last executing test programs:

1.178438806s ago: executing program 0 (id=1816):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[], 0x200}}], 0x1, 0x4008084)

998.809842ms ago: executing program 1 (id=1823):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

937.387705ms ago: executing program 2 (id=1824):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x40000, 0xffffffff}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)

937.083625ms ago: executing program 1 (id=1825):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, <r1=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x2f, 0x2028, 0x4, @void, @void, @value=r1}, 0x20)

936.94927ms ago: executing program 2 (id=1826):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x0)

936.737477ms ago: executing program 1 (id=1827):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc)

866.538001ms ago: executing program 2 (id=1828):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)

866.403313ms ago: executing program 1 (id=1829):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c)

865.455314ms ago: executing program 2 (id=1830):
syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0xe, 0x1, "2025b07f3c58"}]}}}}}}, 0x0)

818.757027ms ago: executing program 2 (id=1831):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0xd8a1}], 0x1c)

818.4663ms ago: executing program 2 (id=1832):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000340)={0x7})
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

278.538064ms ago: executing program 0 (id=1833):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x0, 0x0, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c)

209.418343ms ago: executing program 0 (id=1834):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000270001000000000000000000030100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0)

209.200463ms ago: executing program 0 (id=1835):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000640)={0x48, r1, 0x109, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

147.759616ms ago: executing program 0 (id=1836):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

147.410355ms ago: executing program 0 (id=1837):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)

277.294µs ago: executing program 1 (id=1838):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x14, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080)

