last executing test programs:

2.095908971s ago: executing program 1 (id=3276):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)

1.200865993s ago: executing program 1 (id=3288):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00)

1.130975801s ago: executing program 1 (id=3289):
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
socket$qrtr(0x2a, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

878.14664ms ago: executing program 2 (id=3303):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)

877.95641ms ago: executing program 2 (id=3304):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x29, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bda"}}}}}}}, 0x4f)

799.065792ms ago: executing program 2 (id=3305):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r1, 0x0, 0x4}, 0x18)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r4, r0, 0x2f}, 0x20)
close(r3)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8, <r5=>0x0}, 0x8)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r5, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, r4, 0x2f, 0x2000, 0x4, @value=r6}, 0x20)

796.474709ms ago: executing program 2 (id=3306):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00)

795.594837ms ago: executing program 2 (id=3307):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)

681.103845ms ago: executing program 2 (id=3308):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18)
r1 = socket$kcm(0x29, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)

348.434501ms ago: executing program 0 (id=3312):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x4, 0x3}, 0x6)

348.114327ms ago: executing program 0 (id=3313):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"})

347.70418ms ago: executing program 0 (id=3314):
close(0x4)
r0 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8)
r2 = socket$netlink(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r5, &(0x7f0000000380)='syz1\x00', 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @remote, @dev={0xfe, 0x80, '\x00', 0x25}, 0x2000000, 0x0, 0x7d, 0x600, 0x2, 0x970310})
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r8 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)

263.939998ms ago: executing program 1 (id=3315):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_CQM(r0, 0x0, 0x4000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x20008040)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x3c}}, 0x8000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x40010)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000440)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x877, 0x2, 0x6, 0x1, 0xb2, "8700f2b4b9a5682e6beff51378209fcaf2aa1cd59abe3b493419c6824b9d36e66d108c003115c7b46a1c9734a598f916cfc5c7d09dded5cc84f4d19d0ced5dd452814ddfb45a6f51ec2563bec429612868f787088e7c12415762083dd7a08a9c9cdaf027c24ea4989617ffad337295111f15c6342c991109cac51afb62a690fb"})

255.789127ms ago: executing program 1 (id=3316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "8a00000080ca8c7d47c82ce4211a00707e"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0)

199.977809ms ago: executing program 1 (id=3317):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x800448d2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)={0x74, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x44, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xe, 0x0, @random="2c0a4108acde95d0ca09"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x2400c084}, 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

357.386µs ago: executing program 0 (id=3318):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c7821", 0x8f}, {&(0x7f00000002c0)="a01931a77deebe4f", 0x8}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a477647016ad9de5ce797b335cfd816d72e2cc01b12e54a3ccea2593bb0c99266bd87d0d80cc0b8e7101d736237e3fdf5c353e5625c9484f31d9e073594aa9372e588b79ecccd1926dd9a8b0749431aec47512d0f7623f6dd68c4c9b00e812164ff41514aaf10c9f05dd2627c38f8f4118380d5d3346b5460a87b68e6c58b0c3ba6eec887b885bbab0b0c2af50290034afbe9bdcd10948b465797b87c13c40c81bdc283025a5347ebe44880ae7f03", 0xe2}, {&(0x7f00000004c0)="9b1eb0aed9ba4b", 0x7}], 0x4)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)

159.418µs ago: executing program 0 (id=3319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

