.
[  105.187402][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'.
[  105.345748][T10354] sctp: [Deprecated]: syz.1.1930 (pid 10354) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.345748][T10354] Use struct sctp_sack_info instead
[  105.544225][T10368] delete_channel: no stack
[  106.296327][T10408] sctp: [Deprecated]: syz.2.1952 (pid 10408) Use of int in max_burst socket option.
[  106.296327][T10408] Use struct sctp_assoc_value instead
[  106.306503][T10410] netlink: 'syz.0.1953': attribute type 23 has an invalid length.
[  106.477646][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'.
[  106.678845][T10460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1977'.
[  106.686740][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'.
[  106.701783][T10465] tipc: New replicast peer: 255.255.255.255
[  106.707541][T10465] tipc: Enabled bearer <udp:syz2>, priority 10
[  106.790386][T10479] net_ratelimit: 15 callbacks suppressed
[  106.790397][T10479] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  107.104689][T10526] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[  107.158400][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2014'.
[  107.364016][T10564] ip6tnl1: entered promiscuous mode
[  107.365926][T10564] ip6tnl1: entered allmulticast mode
[  107.368444][T10564] team0: Refused to change device type
[  107.532374][ T5915] IPVS: starting estimator thread 0...
[  107.623384][T10590] IPVS: using max 131 ests per chain, 314400 per kthread
[  107.688197][T10612] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  107.775422][T10630] netlink: 'syz.2.2060': attribute type 1 has an invalid length.
[  108.164742][T10690] netlink: 'syz.2.2088': attribute type 2 has an invalid length.
[  108.523203][T10757] netlink: 'syz.1.2122': attribute type 1 has an invalid length.
[  108.713713][T10786] netlink: 'syz.2.2136': attribute type 30 has an invalid length.
[  108.720933][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.723483][T10786] netlink: 'syz.2.2136': attribute type 30 has an invalid length.
[  108.724569][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.730929][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.736198][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.756468][   T33] audit: type=1800 audit(1756439702.080:2): pid=10789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2137" name="@" dev="tmpfs" ino=3611 res=0 errno=0
[  108.788432][T10795] netlink: 'syz.1.2140': attribute type 16 has an invalid length.
[  108.921718][T10808] nbd: socks must be embedded in a SOCK_ITEM attr
[  108.924213][T10808] block nbd1: shutting down sockets
[  109.226172][T10845] __nla_validate_parse: 10 callbacks suppressed
[  109.226187][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'.
[  109.234416][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'.
[  109.238463][T10845] netlink: 'syz.1.2162': attribute type 5 has an invalid length.
[  109.243948][T10845] netlink: 'syz.1.2162': attribute type 6 has an invalid length.
[  109.496374][T10867] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.499180][T10867] bond2: entered promiscuous mode
[  109.501233][T10867] bond2: entered allmulticast mode
[  109.504367][T10867] bond0: (slave bond2): Enslaving as an active interface with an up link
[  109.657852][T10894] netlink: 'syz.0.2185': attribute type 1 has an invalid length.
[  109.669783][T10896] netpci0: tun_chr_ioctl cmd 2147767507
[  109.694425][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'.
[  109.707970][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'.
[  109.758694][T10894] bridge_slave_0: entered promiscuous mode
[  109.782832][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2190'.
[  109.786893][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2190'.
[  109.800538][T10904] lo speed is unknown, defaulting to 1000
[  110.454907][T11001] bridge3: entered promiscuous mode
[  110.457193][T11001] bridge3: entered allmulticast mode
[  110.519360][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'.
[  110.594112][T11007] vlan3: entered allmulticast mode
[  110.598992][T11007] bond3: entered allmulticast mode
[  110.645901][T11014] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2241'.
[  111.025789][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'.
[  111.029334][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'.
[  111.040478][T11053] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.046792][T11053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.055736][  T794] lo speed is unknown, defaulting to 1000
[  111.057970][  T794] syz0: Port: 1 Link ACTIVE
[  111.060119][  T794] lo speed is unknown, defaulting to 1000
[  111.404757][T11109] bridge0: entered promiscuous mode
[  111.407361][T11109] bridge0: port 1(macvlan0) entered blocking state
[  111.410025][T11109] bridge0: port 1(macvlan0) entered disabled state
[  111.412883][T11109] macvlan0: entered allmulticast mode
[  111.415063][T11109] bridge0: entered allmulticast mode
[  111.417435][T11109] macvlan0: left allmulticast mode
[  111.419171][T11109] bridge0: left allmulticast mode
[  111.421206][T11109] bridge0: left promiscuous mode
[  111.534768][T11125] validate_nla: 2 callbacks suppressed
[  111.534783][T11125] netlink: 'syz.0.2291': attribute type 3 has an invalid length.
[  111.592501][T11131] netlink: 'syz.1.2295': attribute type 13 has an invalid length.
[  111.821920][T11160] syzkaller1: entered promiscuous mode
[  111.827558][T11160] syzkaller1: entered allmulticast mode
[  111.852959][T11165] delete_channel: no stack
[  111.872939][T11163] veth1_macvtap: left allmulticast mode
[  111.875421][T11163] veth1_macvtap: left promiscuous mode
[  111.888215][T11167] tipc: Enabled bearer <udp:s>, priority 10
[  111.951154][T11173] syzkaller1: entered promiscuous mode
[  111.955295][T11173] syzkaller1: entered allmulticast mode
[  112.007618][T11177] netlink: 'syz.2.2316': attribute type 6 has an invalid length.
[  112.011632][T11177] netlink: 'syz.2.2316': attribute type 6 has an invalid length.
[  112.093456][T11189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.096903][T11189] syzkaller0: entered promiscuous mode
[  112.099303][T11189] syzkaller0: entered allmulticast mode
[  112.120709][T11189] tipc: Resetting bearer <eth:syzkaller0>
[  112.124175][T11189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  112.128328][T11188] tipc: Resetting bearer <eth:syzkaller0>
[  112.134925][T11188] tipc: Disabling bearer <eth:syzkaller0>
[  112.277842][T11211] lo: Caught tx_queue_len zero misconfig
[  112.337093][T11218] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  112.341157][T11218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.118986][T11233] netlink: 'syz.0.2341': attribute type 12 has an invalid length.
[  113.171526][ T5915] tipc: Node number set to 2724271171
[  113.886304][T11306] syzkaller1: entered promiscuous mode
[  113.888738][T11306] syzkaller1: entered allmulticast mode
[  114.024207][T11314] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  114.139625][T11326] lo speed is unknown, defaulting to 1000
[  114.141774][T11326] lo speed is unknown, defaulting to 1000
[  114.144232][T11326] lo speed is unknown, defaulting to 1000
[  114.152028][T11326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  114.159207][T11326] lo speed is unknown, defaulting to 1000
[  114.162573][T11326] lo speed is unknown, defaulting to 1000
[  114.165073][T11326] lo speed is unknown, defaulting to 1000
[  114.269331][T11341] netlink: 'syz.2.2391': attribute type 29 has an invalid length.
[  114.282578][T11341] netlink: 'syz.2.2391': attribute type 29 has an invalid length.
[  114.295887][T11341] __nla_validate_parse: 29 callbacks suppressed
[  114.295903][T11341] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2391'.
[  114.378275][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'.
[  114.450961][T11369] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2406'.
[  114.780220][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2417'.
[  115.518972][T11414] netlink: 'syz.2.2425': attribute type 16 has an invalid length.
[  115.524947][T11414] netlink: 'syz.2.2425': attribute type 3 has an invalid length.
[  115.528460][T11414] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2425'.
[  115.831292][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2437'.
[  115.839595][T11451] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2437'.
[  115.843666][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2437'.
[  115.883956][T11455] syzkaller1: entered promiscuous mode
[  115.886476][T11455] syzkaller1: entered allmulticast mode
[  116.260508][T11472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2446'.
[  116.335527][T11478] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2449'.
[  116.457131][T11426] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  116.459191][T11426] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  116.466250][T11426] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  116.468372][T11426] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  116.624506][T11514] bridge_slave_0: left allmulticast mode
[  116.627038][T11514] bridge_slave_0: left promiscuous mode
[  116.629523][T11514] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.634995][T11514] bridge_slave_1: left allmulticast mode
[  116.637276][T11514] bridge_slave_1: left promiscuous mode
[  116.639101][T11514] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.645898][T11514] bond0: (slave bond_slave_0): Releasing backup interface
[  116.649101][T11514] bond_slave_0: left promiscuous mode
[  116.652240][T11514] bond0: (slave bond_slave_1): Releasing backup interface
[  116.655748][T11514] bond_slave_1: left promiscuous mode
[  116.658481][T11514] team_slave_0: left promiscuous mode
[  116.661269][T11514] team0: Port device team_slave_0 removed
[  116.664552][T11514] team_slave_1: left promiscuous mode
[  116.666917][T11514] team0: Port device team_slave_1 removed
[  116.668991][T11514] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.671864][T11514] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.674986][ T5930] lo speed is unknown, defaulting to 1000
[  116.844517][T11535] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  117.506301][T11593] macsec0: entered allmulticast mode
[  117.570627][T11603] netlink: 'syz.2.2506': attribute type 2 has an invalid length.