0s ago: executing program 1 (id=1839):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d08510000006000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b640868603000150001803fb3ebf5f9cbd1185eeba9c895d0e5001a00000079f0586257fb94c1a1ed4c04ba014f097b163578b6ca9105c08bc32cc1bfd91b2702deba9d466d6cf5a350d807cd3e5962fcca334589c433a13b5cd1bc32fde4d0badf6c05864696add646e8440cf29a7ad6124d33e7dba9a186cdb6fd5bc4916aeb98d462b9b71f2c8108bf02de795cda146716b1ab517bef24d1b0440d952e65418dad0ff9aee429d1f7168412caad44a439884ab133cd93640c032367d223c8f6d3fb3effccf836c984e38b74a72cf1e83fe0f6f5"], 0x3c}], 0x1}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x6, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0xd}, 0x60)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000780)={0x8000000000000000, 0xfffffffffffffff8})
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000001900)={0x0, 0x16, 0x4, 0x1000, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x10)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62)
sendmmsg(r0, &(0x7f0000000700)=[{{&(0x7f00000002c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="45ff4f0e9b37cb9ebb9d1d913b339fc812e9b983e160ed9351f408482e0623b356ae03449cddca950df7f1a0a745650b49c5fe45b28f68f760abfb3d47a21e7d4a416a9e46680db7925db120eae989a7e0345369549121bc285eb3defb8bb7a52973d77dfbeca665061887a92b8999279273d54420967b38c4a682f3a30e9dac9213dcd786d7ac95917be449cb0a27afc965be5a7a91806159987b7ba5c0fda0bee6364ed16094d02504a644a783b7fc91c1a9ac059d03d1fabfe8ba3eca22894199f13ad5042e9dd6a66056bac4b424f0", 0xd1}], 0x1}}, {{&(0x7f0000000480)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(serpent-generic)\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000500)="012cad1da3eb4b15e91370cc7e6eed523775f74d2f6599ecde8580f9fb2db28c6b83bf7207d78aa7f24f2079832a0662575b1a590d5b3ab0080e5644383fa02f27f6b450b89900dced2e4670204594fee31d4cd0dccf480289e2c553adf0aa221108f5375f5d60da7d5f0302ed5f4b5d8b777c1a21c7e7e85ad1fa2153f61e537c580c028a7ff4cad0d9e2376985c8608342ad8ab4e10bcaa6698c983759be3ca423e7312a8d830304c8e68724b231a048b9ff22f96bf12cc0120501d02df6c0d9428b5472dbfdc630f29c4bd917e303f5ac", 0xd2}], 0x1, &(0x7f0000000640)=[{0x98, 0x118, 0x5, "a4bc1b4c2e9fbcc50adfaa0ae12a2979d99bc612f217c629c838c3a6a461bc6e9efaec90e1d0f9c699819ea2abbd233063e5ccd9f2c1dc7496c61ce103308a7210ba0998bf430260d8ebaa7eb6c280103d0112afb05a47b8819df420bcf51e4459b7bbd51abd1b4579f34cae728852a5af5b4781255cdc2340b982de471bcce3c740b9"}], 0x98}}], 0x2, 0x410)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:37457' (ED25519) to the list of known hosts.
syzkaller login: [   55.917807][ T5833] cgroup: Unknown subsys name 'net'
[   56.081781][ T5833] cgroup: Unknown subsys name 'cpuset'
[   56.085472][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.440009][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.142365][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.145946][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.149758][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.153560][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.157344][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.159735][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.166033][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.170242][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.173019][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.175900][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.210769][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.213597][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.216579][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.219849][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.222789][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.446640][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   62.483963][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   62.506078][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   62.587442][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.590336][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.592776][ T5850] bridge_slave_0: entered allmulticast mode
[   62.595481][ T5850] bridge_slave_0: entered promiscuous mode
[   62.612075][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.614635][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.617041][ T5850] bridge_slave_1: entered allmulticast mode
[   62.621093][ T5850] bridge_slave_1: entered promiscuous mode
[   62.675760][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.678517][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.681897][ T5860] bridge_slave_0: entered allmulticast mode
[   62.685624][ T5860] bridge_slave_0: entered promiscuous mode
[   62.708859][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.711816][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.714138][ T5860] bridge_slave_1: entered allmulticast mode
[   62.717672][ T5860] bridge_slave_1: entered promiscuous mode
[   62.731038][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.733558][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.736134][ T5852] bridge_slave_0: entered allmulticast mode
[   62.739288][ T5852] bridge_slave_0: entered promiscuous mode
[   62.744987][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.765793][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.769086][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.771374][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.773894][ T5852] bridge_slave_1: entered allmulticast mode
[   62.777119][ T5852] bridge_slave_1: entered promiscuous mode
[   62.789139][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.793734][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.835140][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.849269][ T5850] team0: Port device team_slave_0 added
[   62.852629][ T5860] team0: Port device team_slave_0 added
[   62.857336][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.863499][ T5850] team0: Port device team_slave_1 added
[   62.880584][ T5860] team0: Port device team_slave_1 added
[   62.937892][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.941759][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.951531][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.956510][ T5852] team0: Port device team_slave_0 added
[   62.960521][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.963319][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.975582][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.981365][ T5852] team0: Port device team_slave_1 added
[   62.984754][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.987648][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.999311][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.003651][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.005964][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.014689][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.048440][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.050831][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.060695][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.086779][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.089491][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.098123][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.128116][ T5860] hsr_slave_0: entered promiscuous mode
[   63.131388][ T5860] hsr_slave_1: entered promiscuous mode
[   63.147130][ T5850] hsr_slave_0: entered promiscuous mode
[   63.150143][ T5850] hsr_slave_1: entered promiscuous mode
[   63.152741][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   63.154777][ T5850] Cannot create hsr debugfs directory
[   63.181668][ T5852] hsr_slave_0: entered promiscuous mode
[   63.184648][ T5852] hsr_slave_1: entered promiscuous mode
[   63.187475][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   63.190051][ T5852] Cannot create hsr debugfs directory
[   63.534328][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.544879][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.551842][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.565253][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.612899][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.618463][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.633321][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.649882][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.688748][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.701690][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.710028][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.720090][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.803074][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.826101][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.843095][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   63.856553][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.858920][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.875406][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   63.881218][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.883855][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.900893][  T976] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.903289][  T976] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.914599][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.926503][  T976] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.928890][  T976] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.973385][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   63.996689][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.999414][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.035570][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.038665][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.062695][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.066930][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.228796][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.240262][ T5239] Bluetooth: hci2: command tx timeout
[   64.242703][ T5239] Bluetooth: hci1: command tx timeout
[   64.249702][ T5858] Bluetooth: hci0: command tx timeout
[   64.272525][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.311266][ T5860] veth0_vlan: entered promiscuous mode
[   64.335370][ T5860] veth1_vlan: entered promiscuous mode
[   64.345753][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.394794][ T5852] veth0_vlan: entered promiscuous mode
