last executing test programs:

2.871393456s ago: executing program 2 (id=5088):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$kcm(0x2, 0x200000000000001, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xa000000, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)

2.742038317s ago: executing program 0 (id=5090):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x28, 0x1, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xa00000000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.981683638s ago: executing program 2 (id=5091):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="61e7054b0502818102cea102"], 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, r8, 0x403, 0x70fd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x21}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004801}, 0x200000c4)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x800)

1.981294348s ago: executing program 1 (id=5092):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r4, 0x4, r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r10=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1850000000000000000000000000e70a1c31074e27310000"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r8]}, 0x94)
r11 = socket(0x3e, 0x800, 0x10004)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d04dd72d3056254e02a00000000", @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080003000000000006000200010000000800010004000000140035006d6163766c616e300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x10ffe, 0x4}, 0x10)
write(r11, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d)
r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r13, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r13, 0x0)
close(r14)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

1.88116578s ago: executing program 0 (id=5093):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x8000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x1, [0x5, 0x4, 0x2, 0x81, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0)

1.880808351s ago: executing program 0 (id=5094):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
r2 = accept4(r1, 0x0, 0x0, 0x0) (async, rerun: 64)
sendmmsg(r0, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}}) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x405f, 0x7fff}, 0x14) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e26, 0x80000000, @mcast2}}, 0x0, 0x0, 0x16, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c76"}, 0xd8) (async, rerun: 32)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async, rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0xf3, 0x0, 0x0, 0x40f00}, 0x94) (async)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0xfd45}}, 0x0) (async)
write$nci(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x25, &(0x7f0000000740)=ANY=[@ANYBLOB="18560000090000000000000000000000186500000300000000000000bf0c000085100000f8ffffffb7080000000000007b8af8ff00000000b7080000000400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018250000", @ANYRES16=r3, @ANYBLOB="008744429010000018110000f937e2b8eab9b11a938a47dc5fb754c365aaa45fb453ac23d6f89ea1cb68f4f5ef3fa6469429754df4b778c2e2434e68180cd2726cc850907624cee0417989b9bda64776af867899c9b2db05332feb28578950fa1c0df459b92e16200b21c5d857aadc5628", @ANYRESOCT=r6, @ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000008c0)='GPL\x00', 0x4, 0xd4, &(0x7f0000000900)=""/212, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x5, 0x9, 0xfffffffc, 0x7f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x3, 0x4, 0x10, 0x4}, {0x2, 0x4, 0x1, 0x1}, {0x3, 0x3, 0x7, 0x9}, {0x5, 0x2, 0xa, 0x6}], 0x10, 0x1b10}, 0x94) (async)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r10 = socket$unix(0x1, 0x5, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1.111930767s ago: executing program 0 (id=5095):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00', <r3=>0x0})
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xd, r3, 0x10, r2}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x240408d8)
setsockopt$sock_int(r4, 0x1, 0x4a, &(0x7f0000000040)=0x8, 0x4)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x8042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000140)={{0x5, 0xfffffff7}, {0xa9, 0x9}, 0x7, 0x1})

1.111707904s ago: executing program 2 (id=5096):
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x10000000, [0x4, 0x5, 0x3, 0xd783, 0x9, 0x8000], 0x2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98)

1.111474898s ago: executing program 1 (id=5097):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r2, 0x4)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)

1.056029837s ago: executing program 1 (id=5098):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810) (async, rerun: 64)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}}) (rerun: 32)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) (async, rerun: 32)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (rerun: 32)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000006110080000000000630afcff000000009500000000000000a395e0303a3e3b5a44f33505888122b3cdc6495d0eb0d62c136de8c68e060b7fdafd14ecdf89b4e07ab555866d7a6a73192b76f5750757cb684f8de60d3e9d38bca9ca4c7ad0ff4b8a5ce69495cf4a674627594bcc4b32dd2ea2a09df223eb1da164ebcf5e1292d5d81edb44a0654dae3a039fc838c15ebf51457eba723089c2e17593c98a1b6bb2f559ec2bdc617d189fd1b8646c524d885d127d876d915f2b4e763c1f00c1fa27"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0xfd45}}, 0x0) (async, rerun: 32)
write$nci(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12) (async, rerun: 32)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async)
close(0x3) (async)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.055644132s ago: executing program 0 (id=5099):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket(0x15, 0x5, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x80000001, 0x0, {0xa, 0x4e20, 0x2, @mcast2, 0x8}}}, 0x3a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)

1.055274557s ago: executing program 2 (id=5100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x3, {0x0, 0xff, 0x2}}, 0x18)
sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f00000005c0)=@can={0x1d, 0x0, 0x4000000}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="d70843d0d3a7d851fa", 0x9}], 0x1}, 0x4000040)

1.054942847s ago: executing program 2 (id=5101):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502202000ff02ff02001a000008000100ac1414aa0c0009000800281004"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x13, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, {}, {}, [@ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x1, 0x10001}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x4, 0x4, 0x7, 0xc}, {0x0, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x3, 0x3}], 0x10, 0x97}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', <r6=>0x0})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x24, 0x1, 0x5, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000080)=r8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r6, 0x25, 0x11, @val=@tcx={@void, @value=r8, @void, @void, r7}}, 0x1c)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="61e7054b0502818102cea102"], 0xc)

1.054774685s ago: executing program 1 (id=5102):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@hyper})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@host})

960.875242ms ago: executing program 1 (id=5103):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x420a00, 0x0)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000480)={0x407e, 0x2}) (async)
r1 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0)
ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000002c0)={'xfrm0\x00', 0x5ef, 0xff}) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000789c7caf0000240012800b8981ae1e238d26c288ea36b592297ecef900626174616476520014000280100001004241544d414e7f56"], 0xfd12}}, 0x0) (async, rerun: 64)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0)
write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="61e7054b0502818102cea102"], 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000181401", @ANYRESHEX=r11], 0x20}, 0x1, 0xf00, 0x0, 0x40000}, 0x4000004) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r10, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r12, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) (async, rerun: 64)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd7000fcdbdf253100000008000300", @ANYRES32=r15], 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x20084024) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x28, r10, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x3, 0x38}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1)

170.960661ms ago: executing program 0 (id=5104):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
pipe(&(0x7f0000000180)={<r6=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r4, 0x4, r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r10=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1850000000000000000000000000e70a1c31074e27310000"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r8]}, 0x94)
r11 = socket(0x3e, 0x800, 0x10004)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d04dd72d3056254e02a00000000", @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080003000000000006000200010000000800010004000000140035006d6163766c616e300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x200500bc)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x10ffe, 0x4}, 0x10)
write(r11, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d)
r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r13, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r13, 0x0)
close(r14)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

157.864241ms ago: executing program 2 (id=5105):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x22001, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'pimreg0\x00', <r5=>0x0})
readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/166, 0xa6}, {&(0x7f0000000500)=""/137, 0x89}, {&(0x7f0000000c80)=""/227, 0xe3}], 0x5)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7)
r9 = socket$netlink(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x9c, r8, 0x1, 0x70bd2c, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x39, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f463f40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f5a68e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12edfae4}]}]}]}, 0x9c}}, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r11, 0x800448d2, &(0x7f0000000240)={0xa, &(0x7f0000000680)=[{}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}, {@fixed}, {@none}, {@none}, {}]})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="f40d26bd7000fbdbdf258600000009000600", @ANYRES32=r3, @ANYBLOB="050038000100000008000b00210d000008002b004e0000000a000900000000000000000005002e000000000008000300", @ANYRES32=r5, @ANYBLOB="08002c0002000000"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000080)={0x0, 0x9})

0s ago: executing program 1 (id=5106):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write(r0, &(0x7f00000001c0)="60838924bc7b534bda37c17eee62f1d2a73033f27f0d1b5b9bb56cb4311a254844011479baeff2d3ff437380c69814eba683eeb9f4fd6208b4083f56ff6798107dd0b7052d9239d95cc95b43397ada1971ab3c4f199026dde7f7db2846d01f06ae1f9c7eb81bbb49f86a5b2bdeb6a92b641378e4f2bc31d282c6c8149a1ffe01b59e350a68949387d3ba35d2310f35c50138e9c95600e9bee467a0597dbda166ec0f6a22bfd507885e4997b6b5546b73d697df287cc669d07620280e2ca96cf5db972635fc9ab68d6ad9e607d6fe02451ff652376d354430c7f1a9554100283b0a9bd40edaebc605377232a094d1fb13381fafa549", 0xf5)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0xc2c8039f3777fb16)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="600608fc03090105040601b8"], 0xc)

kernel console output (not intermixed with test programs):