0s ago: executing program 0 (id=3320):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4, 0x1000}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:6063' (ED25519) to the list of known hosts.
syzkaller login: [   40.372433][ T5771] cgroup: Unknown subsys name 'net'
[   40.511108][ T5771] cgroup: Unknown subsys name 'cpuset'
[   40.514205][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.868805][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.941168][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.970983][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.973432][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.975810][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.978329][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.983114][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.097014][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.099529][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.114695][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.117694][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.222243][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.225363][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.228465][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.237504][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.248113][ T5904] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.251482][ T5904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.254471][ T5904] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.257260][ T5904] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.260663][ T5904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.263670][ T5904] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.267338][ T5904] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.270782][ T5904] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.273801][ T5904] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.298711][ T5906] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.302057][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.454053][ T5901] chnl_net:caif_netlink_parms(): no params data found
[   69.521220][ T5897] chnl_net:caif_netlink_parms(): no params data found
[   69.551870][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.554720][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.557509][ T5901] bridge_slave_0: entered allmulticast mode
[   69.561090][ T5901] bridge_slave_0: entered promiscuous mode
[   69.564303][ T5900] chnl_net:caif_netlink_parms(): no params data found
[   69.567844][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.572568][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.575082][ T5901] bridge_slave_1: entered allmulticast mode
[   69.577940][ T5901] bridge_slave_1: entered promiscuous mode
[   69.607582][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.617309][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.620550][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.623442][ T5897] bridge_slave_0: entered allmulticast mode
[   69.626497][ T5897] bridge_slave_0: entered promiscuous mode
[   69.637565][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.646963][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.649472][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.652661][ T5897] bridge_slave_1: entered allmulticast mode
[   69.655226][ T5897] bridge_slave_1: entered promiscuous mode
[   69.683883][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.688421][ T5901] team0: Port device team_slave_0 added
[   69.698242][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.709122][ T5901] team0: Port device team_slave_1 added
[   69.722343][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.725230][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.728023][ T5900] bridge_slave_0: entered allmulticast mode
[   69.731544][ T5900] bridge_slave_0: entered promiscuous mode
[   69.743556][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.746176][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.756261][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.760705][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.763532][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.766284][ T5900] bridge_slave_1: entered allmulticast mode
[   69.768714][ T5900] bridge_slave_1: entered promiscuous mode
[   69.772406][ T5897] team0: Port device team_slave_0 added
[   69.775205][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.777755][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.787524][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.801225][ T5897] team0: Port device team_slave_1 added
[   69.815145][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.823201][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.836084][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.838693][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.848634][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.852992][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.855175][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.864666][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.878046][ T5901] hsr_slave_0: entered promiscuous mode
[   69.881174][ T5901] hsr_slave_1: entered promiscuous mode
[   69.896619][ T5900] team0: Port device team_slave_0 added
[   69.904863][ T5900] team0: Port device team_slave_1 added