[   64.403145][ T5860] veth0_macvtap: entered promiscuous mode
[   64.424646][ T5860] veth1_macvtap: entered promiscuous mode
[   64.428801][ T5850] veth0_vlan: entered promiscuous mode
[   64.445651][ T5850] veth1_vlan: entered promiscuous mode
[   64.453043][ T5852] veth1_vlan: entered promiscuous mode
[   64.485880][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.502138][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.522312][ T5850] veth0_macvtap: entered promiscuous mode
[   64.530844][ T5852] veth0_macvtap: entered promiscuous mode
[   64.535485][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.541075][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.551656][ T5850] veth1_macvtap: entered promiscuous mode
[   64.556891][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.561713][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.566998][ T5852] veth1_macvtap: entered promiscuous mode
[   64.620055][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.627414][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.633891][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.644412][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.654652][ T5914] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.668927][ T5710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.672611][ T5710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.675569][ T5710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.678288][ T5710] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.702677][ T5710] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.706277][ T5710] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.723905][ T5710] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.731616][  T976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.734959][  T976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.802149][  T976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.811711][  T976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.866871][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.870682][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.875821][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.895846][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.909333][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.992406][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.995651][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.044883][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.048201][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.229280][ T5933] delete_channel: no stack
[   65.494832][ T5954] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   65.669652][ T5968] netlink: 96 bytes leftover after parsing attributes in process `syz.0.25'.
[   65.937477][ T5989] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   65.943787][ T5989] NCSI netlink: No device for ifindex 0
[   66.028935][ T5997] netlink: 'syz.2.39': attribute type 1 has an invalid length.
[   66.035080][ T5997] netlink: 72 bytes leftover after parsing attributes in process `syz.2.39'.
[   66.038809][ T5997] netlink: 97 bytes leftover after parsing attributes in process `syz.2.39'.
[   66.097520][ T6001] syz.2.41 uses obsolete (PF_INET,SOCK_PACKET)
[   66.180696][ T6003] netlink: 'syz.0.42': attribute type 303 has an invalid length.
[   66.207900][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'.
[   66.327683][ T5858] Bluetooth: hci0: command tx timeout
[   66.330277][ T5858] Bluetooth: hci1: command tx timeout
[   66.332540][ T5858] Bluetooth: hci2: command tx timeout
[   66.452020][ T6021] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   66.597616][ T6036] netlink: 'syz.2.58': attribute type 1 has an invalid length.
[   66.601180][ T6036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.994385][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'.
[   67.131711][ T6087] bridge: RTM_NEWNEIGH with invalid ether address
[   67.361744][ T6105] warning: `syz.2.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.585801][ T6127] x_tables: ip_tables: udp match: only valid for protocol 17
[   67.773327][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'.
[   67.790088][ T6146] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   67.974200][   T24] IPVS: starting estimator thread 0...
[   68.070213][ T6163] IPVS: using max 44 ests per chain, 105600 per kthread
[   68.082733][ T6167] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   68.399056][ T5858] Bluetooth: hci2: command tx timeout
[   68.400886][ T5858] Bluetooth: hci1: command tx timeout
[   68.402781][ T5858] Bluetooth: hci0: command tx timeout
[   68.471857][ T6186] Zero length message leads to an empty skb
[   68.920868][ T6207] bond1: entered promiscuous mode
[   68.923703][ T6207] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.032349][ T6218] syzkaller1: entered promiscuous mode
[   69.037940][ T6218] syzkaller1: entered allmulticast mode
[   69.041158][ T6220] TCP: TCP_TX_DELAY enabled
[   69.135143][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.139'.
[   69.317644][ T6236] netlink: 'syz.1.143': attribute type 1 has an invalid length.
[   69.348731][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.145'.
[   69.383642][ T6236] bond1: entered promiscuous mode
[   69.386411][ T6236] bond1: entered allmulticast mode
[   69.389500][ T6236] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.415337][ T6236] bridge1: entered promiscuous mode
[   69.418165][ T6236] bridge1: entered allmulticast mode
[   69.422219][ T6236] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   69.490172][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   69.601088][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   69.604442][ T6252] netlink: 44 bytes leftover after parsing attributes in process `syz.2.150'.
[   69.826432][ T6270] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   70.278215][ T6278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.160'.
[   70.479839][   T54] Bluetooth: hci2: command tx timeout
[   70.480165][ T5858] Bluetooth: hci0: command tx timeout
[   70.482193][   T54] Bluetooth: hci1: command tx timeout
[   70.617469][ T6298] netlink: 'syz.2.170': attribute type 42 has an invalid length.
[   70.726424][ T6306] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.912824][ T6316] netlink: 'syz.2.179': attribute type 1 has an invalid length.
[   70.950227][ T6319] __nla_validate_parse: 2 callbacks suppressed
[   70.950243][ T6319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.180'.
[   71.158727][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'.
[   71.203577][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.206287][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.742656][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'.
[   71.799346][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'.
[   71.837082][ T6365] netlink: 34 bytes leftover after parsing attributes in process `syz.1.201'.
[   71.877445][ T6367] bridge2: entered allmulticast mode
[   71.923353][ T6372] netlink: 'syz.0.205': attribute type 12 has an invalid length.
[   71.926642][ T6372] netlink: 'syz.0.205': attribute type 29 has an invalid length.
[   71.931179][ T6372] netlink: 148 bytes leftover after parsing attributes in process `syz.0.205'.
[   72.037813][ T6382] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.218008][ T6398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'.
[   72.224461][ T6397] netlink: 22 bytes leftover after parsing attributes in process `syz.0.218'.
[   72.442136][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'.
[   72.512855][ T6417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.224'.
[   72.881366][ T6436] syzkaller1: tun_chr_ioctl cmd 1074025677
[   72.896471][ T6436] syzkaller1: linktype set to 769
[   72.923789][ T6442] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   73.268893][ T6477] netlink: 'syz.1.254': attribute type 1 has an invalid length.
[   73.294412][ T6481] ieee802154 phy0 wpan0: encryption failed: -22
[   73.330001][ T6477] nbd: socks must be embedded in a SOCK_ITEM attr
[   73.332921][ T6477] block nbd0: shutting down sockets
[   73.657119][ T6513] netlink: 'syz.0.272': attribute type 5 has an invalid length.
[   73.904463][ T6534] ieee802154 phy0 wpan0: encryption failed: -22
[   74.442385][ T6572] syzkaller1: entered promiscuous mode
[   74.444986][ T6572] syzkaller1: entered allmulticast mode
[   74.844611][ T6582] bridge_slave_0: left allmulticast mode
[   74.846941][ T6582] bridge_slave_0: left promiscuous mode
[   74.850943][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.862824][ T6582] bridge_slave_1: left allmulticast mode
[   74.865224][ T6582] bridge_slave_1: left promiscuous mode
[   74.867876][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.878811][ T6582] bond0: (slave bond_slave_0): Releasing backup interface
[   74.886879][ T6582] bond0: (slave bond_slave_1): Releasing backup interface
[   74.905782][ T6582] team0: Port device team_slave_0 removed
[   74.925423][ T6582] team0: Port device team_slave_1 removed
[   74.930767][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.933519][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.947318][ T6582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.958383][ T6582] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.042270][ T6593] sctp: [Deprecated]: syz.1.308 (pid 6593) Use of int in max_burst socket option deprecated.
[   75.042270][ T6593] Use struct sctp_assoc_value instead
[   75.469744][ T6628] block nbd0: Unsupported socket: shutdown callout must be supported.
[   75.535533][ T6636] tipc: Started in network mode
[   75.538221][ T6636] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[   75.547862][ T6636] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   75.705222][ T6582] syz.2.304 (6582) used greatest stack depth: 19864 bytes left
[   75.800211][ T6654] IPv6: addrconf: prefix option has invalid lifetime
[   75.803182][ T6654] IPv6: addrconf: prefix option has invalid lifetime
[   75.805888][ T6654] IPv6: addrconf: prefix option has invalid lifetime
[   75.857997][ T6658] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x11
[   77.057818][ T6706] vlan2: entered promiscuous mode
[   77.067123][ T6706] macvtap0: entered promiscuous mode
[   77.105244][ T6709] __nla_validate_parse: 8 callbacks suppressed
[   77.105261][ T6709] netlink: 104 bytes leftover after parsing attributes in process `syz.0.353'.