59.174954][ T5854] veth0_macvtap: entered promiscuous mode
[   59.179976][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.188544][ T5854] veth1_macvtap: entered promiscuous mode
[   59.199278][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.204885][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.217982][ T5718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.221220][ T5718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.224268][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.228469][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.238033][ T5718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.242132][ T5718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.258623][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.294347][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.297738][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.313876][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.387370][ T4913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.389857][ T4913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.430711][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.441537][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.449179][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.452035][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.506192][ T4913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.513249][ T4913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.696556][ T5934] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   59.747454][ T5938] netlink: 592 bytes leftover after parsing attributes in process `syz.2.12'.
[   59.758776][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.764096][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.767678][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.770691][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.774699][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.778390][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.781927][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.785529][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.788570][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   59.796888][ T5940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.823500][ T5938] Zero length message leads to an empty skb
[   59.905519][ T5946] netlink: 'syz.2.16': attribute type 13 has an invalid length.
[   59.908078][ T5946] netlink: 'syz.2.16': attribute type 17 has an invalid length.
[   59.938980][ T5946] gretap0: refused to change device tx_queue_len
[   59.941785][ T5946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   60.421262][ T5987] syzkaller1: entered promiscuous mode
[   60.425102][ T5987] syzkaller1: entered allmulticast mode
[   60.912733][ T5852] Bluetooth: hci1: command tx timeout
[   60.915166][ T5852] Bluetooth: hci0: command tx timeout
[   61.002503][ T5852] Bluetooth: hci2: command tx timeout
[   61.658419][ T6015] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96
[   62.157277][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.160913][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.165788][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.169465][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.608938][ T6035] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[   62.992555][ T5852] Bluetooth: hci1: command tx timeout
[   62.995157][ T5852] Bluetooth: hci0: command tx timeout
[   63.072499][ T5240] Bluetooth: hci2: command tx timeout
[   63.282767][ T6045] sock: sock_timestamping_bind_phc: sock not bind to device
[   63.615459][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.618438][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.809333][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.819240][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.827829][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.831637][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.956682][ T6087] netlink: 'syz.2.83': attribute type 16 has an invalid length.
[   63.959900][ T6087] netlink: 'syz.2.83': attribute type 17 has an invalid length.
[   64.026585][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.029060][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.119650][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.128564][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.225593][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.242713][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.247783][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.251813][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.335659][ T6109] tipc: Started in network mode
[   64.339434][ T6109] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   64.350115][ T6109] tipc: Enabled bearer <eth:vlan0>, priority 18
[   64.625218][ T6137] warning: `syz.0.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.852823][ T6146] __nla_validate_parse: 16 callbacks suppressed
[   64.852834][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.106'.
[   65.082563][ T5240] Bluetooth: hci0: command tx timeout
[   65.084803][ T5240] Bluetooth: hci1: command tx timeout
[   65.164379][ T5852] Bluetooth: hci2: command tx timeout
[   65.463084][   T47] tipc: Node number set to 10005162
[   65.559742][ T6165] netlink: 'syz.2.116': attribute type 1 has an invalid length.
[   65.568047][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'.
[   65.912210][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'.
[   65.916294][ T6189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.125'.
[   66.003225][ T6194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.181682][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'.
[   66.583072][ T6233] netlink: 'syz.0.137': attribute type 1 has an invalid length.
[   66.586416][ T6233] netlink: 140 bytes leftover after parsing attributes in process `syz.0.137'.
[   66.589408][ T6233] netlink: 96 bytes leftover after parsing attributes in process `syz.0.137'.
[   66.623451][ T6238] tipc: Started in network mode
[   66.625233][ T6238] tipc: Node identity b6afee67cc99, cluster identity 4711
[   66.627745][ T6238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.631296][ T6238] syzkaller0: entered promiscuous mode
[   66.635128][ T6238] syzkaller0: entered allmulticast mode
[   66.649670][ T6238] tipc: Resetting bearer <eth:syzkaller0>
[   66.653068][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.655834][ T6238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   66.660641][ T6237] tipc: Resetting bearer <eth:syzkaller0>
[   66.668339][ T6237] tipc: Disabling bearer <eth:syzkaller0>
[   67.008374][ T6255] syz_tun: entered allmulticast mode
[   67.017199][ T6254] syz_tun: left allmulticast mode
[   67.341331][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'.
[   67.345032][ T6276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'.
[   67.427762][ T6281] netlink: 'syz.1.161': attribute type 11 has an invalid length.
[   67.566232][ T6290] netlink: 'syz.0.165': attribute type 1 has an invalid length.
[   67.570018][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'.
[   69.020448][   T33] audit: type=1800 audit(1758811182.060:2): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.179" name="cgroup.controllers" dev="tmpfs" ino=310 res=0 errno=0
[   69.764032][ T6348] unsupported nla_type 52263
[   69.976471][ T6361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.980021][ T6361] syzkaller0: entered promiscuous mode
[   69.984713][ T6361] syzkaller0: entered allmulticast mode
[   70.015453][ T6361] tipc: Resetting bearer <eth:syzkaller0>
[   70.025589][ T6360] tipc: Resetting bearer <eth:syzkaller0>
[   70.036769][ T6360] tipc: Disabling bearer <eth:syzkaller0>
[   70.048674][ T6363] __nla_validate_parse: 1 callbacks suppressed
[   70.048689][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'.
[   70.133985][ T6369] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.174157][ T6373] netlink: 27 bytes leftover after parsing attributes in process `syz.1.198'.
[   71.077766][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.082672][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.230157][ T6425] netlink: 'syz.0.220': attribute type 7 has an invalid length.
[   71.233615][ T6425] netlink: 'syz.0.220': attribute type 8 has an invalid length.
[   71.802177][ T6462] wireguard0: entered promiscuous mode
[   71.804921][ T6462] wireguard0: entered allmulticast mode
[   72.659473][ T6518] netlink: 'syz.2.258': attribute type 1 has an invalid length.
[   72.662533][ T6518] netlink: 'syz.2.258': attribute type 1 has an invalid length.
[   72.706208][ T6522] netlink: 'syz.2.259': attribute type 2 has an invalid length.
[   73.670346][ T6540] netlink: 277 bytes leftover after parsing attributes in process `syz.2.268'.
[   73.921526][ T6557] netlink: 10 bytes leftover after parsing attributes in process `syz.0.277'.
[   74.034266][   T33] audit: type=1800 audit(1758811187.080:3): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.282" name="memory.events" dev="tmpfs" ino=608 res=0 errno=0
[   74.044431][   T33] audit: type=1804 audit(1758811187.090:4): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.282" name="/newroot/118/memory.events" dev="tmpfs" ino=608 res=1 errno=0
[   74.765659][ T6607] vxlan0: entered promiscuous mode
[   74.768043][ T6607] vxlan0: entered allmulticast mode
[   74.770838][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.774902][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.779021][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.784198][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.812628][ T6609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.293'.
[   75.175867][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'.
[   76.038039][ T6663] veth1_to_team: entered promiscuous mode
[   76.041984][ T6663] bond0: entered promiscuous mode
[   76.046181][ T6663] bond_slave_0: entered promiscuous mode
[   76.048943][ T6663] bond_slave_1: entered promiscuous mode
[   76.054380][ T6663] hsr1: entered allmulticast mode
[   76.056703][ T6663] veth1_to_team: entered allmulticast mode
[   76.059293][ T6663] bond0: entered allmulticast mode
[   76.061596][ T6663] bond_slave_0: entered allmulticast mode
[   76.066555][ T6663] bond_slave_1: entered allmulticast mode
[   76.353994][ T5852] Bluetooth: hci2: command tx timeout
[   77.379812][ T6724] netlink: 'syz.0.342': attribute type 1 has an invalid length.
[   77.383119][ T6724] netlink: 2 bytes leftover after parsing attributes in process `syz.0.342'.
[   77.443184][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'.
[   77.610517][ T6740] netlink: 248 bytes leftover after parsing attributes in process `syz.1.350'.
[   78.478935][ T6789] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   78.591475][ T6794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.818102][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'.
[   78.902636][ T6822] netlink: 26 bytes leftover after parsing attributes in process `syz.0.376'.
[   79.261583][ T6831] syzkaller1: entered promiscuous mode
[   79.265514][ T6831] syzkaller1: entered allmulticast mode
[   79.398546][ T6831] netlink: 60 bytes leftover after parsing attributes in process `syz.1.377'.
[   80.373210][ T6893] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   80.698674][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'.
[   80.934631][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[   80.938197][ T6958] bridge_slave_1: left allmulticast mode
[   80.940296][ T6958] bridge_slave_1: left promiscuous mode
[   80.943330][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.947572][ T6958] bridge_slave_0: left allmulticast mode
[   80.949967][ T6958] bridge_slave_0: left promiscuous mode
[   80.956242][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.279254][ T6986] netlink: 'syz.0.435': attribute type 2 has an invalid length.
[   81.283415][ T6986] netlink: 'syz.0.435': attribute type 1 has an invalid length.
[   81.287423][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'.
[   81.315231][ T6991] netlink: 'syz.0.437': attribute type 3 has an invalid length.
[   81.321840][ T6991] syz_tun: entered allmulticast mode
[   81.339778][ T6991] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   81.350395][ T6991] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   81.389945][ T6991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.414285][ T6990] syz_tun: left allmulticast mode
[   81.993245][ T7036] netlink: 'syz.0.451': attribute type 1 has an invalid length.
[   82.378123][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'.
[   82.695561][ T7064] dvmrp1: tun_chr_ioctl cmd 1074025677
[   82.698187][ T7064] dvmrp1: linktype set to 768
[   82.995198][ T7082] netlink: 144 bytes leftover after parsing attributes in process `syz.1.474'.
[   83.072234][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'.
[   83.077361][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'.
[   83.270068][ T7093] Bluetooth: MGMT ver 1.23
[   83.335849][ T5317] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0
[   83.350170][ T5317] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[   83.374143][ T7099] gtp0: entered promiscuous mode
[   83.377916][ T7099] gtp0: entered allmulticast mode
[   83.469719][ T7109] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   83.527097][ T7112] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002
[   83.647552][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'.
[   84.817347][ T7154] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.506'.
[   85.158063][ T7173] netlink: 240 bytes leftover after parsing attributes in process `syz.1.514'.
[   85.186236][ T7171] syzkaller0: entered promiscuous mode
[   85.188632][ T7171] syzkaller0: entered allmulticast mode
[   85.856010][ T7194] netlink: 'syz.1.523': attribute type 6 has an invalid length.
[   86.435600][ T1271] cfg80211: failed to load regulatory.db
[   86.453319][ T7201] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[   86.624297][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'.
[   86.674890][ T7219] vlan2: entered promiscuous mode
[   86.676963][ T7219] macvtap0: entered promiscuous mode
[   86.700845][ T7222] veth2: entered promiscuous mode
[   86.705880][ T7222] veth2: entered allmulticast mode
[   87.087297][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.551'.
[   87.701736][ T7311] netlink: 'syz.0.569': attribute type 11 has an invalid length.
[   87.725066][ T7313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.729068][ T7313] syzkaller0: entered promiscuous mode
[   87.731149][ T7313] syzkaller0: entered allmulticast mode
[   87.741921][ T7315] netlink: 'syz.0.572': attribute type 12 has an invalid length.
[   87.745610][ T7315] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.572'.
[   87.751256][ T7313] netlink: 2 bytes leftover after parsing attributes in process `syz.2.571'.
[   87.757367][ T7313] tipc: Resetting bearer <eth:syzkaller0>
[   87.760585][ T7309] tipc: Resetting bearer <eth:syzkaller0>
[   87.772676][ T7309] tipc: Disabling bearer <eth:syzkaller0>
[   87.907376][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.580'.
[   87.922546][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.581'.
[   88.136286][ T7357] netlink: 'syz.0.588': attribute type 2 has an invalid length.
[   88.139082][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'.
[   89.288572][ T7397] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.293281][ T7397] syzkaller0: entered promiscuous mode
[   89.295150][ T7397] syzkaller0: entered allmulticast mode
[   89.309561][ T7397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.604'.
[   89.333535][ T7397] tipc: Resetting bearer <eth:syzkaller0>
[   89.339049][ T7396] tipc: Resetting bearer <eth:syzkaller0>
[   89.360326][ T7396] tipc: Disabling bearer <eth:syzkaller0>
[   89.560186][ T7411] syzkaller1: entered promiscuous mode
[   89.563016][ T7411] syzkaller1: entered allmulticast mode
[   89.771137][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.775308][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.030091][ T7431] netlink: 'syz.2.619': attribute type 10 has an invalid length.
[   90.046775][ T7431] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   90.050186][ T7430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.754112][   T33] audit: type=1804 audit(1758811203.800:5): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.624" name="cgroup.controllers" dev="tmpfs" ino=1236 res=1 errno=0
[   90.771046][   T33] audit: type=1800 audit(1758811203.800:6): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.624" name="cgroup.controllers" dev="tmpfs" ino=1236 res=0 errno=0
[   90.809947][ T7451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.626'.
[   91.233674][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.638'.
[   91.921784][ T7520] syzkaller1: entered promiscuous mode
[   91.924605][ T7520] syzkaller1: entered allmulticast mode
[   92.127715][ T7541] netlink: 56 bytes leftover after parsing attributes in process `syz.0.664'.
[   92.174378][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'.
[   92.277504][ T7549] syzkaller0: entered promiscuous mode
[   92.279859][ T7549] syzkaller0: entered allmulticast mode
[   92.473549][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'.
[   93.150082][ T7557] vlan2: entered promiscuous mode
[   93.151926][ T7557] bridge0: entered promiscuous mode
[   93.429862][ T7587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.686'.
[   93.461437][ T7589] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001
[   93.952563][ T7634] tipc: Started in network mode
[   93.954486][ T7634] tipc: Node identity d26a4f6d5878, cluster identity 4711
[   93.957162][ T7634] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.960410][ T7634] syzkaller0: entered promiscuous mode