[   69.922272][ T5897] hsr_slave_0: entered promiscuous mode
[   69.924554][ T5897] hsr_slave_1: entered promiscuous mode
[   69.926533][ T5897] debugfs: 'hsr0' already exists in 'hsr'
[   69.928659][ T5897] Cannot create hsr debugfs directory
[   69.944245][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.946713][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.956743][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.967056][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.970223][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.981082][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.040114][ T5900] hsr_slave_0: entered promiscuous mode
[   70.042210][ T5900] hsr_slave_1: entered promiscuous mode
[   70.044529][ T5900] debugfs: 'hsr0' already exists in 'hsr'
[   70.046738][ T5900] Cannot create hsr debugfs directory
[   70.085694][ T5901] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   70.098760][ T5901] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   70.110296][ T5901] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   70.122274][ T5901] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   70.154407][ T5897] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.159024][ T5897] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.167472][ T5897] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.175633][ T5897] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.194908][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.197565][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.200553][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.203059][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.216346][ T5900] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   70.222763][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.225654][ T5897] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.228245][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.231045][ T5897] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.256248][ T5900] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   70.261925][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.264960][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.268272][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.272207][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.284263][ T5900] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   70.291730][ T5900] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   70.338204][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.352940][ T5897] 8021q: adding VLAN 0 to HW filter on device team0
[   70.362527][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.365313][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.372088][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.379253][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.382189][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.401201][ T5901] 8021q: adding VLAN 0 to HW filter on device team0
[   70.416749][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.419476][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.425726][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.428416][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.451626][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.476973][ T5900] 8021q: adding VLAN 0 to HW filter on device team0
[   70.488733][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.491642][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.504837][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.507955][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.532002][ T5900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.592318][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.597148][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.634412][ T5901] veth0_vlan: entered promiscuous mode
[   70.647402][ T5901] veth1_vlan: entered promiscuous mode
[   70.652173][ T5897] veth0_vlan: entered promiscuous mode
[   70.658103][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.663777][ T5897] veth1_vlan: entered promiscuous mode
[   70.684205][ T5901] veth0_macvtap: entered promiscuous mode
[   70.695362][ T5897] veth0_macvtap: entered promiscuous mode
[   70.701350][ T5901] veth1_macvtap: entered promiscuous mode
[   70.704057][ T5897] veth1_macvtap: entered promiscuous mode
[   70.717049][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.720535][ T5900] veth0_vlan: entered promiscuous mode
[   70.725913][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.734983][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.738724][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.744250][ T5900] veth1_vlan: entered promiscuous mode
[   70.749465][ T5713] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.760019][ T5713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.768186][ T5713] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.778528][ T5713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.782744][ T5713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.786124][ T5713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.789592][ T5713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.813468][ T5713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.841976][ T5900] veth0_macvtap: entered promiscuous mode