[  118.478294][T11623] 8021q: adding VLAN 0 to HW filter on device bond5
[  118.488284][T11624] bond5: (slave macvlan2): Enslaving as a backup interface with a down link
[  118.502400][T11625] bond3: (slave wlan0): Releasing backup interface
[  118.507820][T11625] bond5: (slave macvlan2): Releasing backup interface
[  118.573209][T11639] netlink: 'syz.1.2522': attribute type 1 has an invalid length.
[  118.576487][T11639] netlink: 'syz.1.2522': attribute type 1 has an invalid length.
[  118.768659][T11672] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  118.873428][T11697] netlink: 'syz.0.2550': attribute type 1 has an invalid length.
[  118.876495][T11697] netlink: 'syz.0.2550': attribute type 1 has an invalid length.
[  118.898507][T11701] netlink: 'syz.2.2553': attribute type 1 has an invalid length.
[  118.960784][T11713] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  119.348570][T11785] netlink: 'syz.2.2584': attribute type 10 has an invalid length.
[  119.842570][T11840] bond0: Caught tx_queue_len zero misconfig
[  120.396305][T11846] __nla_validate_parse: 9 callbacks suppressed
[  120.396314][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2609'.
[  120.402687][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2609'.
[  120.405545][T11846] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2609'.
[  120.408382][T11846] netlink: 'syz.2.2609': attribute type 3 has an invalid length.
[  120.411008][T11846] netlink: 'syz.2.2609': attribute type 2 has an invalid length.
[  120.414552][T11846] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2609'.
[  120.417963][T11846] netlink: 'syz.2.2609': attribute type 2 has an invalid length.
[  120.791859][T11858] nbd1: detected capacity change from 0 to 127
[  120.797168][   T55] block nbd1: Receive control failed (result -32)
[  120.799928][T11861] block nbd1: Receive control failed (result -32)
[  120.814547][T11866] ip6tnl0: Caught tx_queue_len zero misconfig
[  121.034813][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2632'.
[  121.053890][T11895] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2632'.
[  121.192665][T11905] lo speed is unknown, defaulting to 1000
[  121.259617][T11905] lo speed is unknown, defaulting to 1000
[  123.246851][T11926] lo speed is unknown, defaulting to 1000
[  123.290524][T11926] lo speed is unknown, defaulting to 1000
[  123.410353][T11952] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.437093][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  123.440700][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  123.451323][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  123.457745][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  123.727337][T11989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'.
[  123.731006][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'.
[  123.736632][T11989] netlink: 'syz.1.2669': attribute type 18 has an invalid length.
[  123.767593][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2670'.
[  126.888208][T12009] netlink: 'syz.0.2677': attribute type 1 has an invalid length.
[  126.956725][T12017] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  127.004913][   T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  127.008904][T12009] 8021q: adding VLAN 0 to HW filter on device bond6
[  127.025931][T12009] veth11: entered promiscuous mode
[  127.033555][T12009] bond6: (slave veth11): Enslaving as a backup interface with a down link
[  127.067339][T12009] bond6: (slave ip6gretap1): Removing an active aggregator
[  127.082257][T12009] bond6: (slave ip6gretap1): Releasing backup interface
[  127.085491][T12009] bond6: (slave ip6gretap1): the permanent HWaddr of slave - de:ca:6b:92:22:63 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  127.097413][T12009] bond6: (slave veth11): Releasing backup interface
[  127.216275][   T33] audit: type=1800 audit(1756439720.540:3): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2690" name="memory.events" dev="tmpfs" ino=4503 res=0 errno=0
[  127.306892][T12049] netlink: 'syz.0.2696': attribute type 3 has an invalid length.
[  127.534459][T12078] sctp: [Deprecated]: syz.0.2709 (pid 12078) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.534459][T12078] Use struct sctp_sack_info instead
[  127.742570][T12100] tap0: tun_chr_ioctl cmd 1074025681
[  127.780203][T12104] netlink: 'syz.2.2722': attribute type 1 has an invalid length.
[  127.783860][T12104] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2722'.
[  127.809909][T12104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2722'.
[  127.863055][T12106] lo speed is unknown, defaulting to 1000
[  127.953665][T12106] lo speed is unknown, defaulting to 1000
[  127.960506][T12115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2726'.
[  127.964050][T12115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2726'.
[  128.168361][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'.
[  128.534359][T12180] xt_l2tp: unknown flags: 51
[  128.583604][T12188] netlink: 91 bytes leftover after parsing attributes in process `syz.2.2760'.
[  128.643062][T12194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2763'.
[  128.669331][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2764'.
[  128.678118][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2764'.
[  128.709935][T12202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2767'.
[  128.714075][T12202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.021067][T12224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.024396][T12224] syzkaller0: entered promiscuous mode
[  129.026817][T12224] syzkaller0: entered allmulticast mode
[  129.033038][T12224] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  129.038753][T12224] tipc: Resetting bearer <eth:syzkaller0>
[  129.042072][T12223] tipc: Resetting bearer <eth:syzkaller0>
[  129.046936][T12223] tipc: Disabling bearer <eth:syzkaller0>
[  129.107085][T12232] rdma_rxe: rxe_newlink: failed to add lo
[  129.130770][T12236] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  129.405666][T12275] netlink: 'syz.2.2799': attribute type 5 has an invalid length.
[  129.506897][T12285] Bluetooth: MGMT ver 1.23
[  129.657223][T12296] siw: device registration error -23
[  130.473498][T12322] bond0: option arp_validate: invalid value (18446744073491447809)
[  130.514133][T12326] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.517845][T12326] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  130.555050][T12326] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.562632][T12326] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  130.613105][T12326] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.616767][T12326] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  130.664937][T12326] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.669043][T12326] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  130.760040][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.764197][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  130.770475][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.774965][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  130.782485][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.786088][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  130.793168][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.796777][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  130.875127][T12340] netlink: 'syz.2.2829': attribute type 3 has an invalid length.
[  131.342573][T12407] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[  131.346328][T12407] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  131.498410][T12425] netlink: 'syz.2.2868': attribute type 6 has an invalid length.
[  132.658942][T12486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.665523][T12486] syzkaller0: entered promiscuous mode
[  132.667769][T12486] syzkaller0: entered allmulticast mode
[  132.677201][T12486] tipc: Resetting bearer <eth:syzkaller0>
[  132.683086][T12485] tipc: Resetting bearer <eth:syzkaller0>
[  132.687772][T12485] tipc: Disabling bearer <eth:syzkaller0>
[  132.800493][T12501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.856792][T12506] delete_channel: no stack
[  133.107925][T12532] dummy0: entered promiscuous mode
[  133.110320][T12532] macsec0: entered promiscuous mode
[  133.113561][T12532] macsec0: entered allmulticast mode
[  133.116008][T12532] dummy0: entered allmulticast mode
[  133.120063][T12532] dummy0: left allmulticast mode
[  133.123278][T12532] dummy0: left promiscuous mode
[  133.328599][T12539] vlan0: entered promiscuous mode
[  133.334173][T12539] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  133.445566][T12569] __nla_validate_parse: 14 callbacks suppressed
[  133.445575][T12569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2933'.
[  133.552662][T12587] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2941'.
[  133.681571][T12600] netlink: 'syz.0.2946': attribute type 9 has an invalid length.
[  133.799203][T12616] lo speed is unknown, defaulting to 1000
[  133.805134][T12618] tc_dump_action: action bad kind
[  133.887376][T12616] lo speed is unknown, defaulting to 1000
[  133.920841][T12631] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2962'.
[  134.022193][T12648] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  134.100173][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2973'.
[  134.122662][T12663] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2975'.
[  134.127260][T12663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2975'.
[  134.197178][T12673] sctp: [Deprecated]: syz.0.2981 (pid 12673) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.197178][T12673] Use struct sctp_sack_info instead
[  134.258548][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2984'.
[  134.384344][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'.
[  134.418845][T12696] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2990'.
[  134.425628][T12696] batadv2: entered promiscuous mode
[  134.427430][T12696] batadv2: entered allmulticast mode
[  134.535207][T12696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2990'.