[   93.966260][ T7634] syzkaller0: entered allmulticast mode
[   94.007145][ T7634] tipc: Resetting bearer <eth:syzkaller0>
[   94.010127][ T7633] tipc: Resetting bearer <eth:syzkaller0>
[   94.027613][ T7633] tipc: Disabling bearer <eth:syzkaller0>
[   94.046073][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   94.502236][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'.
[   94.830402][ T7677] netlink: 104 bytes leftover after parsing attributes in process `syz.1.728'.
[   94.838267][ T7679] netlink: 'syz.0.727': attribute type 5 has an invalid length.
[   94.853120][ T7679] batman_adv: batadv0: Adding interface: vxlan0
[   94.856021][ T7679] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.873184][ T7679] batman_adv: batadv0: Interface activated: vxlan0
[   94.877630][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.887185][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.903289][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   94.907042][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.116921][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'.
[   95.779144][ T7755] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[   96.527791][ T7800] netlink: 'syz.1.779': attribute type 3 has an invalid length.
[   96.530914][ T7800] netlink: 'syz.1.779': attribute type 3 has an invalid length.
[   96.919291][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[   96.940586][ T7826] bridge_slave_1: left allmulticast mode
[   96.943285][ T7826] bridge_slave_1: left promiscuous mode
[   96.945352][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.949491][ T7826] bridge_slave_0: left allmulticast mode
[   96.951406][ T7826] bridge_slave_0: left promiscuous mode
[   96.954466][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.200294][ T7828] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.205072][ T7828] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   97.488616][ T7848] netlink: 96 bytes leftover after parsing attributes in process `syz.2.799'.
[   97.587074][ T7859] netlink: 96 bytes leftover after parsing attributes in process `syz.2.804'.
[   97.764063][ T7879] netlink: 'syz.2.813': attribute type 58 has an invalid length.
[   97.767293][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.2.813'.
[   97.865419][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'.
[   97.966714][ T7902] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   98.251074][ T7934] netlink: 292 bytes leftover after parsing attributes in process `syz.1.836'.
[   98.471893][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'.
[   98.528042][ T7966] trusted_key: syz.0.851 sent an empty control message without MSG_MORE.
[   98.580978][ T7971] netlink: 'syz.0.853': attribute type 29 has an invalid length.
[   98.593877][ T7971] netlink: 'syz.0.853': attribute type 29 has an invalid length.
[   98.786259][ T7980] netlink: 156 bytes leftover after parsing attributes in process `syz.0.857'.
[   99.045072][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'.
[   99.533511][ T8064] netlink: 168 bytes leftover after parsing attributes in process `syz.2.892'.
[   99.540164][ T8064] netlink: 144 bytes leftover after parsing attributes in process `syz.2.892'.
[  101.531624][ T8130] pim6reg1: entered promiscuous mode
[  101.535906][ T8130] pim6reg1: entered allmulticast mode
[  101.698121][ T8144] dummy0: entered promiscuous mode
[  101.701954][ T8144] dummy0: left promiscuous mode
[  101.848606][ T8150] netlink: 'syz.2.928': attribute type 1 has an invalid length.
[  101.871355][ T8153] tipc: Enabled bearer <udp:syz2>, priority 10
[  101.884663][ T8150] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  101.891865][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  101.893692][ T8150] 8021q: adding VLAN 0 to HW filter on device bond1
[  101.921621][ T8150] veth3: entered promiscuous mode
[  101.930004][ T8150] bond0: (slave bond_slave_0): Releasing backup interface
[  101.935850][ T8150] bond0: (slave bond_slave_1): Releasing backup interface
[  101.941225][ T8150] team0: Port device team_slave_0 removed
[  101.946760][ T8150] team0: Port device team_slave_1 removed
[  101.949569][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.956767][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.961525][ T8150] bond0: (slave wlan1): Releasing backup interface
[  101.975765][ T8150] bond1: (slave ip6gretap1): Removing an active aggregator
[  101.979707][ T8150] bond1: (slave ip6gretap1): Releasing backup interface
[  102.874380][ T5317] tipc: Node number set to 2050420327
[  103.136997][ T8217] __nla_validate_parse: 3 callbacks suppressed
[  103.137007][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.959'.
[  103.154519][ T8220] netlink: 'syz.2.960': attribute type 1 has an invalid length.
[  103.165773][ T8217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.959'.
[  103.168869][ T8217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.959'.
[  103.174132][ T8217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.959'.
[  103.248947][ T8225] netlink: 52 bytes leftover after parsing attributes in process `syz.2.963'.
[  105.361597][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'.
[  105.365593][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'.
[  106.330098][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'.
[  106.999209][ T8432] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1027'.
[  107.506467][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'.
[  107.646267][ T8487] netlink: 'syz.1.1052': attribute type 12 has an invalid length.
[  108.860845][ T8519] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1067'.
[  108.865037][ T8519] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1067'.
[  108.990868][ T8525] bond1: entered promiscuous mode
[  108.994523][ T8525] bond1: entered allmulticast mode
[  108.996575][ T8525] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.047201][ T8532] syzkaller0: entered promiscuous mode
[  109.049566][ T8532] syzkaller0: entered allmulticast mode
[  109.129760][ T8541] netlink: 'syz.1.1075': attribute type 1 has an invalid length.
[  109.966811][ T8541] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.987794][ T8544] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.990914][ T8544] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.997576][ T8544] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  110.014715][ T8542] syzkaller1: entered promiscuous mode
[  110.017188][ T8542] syzkaller1: entered allmulticast mode
[  110.035513][ T8547] veth7: entered promiscuous mode
[  110.040504][ T8547] bond2: (slave veth7): Enslaving as an active interface with a down link
[  110.121746][ T8557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'.
[  110.171692][ T8562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1081'.
[  111.260857][ T8639] netlink: 'syz.0.1115': attribute type 10 has an invalid length.
[  111.267990][ T8639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1115'.
[  111.268645][ T8637] syzkaller1: entered promiscuous mode
[  111.274132][ T8637] syzkaller1: entered allmulticast mode
[  111.278995][ T8639] veth0_vlan: entered allmulticast mode
[  111.281853][ T8639] bridge0: port 3(veth0_vlan) entered blocking state
[  111.284992][ T8639] bridge0: port 3(veth0_vlan) entered disabled state
[  111.288651][ T8639] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  111.551686][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1122'.
[  111.854381][ T8673] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1130'.
[  112.180476][ T8685] netlink: 'syz.1.1134': attribute type 10 has an invalid length.
[  112.202195][ T8685] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  112.225823][ T8685] syz.1.1134 (8685) used greatest stack depth: 19896 bytes left
[  112.272573][ T5240] Bluetooth: hci2: command 0x0405 tx timeout
[  112.624904][ T8715] veth0_to_bridge: entered promiscuous mode
[  113.878065][   T33] audit: type=1800 audit(1758811226.920:7): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1168" name="cgroup.controllers" dev="tmpfs" ino=2061 res=0 errno=0
[  113.967506][ T8774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'.
[  114.218548][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1190'.
[  114.222090][ T8804] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1190'.
[  114.227868][ T8804] netlink: 'syz.0.1190': attribute type 6 has an invalid length.
[  114.231672][ T8804] netlink: 'syz.0.1190': attribute type 5 has an invalid length.
[  114.235423][ T8804] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1190'.
[  114.369859][ T8819] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1196'.
[  114.519063][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'.
[  114.544014][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'.
[  114.582864][ T8838] netlink: 'syz.1.1202': attribute type 1 has an invalid length.
[  114.586065][ T8838] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.1202'.
[  114.695091][ T8854] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1210'.
[  114.699758][ T8854] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1210'.
[  114.981450][ T8882] netlink: 'syz.1.1222': attribute type 1 has an invalid length.
[  115.016351][ T8882] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  115.023870][ T8882] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  115.067162][ T8888] gretap2: entered promiscuous mode
[  115.078835][ T8888] bond3: (slave gretap2): making interface the new active one
[  115.081754][ T8888] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  115.108915][ T8892] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  115.112240][ T8892] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  116.125030][ T8919] netlink: 'syz.2.1234': attribute type 1 has an invalid length.
[  116.539675][ T8937] vlan3: entered promiscuous mode
[  116.811403][ T8943] Bluetooth: MGMT ver 1.23
[  117.574687][ T9000] netlink: 'syz.0.1261': attribute type 21 has an invalid length.
[  117.577975][ T9000] netlink: 'syz.0.1261': attribute type 1 has an invalid length.
[  117.831579][ T9012] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  117.836059][ T9012] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  117.839181][ T9012] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  118.832566][ T5240] Bluetooth: hci2: command 0x0405 tx timeout
[  118.835238][ T5852] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  119.028743][ T9084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.033573][ T9084] syzkaller0: entered promiscuous mode
[  119.036037][ T9084] syzkaller0: entered allmulticast mode
[  119.060843][ T9084] tipc: Resetting bearer <eth:syzkaller0>
[  119.066271][ T9083] tipc: Resetting bearer <eth:syzkaller0>
[  119.080235][ T9083] tipc: Disabling bearer <eth:syzkaller0>
[  119.445417][ T9102] sctp: [Deprecated]: syz.1.1305 (pid 9102) Use of int in max_burst socket option.
[  119.445417][ T9102] Use struct sctp_assoc_value instead
[  119.768675][ T9113] __nla_validate_parse: 16 callbacks suppressed
[  119.768691][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1310'.
[  120.253247][   T12] bond0: (slave bond_slave_0): interface is now down
[  120.253514][ T9148] bond0: option arp_validate: invalid value (18446744073491447809)
[  120.261678][   T12] bond0: (slave bond_slave_1): interface is now down
[  120.271101][   T12] bond0: now running without any active interface!
[  121.637263][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'.
[  122.075476][ T9246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.078105][ T9246] syzkaller0: entered promiscuous mode
[  122.081206][ T9246] syzkaller0: entered allmulticast mode
[  122.154584][ T9246] tipc: Resetting bearer <eth:syzkaller0>
[  122.260286][ T9245] tipc: Resetting bearer <eth:syzkaller0>
[  122.273334][ T9245] tipc: Disabling bearer <eth:syzkaller0>
[  122.646261][ T9293] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1366'.
[  123.056215][ T9342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.059438][ T9342] syzkaller0: entered promiscuous mode
[  123.061699][ T9342] syzkaller0: entered allmulticast mode
[  123.089663][ T9342] tipc: Resetting bearer <eth:syzkaller0>
[  123.093871][ T9338] tipc: Resetting bearer <eth:syzkaller0>
[  123.110902][ T9338] tipc: Disabling bearer <eth:syzkaller0>
[  123.203354][ T9357] netlink: 'syz.0.1396': attribute type 1 has an invalid length.
[  124.152126][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1403'.
[  124.220422][ T9378] netlink: 'syz.2.1404': attribute type 3 has an invalid length.
[  124.298275][ T9384] netlink: 'syz.2.1408': attribute type 2 has an invalid length.
[  124.329255][ T9386] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1409'.
[  125.065966][ T9453] syzkaller0: mtu greater than device maximum
[  125.914317][   T33] audit: type=1800 audit(1758811238.960:8): pid=9502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1460" name="memory.events" dev="tmpfs" ino=2826 res=0 errno=0
[  126.613400][ T9540] ieee802154 phy0 wpan0: encryption failed: -22
[  126.817708][ T9552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1481'.
[  126.996175][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1488'.
[  127.148419][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1497'.
[  127.152049][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'.
[  127.156445][ T9587] netlink: 'syz.2.1497': attribute type 14 has an invalid length.
[  127.159591][ T9587] netlink: 'syz.2.1497': attribute type 11 has an invalid length.
[  127.752226][ T9639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1516'.
[  128.069614][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1525'.
[  128.374072][ T9682] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.848301][ T9688] netlink: 'syz.1.1535': attribute type 282 has an invalid length.
[  128.859619][ T9696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.875949][ T9697] syzkaller0: entered promiscuous mode
[  128.883003][ T9697] syzkaller0: entered allmulticast mode
[  128.892358][ T9694] tipc: Resetting bearer <eth:syzkaller0>
[  128.968949][ T9693] tipc: Resetting bearer <eth:syzkaller0>
[  128.981955][ T9693] tipc: Disabling bearer <eth:syzkaller0>
[  129.229827][ T9737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1557'.
[  129.270845][ T9742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1558'.
[  129.275559][ T9742] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1558'.
[  129.279460][ T9742] tipc: Invalid UDP bearer configuration
[  129.279505][ T9742] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  129.906978][ T9806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.910501][ T9806] syzkaller0: entered promiscuous mode
[  129.916279][ T9806] syzkaller0: entered allmulticast mode
[  129.951831][ T9806] tipc: Resetting bearer <eth:syzkaller0>
[  129.960339][ T9803] tipc: Resetting bearer <eth:syzkaller0>
[  129.985449][ T9803] tipc: Disabling bearer <eth:syzkaller0>
[  130.193243][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  130.201289][ T9837] ip6tnl1: entered promiscuous mode
[  130.205223][ T9837] ip6tnl1: entered allmulticast mode
[  130.355171][ T9857] IPVS: Scheduler module ip_vs_ not found
[  132.093321][ T9952] netlink: 'syz.1.1653': attribute type 12 has an invalid length.
[  132.148657][ T9957] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  132.179672][ T9960] ip6gretap2: entered promiscuous mode
[  132.514943][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.517683][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.710066][ T9993] syzkaller1: entered promiscuous mode
[  132.713731][ T9993] syzkaller1: entered allmulticast mode
[  132.771866][ T9999] batadv_slave_1: entered promiscuous mode
[  132.777162][ T9998] batadv_slave_1: left promiscuous mode
[  133.928605][T10075] __nla_validate_parse: 6 callbacks suppressed
[  133.928620][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'.
[  134.273885][T10103] bond0: entered promiscuous mode
[  134.280213][T10103] bond0: entered allmulticast mode
[  134.857367][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'.
[  135.198365][T10189] geneve2: entered promiscuous mode
[  135.448444][T10210] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1763'.
[  135.671909][T10224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.677407][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  135.677848][T10224] syzkaller0: entered promiscuous mode
[  135.692386][T10224] syzkaller0: entered allmulticast mode
[  135.730811][T10224] tipc: Resetting bearer <eth:syzkaller0>
[  135.747299][T10223] tipc: Resetting bearer <eth:syzkaller0>
[  135.775099][T10223] tipc: Disabling bearer <eth:syzkaller0>
[  136.205585][T10268] netlink: 'syz.2.1787': attribute type 29 has an invalid length.
[  136.208790][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'.
[  136.416917][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'.
[  136.420894][T10281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1792'.
[  136.438669][T10281] gretap1: entered promiscuous mode
[  136.699765][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  136.704570][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'.
[  136.708272][T10294] netlink: 'syz.2.1797': attribute type 18 has an invalid length.
[  136.785577][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'.
[  136.838641][T10306] bridge0: entered allmulticast mode
[  136.933863][T10311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  136.939865][T10311] batman_adv: batadv0: Adding interface: gretap2
[  136.948084][T10311] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.960692][T10311] batman_adv: batadv0: Interface activated: gretap2
[  137.129806][T10331] syzkaller1: entered promiscuous mode
[  137.133017][T10331] syzkaller1: entered allmulticast mode
[  137.979282][T10423] tap0: tun_chr_ioctl cmd 1074025677
[  137.981386][T10423] tap0: linktype set to 825