[   77.627226][ T6759] netlink: 'syz.2.372': attribute type 2 has an invalid length.
[   77.638768][ T6759] netlink: 'syz.2.372': attribute type 1 has an invalid length.
[   77.843296][ T6788] xt_HMARK: proto mask must be zero with L3 mode
[   79.097120][ T6868] netlink: 'syz.0.417': attribute type 10 has an invalid length.
[   79.116835][ T6868] team0: Port device dummy0 added
[   79.568483][ T6910] erspan0: entered promiscuous mode
[   79.798537][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'.
[   80.545910][ T6965] netlink: 'syz.1.458': attribute type 21 has an invalid length.
[   80.549386][ T6965] netlink: 128 bytes leftover after parsing attributes in process `syz.1.458'.
[   80.554169][ T6965] netlink: 3 bytes leftover after parsing attributes in process `syz.1.458'.
[   80.651799][ T6974] netlink: 'syz.1.462': attribute type 29 has an invalid length.
[   80.656254][ T6974] netlink: 'syz.1.462': attribute type 29 has an invalid length.
[   80.662074][ T6974] netlink: 500 bytes leftover after parsing attributes in process `syz.1.462'.
[   80.665946][ T6974] unsupported nla_type 59
[   81.599081][ T7061] syz.2.498 (7061) used greatest stack depth: 18360 bytes left
[   81.686644][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'.
[   81.768118][ T7081] tipc: Started in network mode
[   81.771323][ T7081] tipc: Node identity 0228d52deac1, cluster identity 4711
[   81.773908][ T7081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.777208][ T7081] syzkaller0: entered promiscuous mode
[   81.782322][ T7081] syzkaller0: entered allmulticast mode
[   81.798815][ T7083] netlink: 'syz.0.508': attribute type 3 has an invalid length.
[   81.806411][ T7081] tipc: Resetting bearer <eth:syzkaller0>
[   81.816390][ T7080] tipc: Resetting bearer <eth:syzkaller0>
[   81.835332][ T7080] tipc: Disabling bearer <eth:syzkaller0>
[   81.839181][   T54] Bluetooth: hci2: command tx timeout
[   82.172298][ T7114] netlink: 5636 bytes leftover after parsing attributes in process `syz.2.516'.
[   82.637688][ T7155] netlink: 84 bytes leftover after parsing attributes in process `syz.1.535'.
[   82.650943][ T7155] team0: No ports can be present during mode change
[   82.874857][ T7165] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   82.952843][ T7170] bridge0: port 3(syz_tun) entered blocking state
[   82.955527][ T7170] bridge0: port 3(syz_tun) entered disabled state
[   82.958671][ T7170] syz_tun: entered allmulticast mode
[   82.961883][ T7170] syz_tun: entered promiscuous mode
[   82.964554][ T7170] bridge0: port 3(syz_tun) entered blocking state
[   82.967102][ T7170] bridge0: port 3(syz_tun) entered forwarding state
[   83.003726][ T7172] sctp: [Deprecated]: syz.1.543 (pid 7172) Use of int in max_burst socket option.
[   83.003726][ T7172] Use struct sctp_assoc_value instead
[   83.035159][ T7174] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[   83.276794][ T7165] infiniband syz1: set active
[   83.279187][ T7165] infiniband syz1: added syz_tun
[   83.313847][ T7165] RDS/IB: syz1: added
[   83.315735][ T7165] smc: adding ib device syz1 with port count 1
[   83.318413][ T7165] smc:    ib device syz1 port 1 has pnetid 
[   83.792408][ T7193] Bluetooth: MGMT ver 1.23
[   83.997710][ T7211] delete_channel: no stack
[   84.532698][ T7261] netlink: 'syz.0.585': attribute type 4 has an invalid length.
[   84.651527][ T7269] bridge2: entered promiscuous mode
[   84.653491][ T7269] bridge2: entered allmulticast mode
[   84.870670][ T5900] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[   84.874762][ T5900] hid-generic 0005:0007:0008.0001: item fetching failed at offset 1/2
[   84.878275][ T5900] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22
[   85.021161][ T7292] netlink: zone id is out of range
[   85.023367][ T7292] netlink: zone id is out of range
[   85.026578][ T7292] netlink: zone id is out of range
[   85.062301][ T7292] netlink: set zone limit has 4 unknown bytes
[   85.260653][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.607'.
[   85.304700][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.609'.
[   85.312556][ T7315] team0: Mode changed to "broadcast"
[   85.318807][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'.
[   85.325187][ T7315] vlan0: entered promiscuous mode
[   85.335278][ T7315] tipc: Started in network mode
[   85.337063][ T7315] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   85.340291][ T7315] tipc: Enabled bearer <eth:team0>, priority 0
[   85.733650][ T7330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.058579][    C0] IPv4: Oversized IP packet from 172.20.20.24
[   86.249596][ T7356] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0
[   86.312093][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'.
[   86.320000][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[   86.461280][  T973] tipc: Node number set to 11578026
[   86.574508][   T10] cfg80211: failed to load regulatory.db
[   86.645383][ T7396] netlink: 100 bytes leftover after parsing attributes in process `syz.0.644'.
[   86.788593][ T7415] batadv_slave_1: entered promiscuous mode
[   86.793630][ T7414] batadv_slave_1: left promiscuous mode
[   87.568824][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'.
[   87.817868][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'.
[   87.855862][ T7534] ieee802154 phy0 wpan0: encryption failed: -22
[   88.051619][   T10] hid-generic 0005:0005:0008.0002: unknown main item tag 0x0
[   88.062504][   T10] hid-generic 0005:0005:0008.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[   88.096124][ T7563] IPVS: Unknown mcast interface: 
[   88.107420][ T7565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.184997][ T7573] macsec2: entered promiscuous mode
[   88.187257][ T7573] macsec2: entered allmulticast mode
[   88.207473][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'.
[   88.328680][ T7588] netlink: 'syz.2.701': attribute type 6 has an invalid length.
[   88.463873][ T7602] netlink: 'syz.2.707': attribute type 21 has an invalid length.
[   88.466951][ T7602] netlink: 156 bytes leftover after parsing attributes in process `syz.2.707'.
[   88.514146][ T7604] netlink: 64 bytes leftover after parsing attributes in process `syz.0.708'.
[   88.863098][ T7628] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.719'.
[   89.587319][ T7670] netlink: 'syz.1.735': attribute type 11 has an invalid length.
[   89.781702][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'.
[   89.815189][ T7689] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.837933][ T7689] bond2: (slave batadv1): Opening slave failed
[   90.021935][ T7705] netlink: 'syz.0.751': attribute type 62 has an invalid length.
[   90.206400][ T7730] netlink: 'syz.1.763': attribute type 1 has an invalid length.
[   90.211294][ T7730] netlink: 'syz.1.763': attribute type 2 has an invalid length.
[   90.309342][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[   90.313757][ T7738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.322522][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'.
[   90.576869][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'.
[   91.748319][ T7793] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[   92.061125][ T7814] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   92.166138][ T7821] tun0: tun_chr_ioctl cmd 1074025675
[   92.168394][ T7821] tun0: persist disabled
[   92.330656][ T7830] netlink: 'syz.2.807': attribute type 29 has an invalid length.
[   92.525609][ T7846] syz_tun: refused to change device tx_queue_len
[   92.551542][ T7848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.554691][ T7848] syzkaller0: entered promiscuous mode
[   92.556961][ T7848] syzkaller0: entered allmulticast mode
[   92.575961][ T7848] tipc: Resetting bearer <eth:syzkaller0>
[   92.584337][ T7847] tipc: Resetting bearer <eth:syzkaller0>
[   92.597157][ T7847] tipc: Disabling bearer <eth:syzkaller0>
[   93.528090][ T7906] __nla_validate_parse: 8 callbacks suppressed
[   93.528100][ T7906] netlink: 140 bytes leftover after parsing attributes in process `syz.2.842'.
[   93.537527][ T7906] netlink: 'syz.2.842': attribute type 5 has an invalid length.
[   93.544176][ T7906] netlink: 'syz.2.842': attribute type 10 has an invalid length.
[   93.547047][ T7906] tipc: Resetting bearer <eth:team0>
[   93.555451][ T7906] tipc: Resetting bearer <eth:team0>
[   93.558189][ T7906] 8021q: adding VLAN 0 to HW filter on device team0
[   93.563986][ T7906] bond0: (slave team0): Enslaving as an active interface with an up link
[   93.846605][ T7920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'.
[   94.784381][ T7953] trusted_key: syz.1.864 sent an empty control message without MSG_MORE.
[   94.838571][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'.
[   94.862806][ T7954] bridge0: port 3(syz_tun) entered disabled state
[   94.885098][ T7954] syz_tun (unregistering): left allmulticast mode
[   94.888044][ T7954] syz_tun (unregistering): left promiscuous mode
[   94.892853][ T7954] bridge0: port 3(syz_tun) entered disabled state
[   94.906118][ T7513] smc: removing ib device syz1
[   94.925982][  T973] syz1: Port: 1 Link DOWN
[   95.757101][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'.
[   95.877885][ T7971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.869'.
[   95.896930][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'.
[   95.984297][ T7976] tipc: New replicast peer: 255.255.255.255
[   95.987322][ T7976] tipc: Enabled bearer <udp:syz2>, priority 10
[   96.381601][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.886'.
[   97.405805][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.895'.
[   97.507752][ T8039] netlink: 'syz.2.901': attribute type 1 has an invalid length.
[   97.521265][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'.
[   97.696591][ T8047] Bluetooth: MGMT ver 1.23
[   97.706291][ T8049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.904'.
[   98.587276][ T8082] __nla_validate_parse: 1 callbacks suppressed
[   98.587294][ T8082] netlink: 6 bytes leftover after parsing attributes in process `syz.1.920'.
[   98.598518][ T8082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   99.122559][ T8113] netlink: 45 bytes leftover after parsing attributes in process `syz.2.934'.
[   99.240799][ T2200] IPVS: starting estimator thread 0...
[   99.329380][ T8123] IPVS: using max 79 ests per chain, 189600 per kthread