[   70.854795][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.855074][ T5900] veth1_macvtap: entered promiscuous mode
[   70.857939][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.871742][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.880454][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.888693][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.893616][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.900950][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.909473][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.916806][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.920184][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.935963][ T5713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.941896][ T5713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.956982][ T5713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.973286][ T5713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.037331][ T5224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.050342][ T5224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.090894][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.094039][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.193710][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.196470][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.247643][ T5986] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.257654][ T5988] netlink: 'syz.2.28': attribute type 1 has an invalid length.
[   71.351907][ T5235] Bluetooth: hci0: command tx timeout
[   71.359974][ T5235] Bluetooth: hci1: command tx timeout
[   71.360272][ T5875] Bluetooth: hci2: command tx timeout
[   71.424886][ T6007] vxcan1 speed is unknown, defaulting to 1000
[   71.429585][ T6007] vxcan1 speed is unknown, defaulting to 1000
[   71.462955][ T6007] vxcan1 speed is unknown, defaulting to 1000
[   71.517902][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'.
[   71.582187][ T6018] netlink: 10 bytes leftover after parsing attributes in process `syz.2.42'.
[   71.596172][ T6007] infiniband syz2: set active
[   71.597786][ T5898] vxcan1 speed is unknown, defaulting to 1000
[   71.602607][ T6007] infiniband syz2: added vxcan1
[   71.639607][ T6007] RDS/IB: syz2: added
[   71.642028][ T6007] smc: adding ib device syz2 with port count 1
[   71.645008][ T6007] smc:    ib device syz2 port 1 has pnetid 
[   71.650189][ T6007] vxcan1 speed is unknown, defaulting to 1000
[   71.653030][ T5898] vxcan1 speed is unknown, defaulting to 1000
[   71.724433][ T6027] netlink: 96 bytes leftover after parsing attributes in process `syz.2.46'.
[   71.734814][ T6029] Zero length message leads to an empty skb
[   71.853097][ T6039] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[   71.860085][ T6007] vxcan1 speed is unknown, defaulting to 1000
[   72.024050][ T6007] vxcan1 speed is unknown, defaulting to 1000
[   72.084712][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   72.268151][ T6075] syz.0.69 uses obsolete (PF_INET,SOCK_PACKET)
[   72.273595][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'.
[   72.281954][ T6075] veth0: entered promiscuous mode
[   72.287057][ T6075] veth0: left promiscuous mode
[   72.292885][ T6077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.71'.
[   72.325009][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'.
[   72.328662][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'.
[   72.745030][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'.
[   72.885390][ T6139] pimreg: entered allmulticast mode
[   72.897506][ T6139] pimreg: left allmulticast mode
[   73.002337][ T6148] netlink: 'syz.1.105': attribute type 1 has an invalid length.
[   73.006377][ T6148] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.105'.
[   73.088966][ T6160] Bluetooth: MGMT ver 1.23
[   73.151850][ T6166] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   73.244612][   T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   73.430076][ T5875] Bluetooth: hci1: command tx timeout
[   73.430102][ T5235] Bluetooth: hci2: command tx timeout
[   74.066022][ T6186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   74.068996][ T6186] IPv6: NLM_F_CREATE should be set when creating new route
[   74.072161][ T6186] IPv6: NLM_F_CREATE should be set when creating new route
[   74.138178][ T6192] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[   74.141961][ T6192] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[   74.197839][ T6193] netlink: 'syz.1.123': attribute type 1 has an invalid length.
[   74.211024][ T6193] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.225050][ T6192] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   74.244767][ T6192] vlan2: entered allmulticast mode
[   74.246791][ T6192] veth1: entered allmulticast mode
[   74.249313][ T6192] veth1: entered promiscuous mode
[   74.252781][ T6192] veth1: left promiscuous mode
[   74.255761][ T6192] bond1: (slave vlan2): making interface the new active one
[   74.258623][ T6192] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   74.265889][ T6192] veth1: entered promiscuous mode
[   74.268387][ T6192] vlan2: entered promiscuous mode
[   74.271594][ T6192] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   74.370852][ T6208] netlink: 'syz.1.130': attribute type 5 has an invalid length.
[   74.397713][ T6208] vxcan1 speed is unknown, defaulting to 1000
[   74.503041][ T6216] tipc: Started in network mode