[  138.127154][T10435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.179715][ T5317] IPVS: starting estimator thread 0...
[  140.211468][T10527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.271268][T10532] __nla_validate_parse: 2 callbacks suppressed
[  140.271285][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'.
[  140.278114][T10532] netlink: 'syz.2.1899': attribute type 21 has an invalid length.
[  140.282517][T10528] IPVS: using max 78 ests per chain, 187200 per kthread
[  140.329379][T10534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1900'.
[  140.398670][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'.
[  140.404147][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'.
[  140.409259][T10538] netlink: 'syz.2.1902': attribute type 1 has an invalid length.
[  140.412782][T10538] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1902'.
[  140.453406][T10538] nbd: socks must be embedded in a SOCK_ITEM attr
[  140.456439][T10538] block nbd0: shutting down sockets
[  141.163083][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1922'.
[  141.202640][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'.
[  141.803726][T10618] netlink: 'syz.2.1936': attribute type 32 has an invalid length.
[  141.808298][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1936'.
[  142.478929][T10618] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12)
[  142.492049][T10622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.503812][T10623] syzkaller0: entered promiscuous mode
[  142.506231][T10623] syzkaller0: entered allmulticast mode
[  142.519940][T10630] tipc: Resetting bearer <eth:syzkaller0>
[  142.560219][T10619] tipc: Resetting bearer <eth:syzkaller0>
[  142.570244][T10619] tipc: Disabling bearer <eth:syzkaller0>
[  142.592492][ T8340] wlan0: Trigger new scan to find an IBSS to join
[  142.983534][T10666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1954'.
[  143.050086][T10666] nbd: socks must be embedded in a SOCK_ITEM attr
[  143.979660][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'.
[  144.003822][T10691] macvtap1: entered promiscuous mode
[  144.006122][T10691] dummy0: entered promiscuous mode
[  144.009222][T10691] macvtap1: entered allmulticast mode
[  144.011511][T10691] dummy0: entered allmulticast mode
[  144.024070][T10691] macvtap1: left promiscuous mode
[  144.026127][T10691] dummy0: left promiscuous mode
[  144.028349][T10691] macvtap1: left allmulticast mode
[  144.030608][T10691] dummy0: left allmulticast mode
[  144.128073][T10702] netlink: 'syz.2.1966': attribute type 1 has an invalid length.
[  144.290403][T10715] netlink: 'syz.1.1970': attribute type 1 has an invalid length.
[  144.475333][T10726] netlink: 'syz.1.1972': attribute type 1 has an invalid length.
[  144.598565][T10739] netlink: 'syz.2.1978': attribute type 13 has an invalid length.
[  144.601698][T10739] netlink: 'syz.2.1978': attribute type 17 has an invalid length.
[  144.652069][T10739] bond0: left promiscuous mode
[  144.655079][T10739] bond0: left allmulticast mode
[  144.659044][T10739] 8021q: adding VLAN 0 to HW filter on device team0
[  144.756726][T10739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  144.824333][T10745] 8021q: adding VLAN 0 to HW filter on device bond2
[  144.830337][T10745] bond1: (slave bond2): Enslaving as an active interface with an up link
[  144.839166][T10746] 8021q: adding VLAN 0 to HW filter on device bond1
[  144.850216][T10739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.941336][T10739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.004407][T10739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.637280][T10793] netlink: 'syz.0.2002': attribute type 1 has an invalid length.
[  145.640092][T10793] __nla_validate_parse: 8 callbacks suppressed
[  145.640100][T10793] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2002'.
[  145.763136][T10795] netlink: 'syz.0.2003': attribute type 10 has an invalid length.
[  145.773574][T10795] team0: Port device dummy0 added
[  145.779003][T10795] netlink: 'syz.0.2003': attribute type 10 has an invalid length.
[  145.789341][T10795] team0: Port device dummy0 removed
[  145.796298][T10795] dummy0: entered promiscuous mode
[  145.798723][T10795] dummy0: entered allmulticast mode
[  145.803222][T10795] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  145.824794][ T5877] bond0: (slave dummy0): interface is now down
[  145.828395][ T5877] bond0: now running without any active interface!
[  145.831653][T10795] syz.0.2003 (10795) used greatest stack depth: 19384 bytes left
[  145.924984][T10799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.928262][T10799] syzkaller0: entered promiscuous mode
[  145.930350][T10799] syzkaller0: entered allmulticast mode
[  145.941194][T10799] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  145.948213][T10799] tipc: Resetting bearer <eth:syzkaller0>
[  145.961834][T10798] tipc: Resetting bearer <eth:syzkaller0>
[  145.981952][T10798] tipc: Disabling bearer <eth:syzkaller0>
[  145.985768][T10803] netlink: 'syz.2.2007': attribute type 10 has an invalid length.
[  145.989095][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2007'.
[  146.019382][T10803] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  146.022806][T10803] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  146.028275][T10803] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  146.101045][T10810] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2009'.
[  146.199553][T10822] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2015'.
[  146.379309][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2022'.
[  146.385252][T10841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2022'.
[  146.703028][T10869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2035'.
[  147.210687][T10916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.219146][T10916] syzkaller0: entered promiscuous mode
[  147.221460][T10916] syzkaller0: entered allmulticast mode
[  147.227452][T10916] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  147.293982][T10916] tipc: Resetting bearer <eth:syzkaller0>
[  147.305055][T10916] tipc: Disabling bearer <eth:syzkaller0>
[  148.526100][T11015] IPv6: Can't replace route, no match found
[  149.436337][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f6a0c00: rx timeout, send abort
[  149.440723][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f6a0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  149.571374][T11042] bond0: (slave dummy0): Releasing backup interface
[  149.578238][T11042] dummy0: left promiscuous mode
[  149.580111][T11042] dummy0: left allmulticast mode
[  149.586586][T11042] bridge_slave_0: left allmulticast mode
[  149.589059][T11042] bridge_slave_0: left promiscuous mode
[  149.591846][T11042] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.601706][T11042] bridge_slave_1: left allmulticast mode
[  149.605947][T11042] bridge_slave_1: left promiscuous mode
[  149.608609][T11042] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.619179][T11042] bond0: (slave bond_slave_0): Releasing backup interface
[  149.624928][T11042] bond_slave_0: left promiscuous mode
[  149.627693][T11042] bond_slave_0: left allmulticast mode
[  149.637369][T11042] bond0: (slave bond_slave_1): Releasing backup interface
[  149.645997][T11042] bond_slave_1: left promiscuous mode
[  149.648611][T11042] bond_slave_1: left allmulticast mode
[  149.659936][T11042] team0: Port device team_slave_0 removed
[  149.667734][T11042] team0: Port device team_slave_1 removed
[  149.671057][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.674205][T11042] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.678670][T11042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.681909][T11042] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.695455][T11042] batman_adv: batadv0: Interface deactivated: vxlan0
[  149.698468][T11042] batman_adv: batadv0: Removing interface: vxlan0
[  149.705482][T11042] bond1: (slave bond2): Releasing backup interface
[  149.732132][ T5915] syz0: Port: 1 Link DOWN
[  151.099738][T11097] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2135'.
[  151.846094][T11153] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2157'.
[  151.989910][T11160] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2160'.
[  151.994490][T11160] validate_nla: 1 callbacks suppressed
[  151.994499][T11160] netlink: 'syz.2.2160': attribute type 1 has an invalid length.
[  152.205999][T11165] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2161'.
[  153.081337][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'.
[  153.131386][T11210] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  153.136351][T11210] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  153.143580][T11210] veth3: left promiscuous mode
[  153.146403][T11210] ip6gretap2: left promiscuous mode
[  153.153306][T11210] gretap1: left promiscuous mode
[  153.156274][T11210] bridge0: left allmulticast mode
[  153.159030][T11210] batman_adv: batadv0: Interface deactivated: gretap2
[  153.958134][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'.
[  153.961852][T11241] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2196'.
[  153.967501][T11241] tipc: Invalid UDP bearer configuration
[  153.967529][T11241] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  153.995612][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'.
[  153.999005][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'.
[  154.031479][T11248] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2198'.
[  154.137816][T11252] netlink: 'syz.0.2200': attribute type 8 has an invalid length.
[  154.344483][T11271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  154.348706][T11271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  154.355928][T11271] hsr0: entered promiscuous mode
[  154.357997][T11271] hsr0: entered allmulticast mode
[  154.360133][T11271] hsr_slave_0: entered allmulticast mode
[  154.369487][T11271] hsr_slave_1: entered allmulticast mode
[  154.724517][T11316] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  154.734588][T11314] dvmrp0: entered allmulticast mode
[  156.712020][T11446] __nla_validate_parse: 6 callbacks suppressed
[  156.712031][T11446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2284'.
[  156.906960][T11460] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  156.910482][T11460] syzkaller0: entered promiscuous mode
[  156.913103][T11460] syzkaller0: entered allmulticast mode
[  156.933790][T11460] tipc: Resetting bearer <eth:syzkaller0>
[  156.939926][T11460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.943636][T11460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.973975][T11459] tipc: Resetting bearer <eth:syzkaller0>
[  156.993359][T11459] tipc: Disabling bearer <eth:syzkaller0>
[  157.671316][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'.
[  157.679929][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2307'.
[  157.995379][T11511] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2314'.
[  158.029073][T11511] team0: Mode "" not found
[  158.031102][T11515] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.2317'.
[  158.221556][T11534] netlink: 'syz.2.2325': attribute type 10 has an invalid length.
[  158.229606][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2325'.
[  158.332734][T11546] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2329'.
[  159.230933][T11594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2350'.
[  159.852848][T11636] netlink: 'syz.2.2366': attribute type 1 has an invalid length.
[  159.856077][T11636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2366'.
[  160.086121][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2373'.
[  160.449733][T11679] netlink: 'syz.1.2382': attribute type 4 has an invalid length.
[  161.566518][T11721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.717156][T11724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.952445][T11788] __nla_validate_parse: 1 callbacks suppressed
[  162.952455][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'.
[  162.990701][T11792] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  162.994131][T11792] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  164.235060][T11841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2450'.
[  164.257375][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2450'.
[  164.569975][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2462'.
[  165.887370][T11914] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  166.190361][T11926] syzkaller1: entered promiscuous mode
[  166.199494][T11926] syzkaller1: entered allmulticast mode
[  166.566555][T11936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2493'.
[  167.500136][T11952] batadv_slave_1: entered promiscuous mode
[  167.503898][T11951] batadv_slave_1: left promiscuous mode
[  167.581933][T11961] syz_tun: entered allmulticast mode
[  167.584417][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2502'.
[  167.604274][T11961] dvmrp8: entered allmulticast mode
[  167.665864][T11967] netlink: 'syz.1.2501': attribute type 23 has an invalid length.
[  167.769857][T11972] vlan3: entered allmulticast mode
[  167.775716][T11972] bridge_slave_0: entered allmulticast mode
[  167.881150][T11976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2508'.
[  167.898897][T11976] bond0: entered promiscuous mode
[  167.901148][T11976] bond_slave_0: entered promiscuous mode
[  167.909807][T11976] bond_slave_1: entered promiscuous mode
[  167.912358][T11976] syz_tun: entered promiscuous mode
[  167.915650][T11976] bond0: left promiscuous mode
[  167.917452][T11976] bond_slave_0: left promiscuous mode
[  167.920060][T11976] bond_slave_1: left promiscuous mode
[  167.923691][T11976] syz_tun: left promiscuous mode
[  168.028045][T11983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.031446][T11983] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  168.035921][T11983] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  168.048195][T11983] tipc: Resetting bearer <eth:syzkaller0>
[  168.350750][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'.
[  168.658980][T12059] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2542'.
[  168.666151][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2542'.
[  168.764101][T12068] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2544'.
[  169.046122][T12086] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2552'.
[  169.216249][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2556'.
[  169.531882][T12121] netlink: 'syz.0.2565': attribute type 10 has an invalid length.
[  169.547308][T12121] 8021q: adding VLAN 0 to HW filter on device team0
[  169.555978][T12121] team0: entered promiscuous mode
[  169.561399][T12121] team0: entered allmulticast mode
[  169.567946][T12121] bond0: (slave team0): Enslaving as an active interface with a down link
[  169.589046][ T5899] IPVS: starting estimator thread 0...
[  169.683923][T12129] IPVS: using max 48 ests per chain, 115200 per kthread
[  169.746468][T12146] netlink: 'syz.1.2574': attribute type 12 has an invalid length.
[  170.336330][T12196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2594'.
[  170.361937][T12196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2594'.
[  170.741634][ T5317] IPVS: starting estimator thread 0...
[  170.801004][T12221] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2605'.
[  170.842639][T12217] IPVS: using max 45 ests per chain, 108000 per kthread
[  170.949588][T12221] bond0 (unregistering): (slave team0): Releasing backup interface
[  170.953824][T12221] team0: left promiscuous mode
[  170.959621][T12221] team0: left allmulticast mode
[  170.967094][T12221] bond0 (unregistering): Released all slaves
[  171.632470][T12264] netlink: 'syz.0.2622': attribute type 1 has an invalid length.
[  171.635900][T12264] nbd: error processing sock list
[  171.639435][T12264] block nbd0: shutting down sockets
[  172.249346][T12291] Bluetooth: MGMT ver 1.23
[  172.296845][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'.
[  172.765899][T12325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.833435][T12325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.886578][T12325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.940157][T12325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.030622][ T5877] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  173.046378][ T5877] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.062166][ T5877] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.077377][ T5877] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  173.862116][T12404] __nla_validate_parse: 2 callbacks suppressed
[  173.862131][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'.
[  174.852658][T12441] tipc: Enabled bearer <udp:syz2>, priority 10
[  174.915691][T12447] team0: Port device team_slave_0 removed
[  174.961050][T12456] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  174.973174][T12456] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2705'.
[  175.068548][T12468] tipc: New replicast peer: 255.255.255.255
[  175.071807][T12468] tipc: Enabled bearer <udp:s>, priority 10
[  175.115535][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'.
[  175.268291][T12496] netlink: 'syz.0.2725': attribute type 1 has an invalid length.
[  175.325879][T12503] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2728'.
[  175.340108][T12503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2728'.
[  175.491443][T12519] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2733'.
[  175.783167][T12542] tipc: Can't bind to reserved service type 1
[  176.058791][T12564] netlink: 'syz.1.2755': attribute type 1 has an invalid length.
[  176.073717][ T5914] tipc: Node number set to 2316455789
[  176.098661][T12564] bond6: entered promiscuous mode
[  176.100732][T12564] bond6: entered allmulticast mode
