last executing test programs:

1.137413289s ago: executing program 1 (id=3083):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fa01, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000)

1.080032922s ago: executing program 1 (id=3084):
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket$inet(0x2, 0x5, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000400)={{}, "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"})
socket(0x8, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)={0x3c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r2 = socket(0xa, 0x3, 0x3a)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa0000000000000150300000a004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={<r4=>0x0, 0x3c, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e5"}, &(0x7f0000000080)=0x44)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc0040002", 0x27}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20800, 0x0)
ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000001b00)=r3)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={r4, 0xcf, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e4"}, &(0x7f0000000180)=0xd7)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000"], 0xd4}}, 0x0)

967.586508ms ago: executing program 1 (id=3087):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x7}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0)

935.050275ms ago: executing program 1 (id=3090):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private2, 0xfffffffb}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000100)=0xd)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6b1db9c3dc38f850, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)

862.592918ms ago: executing program 2 (id=3094):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x12001, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)

680.616044ms ago: executing program 2 (id=3097):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}}}}}, 0x2e)

549.972961ms ago: executing program 2 (id=3099):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x30000010})
close(r1)

499.283569ms ago: executing program 2 (id=3102):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(0x3)

499.109382ms ago: executing program 2 (id=3103):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

450.274685ms ago: executing program 2 (id=3105):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
close(0x3)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_emit_ethernet(0x27, &(0x7f0000000140)=ANY=[@ANYBLOB="3e693200edf8aaab63f876a76c0cee145e4c67651dcaac"], 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00')
unshare(0x6a040000)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44)
unshare(0x2010100)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

349.118451ms ago: executing program 0 (id=3110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x20, &(0x7f0000000c40)="63eced8e46dc3f4bdf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

270.419134ms ago: executing program 0 (id=3111):
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100))
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}, {0x0}, {&(0x7f0000000540)}], 0x4)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010402000200fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="98e400007306000005002100100000001c00168018"], 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054)

213.677169ms ago: executing program 0 (id=3112):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

140.783051ms ago: executing program 0 (id=3113):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)

140.597361ms ago: executing program 0 (id=3114):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21115, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x818}}}}}}]}, 0x48}}, 0x24008000)

56.67459ms ago: executing program 0 (id=3115):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
write(r1, &(0x7f0000000240)="94", 0x1)
vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r0, r4, 0x8f5, 0x0)
write$cgroup_devices(r4, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8)
write(r2, 0x0, 0x0)

55.328795ms ago: executing program 1 (id=3116):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x1, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000007c0)='0', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040040)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)