[  134.969781][T12715] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.973408][T12715] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  135.004458][T12715] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.008514][T12715] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  135.034156][T12719] openvswitch: netlink: IPv4 tun info is not correct
[  135.065787][T12715] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.070071][T12715] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  135.126985][T12715] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  135.132029][T12715] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0
[  135.189432][T12731] netlink: 'syz.0.3005': attribute type 13 has an invalid length.
[  135.202867][ T5880] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.206192][ T5880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  135.222834][ T5880] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.228385][ T5880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  135.236967][ T5880] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.243109][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  135.251755][ T5880] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.255624][ T5880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  135.260161][T12737] netlink: 'syz.0.3007': attribute type 30 has an invalid length.
[  135.267813][T12737] netlink: 'syz.0.3007': attribute type 30 has an invalid length.
[  135.274480][ T5880] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  135.278087][ T5880] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  135.281169][ T5880] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  135.286961][ T5880] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  135.435108][T12753] batadv_slave_1: left promiscuous mode
[  135.445059][T12753] macsec0: left allmulticast mode
[  135.450887][T12753] bond0: left promiscuous mode
[  135.461782][T12753] macvlan2: left promiscuous mode
[  135.478507][T12753] veth3: left promiscuous mode
[  135.486842][T12753] bridge3: left promiscuous mode
[  135.488569][T12753] bridge3: left allmulticast mode
[  135.500746][ T5915] lo speed is unknown, defaulting to 1000
[  135.504017][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.507074][ T5915] syz1: Port: 1 Link DOWN
[  135.508890][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  135.512740][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.515968][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  135.519139][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.523184][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  135.526259][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.531053][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  136.388342][T12805] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  137.667303][T12882] netlink: 'syz.1.3073': attribute type 6 has an invalid length.
[  137.696868][T12884] bond0: (slave bond2): Error -95 calling ndo_bpf
[  138.789780][T12976] __nla_validate_parse: 8 callbacks suppressed
[  138.789790][T12976] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3117'.
[  139.141259][T13000] sctp: [Deprecated]: syz.1.3128 (pid 13000) Use of struct sctp_assoc_value in delayed_ack socket option.
[  139.141259][T13000] Use struct sctp_sack_info instead
[  139.699256][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'.
[  140.068004][T13035] netlink: 'syz.1.3145': attribute type 4 has an invalid length.
[  140.081698][ T5915] lo speed is unknown, defaulting to 1000
[  140.093278][T13035] netlink: 'syz.1.3145': attribute type 4 has an invalid length.
[  140.098449][ T5915] lo speed is unknown, defaulting to 1000
[  140.100950][ T5915] lo speed is unknown, defaulting to 1000
[  140.110297][ T5915] lo speed is unknown, defaulting to 1000
[  140.123530][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.126263][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.126520][ T5915] syz0: Port: 1 Link DOWN
[  140.129141][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.133725][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.135055][T13035] lo speed is unknown, defaulting to 1000
[  140.136721][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.143163][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.145673][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.148363][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.151958][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.155366][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.190641][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'.
[  140.210964][T13038] lo speed is unknown, defaulting to 1000
[  140.210991][T13035] lo speed is unknown, defaulting to 1000
[  140.274557][T13044] netlink: 'syz.1.3146': attribute type 1 has an invalid length.
[  140.278099][T13038] lo speed is unknown, defaulting to 1000
[  140.330007][T13038] chnl_net:caif_netlink_parms(): no params data found
[  140.417925][T13038] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.424503][T13038] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.429316][T13038] bridge_slave_0: entered allmulticast mode
[  140.433528][T13038] bridge_slave_0: entered promiscuous mode
[  140.437611][T13038] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.442558][T13038] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.446394][T13038] bridge_slave_1: entered allmulticast mode
[  140.450887][T13038] bridge_slave_1: entered promiscuous mode
[  140.473251][T13038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.478763][T13038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.483130][T13062] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  140.487452][T13062] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  140.505670][T13038] team0: Port device team_slave_0 added
[  140.508848][T13038] team0: Port device team_slave_1 added
[  140.532521][T13038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.535159][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.545671][T13038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.553459][T13038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.556368][T13038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.565482][T13038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.579037][T13066] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.586480][T13066] syzkaller0: entered promiscuous mode
[  140.588703][T13066] syzkaller0: entered allmulticast mode
[  140.594281][T13038] hsr_slave_0: entered promiscuous mode
[  140.597148][T13038] hsr_slave_1: entered promiscuous mode
[  140.599736][T13038] debugfs: 'hsr0' already exists in 'hsr'
[  140.602268][T13038] Cannot create hsr debugfs directory
[  140.606938][T13066] tipc: Resetting bearer <eth:syzkaller0>
[  140.613401][T13065] tipc: Resetting bearer <eth:syzkaller0>
[  140.618149][T13065] tipc: Disabling bearer <eth:syzkaller0>
[  140.661549][T13038] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  140.665753][T13038] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  140.669445][T13038] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  140.674407][T13038] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  140.689642][T13038] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.692730][T13038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.695883][T13038] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.699073][T13038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.720604][T13038] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.726691][  T747] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.730132][  T747] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.739835][T13038] 8021q: adding VLAN 0 to HW filter on device team0
[  140.747246][  T747] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.750220][  T747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.763094][  T747] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.766299][  T747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.880496][T13038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.915985][T13038] veth0_vlan: entered promiscuous mode
[  140.925302][T13038] veth1_vlan: entered promiscuous mode
[  140.957044][T13038] veth0_macvtap: entered promiscuous mode
[  140.962848][T13038] veth1_macvtap: entered promiscuous mode
[  140.972971][T13038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.979591][T13038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.989322][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.992741][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.996914][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  141.000622][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  141.026822][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.032356][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.060461][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.065468][T13110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3171'.
[  141.068084][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.144061][T13118] bond0: Device is already in use.
[  141.885983][T13162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  141.947281][T13162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.003495][T13162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.059126][T13162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  142.106732][ T5904] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  142.109835][ T5904] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  142.118723][ T5904] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  142.122411][ T5904] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.181494][   T54] Bluetooth: hci1: command tx timeout
[  142.647219][T13214] netlink: 'syz.0.3216': attribute type 3 has an invalid length.
[  142.649902][T13214] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3216'.
[  142.694066][T13218] lo speed is unknown, defaulting to 1000
[  142.775683][T13218] lo speed is unknown, defaulting to 1000
[  142.859950][T13230] lo speed is unknown, defaulting to 1000
[  142.959848][T13230] lo speed is unknown, defaulting to 1000
[  143.643689][T13285] lo speed is unknown, defaulting to 1000
[  143.695668][T13285] lo speed is unknown, defaulting to 1000
[  143.832699][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3254'.
[  143.903831][   T56] block nbd2: Receive control failed (result -32)
[  144.106366][T13325] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3261'.
[  144.235944][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3265'.
[  144.261761][   T54] Bluetooth: hci1: command tx timeout
[  144.327578][T13339] C: renamed from team_slave_0 (while UP)
[  144.330374][T13339] netlink: 'syz.3.3268': attribute type 3 has an invalid length.
[  144.333515][T13339] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3268'.
[  144.337996][T13339] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  144.692581][T13384] pimreg: entered allmulticast mode
[  144.697630][T13384] pimreg: left allmulticast mode
[  144.744412][T13388] netlink: 'syz.3.3291': attribute type 1 has an invalid length.
[  144.749542][T13388] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3291'.
[  144.761513][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3291'.
[  144.798209][T13392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3293'.
[  144.844522][T13400] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3298'.
[  144.853568][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3298'.
[  144.920896][T13409] netlink: 'syz.1.3301': attribute type 1 has an invalid length.
[  144.921259][T13400] syz.3.3298 (13400) used greatest stack depth: 19728 bytes left
[  144.924091][T13409] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3301'.
[  144.995551][T13421] veth1_to_batadv: Caught tx_queue_len zero misconfig
[  145.106808][T13432] .70: renamed from hsr0 (while UP)
[  145.112845][T13432] .70: entered allmulticast mode
[  145.114671][T13432] hsr_slave_0: entered allmulticast mode
[  145.120378][T13432] hsr_slave_1: entered allmulticast mode
[  145.123494][T13432] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  145.151590][T13434] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  145.152374][   T12] bond0: (slave bond_slave_0): interface is now down
[  145.164895][   T12] bond0: (slave bond_slave_1): interface is now down
[  145.173418][   T12] bond0: now running without any active interface!
[  145.433010][T13479] trusted_key: syz.1.3330 sent an empty control message without MSG_MORE.
[  145.613540][ T5880] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  146.342033][   T54] Bluetooth: hci1: command tx timeout
[  146.410661][T13512] netlink: 'syz.3.3348': attribute type 12 has an invalid length.