[  176.103494][T12564] 8021q: adding VLAN 0 to HW filter on device bond6
[  176.117864][T12564] bridge0: entered promiscuous mode
[  176.120246][T12564] bridge0: entered allmulticast mode
[  176.123500][T12564] bond6: (slave bridge0): Enslaving as a backup interface with an up link
[  176.203119][   T13] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  176.322877][   T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  177.310595][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'.
[  177.315249][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'.
[  177.318984][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2783'.
[  177.427674][T12646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2785'.
[  177.842778][T12671] nbd0: detected capacity change from 0 to 127
[  177.847502][   T55] block nbd0: Receive control failed (result -104)
[  177.847586][T10568] block nbd0: Send control failed (result -32)
[  177.855191][T10568] block nbd0: Request send failed, requeueing
[  177.861355][   T97] block nbd0: Dead connection, failed to find a fallback
[  177.865594][   T97] block nbd0: shutting down sockets
[  177.868115][   T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.872217][   T97] Buffer I/O error on dev nbd0, logical block 1, async page read
[  177.872749][T10568] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.879560][T10568] Buffer I/O error on dev nbd0, logical block 2, async page read
[  177.883163][T10568] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.886495][T10568] Buffer I/O error on dev nbd0, logical block 3, async page read
[  177.961988][T12686] netlink: 'syz.2.2803': attribute type 21 has an invalid length.
[  177.965123][T12686] netlink: 'syz.2.2803': attribute type 6 has an invalid length.
[  178.253051][T12716] netlink: 'syz.1.2819': attribute type 2 has an invalid length.
[  178.387595][T12729] netlink: 'syz.0.2825': attribute type 4 has an invalid length.
[  178.965585][T12767] batadv_slave_1: entered promiscuous mode
[  178.970760][T12766] batadv_slave_1: left promiscuous mode
[  179.028772][T12777] __nla_validate_parse: 7 callbacks suppressed
[  179.028793][T12777] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2846'.
[  179.081303][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2848'.
[  179.391345][ T5240] Bluetooth: hci2: link tx timeout
[  179.395204][ T5240] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  180.540194][T12845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.672903][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.744003][   T12] nci: nci_rx_work: unknown MT 0x1
[  180.748105][T12867] geneve2: entered promiscuous mode
[  181.482579][ T5240] Bluetooth: hci2: command 0x0405 tx timeout
[  181.890759][T12920] bond0: (slave syz_tun): Releasing backup interface
[  181.911106][T12920] bond0: (slave bond_slave_0): Releasing backup interface
[  181.926002][T12920] bond0: (slave bond_slave_1): Releasing backup interface
[  181.936783][T12920] team0: Port device team_slave_1 removed
[  181.951454][T12920] bond2: (slave veth7): Releasing active interface
[  181.965197][T12920] bond3: (slave gretap2): Releasing active interface
[  181.974154][T12920] bond6: (slave bridge0): Removing an active aggregator
[  181.978632][T12920] bond6: (slave bridge0): Releasing backup interface
[  181.984069][T12920] bridge0: left promiscuous mode
[  181.986414][T12920] bridge0: left allmulticast mode
[  182.000521][T12924] team0: Mode changed to "activebackup"
[  182.065500][T12933] syzkaller1: entered promiscuous mode
[  182.068318][T12933] syzkaller1: entered allmulticast mode
[  182.173580][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2915'.
[  182.272633][T12947] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2920'.
[  182.278699][T12947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2920'.
[  182.282959][T12947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2920'.
[  182.538169][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'.
[  182.542161][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'.
[  182.621189][T12980] IPVS: length: 209 != 24
[  182.788138][T12998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2942'.
[  183.585830][T13061] netlink: 'syz.1.2962': attribute type 13 has an invalid length.
[  183.608073][T13062] netlink: 'syz.2.2960': attribute type 4 has an invalid length.
[  183.660266][T13063] netlink: 'syz.2.2960': attribute type 4 has an invalid length.
[  183.682021][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.685340][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.703879][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.707543][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  183.828776][T13070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.832177][T13070] syzkaller0: entered promiscuous mode
[  183.834738][T13070] syzkaller0: entered allmulticast mode
[  183.849835][T13070] tipc: Resetting bearer <eth:syzkaller0>
[  183.858580][T13069] tipc: Resetting bearer <eth:syzkaller0>
[  183.880540][T13069] tipc: Disabling bearer <eth:syzkaller0>
[  184.212386][T13093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2976'.
[  184.215362][T13093] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  184.217891][T13093] A link change request failed with some changes committed already. Interface netdevsim2 may have been left with an inconsistent configuration, please check.
[  184.487099][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'.
[  185.469486][T13152] netlink: 'syz.1.3002': attribute type 2 has an invalid length.
[  185.481944][T13152] netlink: 'syz.1.3002': attribute type 1 has an invalid length.
[  185.940194][T13196] macsec0: entered allmulticast mode
[  185.942152][T13196] ip6gretap0: entered allmulticast mode
[  185.948243][T13196] ip6gretap0: left allmulticast mode
[  185.960872][T13194] syzkaller1: entered promiscuous mode
[  185.963457][T13194] syzkaller1: entered allmulticast mode
[  186.172602][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3024'.
[  186.314923][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'.
[  186.466593][T13210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3028'.
[  186.469584][T13210] netdevsim0: renamed from ip_vti0
[  186.476523][T13210] netdevsim0: entered promiscuous mode
[  186.594803][T13235] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3039'.
[  186.597873][T13235] tc_dump_action: action bad kind
[  186.703458][T13249] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3045'.
[  186.752190][T13254] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.3047'.
[  186.779481][T13256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.356368][T13269] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  187.395730][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'.
[  187.399675][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3054'.
[  187.727080][T13299] sctp: [Deprecated]: syz.2.3065 (pid 13299) Use of int in max_burst socket option.
[  187.727080][T13299] Use struct sctp_assoc_value instead
[  187.963773][T13325] netlink: 'syz.0.3077': attribute type 2 has an invalid length.
[  187.978129][T13325] : entered promiscuous mode
[  188.474027][T13356] netlink: 'syz.0.3092': attribute type 14 has an invalid length.
[  190.188795][T13415] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  190.527374][T13443] netlink: 'syz.0.3130': attribute type 1 has an invalid length.
[  190.557559][T13445] vlan3: entered promiscuous mode
[  190.559764][T13445] geneve1: entered promiscuous mode
[  190.562127][T13445] vlan3: entered allmulticast mode
[  190.571750][T13445] geneve1: entered allmulticast mode
[  190.593372][T13443] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  190.606125][ T5877] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  190.606666][T13443] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.631964][T13443] veth7: entered promiscuous mode
[  190.663624][T13443] bond0: (slave ip6gretap2): Removing an active aggregator
[  190.671028][T13443] bond0: (slave ip6gretap2): Releasing backup interface
[  190.989030][T13476] __nla_validate_parse: 4 callbacks suppressed
[  190.989045][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3140'.
[  192.091465][T13533] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3170'.
[  192.097069][T13533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3170'.
[  192.100842][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'.
[  192.106024][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'.
[  192.109832][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3169'.
[  192.183087][T13541] pim6reg1: entered promiscuous mode
[  192.185173][T13541] pim6reg1: entered allmulticast mode
[  192.412456][T13568] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.464391][T13576] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3191'.
[  192.468347][T13576] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3191'.
[  192.478991][T13576] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3191'.
[  192.513108][ T7755] IPVS: ip_vs_send_async error -101
[  192.630057][T13600] veth0: entered promiscuous mode
[  192.634073][T13599] veth0: left promiscuous mode
[  192.778823][T13618] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3210'.
[  192.846958][T13624] netlink: 'syz.0.3213': attribute type 1 has an invalid length.
[  192.850003][T13624] netlink: 'syz.0.3213': attribute type 1 has an invalid length.
[  193.522171][T13676] netlink: 'syz.0.3236': attribute type 12 has an invalid length.
[  194.046786][T13708] netlink: 'syz.1.3248': attribute type 3 has an invalid length.
[  194.217966][T13727] vlan3: entered promiscuous mode
[  194.220394][T13727] bond0: entered promiscuous mode
[  195.158321][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  195.164406][T13786] netlink: 'syz.0.3283': attribute type 15 has an invalid length.
[  196.480128][T13845] __nla_validate_parse: 8 callbacks suppressed
[  196.480140][T13845] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3311'.
[  196.488639][T13845] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3311'.
[  196.839477][T13868] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3320'.
[  196.843692][T13868] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3320'.
[  197.038478][T13883] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3326'.
[  197.100336][T13889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3329'.
[  197.974858][T13941] xt_HMARK: spi-set and port-set can't be combined
[  198.209343][T13963] netlink: 'syz.1.3363': attribute type 2 has an invalid length.
[  198.226832][T13963] : entered promiscuous mode
[  198.410126][T13982] ip6gre2: entered allmulticast mode
[  199.727718][T14051] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3396'.
[  199.730901][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'.
[  199.976357][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'.
[  199.984777][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3399'.
[  200.480277][T14079] netlink: 'syz.0.3407': attribute type 10 has an invalid length.
[  200.488032][T14079] team0: Port device dummy0 added
[  200.490423][T14077] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  200.494083][T14077] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  200.503488][T14077] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  201.079224][T14120] netlink: 'syz.0.3424': attribute type 1 has an invalid length.
[  201.329949][T14147] netlink: 'syz.0.3437': attribute type 1 has an invalid length.
[  201.356695][T14147] bond3: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  201.361219][T14147] bond3: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  201.365679][T14147] bond3: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  201.465157][T14161] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  201.835312][T14203] __nla_validate_parse: 10 callbacks suppressed
[  201.835328][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3464'.
[  201.857033][T14203] team1: entered promiscuous mode
[  201.858976][T14203] team1: entered allmulticast mode
[  201.864750][T14203] 8021q: adding VLAN 0 to HW filter on device team1
[  201.908169][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3467'.
[  201.911166][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'.
[  201.933747][T14211] bond2: entered promiscuous mode
[  201.935899][T14211] bond2: entered allmulticast mode
[  201.938620][T14211] 8021q: adding VLAN 0 to HW filter on device bond2
[  202.064741][T14228] netlink: 'syz.0.3475': attribute type 7 has an invalid length.
[  202.294336][T14247] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3484'.
[  202.298219][T14247] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3484'.
[  202.302031][T14247] netlink: 'syz.2.3484': attribute type 6 has an invalid length.
[  202.307740][T14247] netlink: 'syz.2.3484': attribute type 5 has an invalid length.
[  202.311441][T14247] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3484'.
[  202.364619][T14258] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3489'.
[  202.376388][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3488'.
[  202.608069][T14288] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  202.935863][T14313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3511'.
[  203.140983][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3517'.
[  203.390452][T14351] netlink: 'syz.1.3526': attribute type 1 has an invalid length.
[  203.416466][T14353] sctp: [Deprecated]: syz.0.3527 (pid 14353) Use of struct sctp_assoc_value in delayed_ack socket option.
[  203.416466][T14353] Use struct sctp_sack_info instead
[  203.452994][T14351] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  203.458240][T14351] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  203.567359][T14371] macsec1: entered promiscuous mode
[  203.569233][T14371] macsec1: entered allmulticast mode
[  203.730068][T14383] netlink: 'syz.2.3538': attribute type 5 has an invalid length.
[  204.465172][T14414] netlink: 'syz.2.3552': attribute type 2 has an invalid length.
[  204.798973][T14435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  204.879969][T14442] netlink: 'syz.2.3565': attribute type 30 has an invalid length.
[  205.712687][T14466] netlink: 'syz.0.3577': attribute type 1 has an invalid length.
[  206.929757][T14530] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  206.967556][T14533] __nla_validate_parse: 10 callbacks suppressed
[  206.967569][T14533] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3597'.
[  206.992563][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3597'.
[  207.094624][T14544] IPVS: length: 4096 != 8
[  207.295272][T14561] netlink: 'syz.2.3608': attribute type 1 has an invalid length.
[  207.298063][T14561] netlink: 'syz.2.3608': attribute type 1 has an invalid length.
[  207.301145][T14561] netlink: 'syz.2.3608': attribute type 1 has an invalid length.
[  207.368245][T14564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3609'.
[  207.372056][T14564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3609'.
[  207.376055][T14564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3609'.
[  207.379948][T14564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3609'.
[  207.508560][T14575] netlink: 'syz.1.3615': attribute type 1 has an invalid length.
[  207.548505][T14580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.552136][T14580] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  207.558274][T14580] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  207.562056][T14580] tipc: Resetting bearer <eth:syzkaller0>
[  207.913961][T14601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3626'.
[  207.947803][T14605] sctp: [Deprecated]: syz.0.3629 (pid 14605) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.947803][T14605] Use struct sctp_sack_info instead
[  208.034701][   T60] block nbd0: Possible stuck request ffff88801fdb8000: control (read@0,1024B). Runtime 30 seconds
[  208.900368][T14640] bridge0: entered promiscuous mode
[  209.156980][ T7755] IPVS: ip_vs_send_async error -101
[  210.455089][T14727] netlink: 'syz.1.3677': attribute type 1 has an invalid length.
[  210.458375][T14727] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3677'.
[  210.889803][T14738] bridge0: port 1(erspan0) entered blocking state
[  210.892810][T14738] bridge0: port 1(erspan0) entered disabled state
[  210.895115][T14738] erspan0: entered allmulticast mode
[  210.898616][T14738] erspan0: entered promiscuous mode
[  210.907342][T14734] erspan0: left allmulticast mode
[  210.912221][T14734] erspan0: left promiscuous mode
[  210.915740][T14734] bridge0: port 1(erspan0) entered disabled state
[  210.981539][T10313] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  211.620929][   T55] block nbd1: Receive control failed (result -32)
[  211.626574][T14747] netlink: 'syz.0.3681': attribute type 12 has an invalid length.
[  212.524394][T14750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  212.592402][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  214.459882][T14900] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3701'.
[  214.464043][T14900] netem: invalid attributes len -16
[  214.466283][T14900] netem: change failed
[  215.425685][T14934] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.3706'.
[  215.660479][T14960] batadv0: entered promiscuous mode
[  215.663337][T14960] batadv0: entered allmulticast mode
[  215.920317][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'.
[  216.474198][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3722'.
[  218.373303][T15112] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  218.377334][T15106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3730'.
[  218.428788][T15122] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  218.489155][T15131] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  218.497862][T15131] batman_adv: batadv0: Removing interface: gretap2
[  220.063756][T15142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3735'.