0s ago: executing program 1 (id=3117):
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'})
r4 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r14}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49955' (ED25519) to the list of known hosts.
syzkaller login: [   56.324362][ T5543] cgroup: Unknown subsys name 'net'
[   56.415885][ T5543] cgroup: Unknown subsys name 'cpuset'
[   56.419773][ T5543] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.789530][ T5543] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.984480][ T5634] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.575100][ T5001] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.581086][ T5001] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.588560][ T5001] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.601216][ T5001] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.606612][ T5001] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.620922][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.628700][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.645728][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.650859][ T5650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.657676][ T5650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.659475][ T5647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.665395][ T5647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.665820][ T5650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.677881][ T5650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.683968][ T5650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.394818][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.398526][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.401922][ T5643] bridge_slave_0: entered allmulticast mode
[   69.406675][ T5643] bridge_slave_0: entered promiscuous mode
[   69.427958][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.431576][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.436399][ T5643] bridge_slave_1: entered allmulticast mode
[   69.439817][ T5643] bridge_slave_1: entered promiscuous mode
[   69.471838][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.494296][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.580937][ T5643] team0: Port device team_slave_0 added
[   69.586566][ T5643] team0: Port device team_slave_1 added
[   69.648796][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.651586][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.660401][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.666213][ T5646] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.669427][ T5646] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.672195][ T5646] bridge_slave_0: entered allmulticast mode
[   69.676056][ T5646] bridge_slave_0: entered promiscuous mode
[   69.690984][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.693551][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.703622][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.712937][ T5646] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.715616][ T5646] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.718210][ T5646] bridge_slave_1: entered allmulticast mode
[   69.721062][ T5646] bridge_slave_1: entered promiscuous mode
[   69.766257][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.768935][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.772037][ T5642] bridge_slave_0: entered allmulticast mode
[   69.775562][ T5642] bridge_slave_0: entered promiscuous mode
[   69.798944][ T5646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.804202][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.806839][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.809701][ T5642] bridge_slave_1: entered allmulticast mode
[   69.814681][ T5642] bridge_slave_1: entered promiscuous mode
[   69.824685][ T5643] hsr_slave_0: entered promiscuous mode
[   69.826969][ T5643] hsr_slave_1: entered promiscuous mode
[   69.833552][ T5646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.883008][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.896889][ T5646] team0: Port device team_slave_0 added
[   69.900465][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.916096][ T5646] team0: Port device team_slave_1 added
[   69.978348][ T5642] team0: Port device team_slave_0 added
[   69.985946][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.989288][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.998864][ T5646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.003823][ T5642] team0: Port device team_slave_1 added
[   70.011689][ T5646] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.014909][ T5646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.023027][ T5646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.074602][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.077603][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.088915][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.115550][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.118158][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.125865][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.163154][ T5646] hsr_slave_0: entered promiscuous mode
[   70.167372][ T5646] hsr_slave_1: entered promiscuous mode
[   70.170145][ T5646] debugfs: 'hsr0' already exists in 'hsr'
[   70.172290][ T5646] Cannot create hsr debugfs directory
[   70.220641][ T5642] hsr_slave_0: entered promiscuous mode
[   70.223513][ T5642] hsr_slave_1: entered promiscuous mode
[   70.225840][ T5642] debugfs: 'hsr0' already exists in 'hsr'
[   70.227781][ T5642] Cannot create hsr debugfs directory
[   70.386724][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.397780][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.416321][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.420985][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.433245][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.442745][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.457944][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.468196][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.567223][ T5646] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.573617][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.583805][ T5646] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.588815][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.600360][ T5646] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.606075][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.609504][ T5646] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.616471][ T5646] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.682454][ T5001] Bluetooth: hci1: command tx timeout
[   70.690788][ T5642] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.696178][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   70.699863][ T5642] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.706204][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   70.714873][ T5642] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.719899][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   70.723499][ T5642] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.728227][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.753217][ T5001] Bluetooth: hci2: command tx timeout
[   70.753238][ T5647] Bluetooth: hci0: command tx timeout
[   70.773833][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.824198][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[   70.843087][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.846604][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.868857][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.871641][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.897270][ T5646] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.947879][ T5646] 8021q: adding VLAN 0 to HW filter on device team0
[   70.967596][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.975002][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.978003][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.997722][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.000153][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.032987][ T5642] 8021q: adding VLAN 0 to HW filter on device team0
[   71.063859][ T4126] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.066606][ T4126] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.083744][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.086217][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.385006][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.447019][ T5643] veth0_vlan: entered promiscuous mode
[   71.457757][ T5643] veth1_vlan: entered promiscuous mode
[   71.488161][ T5643] veth0_macvtap: entered promiscuous mode
[   71.498136][ T5643] veth1_macvtap: entered promiscuous mode
[   71.511516][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.525138][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.535962][ T5507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.550797][ T5507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.562393][ T5646] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.567972][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.570554][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.574855][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.658437][ T5646] veth0_vlan: entered promiscuous mode
[   71.688409][ T5642] veth0_vlan: entered promiscuous mode
[   71.692289][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.699347][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.705873][ T5646] veth1_vlan: entered promiscuous mode
[   71.719443][ T5642] veth1_vlan: entered promiscuous mode
[   71.731644][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.738717][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.759819][ T5646] veth0_macvtap: entered promiscuous mode
[   71.776789][ T5646] veth1_macvtap: entered promiscuous mode
[   71.780190][ T5642] veth0_macvtap: entered promiscuous mode
[   71.789305][ T5642] veth1_macvtap: entered promiscuous mode
[   71.814172][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.826624][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.837983][ T5646] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.844317][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.858388][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.862411][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.878757][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.881933][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.886763][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.890514][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.894310][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.903168][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.090583][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.098383][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.129059][ T4126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.131535][ T4126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.195490][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.200018][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.256776][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.268798][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.753002][ T5001] Bluetooth: hci1: command tx timeout
[   72.831939][ T5001] Bluetooth: hci2: command tx timeout
[   72.833187][ T5647] Bluetooth: hci0: command tx timeout
[   73.124923][ T5804] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.413296][ T5823] netlink: 68 bytes leftover after parsing attributes in process `syz.0.47'.
[   73.535000][ T5828] nbd: socks must be embedded in a SOCK_ITEM attr
[   73.733745][ T5838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.53'.
[   74.088964][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   74.229502][ T5873] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   74.437495][ T5882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'.
[   74.444876][ T5882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.75'.
[   74.590213][ T5892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'.
[   74.755972][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.84'.
[   74.777800][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[   74.785970][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[   74.792035][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[   74.800368][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[   74.834150][ T5647] Bluetooth: hci1: command tx timeout
[   74.913112][ T5647] Bluetooth: hci2: command tx timeout
[   74.913150][ T5001] Bluetooth: hci0: command tx timeout
[   74.924889][ T5913] pimreg: entered allmulticast mode
[   74.939535][ T5912] ip6tnl1: entered allmulticast mode
[   74.947608][ T5913] pimreg: left allmulticast mode
[   74.983812][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.003331][ T5528] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.008426][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.111928][ T5699] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   75.250399][ T5932] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.99'.
[   75.337367][ T5938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'.
[   75.350894][ T5938] netlink: 'syz.1.102': attribute type 7 has an invalid length.
[   75.354689][ T5938] netlink: 'syz.1.102': attribute type 8 has an invalid length.
[   75.357749][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'.
[   75.390288][ T5940] syzkaller0: entered promiscuous mode
[   75.393927][ T5940] syzkaller0: entered allmulticast mode
[   75.662617][ T5955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.755973][ T5961] gtp0: entered promiscuous mode
[   75.757810][ T5961] gtp0: entered allmulticast mode
[   75.956393][ T5699] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   76.014316][ T5970] netlink: 'syz.0.117': attribute type 6 has an invalid length.
[   76.131008][ T5980] netlink: 'syz.2.122': attribute type 11 has an invalid length.
[   76.280895][ T5987] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   76.550667][ T6002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.629167][ T6008] syz.2.135 uses obsolete (PF_INET,SOCK_PACKET)
[   76.922454][ T5001] Bluetooth: hci1: command tx timeout
[   76.994375][ T5001] Bluetooth: hci2: command tx timeout
[   76.994758][ T5647] Bluetooth: hci0: command tx timeout
[   77.310721][ T6053] netlink: 'syz.2.155': attribute type 8 has an invalid length.
[   77.343495][ T6055] syzkaller0: entered promiscuous mode
[   77.345614][ T6055] syzkaller0: entered allmulticast mode
[   77.636145][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[   77.644085][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[   77.939877][ T6103] netlink: 'syz.0.179': attribute type 1 has an invalid length.
[   78.078442][ T6113] netlink: 'syz.2.182': attribute type 4 has an invalid length.
[   78.841959][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   80.094575][ T6160] __nla_validate_parse: 5 callbacks suppressed
[   80.094589][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.205'.
[   80.100656][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.205'.
[   80.183901][   T33] audit: type=1804 audit(1778602431.084:2): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.209" name="/newroot/62/cgroup.controllers" dev="tmpfs" ino=330 res=1 errno=0
[   80.201543][   T33] audit: type=1800 audit(1778602431.084:3): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.209" name="cgroup.controllers" dev="tmpfs" ino=330 res=0 errno=0
[   80.467232][   T56] block nbd0: Receive control failed (result -32)
[   80.700735][ T6201] warning: `syz.0.225' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.850780][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'.