[   74.505190][ T6216] tipc: Node identity 1eff94ffc4d7, cluster identity 4711
[   74.508717][ T6216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.564022][ T6216] syzkaller0: entered promiscuous mode
[   74.566938][ T6216] syzkaller0: entered allmulticast mode
[   74.570206][ T6216] tipc: Resetting bearer <eth:syzkaller0>
[   74.617441][ T6215] tipc: Resetting bearer <eth:syzkaller0>
[   74.675549][ T6215] tipc: Disabling bearer <eth:syzkaller0>
[   74.992015][ T6261] warning: `syz.1.152' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.178102][ T6279] Driver unsupported XDP return value 0 on prog  (id 34) dev N/A, expect packet loss!
[   75.511381][ T5235] Bluetooth: hci2: command tx timeout
[   75.521718][ T5235] Bluetooth: hci1: command tx timeout
[   75.853938][ T6340] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.591483][ T5235] Bluetooth: hci1: command tx timeout
[   77.591504][ T5875] Bluetooth: hci2: command tx timeout
[   77.601911][ T6454] __nla_validate_parse: 9 callbacks suppressed
[   77.601924][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   77.716478][ T6460] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.114420][ T6512] netlink: 'syz.2.241': attribute type 2 has an invalid length.
[   78.243705][ T6527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.298042][ T6510] syzkaller1: entered allmulticast mode
[   78.475324][ T6553] netlink: 'syz.0.259': attribute type 10 has an invalid length.
[   78.480973][ T6553] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   79.068873][ T6610] netlink: 'syz.1.287': attribute type 4 has an invalid length.
[   79.344346][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'.
[   79.534451][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'.
[   79.556040][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'.
[   79.592925][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'.
[   79.616197][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'.
[   79.774923][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.319'.
[   80.771471][ T6747] ipvlan2: entered promiscuous mode
[   80.773956][ T6747] ipvlan2: entered allmulticast mode
[   80.775687][ T6747] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   81.270105][ T5235] Bluetooth: hci2: command 0x0405 tx timeout
[   81.361592][ T6803] delete_channel: no stack
[   81.430283][    T9] cfg80211: failed to load regulatory.db
[   81.442328][ T6812] netlink: 'syz.2.380': attribute type 1 has an invalid length.
[   81.446901][ T6812] netlink: 244 bytes leftover after parsing attributes in process `syz.2.380'.
[   81.454376][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'.
[   81.469843][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'.
[   81.544767][ T6824] tipc: Started in network mode
[   81.548634][ T6824] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   81.558174][ T6824] tipc: Enabled bearer <eth:vlan0>, priority 18
[   81.653996][ T6838] vxcan1 speed is unknown, defaulting to 1000
[   82.284659][ T6886] vxcan1 speed is unknown, defaulting to 1000
[   82.673140][    T9] tipc: Node number set to 10005162
[   82.866729][ T6910] netlink: 'syz.1.421': attribute type 1 has an invalid length.
[   82.991953][ T6881] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   83.016971][ T6915] __nla_validate_parse: 1 callbacks suppressed
[   83.016979][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.027950][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.032160][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.035365][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.048454][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.057815][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.199445][ T6933] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   83.205176][ T6933] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   83.209370][ T6933] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   83.651648][ T6981] vxcan1 speed is unknown, defaulting to 1000
[   83.914075][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'.
[   83.928306][ T6999] bridge_slave_1: left allmulticast mode
[   83.933910][ T6999] bridge_slave_1: left promiscuous mode
[   83.936555][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.953269][ T6999] bridge_slave_0: left allmulticast mode
[   83.973628][ T6999] bridge_slave_0: left promiscuous mode
[   83.976327][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.083526][ T7009] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[   84.086893][ T7009] netlink: 132 bytes leftover after parsing attributes in process `syz.2.465'.
[   84.096281][ T7009] netlink: 'syz.2.465': attribute type 2 has an invalid length.
[   84.100003][ T7009] netlink: 'syz.2.465': attribute type 1 has an invalid length.
[   84.103435][ T7009] netlink: 2 bytes leftover after parsing attributes in process `syz.2.465'.
[   84.195747][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.468'.
[   84.320923][ T7023] syzkaller1: entered promiscuous mode
[   84.325062][ T7023] syzkaller1: entered allmulticast mode
[   84.442215][ T7036] netlink: 'syz.1.475': attribute type 13 has an invalid length.
[   84.445892][ T7036] netlink: 'syz.1.475': attribute type 17 has an invalid length.
[   84.554087][ T7036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.573313][ T7041] vxcan1 speed is unknown, defaulting to 1000