[  220.067722][T15142] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3735'.
[  221.059893][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3742'.
[  221.145786][T15201] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  222.891165][T15226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  222.898150][T15225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  223.065721][T15256] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3752'.
[  223.080759][T15261] tap0: tun_chr_ioctl cmd 1074025680
[  223.138556][T15272] mac80211_hwsim hwsim11 D: renamed from syzkaller0
[  223.143229][T15272] tipc: Disabling bearer <eth:syzkaller0>
[  225.090475][T15372] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  225.261471][T15394] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  225.273609][T15384] dvmrp11: entered allmulticast mode
[  226.236256][T15431] team0: No ports can be present during mode change
[  226.333978][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3776'.
[  226.406615][T15460] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  226.514945][T15464] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  227.167674][T15465] delete_channel: no stack
[  227.713826][T15554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3791'.
[  230.708525][T15689] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  232.828926][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'.
[  233.461751][T15805] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  233.706265][T15844] xt_l2tp: v2 tid > 0xffff: 37482740
[  234.618026][T15866] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  234.689341][T15880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3829'.
[  234.697485][T15880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3829'.
[  234.712034][T15880] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3829'.
[  235.555610][T15892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  235.560566][T15886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  235.566943][T15903] netlink: 'syz.1.3835': attribute type 23 has an invalid length.
[  235.675576][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  235.679403][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  235.689338][T15913] siw: device registration error -23
[  235.690029][T15928] siw: device registration error -23
[  235.715030][T15944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3839'.
[  235.751901][T15909] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  235.760145][T15916] workqueue: Failed to create a rescuer kthread for wq "nfc16_nci_tx_wq": -EINTR
[  235.886184][T15982] netlink: 'syz.1.3840': attribute type 21 has an invalid length.
[  235.897901][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  235.906614][T15968] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  237.166763][T16066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  237.299797][T16084] netlink: 'syz.0.3854': attribute type 3 has an invalid length.
[  237.484337][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3859'.
[  237.515920][T16106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'.
[  237.577027][T16122] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  237.657203][T16134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3865'.
[  238.112612][   T60] block nbd0: Possible stuck request ffff88801fdb8000: control (read@0,1024B). Runtime 60 seconds
[  238.516550][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3868'.
[  238.566993][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3869'.
[  239.943206][T16263] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  240.014250][T16281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3885'.
[  240.023100][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'.
[  240.049466][T16281] bond4: entered promiscuous mode
[  240.051399][T16281] bond4: entered allmulticast mode
[  240.054048][T16281] 8021q: adding VLAN 0 to HW filter on device bond4
[  241.158449][T16337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3892'.
[  241.163090][T16343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3892'.
[  241.226115][T16330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.230538][T16331] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.234747][T16337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.238094][T16343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  241.384930][T16362] syzkaller1: entered promiscuous mode
[  241.386787][T16362] syzkaller1: entered allmulticast mode
[  242.565471][T16405] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  242.694491][T16412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  242.769343][T16430] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  243.196866][T16515] netlink: 'syz.2.3912': attribute type 4 has an invalid length.
[  243.321799][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3914'.
[  244.130743][T16553] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3918'.
[  246.047837][T16621] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  246.098241][T16635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3929'.
[  246.190166][T16618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3929'.
[  247.071584][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3935'.
[  247.088131][T16669] vlan4: entered promiscuous mode
[  247.089831][T16669] macvtap0: entered promiscuous mode
[  247.170136][T16686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3939'.
[  248.131365][T16722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  248.135074][T16730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  248.142559][T16729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3947'.
[  249.391546][T16807] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3956'.
[  249.394785][T16807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3956'.
[  249.397659][T16807] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3956'.
[  250.365251][T16852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3963'.
[  252.873453][T16923] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3976'.
[  253.989474][T16984] netlink: 'syz.1.3983': attribute type 21 has an invalid length.
[  254.772644][T17001] netlink: 'syz.0.3986': attribute type 1 has an invalid length.
[  254.781388][T17001] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3986'.
[  254.845735][T17009] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3988'.
[  254.849554][T17009] nbd: socks must be embedded in a SOCK_ITEM attr
[  254.964744][T17019] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  255.735197][T17045] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  255.747496][T17041] ip6tnl2: entered promiscuous mode
[  255.750288][T17041] ip6tnl2: entered allmulticast mode
[  255.794555][T17048] tipc: Enabled bearer <udp:syz2>, priority 6
[  255.888630][T17053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  255.898286][T17062] netlink: 'syz.2.3998': attribute type 1 has an invalid length.
[  255.973204][T17077] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004
[  256.272901][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'.
[  256.276679][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'.
[  256.280442][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4004'.
[  257.824227][T17154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4018'.
[  257.828987][T17156] netlink: 'syz.1.4016': attribute type 11 has an invalid length.
[  257.874676][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'.
[  257.951902][T17169] netlink: 556 bytes leftover after parsing attributes in process `syz.2.4021'.
[  258.763701][T17171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4022'.
[  260.236913][T17262] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  260.262929][T17270] netlink: 'syz.0.4049': attribute type 1 has an invalid length.
[  260.304145][T17270] 8021q: adding VLAN 0 to HW filter on device bond5
[  260.315606][T17270] mac80211_hwsim hwsim9 wlan0: left promiscuous mode
[  260.323017][T17270] bond5: (slave wlan0): Enslaving as an active interface with a down link
[  260.394093][T17279] netlink: 'syz.1.4050': attribute type 46 has an invalid length.
[  260.511999][T17289] batadv_slave_0: entered promiscuous mode
[  260.539119][T17289] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  261.206950][T17297] netlink: 'syz.0.4054': attribute type 14 has an invalid length.
[  261.278532][T17322] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  261.314667][T17330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4059'.
[  261.352773][T17330] netlink: 'syz.0.4059': attribute type 2 has an invalid length.
[  261.389978][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4061'.
[  261.402557][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4061'.
[  261.578158][T17355] netlink: 'syz.1.4064': attribute type 7 has an invalid length.
[  261.581234][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4064'.
[  264.565971][T10313] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  265.537915][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4098'.
[  265.541224][T17500] netlink: 'syz.2.4098': attribute type 1 has an invalid length.
[  265.545495][T17500] netlink: 'syz.2.4098': attribute type 2 has an invalid length.
[  265.551237][T17500] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4098'.
[  265.678014][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'.
[  266.490393][T17528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4105'.
[  267.533340][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'.
[  267.542900][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4117'.
[  267.965357][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4129'.
[  267.968511][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4129'.
[  267.972933][T17656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  268.197167][   T60] block nbd0: Possible stuck request ffff88801fdb8000: control (read@0,1024B). Runtime 90 seconds
[  269.625256][T17679] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4135'.
[  269.923386][T17708] dvmrp11: entered allmulticast mode
[  270.675901][T17724] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  271.558453][T17756] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  271.623416][T17770] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  271.756048][T17784] ip6gretap0: entered promiscuous mode
[  271.763391][T17784] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.770938][T17784] 8021q: adding VLAN 0 to HW filter on device team0
[  271.780194][T17784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  271.907139][T17793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  272.665717][T17828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4162'.
[  272.669999][T17828] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4162'.
[  272.811391][T17806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  272.873609][T17835] netlink: 'syz.1.4164': attribute type 2 has an invalid length.
[  272.877145][T17835] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4164'.
[  273.096081][T17861] netlink: 'syz.1.4168': attribute type 29 has an invalid length.
[  273.099746][T17861] netlink: 'syz.1.4168': attribute type 29 has an invalid length.
[  273.108934][T17861] netlink: 604 bytes leftover after parsing attributes in process `syz.1.4168'.
[  273.143071][T17863] can: request_module (can-proto-0) failed.
[  273.632491][ T7755] IPVS: ip_vs_send_async error -101
[  273.934524][    C0] vcan0: j1939_tp_rxtimer: 0xffff888011cc8800: rx timeout, send abort
[  273.938280][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888011cc8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  274.912960][T10313] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  275.031026][T17926] syzkaller1: entered promiscuous mode
[  275.033052][T17926] syzkaller1: entered allmulticast mode
[  275.801959][T17933] netlink: 'syz.1.4183': attribute type 16 has an invalid length.
[  275.816054][T17933] netlink: 'syz.1.4183': attribute type 17 has an invalid length.
[  275.964031][T17933] IPv6: NLM_F_REPLACE set, but no existing node found!
[  276.661076][T17960] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4188'.
[  276.665862][T17960] netlink: 'syz.1.4188': attribute type 2 has an invalid length.
[  277.766628][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4199'.
[  278.573500][T18030] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4202'.
[  278.582234][T18030] netlink: 'syz.2.4202': attribute type 2 has an invalid length.
[  278.640397][T18038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4201'.
[  278.648047][T18038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4201'.
[  278.684832][T18025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  279.133445][T18060] syzkaller1: entered promiscuous mode
[  279.140697][T18060] syzkaller1: entered allmulticast mode
[  279.428011][T18070] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  279.478805][T18086] netlink: 'syz.0.4209': attribute type 1 has an invalid length.
[  279.485951][T18086] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4209'.
[  279.966444][T18132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4221'.
[  280.907596][T18155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  280.985670][T18182] syzkaller0: entered promiscuous mode
[  280.987658][T18182] syzkaller0: entered allmulticast mode
[  281.050830][T18186] netlink: 'syz.1.4230': attribute type 1 has an invalid length.
[  281.053932][T18186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.199475][T18194] sctp: [Deprecated]: syz.1.4231 (pid 18194) Use of int in max_burst socket option deprecated.
[  281.199475][T18194] Use struct sctp_assoc_value instead
[  282.838194][T18250] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  283.783099][T18284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  283.789858][T18283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  283.836343][T18291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4248'.
[  283.839355][T18291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4248'.
[  284.810334][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4253'.
[  284.889134][T18332] pim6reg: entered allmulticast mode
[  284.902377][T18332] pim6reg: left allmulticast mode
[  285.002133][ T5877] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  285.457615][T18363] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4260'.
[  285.463377][T18363] netlink: 'syz.0.4260': attribute type 2 has an invalid length.
[  285.729973][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4262'.
[  285.740172][T18373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4262'.
[  285.743528][T18373] nbd: socks must be embedded in a SOCK_ITEM attr
[  285.934054][T18392] syzkaller1: entered promiscuous mode
[  285.935953][T18392] syzkaller1: entered allmulticast mode
[  286.614734][T18396] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4269'.
[  286.724228][ T5877] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  287.198615][T18428] tipc: Resetting bearer <eth:syzkaller0>
[  287.229115][T10313] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.234412][T10313] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.242231][T10313] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.247551][T10313] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.252632][T10313] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.256157][T10313] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.259095][T10313] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  287.262154][T10313] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  287.687876][T18450] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  288.453598][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4282'.
[  290.280539][T18494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  290.464814][T18525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.477293][T18525] syzkaller0: entered promiscuous mode
[  290.479587][T18525] syzkaller0: entered allmulticast mode
[  290.481846][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'.
[  290.487315][T18525] tipc: Resetting bearer <eth:syzkaller0>
[  290.499044][T18524] tipc: Resetting bearer <eth:syzkaller0>
[  290.515224][T18524] tipc: Disabling bearer <eth:syzkaller0>
[  290.866464][T18562] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  290.903680][T18581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4304'.
[  290.911501][T18581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4304'.
[  290.936086][T18575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  291.407377][T18632] bridge0: left promiscuous mode
[  291.412458][T18632] batadv_slave_0: left promiscuous mode
[  291.416158][T18632] veth0_vlan: left allmulticast mode
[  291.419269][T18632] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  291.423201][T18632] wireguard0: left promiscuous mode
[  291.425400][T18632] wireguard0: left allmulticast mode
[  291.427897][T18632] hsr1: left allmulticast mode
[  291.430004][T18632] veth1_to_team: left allmulticast mode
[  291.433374][T18632] ip6tnl1: left promiscuous mode
[  291.435475][T18632] ip6tnl1: left allmulticast mode
[  291.438068][T18632] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  291.440955][T18632] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  291.445122][T18632] veth7: left promiscuous mode
[  291.447801][T18632] bond4: left promiscuous mode
[  291.449870][T18632] bond4: left allmulticast mode
[  291.464865][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4310'.
[  291.922162][T18642] netlink: 'syz.2.4315': attribute type 33 has an invalid length.
[  291.931026][T18642] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4315'.
[  292.769374][T18665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4318'.