[   80.857248][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.229'.
[   81.106282][ T6228] wg1: entered promiscuous mode
[   81.108030][ T6228] wg1: entered allmulticast mode
[   81.204035][ T6236] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[   81.716286][ T6278] tipc: Started in network mode
[   81.722525][ T6278] tipc: Node identity 42915e020292, cluster identity 4711
[   81.730973][ T6278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.740194][ T6278] syzkaller0: entered promiscuous mode
[   81.744210][ T6278] syzkaller0: entered allmulticast mode
[   81.800184][ T6278] tipc: Resetting bearer <eth:syzkaller0>
[   81.809756][ T6276] tipc: Resetting bearer <eth:syzkaller0>
[   81.854971][ T6276] tipc: Disabling bearer <eth:syzkaller0>
[   81.865932][ T6288] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.268'.
[   81.990224][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.271'.
[   82.106177][ T6305] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   82.117303][ T6305] bond1 (unregistering): Released all slaves
[   82.369202][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.283'.
[   82.526903][ T6326] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[   82.530181][ T6326] netlink: 244 bytes leftover after parsing attributes in process `syz.2.285'.
[   82.535555][ T6326] NCSI netlink: No device for ifindex 0
[   82.717536][ T6335] xt_SECMARK: invalid mode: 4
[   82.745681][ T6337] sctp: [Deprecated]: syz.1.290 (pid 6337) Use of struct sctp_assoc_value in delayed_ack socket option.
[   82.745681][ T6337] Use struct sctp_sack_info instead
[   82.941077][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.295'.
[   83.099519][ T5699] IPVS: starting estimator thread 0...
[   83.212187][ T6360] IPVS: using max 81 ests per chain, 194400 per kthread
[   83.395103][ T6377] netlink: 52 bytes leftover after parsing attributes in process `syz.2.309'.
[   83.404384][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.410829][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.429681][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.432556][ T6377] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.435770][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.438469][ T6377] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.444514][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.446921][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.411013][ T6422] 8021q: VLANs not supported on lo
[   85.252568][ T6468] __nla_validate_parse: 2 callbacks suppressed
[   85.252589][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'.
[   85.523726][ T6483] syzkaller1: entered promiscuous mode
[   85.526471][ T6483] syzkaller1: entered allmulticast mode
[   85.586179][ T6481] bridge_slave_0: left allmulticast mode
[   85.588712][ T6481] bridge_slave_0: left promiscuous mode
[   85.591407][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.599574][ T6481] bridge_slave_1: left allmulticast mode
[   85.603036][ T6481] bridge_slave_1: left promiscuous mode
[   85.606146][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.624410][ T6481] bond0: (slave bond_slave_0): Releasing backup interface
[   85.664116][ T6481] bond0: (slave bond_slave_1): Releasing backup interface
[   85.689647][ T6481] team0: Port device team_slave_0 removed
[   85.699042][ T6481] team0: Port device team_slave_1 removed
[   85.705727][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.711627][ T6481] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.718393][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.727292][ T6481] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.737650][ T6481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   86.129527][ T6505] IPVS: ip_vs_edit_dest(): server weight less than zero
[   86.133075][ T5706] IPVS: starting estimator thread 0...
[   86.242737][ T6506] IPVS: using max 79 ests per chain, 189600 per kthread
[   86.601853][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   86.662143][ T6534] IPv6: addrconf: prefix option has invalid lifetime
[   86.835651][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.377'.
[   87.233637][ T6592] tap0: tun_chr_ioctl cmd 1074025692
[   87.371677][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'.
[   87.459245][   T56] block nbd1: Receive control failed (result -1)
[   87.526539][ T6611] syzkaller0: entered promiscuous mode
[   87.531896][ T6611] syzkaller0: entered allmulticast mode
[   87.943332][ T6619] netlink: 'syz.1.398': attribute type 1 has an invalid length.
[   89.153474][ T6619] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   89.184898][   T32] cfg80211: failed to load regulatory.db
[   89.326767][ T6635] netlink: 'syz.1.403': attribute type 15 has an invalid length.
[   89.334242][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'.
[   89.367343][ T6640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.405'.
[   89.380812][ T6635] netlink: 'syz.1.403': attribute type 15 has an invalid length.
[   89.381425][ T5507] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0
[   89.384899][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'.
[   89.388593][ T5507] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0
[   89.394627][ T5507] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0
[   89.402776][ T5507] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0
[   89.417126][ T6635] Zero length message leads to an empty skb
[   89.729054][ T6651] netlink: 'syz.2.410': attribute type 10 has an invalid length.
[   89.734968][ T6651] ipvlan0: entered allmulticast mode
[   89.738120][ T6651] veth0_vlan: entered allmulticast mode
[   89.754031][ T6651] team0: Device ipvlan0 failed to register rx_handler
[   89.864879][ T6664] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[   89.969322][ T6668] bond1: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[   89.975768][ T6668] bond1: entered promiscuous mode
[   89.980160][ T6668] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.044547][ T6672] netlink: 'syz.1.419': attribute type 1 has an invalid length.
[   90.067431][ T6672] bond2: entered promiscuous mode
[   90.069439][ T6672] bond2: entered allmulticast mode
[   90.071417][ T6672] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.084387][ T6672] bridge1: entered promiscuous mode
[   90.086533][ T6672] bridge1: entered allmulticast mode
[   90.088761][ T6672] bond2: (slave bridge1): Enslaving as a backup interface with an up link
[   90.135581][ T6672] bridge2: entered promiscuous mode
[   90.137956][ T6672] bridge2: entered allmulticast mode
[   90.142682][ T6672] bond2: (slave bridge2): Enslaving as a backup interface with a down link
[   90.173125][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   90.244833][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'.
[   90.273506][ T6683] macvlan2: entered allmulticast mode
[   90.279009][ T6685] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   90.285530][ T6683] veth1_vlan: entered allmulticast mode
[   90.294559][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   90.575262][ T6703] syzkaller0: entered promiscuous mode
[   90.578158][ T6703] syzkaller0: entered allmulticast mode
[   90.873362][ T6717] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[   90.873362][ T6717] 3UH5rBn
[   90.918414][ T6719] IPv6: addrconf: prefix option has invalid lifetime
[   90.990316][ T6724] tc action pedit 'at' offset 6 out of bounds
[   91.884107][ T6781] x_tables: arp_tables: NFQUEUE target: not valid for this family
[   92.199625][ T6801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.476'.
[   92.341401][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'.
[   92.345219][ T6805] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   92.349053][ T6805] netlink: 56 bytes leftover after parsing attributes in process `syz.1.478'.
[   92.594016][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.484'.
[   93.319238][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[   93.335498][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'.
[   93.510490][ T6878] netlink: 36 bytes leftover after parsing attributes in process `syz.0.514'.
[   93.602385][ T6884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.837045][ T6898] ieee802154 phy0 wpan0: encryption failed: -22
[   94.091615][ T6927] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.438812][   T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.442000][   T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.450200][ T6955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.517821][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'.
[   94.791111][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'.
[   95.036779][ T6989] netlink: 120 bytes leftover after parsing attributes in process `syz.1.565'.
[   95.039553][ T6989] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[   95.246390][ T7001] tipc: Started in network mode
[   95.251114][ T7001] tipc: Node identity ca274955a84d, cluster identity 4711
[   95.257669][ T7001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.262918][ T7001] syzkaller0: entered promiscuous mode
[   95.264912][ T7001] syzkaller0: entered allmulticast mode
[   95.283243][ T7001] tipc: Resetting bearer <eth:syzkaller0>
[   95.288373][ T7000] tipc: Resetting bearer <eth:syzkaller0>
[   95.298746][ T7000] tipc: Disabling bearer <eth:syzkaller0>
[   95.368749][ T7010] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   96.638165][ T7103] openvswitch: netlink: IP tunnel TTL not specified.
[   96.944005][ T7118] pimreg: entered allmulticast mode
[   96.962454][ T7118] pimreg: left allmulticast mode
[   96.976347][ T7122] veth0: entered promiscuous mode
[   96.979808][ T7122] veth0: left promiscuous mode
[   97.261342][ T7141] __nla_validate_parse: 2 callbacks suppressed
[   97.261359][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[   97.506254][ T7155] netlink: 'syz.1.633': attribute type 8 has an invalid length.
[   97.513620][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'.
[   97.529652][ T7155] veth1_to_team: entered promiscuous mode
[   97.537088][ T7155] gretap0: entered promiscuous mode
[   97.550613][ T7155] veth1_to_team: left promiscuous mode
[   97.559582][ T7155] gretap0: left promiscuous mode
[   97.725792][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.639'.
[   97.797286][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'.
[   97.799427][ T7169] netlink: 'syz.2.641': attribute type 7 has an invalid length.
[   97.956697][ T7190] ieee802154 phy0 wpan0: encryption failed: -22
[   98.893678][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.904918][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.033466][ T7296] bond1: left promiscuous mode
[  100.218229][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[  100.528938][ T7323] netlink: 'syz.0.706': attribute type 1 has an invalid length.
[  100.587174][ T7323] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.593900][ T7323] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  100.649330][ T7327] bond1: (slave gretap1): making interface the new active one
[  100.653351][ T7327] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  100.700682][ T7323] macvlan2: entered promiscuous mode
[  100.706506][ T7323] macvlan2: entered allmulticast mode
[  100.709304][ T7323] bond1: entered promiscuous mode
[  100.711434][ T7323] gretap1: entered promiscuous mode
[  100.716302][ T7323] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  100.720671][ T7323] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  100.725844][ T7323] bond1: left promiscuous mode
[  100.727437][ T7323] gretap1: left promiscuous mode
[  100.745595][ T7329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.856508][ T7333] bond2: entered promiscuous mode
[  100.921279][ T7339] Bluetooth: MGMT ver 1.23
[  101.097133][ T7349] netlink: 'syz.0.718': attribute type 1 has an invalid length.
[  101.159913][ T7353] netlink: 332 bytes leftover after parsing attributes in process `syz.1.721'.
[  101.166398][ T7353] netlink: 'syz.1.721': attribute type 9 has an invalid length.
[  101.169882][ T7353] netlink: 108 bytes leftover after parsing attributes in process `syz.1.721'.
[  101.173645][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'.
[  101.192678][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'.
[  101.952744][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  102.120607][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.2.733'.
[  102.363173][ T7396] netlink: 48 bytes leftover after parsing attributes in process `syz.1.738'.
[  102.473360][ T7404] --map-set only usable from mangle table
[  102.894405][ T7427] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  103.168135][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'.
[  103.364109][ T7463] syzkaller1: entered promiscuous mode
[  103.375646][ T7463] syzkaller1: entered allmulticast mode
[  103.387257][ T7467] netlink: 'syz.0.769': attribute type 21 has an invalid length.
[  103.391550][ T7467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.769'.
[  103.399034][ T7467] netlink: 'syz.0.769': attribute type 1 has an invalid length.
[  103.502830][ T7476] netlink: 'syz.2.772': attribute type 1 has an invalid length.
[  103.581374][ T7484] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  104.317336][ T7544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'.
[  104.337225][ T7544] netlink: 'syz.1.804': attribute type 2 has an invalid length.
[  104.343555][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'.
[  104.588525][ T7566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.600276][ T7566] syzkaller0: entered promiscuous mode
[  104.606633][ T7566] syzkaller0: entered allmulticast mode
[  104.642878][ T7566] tipc: Resetting bearer <eth:syzkaller0>
[  104.649785][ T7564] tipc: Resetting bearer <eth:syzkaller0>
[  104.670197][ T7564] tipc: Disabling bearer <eth:syzkaller0>
[  104.759269][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'.
[  104.764816][ T7580] bond0: option resend_igmp: invalid value (41663)
[  104.767352][ T7580] bond0: option resend_igmp: allowed values 0 - 255
[  104.927527][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'.
[  105.566311][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'.
[  105.690803][ T7604] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  105.787852][ T7609] ip6tnl2: entered promiscuous mode
[  106.095806][ T7635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.197761][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.848'.
[  106.257876][ T7651] netlink: 'syz.2.850': attribute type 3 has an invalid length.
[  106.268276][ T7651] netlink: 'syz.2.850': attribute type 3 has an invalid length.
[  106.998482][ T7687] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.015054][ T7687] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  107.160960][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.869'.
[  107.482974][ T7700] syzkaller1: entered promiscuous mode
[  107.485367][ T7700] syzkaller1: entered allmulticast mode
[  110.159496][ T7716] netlink: 'syz.1.875': attribute type 28 has an invalid length.
[  110.274317][ T7722] syzkaller0: entered promiscuous mode
[  110.278010][ T7722] syzkaller0: entered allmulticast mode
[  110.290116][ T7722] tc action pedit offset must be on 32 bit boundaries
[  110.399776][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'.
[  110.444514][ T7726] team1: entered promiscuous mode
[  110.450619][ T7726] team1: entered allmulticast mode
[  110.455342][ T7726] 8021q: adding VLAN 0 to HW filter on device team1
[  110.466139][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.879'.
[  110.475698][ T7730] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  110.524977][ T7730] team2: entered promiscuous mode
[  110.527264][ T7730] team2: entered allmulticast mode