[  100.225646][ T8179] openvswitch: netlink: IP tunnel TTL not specified.
[  100.574876][ T8210] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  100.588182][ T8210] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  100.776162][ T8224] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  101.090457][ T8236] netlink: 'syz.2.989': attribute type 1 has an invalid length.
[  101.382398][ T8248] netlink: 'syz.1.996': attribute type 11 has an invalid length.
[  101.430956][ T8252] netlink: 104 bytes leftover after parsing attributes in process `syz.1.997'.
[  102.817890][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'.
[  102.875874][ T8305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1020'.
[  103.274680][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'.
[  103.667518][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'.
[  104.094420][ T8368] netlink: 'syz.2.1042': attribute type 10 has an invalid length.
[  104.145428][ T8368] team0: Device veth0_vlan failed to register rx_handler
[  104.357986][ T8382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.367245][ T8382] syzkaller0: entered promiscuous mode
[  104.371588][ T8382] syzkaller0: entered allmulticast mode
[  104.397588][ T8382] tipc: Resetting bearer <eth:syzkaller0>
[  104.410009][ T8381] tipc: Resetting bearer <eth:syzkaller0>
[  104.426331][ T8381] tipc: Disabling bearer <eth:syzkaller0>
[  105.145697][ T8426] ipvlan0: entered promiscuous mode
[  105.151961][ T8426] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  105.228830][ T8430] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  105.489451][ T8449] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1078'.
[  105.556562][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1082'.
[  105.647618][ T8469] netlink: 'syz.0.1089': attribute type 10 has an invalid length.
[  105.663895][ T8469] team0: Port device dummy0 removed
[  105.673164][ T8469] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  105.924642][ T8487] netlink: 'syz.0.1096': attribute type 1 has an invalid length.
[  106.350138][ T8506] netlink: 'syz.2.1104': attribute type 1 has an invalid length.
[  106.560252][ T8514] block nbd0: server does not support multiple connections per device.
[  106.564539][ T8514] block nbd0: shutting down sockets
[  106.964136][ T8554] tipc: Resetting bearer <eth:team0>
[  107.130790][ T5914] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.139025][ T5914] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.142023][ T5914] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.146171][ T5914] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.180971][ T8565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.306058][ T8576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.308806][ T8576] syzkaller0: entered promiscuous mode
[  107.311924][ T8576] syzkaller0: entered allmulticast mode
[  107.315906][ T8576] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  107.324449][ T8576] tipc: Resetting bearer <eth:syzkaller0>
[  107.335535][ T8576] tipc: Disabling bearer <eth:syzkaller0>
[  107.596587][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  107.724949][ T8604] netlink: 'syz.0.1151': attribute type 7 has an invalid length.
[  107.728246][ T8604] netlink: 'syz.0.1151': attribute type 3 has an invalid length.
[  107.733278][ T8604] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1151'.
[  108.232698][ T8649] block nbd0: shutting down sockets
[  108.354171][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'.
[  108.359546][ T8658] netlink: 'syz.0.1169': attribute type 1 has an invalid length.
[  108.363269][ T8658] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1169'.
[  108.430023][ T8660] netlink: 'syz.1.1170': attribute type 2 has an invalid length.
[  108.532917][ T8668] netlink: 'syz.1.1174': attribute type 11 has an invalid length.
[  108.623384][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'.
[  108.626370][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'.
[  109.860172][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'.
[  110.096241][ T8733] netlink: 'syz.1.1202': attribute type 1 has an invalid length.
[  110.114865][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'.
[  111.017434][ T8781] RDS: rds_bind could not find a transport for fe80::2a, load rds_tcp or rds_rdma?
[  111.122337][ T8788] netlink: 'syz.0.1225': attribute type 13 has an invalid length.
[  111.125825][ T8788] netlink: 'syz.0.1225': attribute type 17 has an invalid length.
[  111.184808][ T8788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  111.294603][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1230'.
[  111.302872][ T8805] vlan0: left promiscuous mode
[  112.778893][ T8883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1268'.
[  112.963855][ T8900] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1275'.
[  112.975974][ T8902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1274'.
[  113.038473][ T8900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.048738][ T8900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.056000][ T8900] bond0 (unregistering): Released all slaves
[  113.155443][ T8907] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.1278'.
[  113.241408][ T8920] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  114.205518][ T8968] netlink: 'syz.2.1302': attribute type 1 has an invalid length.
[  114.208388][ T8968] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1302'.
[  114.465868][ T8972] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  115.014581][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'.
[  115.246274][ T9001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1316'.
[  115.330296][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'.
[  115.466101][ T5914] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.485225][ T9010] delete_channel: no stack
[  116.003888][ T9064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1343'.
[  116.006942][ T9064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1343'.
[  116.129033][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1348'.
[  116.636021][ T9104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'.
[  116.665103][ T9109] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1363'.
[  116.727941][ T9116] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1367'.
[  116.845001][ T9124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1371'.
[  117.272409][ T9147] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  118.603619][ T5915] IPVS: starting estimator thread 0...
[  118.648424][ T9214] netlink: 'syz.1.1408': attribute type 2 has an invalid length.
[  118.689404][ T9212] IPVS: using max 49 ests per chain, 117600 per kthread
[  118.785023][ T9225] openvswitch: netlink: IP tunnel dst address not specified
[  118.913324][ T9231] block nbd2: not configured, cannot reconfigure
[  118.968539][ T9233] netlink: 'syz.2.1417': attribute type 9 has an invalid length.
[  119.047917][ T9235] netlink: 'syz.2.1418': attribute type 10 has an invalid length.
[  119.058117][ T9235] team0: Port device geneve0 added
[  119.062612][ T5914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.066590][ T5914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.071399][ T5914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.075337][ T5914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.247507][ T9247] netlink: 'syz.0.1424': attribute type 1 has an invalid length.
[  119.881491][ T9302] netlink: 'syz.1.1445': attribute type 12 has an invalid length.
[  120.114497][ T9320] netlink: 'syz.0.1457': attribute type 1 has an invalid length.
[  120.117535][ T9320] __nla_validate_parse: 6 callbacks suppressed
[  120.117546][ T9320] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1457'.
[  120.123492][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1457'.
[  120.262961][ T9327] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1459'.
[  120.266790][ T9327] ..0: renamed from hsr0 (while UP)
[  120.274247][ T9327] ..0: entered allmulticast mode
[  120.276168][ T9327] hsr_slave_0: entered allmulticast mode
[  120.278277][ T9327] hsr_slave_1: entered allmulticast mode
[  120.281365][ T9327] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  120.331400][ T9331] netlink: 'syz.2.1462': attribute type 10 has an invalid length.
[  120.334546][ T9331] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  120.670689][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'.
[  120.674176][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1471'.
[  120.718361][ T9353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.767676][ T9353] syzkaller0: entered promiscuous mode
[  120.770262][ T9353] syzkaller0: entered allmulticast mode
[  120.772999][ T9353] tipc: Resetting bearer <eth:syzkaller0>
[  120.794597][ T9352] tipc: Resetting bearer <eth:syzkaller0>
[  121.860919][ T9352] tipc: Disabling bearer <eth:syzkaller0>
[  121.998868][ T9375] nftables ruleset with unbound chain
[  122.578287][ T9396] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  122.591469][ T9396] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  122.730943][ T9412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1496'.
[  122.763451][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1498'.
[  122.812122][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'.
[  122.829317][ T9420] sch_fq: defrate 0 ignored.
[  123.075499][ T9444] netlink: 'syz.1.1511': attribute type 16 has an invalid length.
[  123.078830][ T9444] netlink: 'syz.1.1511': attribute type 3 has an invalid length.
[  123.084728][ T9444] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1511'.
[  123.312065][ T9459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.417418][ T9459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.502882][ T9459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.592887][ T9459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.666956][ T9488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1534'.
[  123.713663][ T5880] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.732514][ T5880] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.754744][ T5880] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.769689][ T5880] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.781106][ T9496] netlink: 'syz.1.1538': attribute type 12 has an invalid length.
[  123.784478][ T9496] netlink: 'syz.1.1538': attribute type 29 has an invalid length.