[  292.781317][T18668] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.785229][T18668] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  292.787848][T18668] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  292.790778][T18668] tipc: Resetting bearer <eth:syzkaller0>
[  292.795234][T18668] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  292.817305][T18668] tipc: Resetting bearer <eth:syzkaller0>
[  292.888978][T18679] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4322'.
[  292.909267][T18683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4324'.
[  292.920756][T18683] netlink: 'syz.0.4324': attribute type 2 has an invalid length.
[  293.191200][T18723] netlink: 'syz.1.4333': attribute type 1 has an invalid length.
[  293.224477][T18723] bond8: entered promiscuous mode
[  293.226327][T18723] 8021q: adding VLAN 0 to HW filter on device bond8
[  293.265590][T18723] bond8: (slave bridge4): making interface the new active one
[  293.268210][T18723] bridge4: entered promiscuous mode
[  293.270739][T18723] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  293.629073][T18768] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  294.414343][T18790] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4350'.
[  295.286938][T18840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  295.511197][T18863] netlink: 'syz.1.4360': attribute type 1 has an invalid length.
[  296.195660][T18876] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4364'.
[  296.416876][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4366'.
[  296.420086][T18882] netlink: 'syz.0.4366': attribute type 1 has an invalid length.
[  296.612973][T18909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4370'.
[  296.748233][T18916] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4371'.
[  297.131941][T18934] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  297.627599][T18942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4376'.
[  297.641902][T18942] xt_time: invalid argument - start or stop time greater than 23:59:59
[  298.282552][   T60] block nbd0: Possible stuck request ffff88801fdb8000: control (read@0,1024B). Runtime 120 seconds
[  298.738719][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4386'.
[  299.733049][T19023] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4392'.
[  299.757289][T19023] netlink: 'syz.2.4392': attribute type 10 has an invalid length.
[  299.764149][T19023] 8021q: adding VLAN 0 to HW filter on device team0
[  299.767356][T19023] team0: entered promiscuous mode
[  299.769566][T19023] bond0: (slave team0): Enslaving as an active interface with an up link
[  300.661649][T19067] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  300.753893][T19078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  300.868017][T19101] IPv6: sit1: Disabled Multicast RS
[  301.643959][T19117] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4415'.
[  301.667135][T19117] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  302.548550][T19138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4419'.
[  302.564377][T19137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  302.681961][T19166] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  303.523380][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4428'.
[  303.613231][T10313] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  305.347457][T19246] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  305.394297][T10313] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  305.427040][T19267] syzkaller1: entered promiscuous mode
[  305.429186][T19267] syzkaller1: entered allmulticast mode
[  307.228883][T19308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  308.240767][T19362] netlink: 'syz.0.4466': attribute type 1 has an invalid length.
[  308.291584][T19362] bond6: (slave bridge4): making interface the new active one
[  308.305364][T19362] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  308.349797][T19362] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4466'.
[  309.533450][T19458] sctp: [Deprecated]: syz.0.4481 (pid 19458) Use of struct sctp_assoc_value in delayed_ack socket option.
[  309.533450][T19458] Use struct sctp_sack_info instead
[  311.268118][T19508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4492'.
[  313.117348][T19577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4508'.
[  313.484878][T19621] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  314.269476][T19645] 8021q: adding VLAN 0 to HW filter on device bond9
[  314.296514][T19645] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  314.305265][T19645] bond9: (slave macvlan3): Enslaving as a backup interface with a down link
[  314.320824][T19645] bond8: (slave bridge4): Releasing backup interface
[  314.323808][T19645] bridge4: left promiscuous mode
[  314.331467][T19645] bond9: (slave macvlan3): Releasing backup interface
[  314.461876][T19657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4525'.
[  315.436430][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  315.436459][T19708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  315.500359][T19729] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4537'.
[  315.579394][T19745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4540'.
[  315.657686][T19754] tipc: Trying to set illegal importance in message
[  315.882786][T19798] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  315.926525][T19807] netlink: 'syz.0.4554': attribute type 1 has an invalid length.
[  315.975048][T19807] tc_dump_action: action bad kind
[  316.020243][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  317.085140][T19861] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  317.841630][T19882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4569'.
[  317.880070][T19888] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  318.024019][T19908] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4575'.
[  318.798135][T19918] netlink: 'syz.2.4577': attribute type 21 has an invalid length.
[  318.800866][T19918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4577'.
[  318.828140][T19925] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  318.877332][T19931] sch_tbf: peakrate 10 is lower than or equals to rate 6829859379779001161 !
[  321.068968][T20041] netlink: 'syz.0.4600': attribute type 10 has an invalid length.
[  321.074124][T20041] netlink: 'syz.0.4600': attribute type 10 has an invalid length.
[  321.077108][T20041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4600'.
[  322.079233][T20069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4607'.
[  323.156251][T20108] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4615'.
[  323.455761][T20146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4624'.
[  324.471430][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  325.429097][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  326.232170][T20273] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4646'.
[  326.244140][T20273] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4646'.
[  326.251175][T20273] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  326.255717][T20273] gretap3: entered promiscuous mode
[  326.257896][T20273] gretap3: entered allmulticast mode
[  326.458104][T20300] workqueue: Failed to create a rescuer kthread for wq "nfc13_nci_tx_wq": -EINTR
[  327.228048][T20335] sctp: [Deprecated]: syz.2.4655 (pid 20335) Use of int in maxseg socket option.
[  327.228048][T20335] Use struct sctp_assoc_value instead
[  327.409744][T20356] syz.1.4661 uses old SIOCAX25GETINFO
[  327.422959][T20356] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  327.433837][T20356] netlink: 'syz.1.4661': attribute type 15 has an invalid length.
[  327.443878][T20349] netlink: 'syz.2.4659': attribute type 1 has an invalid length.
[  328.395645][   T60] block nbd0: Possible stuck request ffff88801fdb8000: control (read@0,1024B). Runtime 150 seconds
[  328.474818][T20418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4674'.
[  328.514423][T20425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4673'.
[  328.796865][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  328.895543][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4678'.
[  329.152561][ T5852] Bluetooth: hci2: command 0x0405 tx timeout
[  329.569392][T20474] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  329.688143][   T13] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  330.436656][T20497] netlink: 10632 bytes leftover after parsing attributes in process `syz.0.4688'.
[  330.522955][T20502] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  330.525796][T20502] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  330.529169][T20502] tipc: Resetting bearer <eth:syzkaller0>
[  330.547713][T20502] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  330.550460][T20502] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  330.558382][T20502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  330.937933][T20549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4696'.
[  333.380119][T20658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4719'.
[  333.380828][T20662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4719'.
[  333.565630][T20685] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  334.513419][T20721] netlink: 'syz.0.4727': attribute type 29 has an invalid length.
[  334.519891][T20721] netlink: 'syz.0.4727': attribute type 29 has an invalid length.
[  334.523606][T20721] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4727'.
[  334.992744][ T7755] IPVS: ip_vs_send_async error -101
[  335.639376][T20757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4740'.
[  336.418572][T20782] netlink: 'syz.2.4744': attribute type 29 has an invalid length.
[  336.421575][T20782] netlink: 'syz.2.4744': attribute type 29 has an invalid length.
[  336.425008][T20782] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4744'.
[  336.585832][T20789] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002
[  336.588878][T20790] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002
[  336.641529][T20794] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  336.795468][T20813] netlink: 'syz.1.4754': attribute type 3 has an invalid length.
[  336.859825][T20815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4755'.
[  336.875522][T20815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4755'.
[  337.791213][T20857] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4761'.
[  338.780386][T20899] netlink: 10496 bytes leftover after parsing attributes in process `syz.2.4770'.
[  338.950906][T20913] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  338.990215][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4774'.
[  339.037092][T20928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  339.050048][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4776'.
[  339.053792][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4776'.
[  339.057347][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4776'.
[  339.060962][T20921] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  339.574563][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4780'.
[  340.184418][T20963] block nbd2: Unsupported socket: shutdown callout must be supported.
[  340.468123][   T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  341.330945][T21031] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  342.077555][T21050] netlink: 'syz.0.4798': attribute type 1 has an invalid length.
[  342.085102][T21050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4798'.
[  342.088785][T21050] netlink: 'syz.0.4798': attribute type 1 has an invalid length.
[  342.109875][T21057] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  343.197048][T21119] pim6reg1: entered promiscuous mode
[  343.199068][T21119] pim6reg1: entered allmulticast mode
[  345.055114][T21181] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  345.164019][T21198] IPv6: NLM_F_CREATE should be specified when creating new route
[  345.229004][T21199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  345.232551][T21203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  345.305870][T10313] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  345.308657][T10313] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  345.311942][T10313] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  345.316974][T10313] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  345.363252][ T5877] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  345.376460][T21229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4827'.
[  345.383438][T21229] netlink: 'syz.2.4827': attribute type 4 has an invalid length.
[  346.269367][T21262] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  346.269796][T21247] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  346.409872][T21279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  347.186617][T21317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4842'.
[  347.431560][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'.
[  347.551336][T21356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4851'.
[  347.576742][T21356] macvlan0: entered promiscuous mode
[  347.578744][T21356] macvlan0: entered allmulticast mode
[  347.581251][T21356] bond3: (slave macvlan0): Opening slave failed
[  347.680574][ T5877] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  347.716218][T21372] dvmrp0: left allmulticast mode
[  347.718404][T21372] dvmrp11: left allmulticast mode
[  348.596773][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4861'.
[  348.741706][T21431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4863'.
[  348.823332][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4865'.
[  349.524791][T21426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  349.565506][T21454] dummy0: entered promiscuous mode
[  349.568869][T21453] dummy0: left promiscuous mode
[  349.657493][T21469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4870'.
[  349.707203][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4869'.
[  349.860201][T21478] netlink: 'syz.1.4871': attribute type 29 has an invalid length.
[  349.864344][T21478] netlink: 436 bytes leftover after parsing attributes in process `syz.1.4871'.
[  350.593567][T21486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4873'.
[  351.313251][T21480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  351.394201][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4880'.
[  351.560878][T21530] netlink: 'syz.2.4882': attribute type 29 has an invalid length.
[  351.564094][T21530] netlink: 'syz.2.4882': attribute type 29 has an invalid length.
[  351.567553][T21530] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4882'.
[  353.046064][T21532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  353.197940][T21566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.205685][T21566] syzkaller0: entered promiscuous mode
[  353.209561][T21566] syzkaller0: entered allmulticast mode
[  353.241368][T21566] tipc: Resetting bearer <eth:syzkaller0>
[  353.257442][T21560] tipc: Resetting bearer <eth:syzkaller0>
[  353.275149][T21560] tipc: Disabling bearer <eth:syzkaller0>
[  354.027496][T21802] syzkaller1: entered allmulticast mode
[  355.358107][T21836] !: renamed from dummy0
[  355.908519][T21887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4909'.
[  355.994130][T21881] sctp: [Deprecated]: syz.2.4907 (pid 21881) Use of int in maxseg socket option.
[  355.994130][T21881] Use struct sctp_assoc_value instead
[  356.061813][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4907'.
[  356.756752][T21912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4912'.
[  357.045259][T21937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  357.049248][T21941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  357.118626][T21950] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  357.187044][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4920'.
[  357.256448][T21976] netem: change failed
[  358.069343][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4929'.
[  358.293238][ T5877] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  358.452597][   T60] block nbd0: Possible stuck request ffff88801fdb8000: control (read@0,1024B). Runtime 180 seconds
[  359.174568][T22049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4939'.
[  359.187883][T22049] netlink: 508 bytes leftover after parsing attributes in process `syz.0.4939'.
[  360.011535][T22058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4940'.
[  360.079679][T22073] netlink: 'syz.0.4944': attribute type 1 has an invalid length.
[  360.104848][T22073] 8021q: adding VLAN 0 to HW filter on device bond7
[  360.191319][T22078] workqueue: Failed to create a rescuer kthread for wq "nfc12_nci_rx_wq": -EINTR
[  360.929649][T22108] sctp: [Deprecated]: syz.1.4946 (pid 22108) Use of int in maxseg socket option.
[  360.929649][T22108] Use struct sctp_assoc_value instead
[  361.134511][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4947'.
[  361.139219][ T5877] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  361.857746][T22134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4953'.
[  362.007273][T22154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4957'.
[  362.010430][T22154] netlink: 'syz.0.4957': attribute type 11 has an invalid length.
[  362.013866][T22154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4957'.
[  362.016904][T22154] netlink: 'syz.0.4957': attribute type 11 has an invalid length.
[  362.854387][T22170] vlan4: entered allmulticast mode
[  362.856585][T22170] bridge_slave_0: entered allmulticast mode
[  363.097177][T22186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4966'.
[  363.109372][T22186] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  363.283206][T22206] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  363.287967][T22205] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  363.503864][T22214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4970'.