[  110.529777][ T7730] 8021q: adding VLAN 0 to HW filter on device team2
[  110.548226][ T7732] netlink: 76 bytes leftover after parsing attributes in process `syz.1.882'.
[  110.676078][ T7734] bridge1: entered promiscuous mode
[  110.678340][ T7734] bridge1: entered allmulticast mode
[  110.688137][ T7734] team0: Port device bridge1 added
[  110.751064][ T7728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.780178][ T7745] bridge2: entered promiscuous mode
[  110.784508][ T7745] bridge2: entered allmulticast mode
[  110.787587][ T7745] team0: Port device bridge2 added
[  110.798187][ T7734] bridge0: port 3(team0) entered blocking state
[  110.809218][ T7734] bridge0: port 3(team0) entered disabled state
[  110.812485][ T7734] team0: entered allmulticast mode
[  110.814627][ T7734] team_slave_0: entered allmulticast mode
[  110.817245][ T7734] team_slave_1: entered allmulticast mode
[  110.825011][ T7734] team0: entered promiscuous mode
[  110.827180][ T7734] team_slave_0: entered promiscuous mode
[  110.829753][ T7734] team_slave_1: entered promiscuous mode
[  110.834638][ T7734] bridge0: port 3(team0) entered blocking state
[  110.838254][ T7734] bridge0: port 3(team0) entered forwarding state
[  110.907355][ T7728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.026015][ T7728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.410357][ T7728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.536277][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.553200][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.568018][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.571312][ T7762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.892'.
[  111.590237][ T5675] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.327488][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'.
[  112.984048][ T7816] netlink: 'syz.1.913': attribute type 12 has an invalid length.
[  112.988584][ T7816] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.913'.
[  113.506408][ T7835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.918'.
[  114.330897][ T7868] netlink: 'syz.1.935': attribute type 10 has an invalid length.
[  114.337188][ T7868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.935'.
[  114.351834][ T7868] team0: Port device geneve1 added
[  114.495523][ T7881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.940'.
[  114.500225][ T7882] netlink: 'syz.0.941': attribute type 2 has an invalid length.
[  114.861079][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.949'.
[  115.287125][ T7926] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.704777][ T8015] __nla_validate_parse: 1 callbacks suppressed
[  116.704793][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  116.871231][ T8027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.991'.
[  116.930047][ T8031] netlink: 'syz.2.992': attribute type 10 has an invalid length.
[  116.947454][ T8031] team0: Device ipvlan0 failed to register rx_handler
[  117.204946][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.208093][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.533904][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.546642][ T8040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.668238][ T8040] veth1_vlan: left allmulticast mode
[  117.677626][ T8045] bridge_slave_0 (unregistering): left allmulticast mode
[  117.688672][ T8045] bridge_slave_0 (unregistering): left promiscuous mode
[  117.692934][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.714289][ T5507] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0
[  117.719825][ T5507] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.729979][ T5507] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0
[  117.736187][ T5507] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.741266][ T5507] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0
[  117.745791][ T5507] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.749717][ T5507] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0
[  117.756378][ T5507] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.787008][ T8079] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1001'.
[  118.016876][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'.
[  118.094980][ T8086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.230051][ T8092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.244963][ T8092] syzkaller0: entered promiscuous mode
[  118.247446][ T8092] syzkaller0: entered allmulticast mode
[  118.267715][ T8092] tipc: Resetting bearer <eth:syzkaller0>
[  118.278736][ T8091] tipc: Resetting bearer <eth:syzkaller0>
[  118.299754][ T8091] tipc: Disabling bearer <eth:syzkaller0>
[  118.854161][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'.
[  118.868270][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'.
[  119.069313][ T8137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1021'.
[  119.426973][ T8157] xt_TCPMSS: Only works on TCP SYN packets
[  119.650326][ T8175] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  119.680901][ T8177] IPv6: NLM_F_CREATE should be specified when creating new route
[  120.316674][ T8227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1060'.
[  120.320240][ T8227] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  120.349690][ T8225] netlink: 'syz.0.1059': attribute type 10 has an invalid length.
[  120.357649][ T8225] syz_tun: entered promiscuous mode
[  120.374051][ T8225] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  120.416500][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'.
[  120.550240][ T8238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1064'.
[  120.838165][ T8261] netlink: 'syz.1.1075': attribute type 1 has an invalid length.
[  121.363507][ T8292] : entered promiscuous mode
[  121.372927][ T8288] openvswitch: : Dropping previously announced user features
[  121.627863][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.148154][ T8336] syzkaller0: entered promiscuous mode
[  122.150757][ T8336] syzkaller0: entered allmulticast mode
[  123.565059][ T8376] __nla_validate_parse: 10 callbacks suppressed
[  123.565069][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'.
[  123.570566][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'.
[  123.652346][ T8380] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1119'.
[  123.770787][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'.
[  123.786572][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'.
[  123.800406][ T8394] vlan2: entered promiscuous mode
[  123.802480][ T8394] veth0: entered promiscuous mode
[  124.086709][ T8410] netlink: 'syz.0.1132': attribute type 4 has an invalid length.
[  124.091898][ T8410] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1132'.
[  124.315951][ T8433] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1143'.
[  124.428964][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  124.481338][ T8443] netlink: 'syz.2.1146': attribute type 1 has an invalid length.
[  124.889659][ T8465] xt_hashlimit: size too large, truncated to 1048576
[  127.802351][ T8458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.966173][ T8538] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  128.053086][ T8538] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.063541][ T8538] bond3: (slave bond4): making interface the new active one
[  128.070175][ T8538] bond3: (slave bond4): Enslaving as an active interface with an up link
[  128.096527][ T8543] syzkaller0: entered promiscuous mode
[  128.098970][ T8543] syzkaller0: entered allmulticast mode
[  128.101606][ T8538] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1184'.
[  129.717071][ T8550] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  129.788160][ T8562] IPv6: addrconf: prefix option has invalid lifetime
[  130.120565][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'.
[  130.152705][ T8587] netlink: 'syz.0.1204': attribute type 1 has an invalid length.
[  130.179164][ T8587] bond5: entered promiscuous mode
[  130.182496][ T8587] bond5: entered allmulticast mode
[  130.184527][ T8587] 8021q: adding VLAN 0 to HW filter on device bond5
[  130.204559][ T8587] erspan1: entered allmulticast mode
[  130.208923][ T8587] bond5: (slave erspan1): making interface the new active one
[  130.211632][ T8587] erspan1: entered promiscuous mode
[  130.215021][ T8587] bond5: (slave erspan1): Enslaving as an active interface with an up link
[  130.255930][ T8587] syz.0.1204 (8587) used obsolete PPPIOCDETACH ioctl
[  130.359579][ T8602] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1210'.
[  130.522252][ T8616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1217'.
[  130.673770][ T8631] netlink: 'syz.2.1223': attribute type 15 has an invalid length.
[  130.739372][ T8638] sctp: [Deprecated]: syz.2.1226 (pid 8638) Use of int in max_burst socket option.
[  130.739372][ T8638] Use struct sctp_assoc_value instead
[  130.773577][ T8633] "syz.1.1224" (8633) uses obsolete ecb(arc4) skcipher
[  131.134645][ T8664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1237'.
[  131.224677][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1243'.
[  131.392042][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  131.766730][ T8716] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1262'.
[  131.814553][ T8720] xt_TPROXY: Can be used only with -p tcp or -p udp
[  131.836773][ T8720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1264'.
[  131.849952][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'.
[  132.290647][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'.
[  132.333640][ T8768] netlink: 'syz.0.1289': attribute type 12 has an invalid length.
[  132.549217][ T8780] block nbd2: server does not support multiple connections per device.
[  132.563681][ T8780] block nbd2: shutting down sockets
[  132.838021][ T8798] netlink: 'syz.1.1302': attribute type 1 has an invalid length.
[  132.840900][ T8798] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1302'.
[  133.244152][ T8810] netlink: 'syz.2.1307': attribute type 10 has an invalid length.
[  133.251548][ T8810] team0: Device ipvlan0 failed to register rx_handler
[  133.851540][ T8832] bond3 (unregistering): Released all slaves
[  134.467718][ T8875] bond6 (unregistering): Released all slaves
[  135.768625][ T8921] netlink: 'syz.0.1356': attribute type 10 has an invalid length.
[  137.010427][ T8921] ipvlan0: entered allmulticast mode
[  137.013261][ T8921] veth0_vlan: entered allmulticast mode
[  137.030395][ T8921] team0: Device ipvlan0 failed to register rx_handler
[  137.510515][ T8958] __nla_validate_parse: 3 callbacks suppressed
[  137.510534][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'.
[  137.596458][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'.
[  137.620994][ T8964] bond3: option ad_actor_sys_prio: invalid value (0)
[  137.640734][ T8964] bond3: option ad_actor_sys_prio: allowed values 1 - 65535
[  137.672405][ T8964] bond3 (unregistering): Released all slaves
[  137.828024][ T8979] netlink: 'syz.2.1381': attribute type 1 has an invalid length.
[  137.876633][ T8979] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.907444][ T8979] bond2: (slave geneve2): making interface the new active one
[  137.913691][ T8979] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  138.070431][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'.
[  138.082048][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1386'.
[  138.086527][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1386'.
[  138.203845][ T8997] hmac(sha224: entered promiscuous mode
[  138.413466][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'.
[  138.621508][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1399'.
[  138.768567][ T9027] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  139.033435][ T9039] syz_tun: entered allmulticast mode
[  139.066255][ T9039] dvmrp8: entered allmulticast mode
[  139.074636][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  139.077778][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  139.085378][ T9036] syz_tun: left allmulticast mode
[  139.194808][ T9045] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  139.199883][ T9045] bond6 (unregistering): Released all slaves
[  139.275854][ T9048] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1412'.
[  139.311970][ T5001] Bluetooth: hci0: command 0x0c1a tx timeout
[  139.316266][ T5647] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  139.354476][ T9052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.970750][ T8110] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.978169][ T8110] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.982036][ T8110] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.985175][ T8110] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.580185][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1436'.
[  140.585390][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'.
[  140.589532][ T9125] netlink: 'syz.1.1436': attribute type 11 has an invalid length.
[  141.908011][ T9200] netlink: 'syz.1.1453': attribute type 2 has an invalid length.
[  142.405420][ T9217] openvswitch: netlink: IP tunnel TTL not specified.
[  142.578508][ T9224] __nla_validate_parse: 2 callbacks suppressed
[  142.578523][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'.
[  142.591212][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1464'.
[  142.609032][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'.
[  142.620127][ T9224] netlink: 'syz.2.1464': attribute type 5 has an invalid length.
[  143.031597][ T9237] syzkaller0: entered promiscuous mode
[  143.036811][ T9237] syzkaller0: entered allmulticast mode
[  143.054134][ T9237] 0: reclassify loop, rule prio 0, protocol 800
[  143.523918][   T24] IPVS: starting estimator thread 0...
[  143.621911][ T9251] IPVS: using max 40 ests per chain, 96000 per kthread
[  144.004266][ T5647] Bluetooth: hci2: link tx timeout
[  144.006949][ T5647] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  144.014122][ T5647] Bluetooth: hci2: link tx timeout
[  144.016453][ T5647] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  144.424935][ T9279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1484'.
[  144.507426][ T9281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.906730][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'.
[  145.115523][ T9298] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1493'.
[  145.364556][ T9305] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  146.001204][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'.
[  146.036156][ T5647] Bluetooth: hci2: command 0x0405 tx timeout
[  147.448998][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1529'.
[  147.455863][ T9386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1529'.
[  147.760035][ T9410] netlink: 'syz.0.1536': attribute type 3 has an invalid length.
[  147.853411][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'.
[  147.856918][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'.
[  147.859861][ T9416] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1537'.
[  147.869362][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'.
[  147.879058][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'.
[  147.888812][ T9416] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1537'.
[  148.131027][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1542'.
[  148.192410][ T5647] Bluetooth: hci2: command 0x0405 tx timeout
[  148.858123][ T9460] netlink: 'syz.1.1548': attribute type 4 has an invalid length.
[  148.873913][ T9460] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1548'.
[  148.886965][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'.
[  148.897397][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'.
[  149.289325][ T9488] syzkaller0: entered promiscuous mode
[  149.291627][ T9488] syzkaller0: entered allmulticast mode