[  124.064887][ T9513] IPVS: Unknown mcast interface: vcan0
[  124.848544][ T9561] netlink: 'syz.2.1568': attribute type 6 has an invalid length.
[  125.257389][ T9599] __nla_validate_parse: 4 callbacks suppressed
[  125.257403][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'.
[  125.387234][ T9612] netlink: 'syz.1.1593': attribute type 1 has an invalid length.
[  125.396550][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1592'.
[  125.407981][ T9610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1592'.
[  125.507533][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'.
[  125.627733][ T9635] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1605'.
[  125.811107][ T9650] netlink: 'syz.1.1609': attribute type 10 has an invalid length.
[  125.818614][ T9650] bridge0: port 3(macsec0) entered blocking state
[  125.822886][ T9650] bridge0: port 3(macsec0) entered disabled state
[  125.826144][ T9650] macsec0: entered allmulticast mode
[  125.828856][ T9650] veth1_macvtap: entered allmulticast mode
[  125.835553][ T9650] macsec0: entered promiscuous mode
[  125.838691][ T9650] bridge0: port 3(macsec0) entered blocking state
[  125.841485][ T9650] bridge0: port 3(macsec0) entered forwarding state
[  126.354752][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'.
[  126.707846][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'.
[  127.104979][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1649'.
[  127.171214][ T9736] batadv0: entered promiscuous mode
[  127.174765][ T9736] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  127.178496][ T9736] batadv0: left promiscuous mode
[  127.455440][ T9742] netlink: 'syz.0.1653': attribute type 2 has an invalid length.
[  127.458564][ T9742] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.1653'.
[  127.618446][ T9751] netlink: 'syz.1.1657': attribute type 10 has an invalid length.
[  127.621844][ T9751] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1657'.
[  127.625227][ T9751] team0: entered promiscuous mode
[  127.627115][ T9751] team_slave_0: entered promiscuous mode
[  127.630483][ T9751] team_slave_1: entered promiscuous mode
[  127.633181][ T9751] bridge0: port 4(team0) entered blocking state
[  127.635978][ T9751] bridge0: port 4(team0) entered disabled state
[  127.638693][ T9751] team0: entered allmulticast mode
[  127.643183][ T9751] team_slave_0: entered allmulticast mode
[  127.645561][ T9751] team_slave_1: entered allmulticast mode
[  127.650193][ T9751] bridge0: port 4(team0) entered blocking state
[  127.652882][ T9751] bridge0: port 4(team0) entered forwarding state
[  127.874515][ T9768] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  127.877635][ T9768] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  128.067021][ T9782] 8021q: adding VLAN 0 to HW filter on device bond2
[  128.073085][ T9782] bridge0: port 5(bond2) entered blocking state
[  128.076123][ T9782] bridge0: port 5(bond2) entered disabled state
[  128.084949][ T9782] bond2: entered allmulticast mode
[  128.092909][ T9782] bond2: entered promiscuous mode
[  128.096243][ T9782] bridge0: port 5(bond2) entered blocking state
[  128.099281][ T9782] bridge0: port 5(bond2) entered forwarding state
[  128.106745][ T7515] bridge0: port 5(bond2) entered disabled state
[  128.261176][ T9803] tipc: Resetting bearer <eth:team0>
[  128.705917][ T9825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.977245][ T9876] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  129.980704][ T9876] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  130.043870][ T9884] netlink: 'syz.1.1710': attribute type 11 has an invalid length.
[  130.826196][ T9931] __nla_validate_parse: 4 callbacks suppressed
[  130.826213][ T9931] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1733'.
[  130.880370][ T9938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1734'.
[  131.165038][ T9950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1739'.
[  131.169779][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1739'.
[  131.222066][ T9958] netlink: 'syz.1.1743': attribute type 2 has an invalid length.
[  131.224715][ T9958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1743'.
[  131.333777][ T9967] netlink: 'syz.1.1747': attribute type 1 has an invalid length.
[  131.355491][ T9967] bond3: entered promiscuous mode
[  131.358892][ T9967] bond3: entered allmulticast mode
[  131.362062][ T9967] 8021q: adding VLAN 0 to HW filter on device bond3
[  131.376902][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'.
[  131.388488][ T9967] 8021q: adding VLAN 0 to HW filter on device bond4
[  131.394607][ T9967] bond4: entered promiscuous mode
[  131.396828][ T9967] bond4: entered allmulticast mode
[  131.400175][ T9967] bond3: (slave bond4): Enslaving as a backup interface with a down link
[  131.573073][ T9980] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1752'.
[  131.886566][T10004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.974667][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'.
[  132.028714][T10016] bond0: entered promiscuous mode
[  132.030949][T10016] bond0: entered allmulticast mode
[  132.032887][T10016] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.254740][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1781'.
[  132.304090][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'.
[  132.327150][T10045] team1: entered promiscuous mode
[  132.329543][T10045] team1: entered allmulticast mode
[  132.840253][T10090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.928810][T10094] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.935664][T10094] bond0: (slave rose0): Enslaving as an active interface with an up link
[  133.296571][T10126] netlink: 'syz.1.1813': attribute type 4 has an invalid length.
[  133.371911][ T5239] Bluetooth: hci2: command 0x0405 tx timeout
[  134.323576][T10181] netlink: 'syz.0.1834': attribute type 1 has an invalid length.
[  134.613437][T10194] ==================================================================
[  134.616832][T10194] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  134.620164][T10194] Read of size 2 at addr ffff88810f8120c2 by task syz.1.1840/10194
[  134.624194][T10194] 
[  134.625193][T10194] CPU: 1 UID: 0 PID: 10194 Comm: syz.1.1840 Not tainted syzkaller #0 PREEMPT(full) 
[  134.625209][T10194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.625217][T10194] Call Trace:
[  134.625223][T10194]  <TASK>
[  134.625229][T10194]  dump_stack_lvl+0x189/0x250
[  134.625249][T10194]  ? __kasan_check_byte+0x12/0x40
[  134.625267][T10194]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.625283][T10194]  ? lock_release+0x4b/0x3e0
[  134.625303][T10194]  ? __virt_addr_valid+0x4a5/0x5c0
[  134.625320][T10194]  print_report+0xca/0x240
[  134.625338][T10194]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  134.625358][T10194]  kasan_report+0x118/0x150
[  134.625377][T10194]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  134.625394][T10194]  __xfrm_state_lookup+0x6ad/0x8d0
[  134.625412][T10194]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  134.625429][T10194]  ? xfrm_state_lookup+0x45/0x1e0
[  134.625445][T10194]  xfrm_state_lookup+0x11e/0x1e0
[  134.625463][T10194]  xfrm_user_state_lookup+0x231/0x370
[  134.625502][T10194]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  134.625517][T10194]  ? apparmor_capable+0x137/0x1b0
[  134.625535][T10194]  xfrm_get_sa+0x93/0x290
[  134.625552][T10194]  ? __nla_parse+0x40/0x60
[  134.625566][T10194]  xfrm_user_rcv_msg+0x7a3/0xab0
[  134.625585][T10194]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  134.625615][T10194]  ? __pfx___mutex_trylock_common+0x10/0x10
[  134.625630][T10194]  ? rcu_is_watching+0x15/0xb0
[  134.625642][T10194]  ? trace_contention_end+0x39/0x120
[  134.625655][T10194]  ? __mutex_lock+0x335/0x1350
[  134.625670][T10194]  netlink_rcv_skb+0x208/0x470
[  134.625683][T10194]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  134.625701][T10194]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  134.625719][T10194]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.625732][T10194]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.625745][T10194]  xfrm_netlink_rcv+0x79/0x90
[  134.625763][T10194]  netlink_unicast+0x82f/0x9e0
[  134.625785][T10194]  ? __pfx_netlink_unicast+0x10/0x10
[  134.625804][T10194]  ? netlink_sendmsg+0x642/0xb30
[  134.625816][T10194]  ? skb_put+0x11b/0x210
[  134.625831][T10194]  netlink_sendmsg+0x805/0xb30
[  134.625847][T10194]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.625861][T10194]  ? aa_sock_msg_perm+0xf1/0x1d0
[  134.625874][T10194]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  134.625888][T10194]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.625901][T10194]  __sock_sendmsg+0x21c/0x270
[  134.625920][T10194]  ____sys_sendmsg+0x505/0x830
[  134.625937][T10194]  ? __pfx_____sys_sendmsg+0x10/0x10
[  134.625954][T10194]  ? import_iovec+0x74/0xa0
[  134.625971][T10194]  ___sys_sendmsg+0x21f/0x2a0
[  134.625987][T10194]  ? __pfx____sys_sendmsg+0x10/0x10
[  134.626013][T10194]  ? __fget_files+0x2a/0x420
[  134.626024][T10194]  ? __fget_files+0x3a0/0x420
[  134.626037][T10194]  __x64_sys_sendmsg+0x19b/0x260
[  134.626051][T10194]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  134.626069][T10194]  ? rcu_is_watching+0x15/0xb0
[  134.626082][T10194]  ? do_syscall_64+0xbe/0x3b0
[  134.626097][T10194]  do_syscall_64+0xfa/0x3b0
[  134.626109][T10194]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.626121][T10194]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.626133][T10194]  ? exc_page_fault+0x9f/0xf0
[  134.626146][T10194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.626158][T10194] RIP: 0033:0x7fd511f8eba9
[  134.626170][T10194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.626182][T10194] RSP: 002b:00007fd5101f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.626197][T10194] RAX: ffffffffffffffda RBX: 00007fd5121d5fa0 RCX: 00007fd511f8eba9
[  134.626206][T10194] RDX: 0000000024004040 RSI: 00002000000014c0 RDI: 0000000000000003
[  134.626214][T10194] RBP: 00007fd512011e19 R08: 0000000000000000 R09: 0000000000000000
[  134.626222][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.626229][T10194] R13: 00007fd5121d6038 R14: 00007fd5121d5fa0 R15: 00007ffcf6d3a908
[  134.626243][T10194]  </TASK>
[  134.626248][T10194] 
[  134.783676][T10194] Allocated by task 6974:
[  134.785498][T10194]  kasan_save_track+0x3e/0x80
[  134.787492][T10194]  __kasan_slab_alloc+0x6c/0x80
[  134.789508][T10194]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  134.791725][T10194]  xfrm_state_alloc+0x24/0x2f0
[  134.793743][T10194]  __find_acq_core+0x8a7/0x1c00
[  134.795766][T10194]  xfrm_find_acq+0x78/0xa0
[  134.797638][T10194]  xfrm_alloc_userspi+0x6b3/0xc90
[  134.799781][T10194]  xfrm_user_rcv_msg+0x7a3/0xab0
[  134.801792][T10194]  netlink_rcv_skb+0x208/0x470
[  134.803417][T10194]  xfrm_netlink_rcv+0x79/0x90
[  134.805342][T10194]  netlink_unicast+0x82f/0x9e0
[  134.807360][T10194]  netlink_sendmsg+0x805/0xb30
[  134.809334][T10194]  __sock_sendmsg+0x21c/0x270
[  134.811295][T10194]  ____sys_sendmsg+0x505/0x830
[  134.813255][T10194]  ___sys_sendmsg+0x21f/0x2a0
[  134.815193][T10194]  __x64_sys_sendmsg+0x19b/0x260
[  134.817190][T10194]  do_syscall_64+0xfa/0x3b0
[  134.819036][T10194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.821501][T10194] 
[  134.822508][T10194] Freed by task 5915:
[  134.824151][T10194]  kasan_save_track+0x3e/0x80
[  134.826121][T10194]  kasan_save_free_info+0x46/0x50
[  134.828232][T10194]  __kasan_slab_free+0x5b/0x80
[  134.830274][T10194]  kmem_cache_free+0x18f/0x400
[  134.832235][T10194]  xfrm_state_gc_task+0x52d/0x6b0
[  134.834301][T10194]  process_scheduled_works+0xae1/0x17b0
[  134.836627][T10194]  worker_thread+0x8a0/0xda0
[  134.838604][T10194]  kthread+0x711/0x8a0
[  134.840353][T10194]  ret_from_fork+0x439/0x7d0
[  134.842318][T10194]  ret_from_fork_asm+0x1a/0x30
[  134.844377][T10194] 
[  134.845439][T10194] The buggy address belongs to the object at ffff88810f811f80
[  134.845439][T10194]  which belongs to the cache xfrm_state of size 928
[  134.851155][T10194] The buggy address is located 322 bytes inside of
[  134.851155][T10194]  freed 928-byte region [ffff88810f811f80, ffff88810f812320)
[  134.856817][T10194] 
[  134.857856][T10194] The buggy address belongs to the physical page:
[  134.860578][T10194] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810f813180 pfn:0x10f810
[  134.864801][T10194] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  134.868289][T10194] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  134.871864][T10194] page_type: f5(slab)
[  134.873526][T10194] raw: 057ff00000000240 ffff88801c7caa00 ffff8881054294c8 ffffea00043d4510
[  134.877011][T10194] raw: ffff88810f813180 00000000000e0005 00000000f5000000 0000000000000000
[  134.880559][T10194] head: 057ff00000000240 ffff88801c7caa00 ffff8881054294c8 ffffea00043d4510
[  134.884050][T10194] head: ffff88810f813180 00000000000e0005 00000000f5000000 0000000000000000
[  134.887633][T10194] head: 057ff00000000002 ffffea00043e0401 00000000ffffffff 00000000ffffffff
[  134.890831][T10194] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  134.893915][T10194] page dumped because: kasan: bad access detected
[  134.896407][T10194] page_owner tracks the page as allocated
[  134.898194][T10194] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6398, tgid 6396 (syz.2.217), ts 72223522109, free_ts 72174257420
[  134.904622][T10194]  post_alloc_hook+0x240/0x2a0
[  134.906262][T10194]  get_page_from_freelist+0x21e4/0x22c0
[  134.908283][T10194]  __alloc_frozen_pages_noprof+0x181/0x370
[  134.910438][T10194]  alloc_pages_mpol+0x232/0x4a0
[  134.912169][T10194]  allocate_slab+0x8a/0x370
[  134.913757][T10194]  ___slab_alloc+0xbeb/0x1420
[  134.915547][T10194]  kmem_cache_alloc_noprof+0x283/0x3c0
[  134.917620][T10194]  xfrm_state_alloc+0x24/0x2f0
[  134.919373][T10194]  __find_acq_core+0x8a7/0x1c00
[  134.921183][T10194]  xfrm_find_acq+0x78/0xa0
[  134.922947][T10194]  xfrm_alloc_userspi+0x6b3/0xc90
[  134.924720][T10194]  xfrm_user_rcv_msg+0x7a3/0xab0
[  134.926641][T10194]  netlink_rcv_skb+0x208/0x470
[  134.928396][T10194]  xfrm_netlink_rcv+0x79/0x90
[  134.929979][T10194]  netlink_unicast+0x82f/0x9e0
[  134.931760][T10194]  netlink_sendmsg+0x805/0xb30
[  134.933645][T10194] page last free pid 5833 tgid 5833 stack trace:
[  134.936081][T10194]  __free_frozen_pages+0xbc4/0xd30
[  134.937962][T10194]  __slab_free+0x303/0x3c0
[  134.939605][T10194]  qlist_free_all+0x97/0x140
[  134.941350][T10194]  kasan_quarantine_reduce+0x148/0x160
[  134.943316][T10194]  __kasan_slab_alloc+0x22/0x80
[  134.945271][T10194]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  134.947642][T10194]  __alloc_skb+0x112/0x2d0
[  134.949308][T10194]  tcp_stream_alloc_skb+0x3d/0x340
[  134.951036][T10194]  tcp_sendmsg_locked+0xf38/0x5620
[  134.952823][T10194]  tcp_sendmsg+0x2f/0x50
[  134.954423][T10194]  __sock_sendmsg+0x19c/0x270
[  134.956224][T10194]  sock_write_iter+0x258/0x330
[  134.957970][T10194]  vfs_write+0x5c9/0xb30
[  134.959386][T10194]  ksys_write+0x145/0x250
[  134.960796][T10194]  do_syscall_64+0xfa/0x3b0
[  134.962248][T10194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.964215][T10194] 
[  134.964999][T10194] Memory state around the buggy address:
[  134.966813][T10194]  ffff88810f811f80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.969364][T10194]  ffff88810f812000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.972027][T10194] >ffff88810f812080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.974675][T10194]                                            ^
[  134.976686][T10194]  ffff88810f812100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.979371][T10194]  ffff88810f812180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  134.982031][T10194] ==================================================================
[  134.997781][T10194] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  135.000290][T10194] CPU: 1 UID: 0 PID: 10194 Comm: syz.1.1840 Not tainted syzkaller #0 PREEMPT(full) 
[  135.003538][T10194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.007300][T10194] Call Trace:
[  135.008457][T10194]  <TASK>
[  135.009672][T10194]  dump_stack_lvl+0x99/0x250
[  135.011578][T10194]  ? __asan_memcpy+0x40/0x70
[  135.013249][T10194]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.015322][T10194]  ? __pfx__printk+0x10/0x10
[  135.017171][T10194]  vpanic+0x281/0x750
[  135.018785][T10194]  ? preempt_schedule+0xae/0xc0
[  135.020761][T10194]  ? __pfx_vpanic+0x10/0x10
[  135.022566][T10194]  ? preempt_schedule_common+0x83/0xd0
[  135.024608][T10194]  ? preempt_schedule+0xae/0xc0
[  135.026557][T10194]  ? __pfx_preempt_schedule+0x10/0x10
[  135.028693][T10194]  panic+0xb9/0xc0
[  135.030202][T10194]  ? __pfx_panic+0x10/0x10
[  135.031995][T10194]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  135.034358][T10194]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  135.036490][T10194]  check_panic_on_warn+0x89/0xb0
[  135.038452][T10194]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  135.040597][T10194]  end_report+0x78/0x160
[  135.042282][T10194]  kasan_report+0x129/0x150
[  135.044016][T10194]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  135.046072][T10194]  __xfrm_state_lookup+0x6ad/0x8d0
[  135.047943][T10194]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  135.050087][T10194]  ? xfrm_state_lookup+0x45/0x1e0
[  135.052108][T10194]  xfrm_state_lookup+0x11e/0x1e0
[  135.054101][T10194]  xfrm_user_state_lookup+0x231/0x370
[  135.056243][T10194]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  135.058497][T10194]  ? apparmor_capable+0x137/0x1b0
[  135.060165][T10194]  xfrm_get_sa+0x93/0x290
[  135.061588][T10194]  ? __nla_parse+0x40/0x60
[  135.063059][T10194]  xfrm_user_rcv_msg+0x7a3/0xab0
[  135.064669][T10194]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  135.066414][T10194]  ? __pfx___mutex_trylock_common+0x10/0x10
[  135.068325][T10194]  ? rcu_is_watching+0x15/0xb0
[  135.069903][T10194]  ? trace_contention_end+0x39/0x120
[  135.071607][T10194]  ? __mutex_lock+0x335/0x1350
[  135.073141][T10194]  netlink_rcv_skb+0x208/0x470
[  135.074692][T10194]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  135.076464][T10194]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  135.078123][T10194]  ? netlink_deliver_tap+0x2e/0x1b0
[  135.079804][T10194]  ? netlink_deliver_tap+0x2e/0x1b0
[  135.081495][T10194]  xfrm_netlink_rcv+0x79/0x90
[  135.083026][T10194]  netlink_unicast+0x82f/0x9e0
[  135.084550][T10194]  ? __pfx_netlink_unicast+0x10/0x10
[  135.086245][T10194]  ? netlink_sendmsg+0x642/0xb30
[  135.087842][T10194]  ? skb_put+0x11b/0x210
[  135.089177][T10194]  netlink_sendmsg+0x805/0xb30
[  135.090707][T10194]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.092410][T10194]  ? aa_sock_msg_perm+0xf1/0x1d0
[  135.094170][T10194]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  135.095911][T10194]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.097651][T10194]  __sock_sendmsg+0x21c/0x270
[  135.099151][T10194]  ____sys_sendmsg+0x505/0x830
[  135.100751][T10194]  ? __pfx_____sys_sendmsg+0x10/0x10
[  135.102464][T10194]  ? import_iovec+0x74/0xa0
[  135.104008][T10194]  ___sys_sendmsg+0x21f/0x2a0
[  135.105576][T10194]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.107264][T10194]  ? __fget_files+0x2a/0x420
[  135.108881][T10194]  ? __fget_files+0x3a0/0x420
[  135.110421][T10194]  __x64_sys_sendmsg+0x19b/0x260
[  135.112108][T10194]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  135.114033][T10194]  ? rcu_is_watching+0x15/0xb0
[  135.115729][T10194]  ? do_syscall_64+0xbe/0x3b0
[  135.117298][T10194]  do_syscall_64+0xfa/0x3b0
[  135.118893][T10194]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.120668][T10194]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.122839][T10194]  ? exc_page_fault+0x9f/0xf0
[  135.124404][T10194]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.126359][T10194] RIP: 0033:0x7fd511f8eba9
[  135.128048][T10194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.134736][T10194] RSP: 002b:00007fd5101f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.137393][T10194] RAX: ffffffffffffffda RBX: 00007fd5121d5fa0 RCX: 00007fd511f8eba9
[  135.140494][T10194] RDX: 0000000024004040 RSI: 00002000000014c0 RDI: 0000000000000003
[  135.143541][T10194] RBP: 00007fd512011e19 R08: 0000000000000000 R09: 0000000000000000
[  135.146340][T10194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.148941][T10194] R13: 00007fd5121d6038 R14: 00007fd5121d5fa0 R15: 00007ffcf6d3a908
[  135.151689][T10194]  </TASK>
[  135.153407][T10194] Kernel Offset: disabled
[  135.154797][T10194] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:53:55  Registers:
info registers vcpu 0