[  363.796019][T22233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4977'.
[  363.806469][T22233] netlink: 'syz.1.4977': attribute type 3 has an invalid length.
[  363.809388][T22233] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4977'.
[  363.955470][ T5240] Bluetooth: hci1: command 0x0406 tx timeout
[  364.080257][T22261] block nbd2: Receive control failed (result -11)
[  365.051019][T22311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  365.168488][T22327] tap0: tun_chr_ioctl cmd 1074812118
[  367.934257][T22422] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  368.757556][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5017'.
[  369.113322][T22480] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  369.377675][T22504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  369.629123][T22531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  371.832186][T22529] Set syz1 is full, maxelem 65536 reached
[  371.890075][T22602] ip6gretap0: entered promiscuous mode
[  371.972709][T22608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5046'.
[  372.398655][T22580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  372.494696][T22620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5049'.
[  372.535537][T22622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5048'.
[  373.375429][T22627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  373.378518][T22631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  374.287487][T22676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5060'.
[  374.291496][T22676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5060'.
[  374.297177][T22676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5060'.
[  374.301353][T22676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5060'.
[  374.473800][T22669] netlink: 'syz.1.5058': attribute type 1 has an invalid length.
[  374.489161][T22669] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5058'.
[  374.534441][T22682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5061'.
[  374.539736][T22682] netlink: 'syz.1.5061': attribute type 1 has an invalid length.
[  374.543282][T22682] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.5061'.
[  374.599169][T10313] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  375.570089][T22714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.820384][T22745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5069'.
[  375.829981][T22745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5069'.
[  375.851088][T22745] netlink: 51 bytes leftover after parsing attributes in process `syz.1.5069'.
[  376.963993][T22789] team0: Port device dummy0 removed
[  376.967506][T22789] bond5: (slave wlan0): Releasing active interface
[  376.970958][T22789] tipc: Resetting bearer <eth:syzkaller0>
[  376.974689][T22789] bond6: (slave bridge4): Releasing active interface
[  376.998309][T22789] netlink: 'syz.0.5080': attribute type 10 has an invalid length.
[  379.510448][ T5877] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  380.333772][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5095'.
[  380.453652][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  380.456873][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  380.459876][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  380.470060][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  380.474240][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  380.482844][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  380.487671][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  380.490614][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  380.495456][T22902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5103'.
[  381.571056][    C1] ==================================================================
[  381.574056][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  381.577014][    C1] Write of size 8 at addr ffff888032b9c930 by task swapper/1/0
[  381.580177][    C1] 
[  381.581052][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  381.581062][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  381.581068][    C1] Call Trace:
[  381.581072][    C1]  <IRQ>
[  381.581076][    C1]  dump_stack_lvl+0x189/0x250
[  381.581088][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  381.581097][    C1]  ? rcu_is_watching+0x15/0xb0
[  381.581105][    C1]  ? __kasan_check_byte+0x12/0x40
[  381.581115][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.581123][    C1]  ? rcu_is_watching+0x15/0xb0
[  381.581129][    C1]  ? lock_release+0x4b/0x3e0
[  381.581139][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  381.581147][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  381.581155][    C1]  print_report+0xca/0x240
[  381.581161][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  381.581169][    C1]  kasan_report+0x118/0x150
[  381.581179][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  381.581187][    C1]  __xfrm_state_delete+0x696/0xca0
[  381.581196][    C1]  xfrm_timer_handler+0x18f/0xa00
[  381.581209][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  381.581216][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  381.581226][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.581234][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  381.581244][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  381.581254][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  381.581261][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  381.581268][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  381.581278][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  381.581284][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  381.581293][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  381.581300][    C1]  handle_softirqs+0x286/0x870
[  381.581308][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  381.581315][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  381.581322][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  381.581330][    C1]  __irq_exit_rcu+0xca/0x1f0
[  381.581336][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  381.581344][    C1]  irq_exit_rcu+0x9/0x30
[  381.581350][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  381.581357][    C1]  </IRQ>
[  381.581359][    C1]  <TASK>
[  381.581362][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  381.581369][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  381.581376][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 f9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  381.581383][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  381.581390][    C1] RAX: dd2f04428c5d9700 RBX: ffffffff819693f8 RCX: dd2f04428c5d9700
[  381.581395][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b9d06 RDI: ffffffff8be33c00
[  381.581400][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  381.581404][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa3a630
[  381.581409][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  381.581414][    C1]  ? do_idle+0x1e8/0x510
[  381.581422][    C1]  default_idle+0x13/0x20
[  381.581429][    C1]  default_idle_call+0x74/0xb0
[  381.581437][    C1]  do_idle+0x1e8/0x510
[  381.581444][    C1]  ? __pfx_do_idle+0x10/0x10
[  381.581453][    C1]  cpu_startup_entry+0x44/0x60
[  381.581459][    C1]  start_secondary+0x101/0x110
[  381.581469][    C1]  common_startup_64+0x13e/0x147
[  381.581480][    C1]  </TASK>
[  381.581483][    C1] 
[  381.691044][    C1] Allocated by task 21508:
[  381.692574][    C1]  kasan_save_track+0x3e/0x80
[  381.694145][    C1]  __kasan_slab_alloc+0x6c/0x80
[  381.695746][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  381.697544][    C1]  xfrm_state_alloc+0x24/0x2f0
[  381.699150][    C1]  __find_acq_core+0x8a7/0x1c00
[  381.700746][    C1]  xfrm_find_acq+0x78/0xa0
[  381.702158][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  381.703812][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  381.705456][    C1]  netlink_rcv_skb+0x208/0x470
[  381.707089][    C1]  xfrm_netlink_rcv+0x79/0x90
[  381.708618][    C1]  netlink_unicast+0x82f/0x9e0
[  381.710189][    C1]  netlink_sendmsg+0x805/0xb30
[  381.711793][    C1]  __sock_sendmsg+0x21c/0x270
[  381.713320][    C1]  ____sys_sendmsg+0x505/0x830
[  381.714881][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  381.716464][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  381.718050][    C1]  do_syscall_64+0xfa/0x3b0
[  381.719534][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  381.721423][    C1] 
[  381.722213][    C1] Freed by task 1271:
[  381.723495][    C1]  kasan_save_track+0x3e/0x80
[  381.725036][    C1]  kasan_save_free_info+0x46/0x50
[  381.726743][    C1]  __kasan_slab_free+0x5b/0x80
[  381.728316][    C1]  kmem_cache_free+0x18f/0x400
[  381.729860][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  381.731489][    C1]  process_scheduled_works+0xae1/0x17b0
[  381.733252][    C1]  worker_thread+0x8a0/0xda0
[  381.734786][    C1]  kthread+0x711/0x8a0
[  381.736180][    C1]  ret_from_fork+0x439/0x7d0
[  381.737643][    C1]  ret_from_fork_asm+0x1a/0x30
[  381.739183][    C1] 
[  381.739978][    C1] The buggy address belongs to the object at ffff888032b9c900
[  381.739978][    C1]  which belongs to the cache xfrm_state of size 928
[  381.744302][    C1] The buggy address is located 48 bytes inside of
[  381.744302][    C1]  freed 928-byte region [ffff888032b9c900, ffff888032b9cca0)
[  381.748690][    C1] 
[  381.749478][    C1] The buggy address belongs to the physical page:
[  381.751538][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032b9c000 pfn:0x32b9c
[  381.754746][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  381.757481][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  381.759892][    C1] page_type: f5(slab)
[  381.761159][    C1] raw: 00fff00000000040 ffff888104bec640 dead000000000122 0000000000000000
[  381.764038][    C1] raw: ffff888032b9c000 00000000800e0008 00000000f5000000 0000000000000000
[  381.766867][    C1] head: 00fff00000000040 ffff888104bec640 dead000000000122 0000000000000000
[  381.769608][    C1] head: ffff888032b9c000 00000000800e0008 00000000f5000000 0000000000000000
[  381.772399][    C1] head: 00fff00000000002 ffffea0000cae701 00000000ffffffff 00000000ffffffff
[  381.775262][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  381.778120][    C1] page dumped because: kasan: bad access detected
[  381.780203][    C1] page_owner tracks the page as allocated
[  381.782075][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 10801, tgid 10800 (syz.0.2006), ts 145964934745, free_ts 130467639865
[  381.788867][    C1]  post_alloc_hook+0x240/0x2a0
[  381.790581][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  381.792352][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  381.794245][    C1]  alloc_pages_mpol+0x232/0x4a0
[  381.795833][    C1]  allocate_slab+0x8a/0x370
[  381.797349][    C1]  ___slab_alloc+0xbeb/0x1420
[  381.798876][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  381.800649][    C1]  xfrm_state_alloc+0x24/0x2f0
[  381.802181][    C1]  xfrm_state_find+0x37d4/0x5400
[  381.803772][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  381.805775][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  381.807943][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  381.809698][    C1]  udp_sendmsg+0x142e/0x2170
[  381.811226][    C1]  __sock_sendmsg+0x19c/0x270
[  381.812767][    C1]  ____sys_sendmsg+0x52d/0x830
[  381.814313][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  381.815809][    C1] page last free pid 5899 tgid 5899 stack trace:
[  381.817858][    C1]  __free_frozen_pages+0xbc4/0xd30
[  381.819501][    C1]  vfree+0x25a/0x400
[  381.820809][    C1]  delayed_vfree_work+0x55/0x80
[  381.822409][    C1]  process_scheduled_works+0xae1/0x17b0
[  381.824209][    C1]  worker_thread+0x8a0/0xda0
[  381.825718][    C1]  kthread+0x711/0x8a0
[  381.827364][    C1]  ret_from_fork+0x439/0x7d0
[  381.829253][    C1]  ret_from_fork_asm+0x1a/0x30
[  381.830833][    C1] 
[  381.831624][    C1] Memory state around the buggy address:
[  381.833413][    C1]  ffff888032b9c800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  381.835962][    C1]  ffff888032b9c880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  381.838522][    C1] >ffff888032b9c900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  381.841056][    C1]                                      ^
[  381.842831][    C1]  ffff888032b9c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  381.845321][    C1]  ffff888032b9ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  381.848420][    C1] ==================================================================
[  381.851363][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  381.853657][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  381.856577][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  381.859745][    C1] Call Trace:
[  381.860817][    C1]  <IRQ>
[  381.861767][    C1]  dump_stack_lvl+0x99/0x250
[  381.863251][    C1]  ? __asan_memcpy+0x40/0x70
[  381.864762][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  381.866547][    C1]  ? __pfx__printk+0x10/0x10
[  381.868123][    C1]  vpanic+0x281/0x750
[  381.869453][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  381.871159][    C1]  ? __pfx_vpanic+0x10/0x10
[  381.872632][    C1]  ? asm_common_interrupt+0x26/0x40
[  381.874322][    C1]  panic+0xb9/0xc0
[  381.875570][    C1]  ? __pfx_panic+0x10/0x10
[  381.877120][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  381.879080][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  381.881131][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  381.882823][    C1]  check_panic_on_warn+0x89/0xb0
[  381.884411][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  381.886146][    C1]  end_report+0x78/0x160
[  381.887559][    C1]  kasan_report+0x129/0x150
[  381.889070][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  381.890789][    C1]  __xfrm_state_delete+0x696/0xca0
[  381.892451][    C1]  xfrm_timer_handler+0x18f/0xa00
[  381.894094][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  381.895898][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  381.897931][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  381.899579][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  381.901461][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  381.903431][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  381.905178][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  381.907042][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  381.908756][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  381.910552][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  381.912414][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  381.914064][    C1]  handle_softirqs+0x286/0x870
[  381.915612][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  381.917289][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  381.918977][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  381.920640][    C1]  __irq_exit_rcu+0xca/0x1f0
[  381.922154][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  381.923831][    C1]  irq_exit_rcu+0x9/0x30
[  381.925190][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  381.927046][    C1]  </IRQ>
[  381.928016][    C1]  <TASK>
[  381.928988][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  381.930897][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  381.932712][    C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 f9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  381.938808][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  381.940749][    C1] RAX: dd2f04428c5d9700 RBX: ffffffff819693f8 RCX: dd2f04428c5d9700
[  381.943226][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b9d06 RDI: ffffffff8be33c00
[  381.945716][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  381.948280][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa3a630
[  381.950766][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  381.953264][    C1]  ? do_idle+0x1e8/0x510
[  381.954636][    C1]  default_idle+0x13/0x20
[  381.956011][    C1]  default_idle_call+0x74/0xb0
[  381.957552][    C1]  do_idle+0x1e8/0x510
[  381.958884][    C1]  ? __pfx_do_idle+0x10/0x10
[  381.960358][    C1]  cpu_startup_entry+0x44/0x60
[  381.961861][    C1]  start_secondary+0x101/0x110
[  381.963409][    C1]  common_startup_64+0x13e/0x147
[  381.965009][    C1]  </TASK>
[  381.966684][    C1] Kernel Offset: disabled
[  381.968100][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:44:54  Registers:
info registers vcpu 0

CPU#0
RAX=6124f4590a36eb00 RBX=ffffffff819693f8 RCX=6124f4590a36eb00 RDX=0000000000000001
RSI=ffffffff8d9b9d06 RDI=ffffffff8be33c00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a630 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe6d1ac5d58 CR3=00000000270d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fe6d0c12e7b
XMM06=0000000000000000 00007fe6d0c12e75 XMM07=0000000000000000 00007fe6d0c12e89
XMM08=0000000000000000 00007fe6d0c12f0f XMM09=0000000000000000 00007fe6d0c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888108928237 R9 =1ffff11021125046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b0090f R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe6d1ac4fc8 CR3=000000002fae2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000009000a 0000004e002b0008
XMM02=0003000800000000 002e000500000000 XMM03=000000000009000a 0000004e002b0008
XMM04=00007f2f9ab0d100 00007f2f99fa7460 XMM05=00007f2f99fa7478 00007f2f99fa74c0
XMM06=00007f2f99fa74b8 00007f2f99fa74b0 XMM07=00007f2f99fa74a8 00007f2f99fa74a0
XMM08=0000000000000000 00007f2f99e12f0f XMM09=0000000000000000 00007f2f99e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