[  149.786042][ T9499] netlink: 'syz.2.1569': attribute type 3 has an invalid length.
[  150.107326][ T9504] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  150.447750][ T9487] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  151.065279][ T9522] netlink: 'syz.2.1575': attribute type 1 has an invalid length.
[  151.234458][ T8106] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.246963][ T8106] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.258886][ T8106] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.266941][ T8106] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.331005][ T9529] bridge_slave_1: left allmulticast mode
[  151.333615][ T9529] bridge_slave_1: left promiscuous mode
[  151.336175][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.350779][ T9529] bond0: (slave bond_slave_0): Releasing backup interface
[  151.368461][ T9529] bond0: (slave bond_slave_1): Releasing backup interface
[  151.396329][ T9529] team0: Port device team_slave_0 removed
[  151.414407][ T9529] team0: Port device team_slave_1 removed
[  151.427725][ T9529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.429047][ T9533] netlink: 'syz.0.1581': attribute type 83 has an invalid length.
[  151.449581][ T9529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.457165][ T9529] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  153.121090][ T9603] nbd: socks must be embedded in a SOCK_ITEM attr
[  153.641653][ T9626] netlink: 'syz.0.1627': attribute type 2 has an invalid length.
[  153.654416][ T9627] __nla_validate_parse: 15 callbacks suppressed
[  153.654480][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1626'.
[  153.813465][ T9633] netlink: 'syz.1.1631': attribute type 1 has an invalid length.
[  153.855002][ T9633] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  153.859165][ T9633] bond4: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[  153.866902][ T9633] bond4: (slave vxcan5): making interface the new active one
[  153.870836][ T9633] bond4: (slave vxcan5): Enslaving as an active interface with an up link
[  153.882646][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1631'.
[  153.898248][ T9633] bond4 (unregistering): (slave vxcan5): Releasing backup interface
[  153.908359][ T9633] bond4 (unregistering): Released all slaves
[  154.358510][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'.
[  154.647003][ T9663] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1645'.
[  154.651312][ T9663] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1645'.
[  155.558441][ T9709] netlink: 'syz.2.1665': attribute type 2 has an invalid length.
[  155.671119][ T9717] tipc: Started in network mode
[  155.674907][ T9717] tipc: Node identity 4e38532d4fa9, cluster identity 4711
[  155.677990][ T9717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.704937][ T9717] syzkaller0: entered promiscuous mode
[  155.707108][ T9717] syzkaller0: entered allmulticast mode
[  155.709959][ T9717] tipc: Resetting bearer <eth:syzkaller0>
[  156.058604][ T9716] tipc: Resetting bearer <eth:syzkaller0>
[  156.244104][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'.
[  158.411375][ T9716] tipc: Disabling bearer <eth:syzkaller0>
[  158.433034][ T9724] syz_tun: left promiscuous mode
[  158.445326][ T9724] wg1: left promiscuous mode
[  158.447246][ T9724] wg1: left allmulticast mode
[  158.479076][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  158.489177][ T9724] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  158.527798][   T32] tipc: Node number set to 26301229
[  158.905559][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  158.954511][ T9755] erspan1: entered promiscuous mode
[  158.959515][ T9755] erspan1: entered allmulticast mode
[  159.007710][ T9757] netlink: 'syz.1.1688': attribute type 2 has an invalid length.
[  159.423601][ T9765] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.424424][ T9767] netlink: 'syz.1.1691': attribute type 1 has an invalid length.
[  159.456842][ T9765] 8021q: adding VLAN 0 to HW filter on device team0
[  159.517872][ T9765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.659460][ T9765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  159.663789][ T9765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  159.668803][ T9765] 8021q: adding VLAN 0 to HW filter on device hsr0
[  159.678938][ T9765] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  159.815002][ T9768] bond4: (slave vxcan7): The slave device specified does not support setting the MAC address
[  159.819051][ T9768] bond4: (slave vxcan7): Error -95 calling set_mac_address
[  159.967601][ T9773] bond4: (slave gretap2): making interface the new active one
[  159.978583][ T9773] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  160.004299][ T9774] macvlan3: entered promiscuous mode
[  160.006639][ T9774] macvlan3: entered allmulticast mode
[  160.009555][ T9774] bond4: entered promiscuous mode
[  160.012473][ T9774] gretap2: entered promiscuous mode
[  160.015780][ T9774] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  160.021640][ T9774] bond4: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  160.028981][ T9774] bond4: left promiscuous mode
[  160.031091][ T9774] gretap2: left promiscuous mode
[  160.056780][ T9778] batadv0: entered promiscuous mode
[  160.060773][ T9778] batadv0: left promiscuous mode
[  160.225653][ T9784] IPv6: addrconf: prefix option has invalid lifetime
[  160.473924][ T9792] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  160.998311][ T9811] netlink: 'syz.2.1709': attribute type 8 has an invalid length.
[  161.213773][ T9819] netlink: 'syz.2.1710': attribute type 1 has an invalid length.
[  161.232560][ T9819] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1710'.
[  162.231334][ T8104] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.235155][ T8104] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.238729][ T8104] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.245709][ T8104] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  162.374131][ T9856] syzkaller0: entered promiscuous mode
[  162.376028][ T9856] syzkaller0: entered allmulticast mode
[  162.594708][ T9863] netlink: 'syz.1.1732': attribute type 3 has an invalid length.
[  162.607110][ T9863] netlink: 'syz.1.1732': attribute type 3 has an invalid length.
[  163.866432][ T9933] pim6reg1: entered promiscuous mode
[  163.871930][ T9933] pim6reg1: entered allmulticast mode
[  164.005176][ T9937] syzkaller0: entered promiscuous mode
[  164.007624][ T9937] syzkaller0: entered allmulticast mode
[  164.104674][ T9939] Cannot find del_set index 1 as target
[  164.479936][ T9952] netlink: 'syz.0.1771': attribute type 16 has an invalid length.
[  164.485335][ T9952] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1771'.
[  164.727154][ T9962] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1778'.
[  164.858770][ T9966] netlink: 'syz.0.1779': attribute type 1 has an invalid length.
[  164.862479][ T9966] netlink: 'syz.0.1779': attribute type 3 has an invalid length.
[  164.867137][ T9966] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1779'.
[  164.871651][ T9966] NCSI netlink: No device for ifindex 813332851
[  165.070807][ T9973] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  165.074623][ T9973] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  165.302846][ T9991] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.1790'.
[  165.306274][ T9991] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.1790'.
[  165.487607][T10001] xt_hashlimit: size too large, truncated to 1048576
[  165.582802][T10003] sctp: [Deprecated]: syz.0.1795 (pid 10003) Use of int in max_burst socket option.
[  165.582802][T10003] Use struct sctp_assoc_value instead
[  165.874571][T10015] IPVS: persistence engine module ip_vs_pe_ not found
[  165.897935][T10022] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  166.924357][T10062] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1820'.
[  166.928198][T10062] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1820'.
[  167.175991][T10070] netlink: 'syz.0.1824': attribute type 21 has an invalid length.
[  167.338113][T10070] netlink: 'syz.0.1824': attribute type 21 has an invalid length.
[  167.347405][ T8110] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.353542][ T8110] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.357866][ T8110] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.362614][ T8110] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.456114][T10079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1827'.
[  168.880868][T10129] nicvf0: tun_chr_ioctl cmd 2148553947
[  170.374616][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'.
[  170.427920][T10161] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  170.536563][T10161] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  171.365264][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'.
[  171.371504][T10187] netlink: 'syz.2.1879': attribute type 22 has an invalid length.
[  171.376680][T10187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1879'.
[  172.161570][T10211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'.
[  173.548818][T10257] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  173.778740][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1914'.
[  173.854913][T10263] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  173.860562][T10266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  174.024580][T10274] sch_tbf: burst 0 is lower than device sit0 mtu (1480) !
[  174.165862][T10278] IPv6: NLM_F_CREATE should be specified when creating new route
[  174.177854][T10278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.182136][T10278] IPv6: NLM_F_CREATE should be set when creating new route
[  174.184940][T10278] IPv6: NLM_F_CREATE should be set when creating new route
[  174.188924][T10278] IPv6: NLM_F_CREATE should be set when creating new route
[  175.375340][T10293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  175.738078][T10324] netlink: 'syz.1.1936': attribute type 10 has an invalid length.
[  176.212899][T10340] syzkaller0: entered promiscuous mode
[  176.218709][T10340] syzkaller0: entered allmulticast mode
[  176.453514][T10342] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  177.527041][T10371] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1955'.
[  177.543309][T10371] netlink: 'syz.0.1955': attribute type 1 has an invalid length.
[  177.749582][T10380] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1959'.
[  177.755598][T10380] unsupported nlmsg_type 40
[  177.966245][T10386] tipc: Failed to remove unknown binding: 66,1,1/0:1692320238/1692320240
[  177.991552][T10386] tipc: Failed to remove unknown binding: 66,1,1/0:1692320238/1692320240
[  178.016347][T10386] tipc: Failed to remove unknown binding: 66,1,1/0:1692320238/1692320240
[  178.246996][T10392] bond5: entered allmulticast mode
[  178.288032][T10392] macvlan3: entered promiscuous mode
[  178.296302][T10392] macvlan3: entered allmulticast mode
[  178.299447][T10392] bond5: entered promiscuous mode
[  178.302679][T10392] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  178.308975][T10392] bond5: left promiscuous mode
[  178.580727][T10404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.590301][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'.
[  178.594261][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'.
[  178.881459][T10420] Bluetooth: MGMT ver 1.23
[  179.232958][   T33] audit: type=1800 audit(1778602530.124:4): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1977" name="memory.events" dev="tmpfs" ino=3372 res=0 errno=0
[  179.565167][T10445] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1988'.
[  179.576540][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1988'.
[  179.957862][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'.
[  181.572646][T10518] netlink: 'syz.0.2014': attribute type 1 has an invalid length.
[  181.576207][T10518] netlink: 'syz.0.2014': attribute type 2 has an invalid length.
[  181.687124][T10523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2012'.
[  181.893435][T10529] netlink: 'syz.0.2019': attribute type 11 has an invalid length.
[  182.360510][T10539] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2021'.
[  182.444449][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'.
[  182.618630][T10539] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.633260][T10539] 8021q: adding VLAN 0 to HW filter on device team0
[  182.674784][T10539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.782768][T10539] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  182.892122][T10543] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  183.159326][T10567] sctp: [Deprecated]: syz.0.2034 (pid 10567) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.159326][T10567] Use struct sctp_sack_info instead
[  183.562349][T10579] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  184.157330][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'.
[  184.451669][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'.
[  184.484781][T10614] bridge4: port 1(veth3) entered blocking state
[  184.490279][T10614] bridge4: port 1(veth3) entered disabled state
[  184.495995][T10614] veth3: entered allmulticast mode
[  184.499784][T10614] veth3: entered promiscuous mode
[  184.511652][T10614] bridge4: port 2(veth0_to_bond) entered blocking state
[  184.525053][T10614] bridge4: port 2(veth0_to_bond) entered disabled state
[  184.528574][T10614] veth0_to_bond: entered allmulticast mode
[  184.532214][T10614] veth0_to_bond: entered promiscuous mode
[  184.536516][T10614] bridge4: port 2(veth0_to_bond) entered blocking state
[  184.539083][T10614] bridge4: port 2(veth0_to_bond) entered forwarding state
[  184.595249][T10618] netlink: 'syz.1.2059': attribute type 1 has an invalid length.
[  185.178131][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'.
[  185.993403][T10663] netlink: 'syz.1.2082': attribute type 1 has an invalid length.
[  186.007885][T10663] netlink: 'syz.1.2082': attribute type 2 has an invalid length.
[  186.012609][T10663] netlink: 'syz.1.2082': attribute type 1 has an invalid length.
[  186.015901][T10663] netlink: 'syz.1.2082': attribute type 3 has an invalid length.
[  186.019016][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'.
[  186.624742][T10676] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2086'.
[  189.737352][T10684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  190.051600][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2109'.
[  190.095053][T10737] xt_l2tp: invalid flags combination: 0
[  192.354162][ T5647] Bluetooth: hci1: command 0x0406 tx timeout
[  192.945942][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2143'.
[  193.039757][T10818] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2144'.
[  193.085021][T10820] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2142'.
[  193.237046][T10827] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2148'.
[  193.240883][T10827] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2148'.
[  194.074889][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.121015][T10848] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  194.770056][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2168'.
[  194.813269][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2168'.
[  195.093125][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  195.256269][T10881] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2174'.
[  195.392217][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  195.666045][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'.
[  195.681323][T10897] xt_TCPMSS: Only works on TCP SYN packets
[  195.840307][T10897] team0: left allmulticast mode
[  195.842782][T10897] team_slave_0: left allmulticast mode
[  195.844815][T10897] team_slave_1: left allmulticast mode