[  146.412965][T13508] netlink: set zone limit has 4 unknown bytes
[  146.497583][T13519] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  146.785323][   T33] audit: type=1107 audit(1756439740.110:4): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  146.928683][T13544] sctp: [Deprecated]: syz.3.3363 (pid 13544) Use of int in max_burst socket option.
[  146.928683][T13544] Use struct sctp_assoc_value instead
[  147.178331][T13560] tipc: Started in network mode
[  147.180459][T13560] tipc: Node identity 2ac8f147a439, cluster identity 4711
[  147.186244][T13560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.190212][T13560] syzkaller0: entered promiscuous mode
[  147.196974][T13560] syzkaller0: entered allmulticast mode
[  147.214123][T13562] bond0: (slave bond2): Releasing backup interface
[  147.218253][T13562] bond2: left promiscuous mode
[  147.220312][T13562] bond2: left allmulticast mode
[  147.230190][T13560] tipc: Resetting bearer <eth:syzkaller0>
[  147.255985][T13559] tipc: Resetting bearer <eth:syzkaller0>
[  147.283598][T13559] tipc: Disabling bearer <eth:syzkaller0>
[  147.315113][T13566] syzkaller1: entered promiscuous mode
[  147.317473][T13566] syzkaller1: entered allmulticast mode
[  147.345221][T13570] netlink: 'syz.0.3376': attribute type 1 has an invalid length.
[  147.378747][T13574] openvswitch: netlink: Flow key attr not present in new flow.
[  147.504050][T13593] netlink: 'syz.0.3387': attribute type 7 has an invalid length.
[  147.860370][T13633] netlink: 'syz.0.3405': attribute type 5 has an invalid length.
[  147.881151][T13636] netlink: 'syz.1.3406': attribute type 2 has an invalid length.
[  147.886121][T13636] netlink: 'syz.1.3406': attribute type 1 has an invalid length.
[  148.235467][T13687] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  148.237887][T13687] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  148.414294][T13717] team0: Unable to change to the same mode the team is in
[  148.421921][   T54] Bluetooth: hci1: command tx timeout
[  148.558367][T13731] netlink: 'syz.0.3452': attribute type 4 has an invalid length.
[  148.600267][T13735] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.640463][T13739] veth1_macvtap: left promiscuous mode
[  148.780635][T13749] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  148.785481][T13749] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  148.858210][T13757] nbd: must specify at least one socket
[  148.867047][T13759] __nla_validate_parse: 15 callbacks suppressed
[  148.867057][T13759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3464'.
[  148.878181][T13759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3464'.
[  148.947230][T13769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3468'.
[  148.966843][T13771] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  149.102644][T13787] netlink: 'syz.0.3478': attribute type 10 has an invalid length.
[  149.105264][T13787] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  149.269311][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3486'.
[  149.336684][T13810] netlink: 'syz.0.3488': attribute type 9 has an invalid length.
[  149.339771][T13810] netlink: 'syz.0.3488': attribute type 11 has an invalid length.
[  149.343522][T13810] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.3488'.
[  149.425552][T13818] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  149.434988][T13818] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  149.499607][T13830] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3498'.
[  149.504493][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3498'.
[  149.959700][T13838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3501'.
[  150.115227][T13838] lo speed is unknown, defaulting to 1000
[  150.153266][T13838] lo speed is unknown, defaulting to 1000
[  150.444387][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3514'.
[  150.570910][T13899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3528'.
[  150.649448][T13911] lo speed is unknown, defaulting to 1000
[  150.687714][T13911] lo speed is unknown, defaulting to 1000
[  151.580659][T13931] vlan4: entered promiscuous mode
[  151.583167][T13931] bridge0: entered promiscuous mode
[  151.621538][ T5231] Bluetooth: hci1: command 0x0405 tx timeout
[  151.663056][T13938] validate_nla: 6 callbacks suppressed
[  151.663066][T13938] netlink: 'syz.1.3544': attribute type 1 has an invalid length.
[  151.675101][T13938] NCSI netlink: No device for ifindex 0
[  151.688040][T13943] netlink: 'syz.3.3547': attribute type 1 has an invalid length.
[  151.877704][T13965] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  151.985390][T13976] netlink: 'syz.0.3563': attribute type 1 has an invalid length.
[  151.995413][T13977] netlink: 'syz.1.3561': attribute type 10 has an invalid length.
[  152.004775][T13976] 8021q: adding VLAN 0 to HW filter on device bond7
[  152.009138][T13977] netlink: 'syz.1.3561': attribute type 10 has an invalid length.
[  152.019186][T13977] dummy0: entered promiscuous mode
[  152.022108][T13977] dummy0: entered allmulticast mode
[  152.025410][T13977] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  152.159988][T13976] bond7: (slave ip6erspan0): making interface the new active one
[  152.177962][T13976] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link
[  152.398147][T13994] Unsupported ieee802154 address type: 0
[  152.727595][T14012] lo speed is unknown, defaulting to 1000
[  152.762946][T14015] bond0: (slave gretap0): Opening slave failed
[  152.796703][T14012] lo speed is unknown, defaulting to 1000
[  153.039067][T14044] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.043043][T14044] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  153.046002][T14044] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  153.110116][T14052] tc_dump_action: action bad kind
[  153.405557][T14103] lo speed is unknown, defaulting to 1000
[  153.456923][T14103] lo speed is unknown, defaulting to 1000
[  153.527907][T14109] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  153.538028][T14109] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  153.680530][T14117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.688491][  T125] IPVS: starting estimator thread 0...
[  153.691185][T14117] tipc: Failed to remove unknown binding: 66,1,1/0:4160825479/4160825481
[  153.697215][T14117] tipc: Failed to remove unknown binding: 66,1,1/0:4160825479/4160825481
[  153.700230][T14117] tipc: Failed to remove unknown binding: 66,1,1/0:4160825479/4160825481
[  153.782442][T14118] IPVS: using max 137 ests per chain, 328800 per kthread
[  154.071256][T14119] __nla_validate_parse: 9 callbacks suppressed
[  154.071273][T14119] netlink: 788 bytes leftover after parsing attributes in process `syz.3.3624'.
[  154.260006][T14139] syzkaller1: entered allmulticast mode
[  154.284689][T14133] netlink: 'syz.3.3630': attribute type 12 has an invalid length.
[  154.410230][T14157] netlink: 'syz.3.3641': attribute type 5 has an invalid length.
[  154.413870][T14157] netlink: 'syz.3.3641': attribute type 5 has an invalid length.
[  154.552937][T14176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.296340][T14202] netlink: 'syz.1.3660': attribute type 1 has an invalid length.
[  155.299303][T14202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3660'.
[  155.307372][T14202] netlink: 97 bytes leftover after parsing attributes in process `syz.1.3660'.
[  155.386710][T14214] only policy match revision 0 supported
[  155.386725][T14214] unable to load match
[  155.434529][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3669'.
[  155.474362][T14229] bond0: (slave ipvlan1): Error: Can not enslave VLAN challenged device to VLAN enabled bond
[  155.496707][T14235] batadv_slave_0: entered promiscuous mode
[  155.512129][T14233] batadv_slave_0: left promiscuous mode
[  155.543757][T14241] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3679'.
[  155.776467][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'.
[  155.966682][T14297] syzkaller1: entered promiscuous mode
[  155.969008][T14297] syzkaller1: entered allmulticast mode
[  155.997032][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3709'.
[  156.270418][T14330] netlink: 'syz.0.3722': attribute type 12 has an invalid length.
[  156.273950][T14330] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3722'.
[  156.476311][T14360] sctp: [Deprecated]: syz.1.3735 (pid 14360) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.476311][T14360] Use struct sctp_sack_info instead
[  156.489009][T14360] sctp: [Deprecated]: syz.1.3735 (pid 14360) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.489009][T14360] Use struct sctp_sack_info instead
[  156.499357][T14364] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3737'.
[  156.516809][T14366] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  156.556479][T14371] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  156.572129][T14371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3740'.
[  156.615345][T14381] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  156.636697][T14381] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  156.671792][   T27] wlan0: Trigger new scan to find an IBSS to join
[  156.680717][T14386] vlan0: left promiscuous mode
[  156.689953][T14386] vlan2: left promiscuous mode
[  156.692212][T14386] bond0: left promiscuous mode
[  156.694289][T14386] dummy0: left promiscuous mode
[  156.696556][T14386] vlan2: left allmulticast mode
[  156.698698][T14386] bond0: left allmulticast mode
[  156.700894][T14386] dummy0: left allmulticast mode
[  156.713391][ T5880] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.717134][ T5880] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.720798][ T5880] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.736246][ T5880] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.896372][T14401] bond0: (slave dummy0): Releasing backup interface
[  156.901545][T14401] batman_adv: batadv0: Adding interface: dummy0
[  156.904023][T14401] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.913186][T14401] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  156.929749][T14401] batman_adv: batadv0: Adding interface: ip6gretap1
[  156.932580][T14401] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.943113][T14401] batman_adv: batadv0: Interface activated: ip6gretap1
[  158.101325][T14531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.154551][T14541] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  158.286218][T14563] netlink: 'syz.0.3829': attribute type 1 has an invalid length.