CPU#0
RAX=00007f1cfe9ffd08 RBX=00007f1cffd05720 RCX=ffffffff848708cf RDX=00007f1cfecb7bc8
RSI=ffffffff8133c59e RDI=00007f1cfe9ff008 RBP=00007f1cfedff000 RSP=00007ffdb37b45f0
R8 =00007f1cfe9ff0d0 R9 =00007f1cff1c2000 R10=00007f1cfe9ff008 R11=0000000000000004
R12=00007f1cfedff000 R13=00007f1cff1d6038 R14=ffffffffffffffff R15=00007f1cfe9ff008
RIP=00007f1cfee6f740 RFL=00000283 [--S---C] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558ae2c500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000340 CR3=000000004449d000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff8167999b ffffffff8133c59e XMM01=ffffffff8133c59e ffffffff8167999b
XMM02=00007f1cff1a7498 ffffffff8167999b XMM03=00007f1cff1a74a8 00007f1cff1a74a0
XMM04=00007f1cffd0d100 00007f1cff1a7460 XMM05=00007f1cff1a7478 00007f1cff1a74c0
XMM06=00007f1cff1a74b8 00007f1cff1a74b0 XMM07=00007f1cff1a74a8 00007f1cff1a74a0
XMM08=0000000000000000 00007f1cff012ee7 XMM09=0000000000000000 00007f1cff012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bea60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000001132 RDI=0000000000001133 RBP=ffffffff99df56b0 RSP=ffffc90007856990
R8 =ffff888021758237 R9 =1ffff110042eb046 R10=dffffc0000000000 R11=ffffffff854f90f0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f9167 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd5101f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd5101f5fc8 CR3=0000000043166000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd5121a7498 00007fd5121a7470 XMM03=00007fd5121a74a8 00007fd5121a74a0
XMM04=00007fd512d0d100 00007fd5121a7460 XMM05=00007fd5121a7478 00007fd5121a74c0
XMM06=00007fd5121a74b8 00007fd5121a74b0 XMM07=00007fd5121a74a8 00007fd5121a74a0
XMM08=0000000000000000 00007fd512012ee7 XMM09=0000000000000000 00007fd512012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