[  195.848550][T10897] team0: left promiscuous mode
[  195.850780][T10897] team_slave_0: left promiscuous mode
[  195.854325][T10897] team_slave_1: left promiscuous mode
[  195.856689][T10897] bridge0: port 3(team0) entered disabled state
[  195.858679][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2180'.
[  195.874633][T10897] bridge_slave_1: left allmulticast mode
[  195.876598][T10897] bridge_slave_1: left promiscuous mode
[  195.878884][T10897] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.884988][T10897] bridge_slave_0: left allmulticast mode
[  195.886952][T10897] bridge_slave_0: left promiscuous mode
[  195.889121][T10897] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.581617][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2187'.
[  196.600661][T10914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  196.928963][T10933] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2197'.
[  196.934130][T10933] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  196.966144][T10935] netlink: 'syz.0.2199': attribute type 4 has an invalid length.
[  197.404062][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2208'.
[  197.608463][T10974] veth5: entered promiscuous mode
[  197.686199][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'.
[  197.796407][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2218'.
[  197.844191][T10978] bond6: entered promiscuous mode
[  197.847798][T10978] 8021q: adding VLAN 0 to HW filter on device bond6
[  197.853767][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2221'.
[  197.919531][T10985] bond6 (unregistering): Released all slaves
[  198.188189][T11003] xt_hashlimit: size too large, truncated to 1048576
[  198.195960][T11003] xt_hashlimit: max too large, truncated to 1048576
[  198.379201][T11013] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2234'.
[  198.590431][T11020] netlink: 'syz.0.2237': attribute type 1 has an invalid length.
[  198.698814][T11020] bond6: entered promiscuous mode
[  198.704824][T11020] 8021q: adding VLAN 0 to HW filter on device bond6
[  198.888166][T11029] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  198.899786][T11029] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  198.908785][T11020] bond6: entered allmulticast mode
[  198.962518][T11020] bond6: (slave bridge0): making interface the new active one
[  198.965514][T11020] bridge0: entered promiscuous mode
[  198.967715][T11020] bridge0: entered allmulticast mode
[  198.971052][T11020] bond6: (slave bridge0): Enslaving as an active interface with an up link
[  199.252158][T11046] netlink: 'syz.0.2248': attribute type 13 has an invalid length.
[  199.255372][T11046] netlink: 'syz.0.2248': attribute type 11 has an invalid length.
[  200.526938][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  200.532997][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  200.789775][T11089] __nla_validate_parse: 4 callbacks suppressed
[  200.789792][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'.
[  201.132009][T11096] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2270'.
[  201.210819][T11103] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96
[  201.380926][T11110] IPVS: length: 35 != 24
[  201.528622][T11115] netlink: 34 bytes leftover after parsing attributes in process `syz.0.2280'.
[  201.888021][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2285'.
[  201.926352][T11131] tap0: tun_chr_ioctl cmd 1074025681
[  202.190453][T11140] block nbd3: Receive control failed (result -32)
[  202.590714][T11162] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  202.603245][T11162] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  202.614432][T11162] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  202.729552][T11167] xt_hashlimit: size too large, truncated to 1048576
[  202.735680][T11167] xt_hashlimit: max too large, truncated to 1048576
[  202.741544][T11168] syzkaller0: entered promiscuous mode
[  202.750377][T11168] syzkaller0: entered allmulticast mode
[  202.800970][T11167] ipt_REJECT: TCP_RESET invalid for non-tcp
[  203.084641][T11184] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.2310'.
[  203.192767][T11188] netlink: 'syz.0.2312': attribute type 1 has an invalid length.
[  204.126678][T11230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2329'.
[  204.231642][T11236] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  204.671218][T11256] netlink: 'syz.1.2340': attribute type 4 has an invalid length.
[  204.699829][T11256] netlink: 'syz.1.2340': attribute type 4 has an invalid length.
[  205.727823][T11293] netlink: 'syz.0.2358': attribute type 4 has an invalid length.
[  206.549699][T11328] sctp: [Deprecated]: syz.0.2373 (pid 11328) Use of int in maxseg socket option.
[  206.549699][T11328] Use struct sctp_assoc_value instead
[  208.372477][T11358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.936799][T11376] vlan3: entered promiscuous mode
[  208.940874][T11376] gretap0: entered promiscuous mode
[  210.238597][T11405] SET target dimension over the limit!
[  210.326807][T11407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.333060][T11407] syzkaller0: entered promiscuous mode
[  210.336176][T11407] syzkaller0: entered allmulticast mode
[  210.347428][T11407] tipc: Resetting bearer <eth:syzkaller0>
[  210.357452][T11406] tipc: Resetting bearer <eth:syzkaller0>
[  210.381070][T11406] tipc: Disabling bearer <eth:syzkaller0>
[  210.632018][T11412] bridge5: entered promiscuous mode
[  210.635257][T11412] bridge5: entered allmulticast mode
[  210.642184][T11412] team0: Port device bridge5 added
[  210.649630][T11412] bridge0: port 1(team0) entered blocking state
[  210.666996][T11412] bridge0: port 1(team0) entered disabled state
[  210.680227][T11412] team0: entered allmulticast mode
[  210.683645][T11412] team_slave_0: entered allmulticast mode
[  210.687968][T11412] team_slave_1: entered allmulticast mode
[  210.699584][T11412] team0: entered promiscuous mode
[  210.701876][T11412] team_slave_0: entered promiscuous mode
[  210.704266][T11412] team_slave_1: entered promiscuous mode
[  210.707942][T11412] bridge0: port 1(team0) entered blocking state
[  210.710734][T11412] bridge0: port 1(team0) entered forwarding state
[  210.858578][T11415] netlink: 'syz.1.2408': attribute type 1 has an invalid length.
[  211.016192][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2411'.
[  212.230990][T11459] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  212.328075][T11457] syzkaller1: entered promiscuous mode
[  212.331118][T11457] syzkaller1: entered allmulticast mode
[  212.535239][T11474] netlink: 'syz.0.2433': attribute type 9 has an invalid length.
[  212.548074][T11474] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2433'.
[  212.858400][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'.
[  215.017355][T11559] bond3: Removing last ns target with arp_interval on
[  215.327288][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'.
[  215.343789][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2476'.
[  215.714589][T11579] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.744403][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2482'.
[  216.410838][T11618] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2499'.
[  216.423835][T11622] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  216.576705][T11628] netlink: 'syz.2.2503': attribute type 4 has an invalid length.
[  216.590099][T11628] netlink: 'syz.2.2503': attribute type 4 has an invalid length.
[  216.728009][T11641] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2509'.
[  216.813136][T11646] syzkaller0: entered promiscuous mode
[  216.816636][T11646] syzkaller0: entered allmulticast mode
[  216.924133][T11654] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2514'.
[  216.928556][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'.
[  216.933381][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2514'.
[  217.235012][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'.
[  217.241356][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'.
[  217.587796][T11689] netlink: 'syz.2.2529': attribute type 89 has an invalid length.
[  217.631627][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'.
[  217.655927][T11695] 8021q: adding VLAN 0 to HW filter on device bond4
[  217.671197][T11695] bond4: option mode: unable to set because the bond device is up
[  217.888675][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'.
[  217.891522][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2543'.
[  217.984312][T11728] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  218.138174][T11748] xt_TCPMSS: Only works on TCP SYN packets
[  218.170911][T11750] syzkaller0: entered promiscuous mode
[  218.174148][T11750] syzkaller0: entered allmulticast mode
[  218.364373][T11774] netlink: 'syz.0.2570': attribute type 3 has an invalid length.
[  218.367406][T11774] netlink: 'syz.0.2570': attribute type 1 has an invalid length.
[  218.370572][T11774] NCSI netlink: No device for ifindex 36
[  218.918909][T11802] netlink: 'syz.1.2583': attribute type 3 has an invalid length.
[  219.151105][T11820] vlan2: entered promiscuous mode
[  220.323736][T11882] netlink: 'syz.0.2620': attribute type 15 has an invalid length.
[  220.556235][T11900] bond7 (unregistering): Released all slaves
[  220.973645][T11916] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  221.048250][T11912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  221.060923][T11912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  221.449224][T11944] netlink: 'syz.0.2645': attribute type 1 has an invalid length.
[  221.494022][T11946] netlink: 'syz.0.2646': attribute type 1 has an invalid length.
[  221.549655][T11946] bond7: entered promiscuous mode
[  221.554341][T11946] 8021q: adding VLAN 0 to HW filter on device bond7
[  221.580957][T11948] bond7: (slave bridge6): making interface the new active one
[  221.595298][T11948] bridge6: entered promiscuous mode
[  221.609095][T11948] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  221.645283][T11946] bond7: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  221.658309][T11946] bond7: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  221.791686][T11957] netlink: 'syz.2.2649': attribute type 11 has an invalid length.
[  221.867022][T11964] __nla_validate_parse: 6 callbacks suppressed
[  221.867032][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'.
[  221.918950][T11966] netlink: 'syz.0.2654': attribute type 8 has an invalid length.
[  221.938038][ T5642] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  221.955687][T11964] 8021q: adding VLAN 0 to HW filter on device bond8
[  221.991441][ T5642] CPU: 0 UID: 0 PID: 5642 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  221.991456][ T5642] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.991462][ T5642] Call Trace:
[  221.991465][ T5642]  <TASK>
[  221.991469][ T5642]  dump_stack_lvl+0xe8/0x150
[  221.991483][ T5642]  dump_header+0xd3/0x4c0
[  221.991497][ T5642]  oom_kill_process+0x3ab/0x970
[  221.991509][ T5642]  out_of_memory+0x106c/0x1410
[  221.991518][ T5642]  ? try_charge_memcg+0xbb9/0x1570
[  221.991530][ T5642]  ? __pfx___mutex_lock+0x10/0x10
[  221.991540][ T5642]  ? __pfx_out_of_memory+0x10/0x10
[  221.991548][ T5642]  ? do_raw_spin_unlock+0x4d/0x210
[  221.991563][ T5642]  try_charge_memcg+0xc77/0x1570
[  221.991580][ T5642]  ? __pfx_try_charge_memcg+0x10/0x10
[  221.991590][ T5642]  ? percpu_ref_tryget+0x15/0x180
[  221.991609][ T5642]  ? charge_memcg+0x23/0x2b0
[  221.991620][ T5642]  charge_memcg+0x1a2/0x2b0
[  221.991631][ T5642]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  221.991640][ T5642]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  221.991652][ T5642]  __swap_cache_prepare_and_add+0xdc/0x700
[  221.991663][ T5642]  ? page_rmappable_folio+0x9a/0x170
[  221.991677][ T5642]  swap_cache_alloc_folio+0xf1/0x240
[  221.991687][ T5642]  swap_cluster_readahead+0x355/0x670
[  221.991715][ T5642]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  221.991730][ T5642]  ? get_vma_policy+0x27b/0x3c0
[  221.991742][ T5642]  swapin_readahead+0x196/0xc50
[  221.991751][ T5642]  ? swap_table_get+0x1e/0x260
[  221.991761][ T5642]  ? __pfx_swapin_readahead+0x10/0x10
[  221.991770][ T5642]  ? swap_table_get+0x1e/0x260
[  221.991778][ T5642]  ? swap_table_get+0x1e/0x260
[  221.991784][ T5642]  ? swap_table_get+0x1e/0x260
[  221.991792][ T5642]  ? swap_table_get+0x216/0x260
[  221.991800][ T5642]  ? swap_cache_get_folio+0x2e4/0x2f0
[  221.991811][ T5642]  do_swap_page+0x555/0x5120
[  221.991821][ T5642]  ? __pte_offset_map+0x29/0x240
[  221.991830][ T5642]  ? __pte_offset_map+0x29/0x240
[  221.991842][ T5642]  ? do_swap_page+0x128/0x5120
[  221.991850][ T5642]  ? __pfx_do_swap_page+0x10/0x10
[  221.991857][ T5642]  ? __pte_offset_map+0x1ae/0x240
[  221.991866][ T5642]  ? pte_offset_map_rw_nolock+0xea/0x160
[  221.991876][ T5642]  handle_mm_fault+0x12d2/0x3170
[  221.991891][ T5642]  ? handle_mm_fault+0xee/0x3170
[  221.991902][ T5642]  ? __pfx_handle_mm_fault+0x10/0x10
[  221.991910][ T5642]  ? lock_vma_under_rcu+0x45a/0x500
[  221.991929][ T5642]  do_user_addr_fault+0xa73/0x1340
[  221.991940][ T5642]  ? rcu_is_watching+0x15/0xb0
[  221.991949][ T5642]  ? trace_page_fault_user+0x84/0x1e0
[  221.991958][ T5642]  exc_page_fault+0x6a/0xc0
[  221.991969][ T5642]  asm_exc_page_fault+0x26/0x30
[  221.991976][ T5642] RIP: 0033:0x7f68c7b5d60e
[  221.991985][ T5642] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  221.991991][ T5642] RSP: 002b:00007ffd223596f8 EFLAGS: 00010246
[  221.991998][ T5642] RAX: 0000000000000000 RBX: 00005555761df500 RCX: 00007f68c7b5d60e
[  221.992003][ T5642] RDX: 00007ffd22359750 RSI: 0000000000000000 RDI: 0000000000000000
[  221.992008][ T5642] RBP: 00007ffd223597bc R08: 0000000000000000 R09: 0000000000000000
[  221.992012][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  221.992016][ T5642] R13: 00000000000927c0 R14: 0000000000036205 R15: 00007ffd22359810
[  221.992028][ T5642]  </TASK>
[  222.167274][T11964] bond8 (unregistering): Released all slaves
[  222.238479][ T5642] memory: usage 253120kB, limit 307200kB, failcnt 205
[  222.257173][ T5642] memory+swap: usage 244964kB, limit 9007199254740988kB, failcnt 0
[  222.267151][ T5642] kmem: usage 242684kB, limit 9007199254740988kB, failcnt 0
[  222.275127][ T5642] Memory cgroup stats for /syz1:
[  222.275531][ T5642] cache 0
[  222.284465][ T5642] rss 24576
[  222.285894][ T5642] rss_huge 0
[  222.291608][ T5642] shmem 0
[  222.296136][ T5642] mapped_file 0
[  222.301021][ T5642] dirty 0
[  222.304624][ T5642] writeback 0
[  222.308177][ T5642] workingset_refault_anon 5
[  222.314268][ T5642] workingset_refault_file 0
[  222.317912][ T5642] swap 167936
[  222.319303][ T5642] swapcached 270336
[  222.328377][ T5642] pgpgin 79106
[  222.329833][ T5642] pgpgout 79094
[  222.337499][ T5642] pgfault 126419
[  222.340541][ T5642] pgmajfault 4
[  222.345418][ T5642] inactive_anon 4096
[  222.348731][ T5642] active_anon 45056
[  222.360314][ T5642] inactive_file 0
[  222.367760][ T5642] active_file 0
[  222.372180][ T5642] unevictable 0
[  222.375778][ T5642] hierarchical_memory_limit 314572800
[  222.379539][ T5642] hierarchical_memsw_limit 9223372036854771712
[  222.387517][ T5642] total_cache 0
[  222.390836][ T5642] total_rss 24576
[  222.393916][ T5642] total_rss_huge 0
[  222.398300][ T5642] total_shmem 0
[  222.400670][ T5642] total_mapped_file 0
[  222.404755][ T5642] total_dirty 0
[  222.405964][ T5642] total_writeback 0
[  222.413195][ T5642] total_workingset_refault_anon 5
[  222.416826][ T5642] total_workingset_refault_file 0
[  222.427524][ T5642] total_swap 167936
[  222.431385][ T5642] total_swapcached 270336
[  222.440174][ T5642] total_pgpgin 79106
[  222.449258][ T5642] total_pgpgout 79094
[  222.456051][ T5642] total_pgfault 126419