[  159.061576][ T5880] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96
[  159.478266][T14651] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  159.490406][T14651] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  159.582846][T14671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.588972][T14671] __nla_validate_parse: 15 callbacks suppressed
[  159.588983][T14671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3874'.
[  159.763580][T14680] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  159.820279][T14688] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3880'.
[  159.971050][T14697] netlink: 'syz.0.3884': attribute type 4 has an invalid length.
[  159.977017][T14697] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3884'.
[  160.197787][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3902'.
[  160.313435][T14745] netlink: 'syz.0.3907': attribute type 2 has an invalid length.
[  160.316694][T14745] netlink: 'syz.0.3907': attribute type 1 has an invalid length.
[  160.319389][T14745] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3907'.
[  160.408302][T14752] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3910'.
[  160.413346][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3910'.
[  160.418846][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3910'.
[  160.444836][T14754] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  160.552516][T14758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3912'.
[  161.335934][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'.
[  161.340416][T14792] nbd: couldn't find a device at index 0
[  161.356270][ T9217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.360121][ T9217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.423162][T14804] net veth1_virt_wifi : renamed from virt_wifi0
[  161.428697][T14802] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  161.515090][T14818] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.517838][T14818] syzkaller0: entered promiscuous mode
[  161.521710][T14818] syzkaller0: entered allmulticast mode
[  161.547705][T14818] tipc: Resetting bearer <eth:syzkaller0>
[  161.557045][T14817] tipc: Resetting bearer <eth:syzkaller0>
[  161.570632][T14817] tipc: Disabling bearer <eth:syzkaller0>
[  161.702498][ T5231] Bluetooth: hci1: command 0x0405 tx timeout
[  161.729124][   T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  161.731475][T14850] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  162.116288][T14888] netlink: 'syz.3.3974': attribute type 32 has an invalid length.
[  162.139488][T14890] syzkaller0: entered promiscuous mode
[  162.142385][T14890] syzkaller0: entered allmulticast mode
[  162.349001][T14897] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  162.766642][T14922] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  162.923960][T14945] openvswitch: netlink: Missing key (keys=40, expected=80)
[  163.271599][T14974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.275206][T14974] syzkaller0: entered promiscuous mode
[  163.277622][T14974] syzkaller0: entered allmulticast mode
[  163.288926][T14974] tipc: Resetting bearer <eth:syzkaller0>
[  163.294439][T14972] tipc: Resetting bearer <eth:syzkaller0>
[  163.300124][T14972] tipc: Disabling bearer <eth:syzkaller0>
[  163.356519][T14980] lo speed is unknown, defaulting to 1000
[  163.415555][T14980] lo speed is unknown, defaulting to 1000
[  163.703589][T15000] netlink: 'syz.0.4025': attribute type 1 has an invalid length.
[  163.753738][T15000] bond8: entered promiscuous mode
[  163.755934][T15000] bond8: entered allmulticast mode
[  163.758397][T15000] 8021q: adding VLAN 0 to HW filter on device bond8
[  163.807481][T15000] bridge7: entered promiscuous mode
[  163.810195][T15000] bridge7: entered allmulticast mode
[  163.813192][T15000] bond8: (slave bridge7): Enslaving as a backup interface with an up link
[  163.862356][   T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  163.971605][ T5868] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  164.015310][T15000] team0: left allmulticast mode
[  164.017639][T15000] team0: left promiscuous mode
[  164.066739][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.070803][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.081948][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.089071][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.100236][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.114172][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.117841][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  164.121277][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  164.325049][T15043] netlink: 'syz.3.4043': attribute type 1 has an invalid length.
[  164.850090][T15096] netlink: 'syz.3.4069': attribute type 10 has an invalid length.
[  164.861547][T15096] team0: Device veth0_macvtap failed to register rx_handler
[  164.998305][T15103] __nla_validate_parse: 13 callbacks suppressed
[  164.998316][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4072'.
[  165.010073][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4072'.
[  165.388083][T15131] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4086'.
[  165.392031][T15131] tipc: Invalid UDP bearer configuration
[  165.392056][T15131] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  165.462498][T15139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4090'.
[  165.465594][T15139] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  165.471020][T15141] mac80211_hwsim hwsim6 wlan1: Caught tx_queue_len zero misconfig
[  165.689828][T15152] syzkaller0: entered promiscuous mode
[  165.692506][T15152] syzkaller0: entered allmulticast mode
[  166.021515][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  166.300630][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4124'.
[  166.305828][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4124'.
[  166.938339][T15252] netlink: 'syz.3.4142': attribute type 3 has an invalid length.
[  167.140854][T15307] sit0: Caught tx_queue_len zero misconfig
[  167.174409][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4166'.
[  167.204870][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4173'.
[  167.454305][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4189'.
[  167.458574][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4189'.
[  167.546130][T15368] lo speed is unknown, defaulting to 1000
[  167.614708][T15368] lo speed is unknown, defaulting to 1000
[  167.897036][T15402] lo speed is unknown, defaulting to 1000
[  167.980552][T15402] lo speed is unknown, defaulting to 1000
[  168.236658][T15438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.240219][T15438] syzkaller0: entered promiscuous mode
[  168.244097][T15438] syzkaller0: entered allmulticast mode
[  168.255790][T15438] tipc: Resetting bearer <eth:syzkaller0>
[  168.259932][T15437] tipc: Resetting bearer <eth:syzkaller0>
[  168.265892][T15437] tipc: Disabling bearer <eth:syzkaller0>
[  168.416588][T15458] pim6reg1: entered allmulticast mode
[  168.479177][T15464] netlink: 'syz.1.4239': attribute type 1 has an invalid length.
[  168.484055][T15464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.801262][T15504] netlink: 'syz.1.4259': attribute type 2 has an invalid length.
[  169.024172][T15526] netlink: 'syz.0.4270': attribute type 3 has an invalid length.
[  169.027436][T15526] netlink: 'syz.0.4270': attribute type 1 has an invalid length.
[  169.049237][T15539] netlink: 'syz.0.4276': attribute type 1 has an invalid length.
[  169.121768][T15550] netlink: 'syz.3.4281': attribute type 3 has an invalid length.
[  170.375980][T15673] sctp: [Deprecated]: syz.3.4326 (pid 15673) Use of int in maxseg socket option.
[  170.375980][T15673] Use struct sctp_assoc_value instead
[  170.532607][T15703] __nla_validate_parse: 7 callbacks suppressed
[  170.532622][T15703] netlink: 516 bytes leftover after parsing attributes in process `syz.3.4342'.
[  170.563354][T15709] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4345'.
[  170.566849][T15709] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4345'.
[  170.570139][T15709] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4345'.
[  170.637436][T15719] syzkaller1: entered promiscuous mode
[  170.639335][T15719] syzkaller1: entered allmulticast mode
[  170.812435][T15742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4361'.
[  170.924568][T15754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.927882][T15754] syzkaller0: entered promiscuous mode
[  170.930231][T15754] syzkaller0: entered allmulticast mode
[  170.936934][T15754] tipc: Resetting bearer <eth:syzkaller0>
[  170.940470][T15753] tipc: Resetting bearer <eth:syzkaller0>
[  170.943926][T15753] tipc: Disabling bearer <eth:syzkaller0>
[  170.990713][T15761] sctp: [Deprecated]: syz.3.4370 (pid 15761) Use of int in max_burst socket option deprecated.
[  170.990713][T15761] Use struct sctp_assoc_value instead
[  171.373348][T15772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4375'.
[  171.427211][T15776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4377'.
[  171.584360][T15784] bridge8: entered promiscuous mode
[  171.674944][T15788] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  171.677893][T15788] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  171.706576][T15790] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4384'.
[  171.848438][T15794] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  172.106189][T15824] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4400'.
[  172.202383][T15834] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.227585][T15836] lo speed is unknown, defaulting to 1000
[  172.234499][T15838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4407'.
[  172.267764][T15836] lo speed is unknown, defaulting to 1000
[  172.853129][T15876] lo speed is unknown, defaulting to 1000
[  172.887717][T15876] lo speed is unknown, defaulting to 1000
[  173.537247][T15902] 8021q: adding VLAN 0 to HW filter on device bond1
[  173.549479][T15902] macsec1: entered promiscuous mode
[  173.551857][T15902] bond1: entered promiscuous mode
[  173.553871][T15902] macsec1: entered allmulticast mode
[  173.556047][T15902] bond1: entered allmulticast mode
[  173.560831][T15902] bond1: left allmulticast mode
[  173.562853][T15902] bond1: left promiscuous mode
[  173.822973][T15914] block nbd3: server does not support multiple connections per device.