[   84.592184][ T7047] netlink: 'syz.0.483': attribute type 10 has an invalid length.
[   84.792317][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.972319][   T24] IPVS: starting estimator thread 0...
[   85.011875][ T7074] sctp: [Deprecated]: syz.0.493 (pid 7074) Use of int in max_burst socket option deprecated.
[   85.011875][ T7074] Use struct sctp_assoc_value instead
[   85.059947][ T7070] IPVS: using max 134 ests per chain, 321600 per kthread
[   85.106755][ T7078] netlink: 'syz.0.495': attribute type 28 has an invalid length.
[   85.129469][ T7080] netlink: 'syz.0.496': attribute type 21 has an invalid length.
[   85.137741][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.137888][ T7080] netlink: 'syz.0.496': attribute type 21 has an invalid length.
[   85.143566][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.148371][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.151579][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.331891][   T13] vlan2: left promiscuous mode
[   85.715158][ T7139] netlink: 'syz.0.519': attribute type 30 has an invalid length.
[   85.806178][ T7148] tipc: Started in network mode
[   85.808002][ T7148] tipc: Node identity 82fb63c2940f, cluster identity 4711
[   85.819789][ T7148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.829897][ T7148] syzkaller0: entered promiscuous mode
[   85.831907][ T7148] syzkaller0: entered allmulticast mode
[   85.959362][ T7148] tipc: Resetting bearer <eth:syzkaller0>
[   85.999148][ T7147] tipc: Resetting bearer <eth:syzkaller0>
[   86.483909][ T7147] tipc: Disabling bearer <eth:syzkaller0>
[   86.655665][ T7182] trusted_key: syz.1.539 sent an empty control message without MSG_MORE.
[   86.930992][ T7204] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   87.327419][ T5713] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.331250][ T5713] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.334784][ T5713] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.337887][ T5713] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   87.965442][ T7275] pim6reg1: entered promiscuous mode
[   87.967844][ T7275] pim6reg1: entered allmulticast mode
[   88.940295][ T7291] vlan0: entered promiscuous mode
[   88.942379][ T7291] bridge0: entered promiscuous mode
[   88.956923][ T7291] bridge0: port 3(vlan0) entered blocking state
[   88.960475][ T7291] bridge0: port 3(vlan0) entered disabled state
[   88.963328][ T7291] vlan0: entered allmulticast mode
[   88.964457][ T7295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.968538][ T7291] bridge0: entered allmulticast mode
[   88.972797][ T7291] vlan0: left allmulticast mode
[   88.974891][ T7291] bridge0: left allmulticast mode
[   89.583761][ T7329] __nla_validate_parse: 12 callbacks suppressed
[   89.583771][ T7329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'.
[   89.739577][ T7342] bridge_slave_0: left allmulticast mode
[   89.756503][ T7342] bridge_slave_0: left promiscuous mode
[   89.758753][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.765089][ T7342] bridge_slave_1: left allmulticast mode
[   89.767205][ T7342] bridge_slave_1: left promiscuous mode
[   89.780186][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.799270][ T7342] bond0: (slave bond_slave_0): Releasing backup interface
[   89.804767][ T7342] bond0: (slave bond_slave_1): Releasing backup interface
[   89.810449][ T7342] team0: Port device team_slave_0 removed
[   89.813875][ T7342] team0: Port device team_slave_1 removed
[   89.816073][ T7342] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   89.818575][ T7342] batman_adv: batadv0: Removing interface: batadv_slave_0
[   89.825050][ T7342] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   89.827962][ T7342] batman_adv: batadv0: Removing interface: batadv_slave_1
[   89.855572][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[   89.873239][ T7342] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   89.988661][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'.
[   89.995477][ T7378] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   90.061092][ T7382] batadv_slave_0: entered promiscuous mode
[   90.065240][ T7382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'.
[   90.069241][ T7382] netlink: 428 bytes leftover after parsing attributes in process `syz.2.626'.
[   90.072539][ T7382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.626'.
[   90.213848][ T7404] netlink: 32 bytes leftover after parsing attributes in process `syz.2.637'.
[   90.217952][ T5963] IPVS: starting estimator thread 0...
[   90.322425][ T7407] IPVS: using max 133 ests per chain, 319200 per kthread
[   90.637041][ T7470] smc: net device bond0 applied user defined pnetid SYZ2
[   90.639643][ T7470] netlink: 14 bytes leftover after parsing attributes in process `syz.2.668'.
[   90.657705][ T7470] smc: removing net device bond0 with user defined pnetid SYZ2
[   90.661637][ T7470] bond0 (unregistering): Released all slaves
[   91.570699][ T7484] validate_nla: 1 callbacks suppressed
[   91.570710][ T7484] netlink: 'syz.0.673': attribute type 13 has an invalid length.
[   91.581302][ T7484] gretap0: refused to change device tx_queue_len
[   91.583788][ T7484] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   91.591406][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[   91.595823][ T7489] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   91.599048][ T7489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.697924][ T7507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.686'.