[  222.463694][ T5642] total_pgmajfault 4
[  222.471514][ T5642] total_inactive_anon 4096
[  222.482971][ T5642] total_active_anon 45056
[  222.493190][ T5642] total_inactive_file 0
[  222.498196][ T5642] total_active_file 0
[  222.506268][ T5642] total_unevictable 0
[  222.513509][ T5642] anon_cost 0
[  222.518356][ T5642] file_cost 0
[  222.519798][ T5642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2639,pid=11928,uid=0
[  222.552331][ T5642] Memory cgroup out of memory: Killed process 11928 (syz.1.2639) total-vm:104544kB, anon-rss:1268kB, file-rss:22796kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  224.083045][T12029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.089819][T12029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.094461][T12029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  224.115869][T12039] netlink: 'syz.2.2682': attribute type 4 has an invalid length.
[  224.129816][T12032] netlink: 'syz.2.2682': attribute type 4 has an invalid length.
[  224.245912][T12029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.250271][T12029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.255595][T12029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  224.408451][T12029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.412577][T12029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.416773][T12029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  224.433092][T12049] netpci0: tun_chr_ioctl cmd 1074025678
[  224.435615][T12049] netpci0: group set to 0
[  224.569558][T12029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  224.575049][T12029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.579528][T12029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  224.714898][ T8110] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.719468][ T8110] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  224.723762][ T8110] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  224.788701][ T8110] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  224.801930][ T8110] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  224.805405][ T8110] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  224.831478][ T8110] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  224.837676][ T8110] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  224.843619][ T8110] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  224.893195][ T8110] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  224.902918][ T8110] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  224.910886][ T8110] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  224.991179][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2696'.
[  225.037661][T12072] netlink: 'syz.1.2699': attribute type 1 has an invalid length.
[  225.075901][T12072] 8021q: adding VLAN 0 to HW filter on device bond6
[  225.128337][T12079] bond6: (slave gretap3): making interface the new active one
[  225.136569][T12079] bond6: (slave gretap3): Enslaving as an active interface with an up link
[  225.210679][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2704'.
[  225.302241][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'.
[  225.351412][T12098] netlink: del zone limit has 8 unknown bytes
[  225.620497][T12114] sctp: [Deprecated]: syz.2.2716 (pid 12114) Use of int in maxseg socket option.
[  225.620497][T12114] Use struct sctp_assoc_value instead
[  225.895423][T12128] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2717'.
[  225.902891][T12129] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2720'.
[  226.579701][T12158] netlink: 'syz.2.2732': attribute type 1 has an invalid length.
[  226.583483][T12158] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2732'.
[  226.692167][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2736'.
[  226.993538][T12179] openvswitch: netlink: Duplicate or invalid key (type 0).
[  227.002165][T12179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.121015][T12189] : entered promiscuous mode
[  227.146807][T12191] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.275643][T12201] netlink: 'syz.1.2752': attribute type 1 has an invalid length.
[  227.310324][T12203] syzkaller0: entered promiscuous mode
[  227.318289][T12203] syzkaller0: entered allmulticast mode
[  227.356566][T12203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.365145][T12202] tipc: Resetting bearer <eth:syzkaller0>
[  227.394811][T12209] xt_TPROXY: Can be used only with -p tcp or -p udp
[  227.406192][T12202] tipc: Disabling bearer <eth:syzkaller0>
[  227.430821][T12211] xt_CT: You must specify a L4 protocol and not use inversions on it
[  227.561051][T12221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2762'.
[  227.739969][T12236] netlink: 'syz.1.2769': attribute type 1 has an invalid length.
[  227.965845][T12253] netlink: 'syz.2.2778': attribute type 1 has an invalid length.
[  227.969599][T12253] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2778'.
[  228.361202][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2793'.
[  228.488496][T12291] syzkaller0: entered promiscuous mode
[  228.490852][T12291] syzkaller0: entered allmulticast mode
[  229.061207][T12330] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2813'.
[  229.251542][T12347] SET target dimension over the limit!
[  230.490973][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2846'.
[  230.494380][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2846'.
[  230.497199][T12400] netlink: 'syz.1.2846': attribute type 12 has an invalid length.
[  230.499736][T12400] netlink: 'syz.1.2846': attribute type 13 has an invalid length.
[  230.838981][T12418] macvtap1: entered promiscuous mode
[  230.844633][T12418] team0: entered promiscuous mode
[  230.848690][T12418] geneve1: entered promiscuous mode
[  230.850879][T12418] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  230.856766][T12418] team0: Device macvtap1 is already an upper device of the team interface
[  230.864848][T12418] team0: left promiscuous mode
[  230.872095][T12418] geneve1: left promiscuous mode
[  231.095894][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2863'.
[  231.099095][T12434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2861'.
[  231.206041][T12449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2868'.
[  231.298052][T12453] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2870'.
[  231.545974][T12468] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  231.884912][T12486] bridge0: port 1(team0) entered disabled state
[  232.086071][T12486] bridge4: port 2(veth0_to_bond) entered disabled state
[  232.153889][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.248801][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.313463][T12506] netlink: 'syz.1.2886': attribute type 1 has an invalid length.
[  233.293724][T12498] ipvlan0: left allmulticast mode
[  233.299354][T12498] veth0_vlan: left allmulticast mode
[  233.306106][T12498] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  233.310837][T12498] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  233.315836][T12498] erspan1: left promiscuous mode
[  233.318168][T12498] erspan1: left allmulticast mode
[  233.362349][ T8105] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.371857][ T8105] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  233.383546][ T8105] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  233.399351][ T8105] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.412721][ T8105] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  233.428816][ T8105] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  233.443264][ T8105] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.454777][ T8105] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  233.461989][ T8105] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  233.468528][ T8105] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.475739][ T8105] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  233.482851][ T8105] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  233.504176][T12526] __nla_validate_parse: 3 callbacks suppressed
[  233.504185][T12526] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2894'.
[  233.760550][T12546] netlink: 'syz.0.2903': attribute type 3 has an invalid length.
[  233.765025][T12546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.796559][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2904'.
[  233.844746][T12552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.909676][T12558] syzkaller0: entered promiscuous mode
[  233.912179][T12558] syzkaller0: entered allmulticast mode
[  234.206111][T12579] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2919'.
[  234.209599][T12579] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2919'.
[  234.214101][T12579] netlink: 'syz.0.2919': attribute type 1 has an invalid length.
[  234.249751][T12581] netlink: 'syz.0.2920': attribute type 1 has an invalid length.
[  234.253194][T12581] netlink: 'syz.0.2920': attribute type 2 has an invalid length.
[  235.330975][T12611] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  235.334183][T12611] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  235.915039][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2933'.
[  235.918330][T12613] openvswitch: netlink: Invalid VLAN frame
[  235.948301][T12613] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  235.955265][T12613] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  235.962302][T12613] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  235.970901][T12613] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  235.983801][T12613] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  236.031497][T12623] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  236.048539][T12623] sctp: [Deprecated]: syz.2.2933 (pid 12623) Use of int in max_burst socket option.
[  236.048539][T12623] Use struct sctp_assoc_value instead
[  236.074074][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'.
[  236.075449][T12618] smbdirect: ib_dev[syz1] removed
[  236.338681][T12648] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  236.379621][T12648] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  236.384332][T12648] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  236.540410][T12664] bridge0: entered allmulticast mode
[  236.543998][T12664] bridge0: left allmulticast mode
[  236.991046][T12696] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2970'.
[  237.007891][T12696] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2970'.
[  237.113196][T12704] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2975'.
[  237.148773][T12708] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2977'.
[  237.246040][T12718] bond7: option resend_igmp: invalid value (2878)
[  237.248920][T12718] bond7: option resend_igmp: allowed values 0 - 255
[  237.253442][T12718] bond7 (unregistering): Released all slaves
[  237.277561][T12717] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  237.371546][T12730] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  237.517682][T12744] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.872990][ T8105] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  238.394700][ T5698] tipc: Node number set to 1073962498
[  238.596053][T12768] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  238.712613][T12786] __nla_validate_parse: 1 callbacks suppressed
[  238.712626][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3007'.
[  238.778247][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3007'.
[  238.785543][T12786] nbd: device at index 64 is going down
[  239.084583][T12811] netlink: 'syz.1.3017': attribute type 1 has an invalid length.
[  239.113088][T12811] 8021q: adding VLAN 0 to HW filter on device bond7
[  239.118626][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'.
[  239.199873][T12816] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0
[  239.476546][T12838] netlink: 'syz.0.3029': attribute type 11 has an invalid length.
[  239.479992][T12838] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3029'.
[  239.594905][T12849] netlink: 'syz.2.3034': attribute type 10 has an invalid length.
[  239.600421][T12849] team0: Port device dummy0 added
[  239.604910][T12849] netlink: 'syz.2.3034': attribute type 10 has an invalid length.
[  239.613269][T12849] team0: Port device dummy0 removed
[  239.664404][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'.
[  239.678691][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3038'.
[  239.771950][T12861] xt_CT: No such helper "netbios-ns"
[  239.890611][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3045'.
[  240.039517][T12884] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  240.193849][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3053'.
[  240.259478][T12900] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3055'.
[  240.801878][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3067'.
[  241.056359][T12940] bond8 (unregistering): Released all slaves
[  241.068120][T12949] netlink: 'syz.2.3077': attribute type 10 has an invalid length.
[  241.079374][T12949] team0: Port device dummy0 added
[  241.084101][T12951] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  241.153127][T12957] netlink: 'syz.2.3077': attribute type 10 has an invalid length.
[  241.176286][T12957] team0: Port device dummy0 removed
[  241.189010][T12961] syzkaller1: tun_chr_ioctl cmd 2147767506
[  241.198726][T12963] netlink: 'syz.1.3083': attribute type 32 has an invalid length.
[  241.201406][T12963] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  241.333565][T12949] nbd4: detected capacity change from 0 to 63
[  241.341600][T11140] block nbd4: Receive control failed (result -104)
[  241.342877][   T55] block nbd4: Receive control failed (result -32)
[  242.042984][T13027] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  242.364642][T13042] 
[  242.365715][T13042] ======================================================
[  242.368524][T13042] WARNING: possible circular locking dependency detected
[  242.371283][T13042] syzkaller #0 Not tainted
[  242.373276][T13042] ------------------------------------------------------
[  242.376114][T13042] syz.1.3117/13042 is trying to acquire lock:
[  242.378513][T13042] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[  242.382678][T13042] 
[  242.382678][T13042] but task is already holding lock:
[  242.385661][T13042] ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  242.390072][T13042] 
[  242.390072][T13042] which lock already depends on the new lock.
[  242.390072][T13042] 
[  242.394330][T13042] 
[  242.394330][T13042] the existing dependency chain (in reverse order) is:
[  242.398013][T13042] 
[  242.398013][T13042] -> #11 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  242.401694][T13042]        down_read+0x47/0x2e0
[  242.403662][T13042]        kernfs_remove_by_name_ns+0x3f/0x140
[  242.406125][T13042]        internal_create_group+0x587/0x1180
[  242.408546][T13042]        sysfs_update_groups+0x60/0x130
[  242.410849][T13042]        pmu_dev_alloc+0x29b/0x300
[  242.412993][T13042]        perf_event_sysfs_init+0x76/0x100
[  242.415394][T13042]        do_one_initcall+0x250/0x870
[  242.417671][T13042]        do_initcall_level+0x104/0x190
[  242.420336][T13042]        do_initcalls+0x59/0xa0
[  242.422633][T13042]        kernel_init_freeable+0x2a6/0x3e0
[  242.424907][T13042]        kernel_init+0x1d/0x1d0
[  242.426907][T13042]        ret_from_fork+0x514/0xb70
[  242.429015][T13042]        ret_from_fork_asm+0x1a/0x30
[  242.431115][T13042] 
[  242.431115][T13042] -> #10 (pmus_lock){+.+.}-{4:4}:
[  242.434093][T13042]        __mutex_lock+0x1a3/0x1550
[  242.436190][T13042]        perf_event_init_cpu+0x1df/0x7c0
[  242.438498][T13042]        cpuhp_invoke_callback+0x445/0x860
[  242.440916][T13042]        cpuhp_thread_fun+0x36b/0x780