[  173.830754][T15914] block nbd3: shutting down sockets
[  173.977274][T15933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.004121][T15936] netlink: 'syz.1.4451': attribute type 10 has an invalid length.
[  174.158789][T15953] netlink: 'syz.0.4459': attribute type 1 has an invalid length.
[  174.261501][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  174.345086][ T5231] Bluetooth: hci1: command 0x0405 tx timeout
[  174.548923][T15983] sctp: [Deprecated]: syz.3.4472 (pid 15983) Use of int in max_burst socket option.
[  174.548923][T15983] Use struct sctp_assoc_value instead
[  175.175227][T16057] dummy0: entered allmulticast mode
[  175.177446][T16056] dummy0: left allmulticast mode
[  175.232987][T16065] tap0: tun_chr_ioctl cmd 1074025678
[  175.235515][T16065] tap0: group set to 0
[  175.340601][T16079] netlink: 'syz.1.4519': attribute type 13 has an invalid length.
[  175.349073][T16079] netlink: 'syz.1.4519': attribute type 17 has an invalid length.
[  175.383101][T16079] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.387379][T16079] batman_adv: batadv0: Interface activated: dummy0
[  175.393103][T16079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.398902][   T10] lo speed is unknown, defaulting to 1000
[  175.404679][   T10] syz0: Port: 1 Link ACTIVE
[  175.406281][   T10] lo speed is unknown, defaulting to 1000
[  175.462689][T16079] lo speed is unknown, defaulting to 1000
[  175.492954][T16079] lo speed is unknown, defaulting to 1000
[  175.552434][T16091] lo speed is unknown, defaulting to 1000
[  175.577307][T16079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  175.598966][T16091] lo speed is unknown, defaulting to 1000
[  175.694956][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  175.704565][T16110] netlink: 'syz.0.4530': attribute type 2 has an invalid length.
[  175.707169][T16110] __nla_validate_parse: 19 callbacks suppressed
[  175.707176][T16110] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.4530'.
[  176.325466][   T33] audit: type=1800 audit(1756439769.650:5): pid=16123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4536" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=7116 res=0 errno=0
[  176.354810][T16125] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4537'.
[  176.359634][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4537'.
[  176.586859][T16144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4545'.
[  176.587088][T16145] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4546'.
[  176.659941][T16154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4550'.
[  176.689242][T16158] ksmbd: Unknown IPC event: 3, ignore.
[  176.868284][T16170] netlink: 'syz.0.4557': attribute type 3 has an invalid length.
[  177.109854][T16186] netlink: 'syz.1.4565': attribute type 12 has an invalid length.
[  177.113080][T16186] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4565'.
[  177.146282][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  177.161668][   T10] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[  177.168585][   T10] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  177.253093][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4574'.
[  177.293847][T16216] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  177.403739][T16237] netlink: 'syz.0.4585': attribute type 9 has an invalid length.
[  177.422551][T16241] netlink: 'syz.0.4587': attribute type 22 has an invalid length.
[  177.425409][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4587'.
[  177.430780][T16243] netlink: 'syz.1.4588': attribute type 3 has an invalid length.
[  177.433469][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4587'.
[  177.433650][ T5880] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.439750][ T5880] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.449337][ T5880] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.461822][ T5880] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.025068][T16344] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  178.085799][   T33] audit: type=1800 audit(1756439771.410:6): pid=16358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4635" name="memory.events" dev="tmpfs" ino=2500 res=0 errno=0
[  178.095470][   T33] audit: type=1804 audit(1756439771.420:7): pid=16358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4635" name="/newroot/492/memory.events" dev="tmpfs" ino=2500 res=1 errno=0
[  178.146745][T16364] nbd: couldn't find a device at index 0
[  178.170573][T16366] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  178.200961][T16370] veth1: Caught tx_queue_len zero misconfig
[  178.398810][T16390] dvmrp8: entered allmulticast mode
[  178.410801][T16389] dvmrp8: left allmulticast mode
[  178.614727][T16413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.617621][T16413] syzkaller0: entered promiscuous mode
[  178.619845][T16413] syzkaller0: entered allmulticast mode
[  178.626280][T16413] tipc: Resetting bearer <eth:syzkaller0>
[  178.630185][T16413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.633752][T16413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.640701][T16412] tipc: Resetting bearer <eth:syzkaller0>
[  178.645466][T16412] tipc: Disabling bearer <eth:syzkaller0>
[  178.743111][T16429] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.965130][T16449] 8021q: adding VLAN 0 to HW filter on device bond4
[  178.976024][T16449] veth11: entered promiscuous mode
[  178.983713][T16449] batman_adv: batadv0: Interface deactivated: dummy0
[  178.987008][T16449] batman_adv: batadv0: Removing interface: dummy0
[  179.000481][T16449] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  179.004127][T16449] batman_adv: batadv0: Removing interface: ip6gretap1
[  179.073449][T16468] validate_nla: 3 callbacks suppressed
[  179.073465][T16468] netlink: 'syz.3.4681': attribute type 7 has an invalid length.
[  179.088711][T16468] : entered promiscuous mode
[  179.107472][T16470] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  179.185939][T16478] batman_adv: batadv0: Adding interface: ipvlan2
[  179.201430][T16478] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.216472][T16478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.221090][T16478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.229811][T16478] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  179.540211][T16519] netlink: 'syz.3.4705': attribute type 1 has an invalid length.
[  180.611255][T16611] gretap1: entered promiscuous mode
[  180.633360][T16611] netlink: 'syz.1.4749': attribute type 7 has an invalid length.
[  180.681232][T16611] lo speed is unknown, defaulting to 1000
[  180.762712][T16611] lo speed is unknown, defaulting to 1000
[  180.805696][T16635] netlink: 'syz.0.4758': attribute type 30 has an invalid length.
[  180.966649][T16663] __nla_validate_parse: 17 callbacks suppressed
[  180.966659][T16663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4772'.
[  180.973475][T16663] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5)
[  181.123314][T16680] lo speed is unknown, defaulting to 1000
[  181.218187][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4785'.
[  181.224208][T16680] lo speed is unknown, defaulting to 1000
[  181.226179][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4785'.
[  181.525063][T16712] "syz.0.4793" (16712) uses obsolete ecb(arc4) skcipher
[  181.751630][T16747] lo speed is unknown, defaulting to 1000
[  181.805518][T16747] lo speed is unknown, defaulting to 1000
[  182.159350][T16768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.223509][T16768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.290763][T16768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.349237][T16768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.413356][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.420531][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.433203][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.436974][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.737113][T16792] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4822'.
[  182.751966][T16792] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4822'.
[  182.893092][T16810] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4831'.
[  182.924047][T16815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4833'.
[  183.037875][T16819] pimreg: entered allmulticast mode
[  183.054326][T16819] dvmrp0: left allmulticast mode
[  183.056945][T16819] pimreg: left allmulticast mode
[  183.758938][T16821] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  183.773055][T16821] bond7: (slave ip6erspan0): Releasing active interface
[  183.788329][T16821] bond8: (slave bridge7): Removing an active aggregator
[  183.791250][T16821] bond8: (slave bridge7): Releasing backup interface
[  183.795326][T16821] bridge7: left promiscuous mode
[  183.797412][T16821] bridge7: left allmulticast mode
[  183.806259][T16821] netlink: 'syz.0.4835': attribute type 10 has an invalid length.
[  183.809405][T16821] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  183.816391][T16821] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  183.821746][T16821] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  183.829056][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4838'.
[  183.837213][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.840827][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.841917][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4838'.
[  183.848404][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.852352][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.894631][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4841'.
[  183.939681][T16839] netlink: 'syz.3.4843': attribute type 15 has an invalid length.
[  184.133814][T16867] ==================================================================
[  184.136883][T16867] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  184.139711][T16867] Read of size 4 at addr ffff88803e5389c4 by task syz.1.4855/16867
[  184.143486][T16867] 
[  184.144347][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.1.4855 Not tainted syzkaller #0 PREEMPT(full) 
[  184.144359][T16867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.144365][T16867] Call Trace:
[  184.144369][T16867]  <TASK>
[  184.144374][T16867]  dump_stack_lvl+0x189/0x250
[  184.144389][T16867]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.144398][T16867]  ? lock_release+0x4b/0x3e0
[  184.144411][T16867]  ? __virt_addr_valid+0x4a5/0x5c0
[  184.144421][T16867]  print_report+0xca/0x240
[  184.144429][T16867]  ? xfrm_alloc_spi+0x570/0xf30
[  184.144437][T16867]  kasan_report+0x118/0x150
[  184.144447][T16867]  ? lock_acquire+0x5f/0x360
[  184.144457][T16867]  ? xfrm_alloc_spi+0x570/0xf30
[  184.144467][T16867]  xfrm_alloc_spi+0x570/0xf30
[  184.144475][T16867]  ? xfrm_alloc_spi+0x2a0/0xf30
[  184.144486][T16867]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  184.144494][T16867]  ? xfrm_find_acq+0x87/0xa0
[  184.144503][T16867]  xfrm_alloc_userspi+0x70b/0xc90
[  184.144514][T16867]  ? apparmor_capable+0x137/0x1b0
[  184.144524][T16867]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  184.144534][T16867]  ? __nla_parse+0x40/0x60
[  184.144573][T16867]  xfrm_user_rcv_msg+0x7a3/0xab0
[  184.144589][T16867]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  184.144608][T16867]  ? __pfx___mutex_trylock_common+0x10/0x10
[  184.144617][T16867]  ? rcu_is_watching+0x15/0xb0
[  184.144625][T16867]  ? trace_contention_end+0x39/0x120
[  184.144633][T16867]  ? __mutex_lock+0x335/0x1350
[  184.144641][T16867]  netlink_rcv_skb+0x208/0x470
[  184.144653][T16867]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  184.144661][T16867]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.144674][T16867]  ? lock_release+0x4b/0x3e0
[  184.144684][T16867]  ? netlink_deliver_tap+0x2e/0x1b0
[  184.144695][T16867]  xfrm_netlink_rcv+0x79/0x90
[  184.144703][T16867]  netlink_unicast+0x82f/0x9e0
[  184.144714][T16867]  ? __pfx_netlink_unicast+0x10/0x10
[  184.144723][T16867]  ? netlink_sendmsg+0x642/0xb30
[  184.144729][T16867]  ? skb_put+0x11b/0x210
[  184.144737][T16867]  netlink_sendmsg+0x805/0xb30
[  184.144744][T16867]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.144751][T16867]  ? futex_unqueue+0x22/0x240
[  184.144759][T16867]  ? aa_sock_msg_perm+0xf1/0x1d0
[  184.144766][T16867]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.144774][T16867]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.144780][T16867]  __sock_sendmsg+0x21c/0x270
[  184.144790][T16867]  ____sys_sendmsg+0x505/0x830
[  184.144798][T16867]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.144807][T16867]  ? import_iovec+0x74/0xa0
[  184.144816][T16867]  ___sys_sendmsg+0x21f/0x2a0
[  184.144823][T16867]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.144831][T16867]  ? futex_wait+0x285/0x360
[  184.144846][T16867]  ? __fget_files+0x2a/0x420
[  184.144852][T16867]  ? __fget_files+0x3a0/0x420
[  184.144859][T16867]  __x64_sys_sendmsg+0x19b/0x260
[  184.144867][T16867]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.144876][T16867]  ? rcu_is_watching+0x15/0xb0
[  184.144883][T16867]  ? rcu_is_watching+0x15/0xb0
[  184.144891][T16867]  do_syscall_64+0xfa/0x3b0
[  184.144898][T16867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.144905][T16867]  ? exc_page_fault+0x9f/0xf0
[  184.144915][T16867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.144923][T16867] RIP: 0033:0x7ffb1838ebe9
[  184.144931][T16867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.144939][T16867] RSP: 002b:00007ffb165f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.144947][T16867] RAX: ffffffffffffffda RBX: 00007ffb185b5fa0 RCX: 00007ffb1838ebe9
[  184.144955][T16867] RDX: 000000000400c8c0 RSI: 0000200000000200 RDI: 0000000000000004
[  184.144963][T16867] RBP: 00007ffb18411e19 R08: 0000000000000000 R09: 0000000000000000
[  184.144970][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.144976][T16867] R13: 00007ffb185b6038 R14: 00007ffb185b5fa0 R15: 00007ffdbc037328
[  184.144989][T16867]  </TASK>
[  184.144992][T16867] 
[  184.285072][T16867] Allocated by task 13973:
[  184.286770][T16867]  kasan_save_track+0x3e/0x80
[  184.288628][T16867]  __kasan_slab_alloc+0x6c/0x80
[  184.290435][T16867]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  184.292479][T16867]  xfrm_state_alloc+0x24/0x2f0
[  184.294294][T16867]  xfrm_state_find+0x37d4/0x5400
[  184.296099][T16867]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  184.298206][T16867]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  184.300191][T16867]  xfrm_lookup_route+0x3c/0x1c0
[  184.301776][T16867]  rawv6_sendmsg+0xdab/0x1820
[  184.303313][T16867]  __sock_sendmsg+0x19c/0x270
[  184.304858][T16867]  ____sys_sendmsg+0x52d/0x830
[  184.306438][T16867]  ___sys_sendmsg+0x21f/0x2a0
[  184.308039][T16867]  __sys_sendmmsg+0x227/0x430
[  184.309799][T16867]  __x64_sys_sendmmsg+0xa0/0xc0
[  184.311445][T16867]  do_syscall_64+0xfa/0x3b0
[  184.313033][T16867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.315158][T16867] 
[  184.316065][T16867] Freed by task 10:
[  184.317580][T16867]  kasan_save_track+0x3e/0x80
[  184.319283][T16867]  kasan_save_free_info+0x46/0x50
[  184.321101][T16867]  __kasan_slab_free+0x5b/0x80
[  184.322677][T16867]  kmem_cache_free+0x18f/0x400
[  184.324452][T16867]  xfrm_state_gc_task+0x52d/0x6b0
[  184.326113][T16867]  process_scheduled_works+0xae1/0x17b0
[  184.328086][T16867]  worker_thread+0x8a0/0xda0
[  184.329712][T16867]  kthread+0x711/0x8a0
[  184.331200][T16867]  ret_from_fork+0x3fc/0x770
[  184.332838][T16867]  ret_from_fork_asm+0x1a/0x30
[  184.334558][T16867] 
[  184.335394][T16867] The buggy address belongs to the object at ffff88803e538900
[  184.335394][T16867]  which belongs to the cache xfrm_state of size 928
[  184.340504][T16867] The buggy address is located 196 bytes inside of
[  184.340504][T16867]  freed 928-byte region [ffff88803e538900, ffff88803e538ca0)
[  184.345566][T16867] 
[  184.346389][T16867] The buggy address belongs to the physical page:
[  184.348678][T16867] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803e539b00 pfn:0x3e538
[  184.352005][T16867] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  184.355064][T16867] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  184.357823][T16867] page_type: f5(slab)
[  184.359239][T16867] raw: 00fff00000000040 ffff888104a4fc80 ffffea00007e4500 0000000000000003
[  184.362385][T16867] raw: ffff88803e539b00 00000000000e000d 00000000f5000000 0000000000000000
[  184.365332][T16867] head: 00fff00000000040 ffff888104a4fc80 ffffea00007e4500 0000000000000003
[  184.368456][T16867] head: ffff88803e539b00 00000000000e000d 00000000f5000000 0000000000000000
[  184.371684][T16867] head: 00fff00000000002 ffffea0000f94e01 00000000ffffffff 00000000ffffffff
[  184.374924][T16867] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  184.377835][T16867] page dumped because: kasan: bad access detected
[  184.380084][T16867] page_owner tracks the page as allocated
[  184.382007][T16867] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6851, tgid 6849 (syz.1.425), ts 60530220562, free_ts 60412721756
[  184.388522][T16867]  post_alloc_hook+0x240/0x2a0
[  184.390236][T16867]  get_page_from_freelist+0x21e4/0x22c0
[  184.392197][T16867]  __alloc_frozen_pages_noprof+0x181/0x370
[  184.394196][T16867]  alloc_pages_mpol+0x232/0x4a0
[  184.395853][T16867]  allocate_slab+0x8a/0x370
[  184.397456][T16867]  ___slab_alloc+0xbeb/0x1410
[  184.399093][T16867]  kmem_cache_alloc_noprof+0x283/0x3c0
[  184.401002][T16867]  xfrm_state_alloc+0x24/0x2f0
[  184.402714][T16867]  __find_acq_core+0x8a7/0x1c00
[  184.404583][T16867]  xfrm_find_acq+0x78/0xa0
[  184.406179][T16867]  xfrm_alloc_userspi+0x6b3/0xc90