[  242.443130][T13042]        smpboot_thread_fn+0x541/0xa50
[  242.445279][T13042]        kthread+0x388/0x470
[  242.447146][T13042]        ret_from_fork+0x514/0xb70
[  242.449193][T13042]        ret_from_fork_asm+0x1a/0x30
[  242.451337][T13042] 
[  242.451337][T13042] -> #9 (cpuhp_state-up){+.+.}-{0:0}:
[  242.454522][T13042]        cpuhp_thread_fun+0x127/0x780
[  242.456835][T13042]        smpboot_thread_fn+0x541/0xa50
[  242.459099][T13042]        kthread+0x388/0x470
[  242.461010][T13042]        ret_from_fork+0x514/0xb70
[  242.463103][T13042]        ret_from_fork_asm+0x1a/0x30
[  242.465303][T13042] 
[  242.465303][T13042] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  242.468414][T13042]        cpus_read_lock+0x42/0x160
[  242.470492][T13042]        static_key_slow_inc+0x12/0x30
[  242.472727][T13042]        ipv6_flowlabel_opt+0x1b94/0x28e0
[  242.474959][T13042]        do_ipv6_setsockopt+0xd9f/0x3150
[  242.477262][T13042]        ipv6_setsockopt+0x59/0x170
[  242.479387][T13042]        do_sock_setsockopt+0x17c/0x1b0
[  242.481773][T13042]        __x64_sys_setsockopt+0x13d/0x1b0
[  242.484229][T13042]        do_syscall_64+0x15f/0xf80
[  242.486316][T13042]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.488859][T13042] 
[  242.488859][T13042] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  242.492006][T13042]        lock_sock_nested+0x41/0x100
[  242.494213][T13042]        inet_shutdown+0x6a/0x390
[  242.496303][T13042]        nbd_mark_nsock_dead+0x2e9/0x560
[  242.498633][T13042]        recv_work+0x1c2e/0x1d40
[  242.500698][T13042]        process_scheduled_works+0xb5d/0x1860
[  242.503214][T13042]        worker_thread+0xa53/0xfc0
[  242.505336][T13042]        kthread+0x388/0x470
[  242.507267][T13042]        ret_from_fork+0x514/0xb70
[  242.509391][T13042]        ret_from_fork_asm+0x1a/0x30
[  242.511533][T13042] 
[  242.511533][T13042] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  242.514557][T13042]        __mutex_lock+0x1a3/0x1550
[  242.516699][T13042]        nbd_queue_rq+0x37b/0x1100
[  242.518894][T13042]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  242.521489][T13042]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  242.524213][T13042]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  242.526722][T13042]        blk_mq_run_hw_queue+0x348/0x4f0
[  242.528993][T13042]        blk_mq_dispatch_list+0xd16/0xe10
[  242.531259][T13042]        blk_mq_flush_plug_list+0x48d/0x570
[  242.533659][T13042]        __blk_flush_plug+0x3ed/0x4d0
[  242.535886][T13042]        __submit_bio+0x28d/0x580
[  242.537915][T13042]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  242.540432][T13042]        block_read_full_folio+0x599/0x830
[  242.542805][T13042]        filemap_read_folio+0x137/0x3b0
[  242.545100][T13042]        do_read_cache_folio+0x358/0x590
[  242.547303][T13042]        read_part_sector+0xb6/0x2b0
[  242.549446][T13042]        adfspart_check_ICS+0xb1/0x960
[  242.551662][T13042]        bdev_disk_changed+0x817/0x1770
[  242.553879][T13042]        blkdev_get_whole+0x380/0x510
[  242.556075][T13042]        bdev_open+0x31e/0xd30
[  242.557991][T13042]        blkdev_open+0x470/0x610
[  242.560045][T13042]        do_dentry_open+0x785/0x14e0
[  242.562142][T13042]        vfs_open+0x3b/0x340
[  242.564024][T13042]        path_openat+0x2e08/0x3860
[  242.566047][T13042]        do_file_open+0x23e/0x4a0
[  242.568042][T13042]        do_sys_openat2+0x113/0x200
[  242.570151][T13042]        __x64_sys_openat+0x138/0x170
[  242.572386][T13042]        do_syscall_64+0x15f/0xf80
[  242.574484][T13042]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.577013][T13042] 
[  242.577013][T13042] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  242.579928][T13042]        __mutex_lock+0x1a3/0x1550
[  242.582001][T13042]        nbd_queue_rq+0xc6/0x1100
[  242.584011][T13042]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  242.586397][T13042]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  242.589123][T13042]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  242.591692][T13042]        blk_mq_run_hw_queue+0x348/0x4f0
[  242.593907][T13042]        blk_mq_dispatch_list+0xd16/0xe10
[  242.596282][T13042]        blk_mq_flush_plug_list+0x48d/0x570
[  242.598750][T13042]        __blk_flush_plug+0x3ed/0x4d0
[  242.600947][T13042]        __submit_bio+0x28d/0x580
[  242.602951][T13042]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  242.605414][T13042]        block_read_full_folio+0x599/0x830
[  242.607784][T13042]        filemap_read_folio+0x137/0x3b0
[  242.610063][T13042]        do_read_cache_folio+0x358/0x590
[  242.612373][T13042]        read_part_sector+0xb6/0x2b0
[  242.614475][T13042]        adfspart_check_ICS+0xb1/0x960
[  242.616573][T13042]        bdev_disk_changed+0x817/0x1770
[  242.618795][T13042]        blkdev_get_whole+0x380/0x510
[  242.620988][T13042]        bdev_open+0x31e/0xd30
[  242.622896][T13042]        blkdev_open+0x470/0x610
[  242.624863][T13042]        do_dentry_open+0x785/0x14e0
[  242.626959][T13042]        vfs_open+0x3b/0x340
[  242.628820][T13042]        path_openat+0x2e08/0x3860
[  242.630897][T13042]        do_file_open+0x23e/0x4a0
[  242.632990][T13042]        do_sys_openat2+0x113/0x200
[  242.635086][T13042]        __x64_sys_openat+0x138/0x170
[  242.637311][T13042]        do_syscall_64+0x15f/0xf80
[  242.639367][T13042]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.641965][T13042] 
[  242.641965][T13042] -> #4 (set->srcu){.+.+}-{0:0}:
[  242.644770][T13042]        __synchronize_srcu+0xca/0x300
[  242.646946][T13042]        elevator_switch+0x1e8/0x7a0
[  242.649052][T13042]        elevator_change+0x2cc/0x450
[  242.651312][T13042]        elevator_set_default+0x36c/0x430
[  242.653738][T13042]        blk_register_queue+0x3e9/0x4e0
[  242.655961][T13042]        __add_disk+0x677/0xd50
[  242.657849][T13042]        add_disk_fwnode+0xfb/0x480
[  242.659933][T13042]        nbd_dev_add+0x72c/0xb50
[  242.661909][T13042]        nbd_init+0x168/0x1f0
[  242.663823][T13042]        do_one_initcall+0x250/0x870
[  242.666243][T13042]        do_initcall_level+0x104/0x190
[  242.668387][T13042]        do_initcalls+0x59/0xa0
[  242.670370][T13042]        kernel_init_freeable+0x2a6/0x3e0
[  242.672686][T13042]        kernel_init+0x1d/0x1d0
[  242.674707][T13042]        ret_from_fork+0x514/0xb70
[  242.676833][T13042]        ret_from_fork_asm+0x1a/0x30
[  242.678988][T13042] 
[  242.678988][T13042] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  242.682137][T13042]        __mutex_lock+0x1a3/0x1550
[  242.684264][T13042]        elevator_change+0x1b3/0x450
[  242.686458][T13042]        elevator_set_none+0xb5/0x140
[  242.688767][T13042]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  242.691465][T13042]        nbd_start_device+0x17f/0xb10
[  242.693700][T13042]        nbd_genl_connect+0x165b/0x1cf0
[  242.695951][T13042]        genl_family_rcv_msg_doit+0x22a/0x330
[  242.698456][T13042]        genl_rcv_msg+0x61c/0x7a0
[  242.700598][T13042]        netlink_rcv_skb+0x232/0x4b0
[  242.702803][T13042]        genl_rcv+0x28/0x40
[  242.704722][T13042]        netlink_unicast+0x75c/0x8e0
[  242.706805][T13042]        netlink_sendmsg+0x813/0xb40
[  242.708995][T13042]        ____sys_sendmsg+0x972/0x9f0
[  242.711099][T13042]        ___sys_sendmsg+0x2a5/0x360
[  242.713211][T13042]        __x64_sys_sendmsg+0x1bd/0x2a0
[  242.715423][T13042]        do_syscall_64+0x15f/0xf80
[  242.717490][T13042]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.720281][T13042] 
[  242.720281][T13042] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  242.723746][T13042]        blk_alloc_queue+0x546/0x680
[  242.725922][T13042]        __blk_mq_alloc_disk+0x197/0x390
[  242.728211][T13042]        nbd_dev_add+0x499/0xb50
[  242.730236][T13042]        nbd_init+0x168/0x1f0
[  242.732210][T13042]        do_one_initcall+0x250/0x870
[  242.734393][T13042]        do_initcall_level+0x104/0x190
[  242.736629][T13042]        do_initcalls+0x59/0xa0
[  242.738609][T13042]        kernel_init_freeable+0x2a6/0x3e0
[  242.740951][T13042]        kernel_init+0x1d/0x1d0
[  242.742957][T13042]        ret_from_fork+0x514/0xb70
[  242.745143][T13042]        ret_from_fork_asm+0x1a/0x30
[  242.747407][T13042] 
[  242.747407][T13042] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  242.750419][T13042]        fs_reclaim_acquire+0x71/0x100
[  242.752667][T13042]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  242.755274][T13042]        alloc_inode+0xb8/0x1b0
[  242.757288][T13042]        iget_locked+0x131/0x6a0
[  242.759325][T13042]        kernfs_get_inode+0x4f/0x780
[  242.761495][T13042]        kernfs_get_tree+0x5cd/0x980
[  242.763637][T13042]        sysfs_get_tree+0x46/0x110
[  242.765811][T13042]        vfs_get_tree+0x92/0x2a0
[  242.767799][T13042]        do_new_mount+0x341/0xd30
[  242.769799][T13042]        __se_sys_mount+0x31d/0x420
[  242.771921][T13042]        do_syscall_64+0x15f/0xf80
[  242.773891][T13042]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.776583][T13042] 
[  242.776583][T13042] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[  242.780125][T13042]        __lock_acquire+0x15a5/0x2cf0
[  242.782359][T13042]        lock_acquire+0x106/0x350
[  242.784426][T13042]        down_write+0x96/0x200
[  242.786396][T13042]        kernfs_remove_by_name_ns+0x4e/0x140
[  242.788857][T13042]        _cfg80211_unregister_wdev+0x130/0x580
[  242.791324][T13042]        ieee80211_if_remove+0x299/0x350
[  242.793609][T13042]        ieee80211_del_iface+0x19/0x30
[  242.795757][T13042]        cfg80211_remove_virtual_intf+0x221/0x3f0
[  242.798265][T13042]        genl_family_rcv_msg_doit+0x22a/0x330
[  242.800728][T13042]        genl_rcv_msg+0x61c/0x7a0
[  242.802836][T13042]        netlink_rcv_skb+0x232/0x4b0
[  242.805112][T13042]        genl_rcv+0x28/0x40
[  242.807079][T13042]        netlink_unicast+0x75c/0x8e0
[  242.809303][T13042]        netlink_sendmsg+0x813/0xb40
[  242.811472][T13042]        ____sys_sendmsg+0x972/0x9f0
[  242.813688][T13042]        ___sys_sendmsg+0x2a5/0x360
[  242.815913][T13042]        __x64_sys_sendmsg+0x1bd/0x2a0
[  242.818188][T13042]        do_syscall_64+0x15f/0xf80
[  242.820191][T13042]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.822647][T13042] 
[  242.822647][T13042] other info that might help us debug this:
[  242.822647][T13042] 
[  242.826606][T13042] Chain exists of:
[  242.826606][T13042]   &root->kernfs_rwsem --> pmus_lock --> &root->kernfs_supers_rwsem
[  242.826606][T13042] 
[  242.832034][T13042]  Possible unsafe locking scenario:
[  242.832034][T13042] 
[  242.835114][T13042]        CPU0                    CPU1
[  242.837301][T13042]        ----                    ----
[  242.839472][T13042]   rlock(&root->kernfs_supers_rwsem);
[  242.841632][T13042]                                lock(pmus_lock);
[  242.844233][T13042]                                lock(&root->kernfs_supers_rwsem);
[  242.847500][T13042]   lock(&root->kernfs_rwsem);
[  242.849558][T13042] 
[  242.849558][T13042]  *** DEADLOCK ***
[  242.849558][T13042] 
[  242.852835][T13042] 4 locks held by syz.1.3117/13042:
[  242.854936][T13042]  #0: ffffffff8fe3fac8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  242.858379][T13042]  #1: ffffffff8fdd0300 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0
[  242.861637][T13042]  #2: ffff88801ced07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_del_interface+0x126/0x140
[  242.865101][T13042]  #3: ffff8881012b4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[  242.868704][T13042] 
[  242.868704][T13042] stack backtrace:
[  242.870737][T13042] CPU: 0 UID: 0 PID: 13042 Comm: syz.1.3117 Not tainted syzkaller #0 PREEMPT(full) 
[  242.870748][T13042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.870754][T13042] Call Trace:
[  242.870759][T13042]  <TASK>
[  242.870764][T13042]  dump_stack_lvl+0xe8/0x150
[  242.870776][T13042]  print_circular_bug+0x2e1/0x300
[  242.870788][T13042]  check_noncircular+0x12e/0x150
[  242.870799][T13042]  __lock_acquire+0x15a5/0x2cf0
[  242.870812][T13042]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  242.870823][T13042]  lock_acquire+0x106/0x350
[  242.870831][T13042]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  242.870844][T13042]  down_write+0x96/0x200
[  242.870852][T13042]  ? kernfs_remove_by_name_ns+0x4e/0x140
[  242.870862][T13042]  ? __pfx_down_write+0x10/0x10
[  242.870869][T13042]  ? down_read+0x270/0x2e0
[  242.870877][T13042]  kernfs_remove_by_name_ns+0x4e/0x140
[  242.870887][T13042]  _cfg80211_unregister_wdev+0x130/0x580
[  242.870896][T13042]  ieee80211_if_remove+0x299/0x350
[  242.870906][T13042]  ieee80211_del_iface+0x19/0x30
[  242.870913][T13042]  cfg80211_remove_virtual_intf+0x221/0x3f0
[  242.870925][T13042]  genl_family_rcv_msg_doit+0x22a/0x330
[  242.870935][T13042]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  242.870945][T13042]  ? bpf_lsm_capable+0x9/0x20
[  242.870952][T13042]  ? security_capable+0x7e/0x2c0
[  242.870961][T13042]  genl_rcv_msg+0x61c/0x7a0
[  242.870970][T13042]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.870978][T13042]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  242.870993][T13042]  ? __pfx_nl80211_del_interface+0x10/0x10
[  242.871007][T13042]  ? __pfx_nl80211_post_doit+0x10/0x10
[  242.871024][T13042]  netlink_rcv_skb+0x232/0x4b0
[  242.871041][T13042]  ? __pfx_genl_rcv_msg+0x10/0x10
[  242.871053][T13042]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  242.871072][T13042]  ? down_read+0x270/0x2e0
[  242.871083][T13042]  ? genl_rcv+0xd/0x40
[  242.871093][T13042]  genl_rcv+0x28/0x40
[  242.871100][T13042]  netlink_unicast+0x75c/0x8e0
[  242.871111][T13042]  netlink_sendmsg+0x813/0xb40
[  242.871149][T13042]  ? __pfx_netlink_sendmsg+0x10/0x10
[  242.871187][T13042]  ? aa_sock_msg_perm+0xf1/0x1b0
[  242.871203][T13042]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  242.871217][T13042]  ____sys_sendmsg+0x972/0x9f0
[  242.871229][T13042]  ? __might_fault+0xaf/0x130
[  242.871239][T13042]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.871250][T13042]  ? import_iovec+0x73/0xa0
[  242.871261][T13042]  ___sys_sendmsg+0x2a5/0x360
[  242.871271][T13042]  ? __lock_acquire+0x6b5/0x2cf0
[  242.871279][T13042]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.871290][T13042]  ? futex_wait+0x2a2/0x390
[  242.871303][T13042]  ? __fget_files+0x2a/0x420
[  242.871311][T13042]  ? __fget_files+0x3a0/0x420
[  242.871321][T13042]  __x64_sys_sendmsg+0x1bd/0x2a0
[  242.871331][T13042]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  242.871343][T13042]  ? rcu_is_watching+0x15/0xb0
[  242.871353][T13042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.871360][T13042]  do_syscall_64+0x15f/0xf80
[  242.871367][T13042]  ? trace_irq_disable+0x3b/0x140
[  242.871378][T13042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.871385][T13042] RIP: 0033:0x7f68c7b9cdd9
[  242.871393][T13042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.871399][T13042] RSP: 002b:00007f68c89bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  242.871408][T13042] RAX: ffffffffffffffda RBX: 00007f68c7e15fa0 RCX: 00007f68c7b9cdd9
[  242.871413][T13042] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  242.871418][T13042] RBP: 00007f68c7c32d69 R08: 0000000000000000 R09: 0000000000000000
[  242.871428][T13042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.871433][T13042] R13: 00007f68c7e16038 R14: 00007f68c7e15fa0 R15: 00007ffd22359418
[  242.871441][T13042]  </TASK>
[  242.995248][    C0] clocksource: Marking clocksource tsc unstable due to frequency skew
[  242.997674][    C0] clocksource: Watchdog               kvm-clock interval:            30343ns
[  243.000433][    C0] clocksource: Clocksource                  tsc interval:            29755ns
[  243.003300][    C0] tsc: Marking TSC unstable due to clocksource watchdog