[  184.407909][T16867]  xfrm_user_rcv_msg+0x7a3/0xab0
[  184.409732][T16867]  netlink_rcv_skb+0x208/0x470
[  184.411402][T16867]  xfrm_netlink_rcv+0x79/0x90
[  184.413067][T16867]  netlink_unicast+0x82f/0x9e0
[  184.414970][T16867]  netlink_sendmsg+0x805/0xb30
[  184.416957][T16867] page last free pid 6837 tgid 6836 stack trace:
[  184.419451][T16867]  __free_frozen_pages+0xbc4/0xd30
[  184.421367][T16867]  stack_depot_save_flags+0x436/0x860
[  184.423383][T16867]  kasan_save_track+0x4f/0x80
[  184.424958][T16867]  __kasan_slab_alloc+0x6c/0x80
[  184.426685][T16867]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  184.428738][T16867]  xas_create+0x116b/0x1b90
[  184.430394][T16867]  xas_store+0x95/0x1880
[  184.431836][T16867]  __xa_store+0xe9/0x210
[  184.433392][T16867]  ref_tracker_dir_debugfs+0x1c4/0x270
[  184.435264][T16867]  alloc_netdev_mqs+0x26f/0x11b0
[  184.437282][T16867]  br_add_bridge+0x39/0xf0
[  184.439209][T16867]  br_ioctl_stub+0x526/0xc80
[  184.441173][T16867]  sock_ioctl+0x4d8/0x790
[  184.443061][T16867]  __se_sys_ioctl+0xfc/0x170
[  184.445069][T16867]  do_syscall_64+0xfa/0x3b0
[  184.447048][T16867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.449523][T16867] 
[  184.450560][T16867] Memory state around the buggy address:
[  184.452852][T16867]  ffff88803e538880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  184.456091][T16867]  ffff88803e538900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  184.458776][T16867] >ffff88803e538980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  184.461877][T16867]                                            ^
[  184.464379][T16867]  ffff88803e538a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  184.467323][T16867]  ffff88803e538a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  184.470083][T16867] ==================================================================
[  184.473000][T16867] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  184.475515][T16867] CPU: 0 UID: 0 PID: 16867 Comm: syz.1.4855 Not tainted syzkaller #0 PREEMPT(full) 
[  184.478607][T16867] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.482228][T16867] Call Trace:
[  184.483588][T16867]  <TASK>
[  184.484779][T16867]  dump_stack_lvl+0x99/0x250
[  184.486788][T16867]  ? __asan_memcpy+0x40/0x70
[  184.488812][T16867]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.491023][T16867]  ? __pfx__printk+0x10/0x10
[  184.493021][T16867]  vpanic+0x281/0x750
[  184.494647][T16867]  ? __pfx_vpanic+0x10/0x10
[  184.496465][T16867]  ? rcu_is_watching+0x15/0xb0
[  184.498411][T16867]  panic+0xb9/0xc0
[  184.499723][T16867]  ? __pfx_panic+0x10/0x10
[  184.501251][T16867]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  184.503252][T16867]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.505237][T16867]  ? xfrm_alloc_spi+0x570/0xf30
[  184.506896][T16867]  check_panic_on_warn+0x89/0xb0
[  184.508841][T16867]  ? xfrm_alloc_spi+0x570/0xf30
[  184.510511][T16867]  end_report+0x78/0x160
[  184.511953][T16867]  kasan_report+0x129/0x150
[  184.513459][T16867]  ? lock_acquire+0x5f/0x360
[  184.514994][T16867]  ? xfrm_alloc_spi+0x570/0xf30
[  184.516914][T16867]  xfrm_alloc_spi+0x570/0xf30
[  184.518482][T16867]  ? xfrm_alloc_spi+0x2a0/0xf30
[  184.520128][T16867]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  184.522299][T16867]  ? xfrm_find_acq+0x87/0xa0
[  184.524206][T16867]  xfrm_alloc_userspi+0x70b/0xc90
[  184.526173][T16867]  ? apparmor_capable+0x137/0x1b0
[  184.528183][T16867]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  184.530148][T16867]  ? __nla_parse+0x40/0x60
[  184.531590][T16867]  xfrm_user_rcv_msg+0x7a3/0xab0
[  184.533249][T16867]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  184.535269][T16867]  ? __pfx___mutex_trylock_common+0x10/0x10
[  184.537528][T16867]  ? rcu_is_watching+0x15/0xb0
[  184.539333][T16867]  ? trace_contention_end+0x39/0x120
[  184.541122][T16867]  ? __mutex_lock+0x335/0x1350
[  184.542835][T16867]  netlink_rcv_skb+0x208/0x470
[  184.544472][T16867]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  184.546322][T16867]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  184.548153][T16867]  ? lock_release+0x4b/0x3e0
[  184.549802][T16867]  ? netlink_deliver_tap+0x2e/0x1b0
[  184.551604][T16867]  xfrm_netlink_rcv+0x79/0x90
[  184.553380][T16867]  netlink_unicast+0x82f/0x9e0
[  184.555143][T16867]  ? __pfx_netlink_unicast+0x10/0x10
[  184.557364][T16867]  ? netlink_sendmsg+0x642/0xb30
[  184.559459][T16867]  ? skb_put+0x11b/0x210
[  184.561282][T16867]  netlink_sendmsg+0x805/0xb30
[  184.563320][T16867]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.565599][T16867]  ? futex_unqueue+0x22/0x240
[  184.567578][T16867]  ? aa_sock_msg_perm+0xf1/0x1d0
[  184.569558][T16867]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  184.571506][T16867]  ? __pfx_netlink_sendmsg+0x10/0x10
[  184.573734][T16867]  __sock_sendmsg+0x21c/0x270
[  184.575760][T16867]  ____sys_sendmsg+0x505/0x830
[  184.577798][T16867]  ? __pfx_____sys_sendmsg+0x10/0x10
[  184.580087][T16867]  ? import_iovec+0x74/0xa0
[  184.582032][T16867]  ___sys_sendmsg+0x21f/0x2a0
[  184.584047][T16867]  ? __pfx____sys_sendmsg+0x10/0x10
[  184.586280][T16867]  ? futex_wait+0x285/0x360
[  184.588212][T16867]  ? __fget_files+0x2a/0x420
[  184.590176][T16867]  ? __fget_files+0x3a0/0x420
[  184.592190][T16867]  __x64_sys_sendmsg+0x19b/0x260
[  184.594265][T16867]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  184.596650][T16867]  ? rcu_is_watching+0x15/0xb0
[  184.598725][T16867]  ? rcu_is_watching+0x15/0xb0
[  184.600754][T16867]  do_syscall_64+0xfa/0x3b0
[  184.602658][T16867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.605204][T16867]  ? exc_page_fault+0x9f/0xf0
[  184.607150][T16867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.609533][T16867] RIP: 0033:0x7ffb1838ebe9
[  184.611396][T16867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.619378][T16867] RSP: 002b:00007ffb165f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  184.622840][T16867] RAX: ffffffffffffffda RBX: 00007ffb185b5fa0 RCX: 00007ffb1838ebe9
[  184.626121][T16867] RDX: 000000000400c8c0 RSI: 0000200000000200 RDI: 0000000000000004
[  184.629378][T16867] RBP: 00007ffb18411e19 R08: 0000000000000000 R09: 0000000000000000
[  184.632862][T16867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.636165][T16867] R13: 00007ffb185b6038 R14: 00007ffb185b5fa0 R15: 00007ffdbc037328
[  184.639419][T16867]  </TASK>
[  184.641516][T16867] Kernel Offset: disabled
[  184.643382][T16867] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:56:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001183 RDI=0000000000001184 RBP=00000000000003f8 RSP=ffffc900068869f0
R8 =ffff8880209d0237 R9 =1ffff1100413a046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb8ef R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ffb165f66c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000200 CR3=00000001257ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ffb18587498 00007ffb18587470 XMM03=00007ffb185874a8 00007ffb185874a0
XMM04=00007ffb190ed100 00007ffb18587460 XMM05=00007ffb18587478 00007ffb185874c0
XMM06=00007ffb185874b8 00007ffb185874b0 XMM07=00007ffb185874a8 00007ffb185874a0
XMM08=0000000000000000 00007ffb18412ee7 XMM09=0000000000000000 00007ffb18412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e51eff8ebe6fc600 RBX=ffffffff819683b8 RCX=e51eff8ebe6fc600 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38530 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b79f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffda16bae48 CR3=0000000100ad0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003072 656c6c616b7a7973
XMM02=0000000600050008 0000000000003072 XMM03=656c6c616b7a7973 0004001400000070
XMM04=00007fbe43aed100 00007fbe42f87460 XMM05=00007fbe42f87478 00007fbe42f874c0
XMM06=00007fbe42f874b8 00007fbe42f874b0 XMM07=00007fbe42f874a8 00007fbe42f874a0
XMM08=0000000000000000 00007fbe42e12ee7 XMM09=0000000000000000 00007fbe42e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