[   91.706199][ T7509] netlink: 'syz.2.687': attribute type 10 has an invalid length.
[   91.757414][ T7513] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.767373][ T7513] batadv_slave_0: entered promiscuous mode
[   91.899973][ T7528] vxcan1 speed is unknown, defaulting to 1000
[   92.154783][ T7528] netlink: 'syz.0.696': attribute type 13 has an invalid length.
[   92.158283][ T7528] netlink: 'syz.0.696': attribute type 17 has an invalid length.
[   92.165407][ T7528] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   92.652002][ T7583] netlink: 'syz.2.719': attribute type 2 has an invalid length.
[   92.934329][ T7620] bridge0: port 1(bridge_slave_0) entered listening state
[   93.099392][ T7645] netlink: 'syz.1.746': attribute type 14 has an invalid length.
[   93.122873][ T7647] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   93.209226][ T7662] netlink: 'syz.1.755': attribute type 1 has an invalid length.
[   93.569273][ T7693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.573165][ T7693] syzkaller0: entered promiscuous mode
[   93.575604][ T7693] syzkaller0: entered allmulticast mode
[   93.583292][ T7693] tipc: Resetting bearer <eth:syzkaller0>
[   93.586303][ T7692] tipc: Resetting bearer <eth:syzkaller0>
[   93.589106][ T7692] tipc: Disabling bearer <eth:syzkaller0>
[   94.212692][ T7761] syzkaller0: entered promiscuous mode
[   94.215146][ T7761] syzkaller0: entered allmulticast mode
[   94.225092][ T5963] IPVS: starting estimator thread 0...
[   94.310105][ T7762] IPVS: using max 71 ests per chain, 170400 per kthread
[   94.898519][ T7802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.978158][ T7808] __nla_validate_parse: 9 callbacks suppressed
[   94.978167][ T7808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.818'.
[   95.308389][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'.
[   95.464016][ T7843] syzkaller1: entered promiscuous mode
[   95.465942][ T7843] syzkaller1: entered allmulticast mode
[   95.706265][ T7879] netlink: 'syz.2.847': attribute type 29 has an invalid length.
[   95.710995][ T7879] netlink: 'syz.2.847': attribute type 29 has an invalid length.
[   95.713947][ T7879] netlink: 'syz.2.847': attribute type 29 has an invalid length.
[   95.733280][ T7886] netlink: 124 bytes leftover after parsing attributes in process `syz.0.851'.
[   95.743081][ T7886] IPVS: length: 209 != 24
[   96.042478][ T7912] syz_tun: entered allmulticast mode
[   96.046123][ T7912] syz_tun: left allmulticast mode
[   96.072791][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'.
[   96.075712][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'.
[   96.805364][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'.
[   96.821996][ T7967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.890'.
[   96.825865][ T7967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.890'.
[   97.001862][ T7994] validate_nla: 24 callbacks suppressed
[   97.001873][ T7994] netlink: 'syz.0.902': attribute type 83 has an invalid length.
[   97.228976][ T8022] _Z`Ԁ@S!: entered promiscuous mode
[   97.346814][ T8035] nbd: must specify at least one socket
[   97.732041][ T8066] netlink: 224 bytes leftover after parsing attributes in process `syz.2.930'.
[   97.777676][ T8070] veth3: entered promiscuous mode
[   97.892131][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'.
[   97.986291][ T8092] netlink: 'syz.1.941': attribute type 1 has an invalid length.
[   98.072721][ T8109] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.288123][ T8130] netlink: 'syz.0.956': attribute type 10 has an invalid length.
[   98.309466][ T8130] team0: Port device geneve0 added
[   98.617763][ T8158] sctp: [Deprecated]: syz.0.971 (pid 8158) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.617763][ T8158] Use struct sctp_sack_info instead
[   98.882123][ T8180] sctp: [Deprecated]: syz.0.981 (pid 8180) Use of int in maxseg socket option.
[   98.882123][ T8180] Use struct sctp_assoc_value instead
[   99.069447][ T8206] netlink: 'syz.2.994': attribute type 13 has an invalid length.
[   99.075918][ T8206] netlink: 'syz.2.994': attribute type 17 has an invalid length.
[   99.098615][ T8206] 8021q: adding VLAN 0 to HW filter on device team0
[   99.103515][ T8206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.147559][ T8206] vxcan1 speed is unknown, defaulting to 1000
[   99.565158][ T8261] vxcan1 speed is unknown, defaulting to 1000
[   99.746867][ T8284] netlink: 'syz.1.1029': attribute type 3 has an invalid length.
[  100.118979][ T8319] netlink: 'syz.0.1046': attribute type 1 has an invalid length.
[  100.184679][ T8333] __nla_validate_parse: 7 callbacks suppressed
[  100.184693][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'.
[  100.357678][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'.
[  100.417555][ T8346] netlink: 'syz.1.1059': attribute type 4 has an invalid length.
[  100.572508][ T8355] netlink: 'syz.1.1063': attribute type 5 has an invalid length.
[  100.575963][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'.
[  101.159474][ T8444] syzkaller1: entered promiscuous mode
[  101.162658][ T8444] syzkaller1: entered allmulticast mode
[  101.175427][ T8446] svc: failed to register nfsdv3 RPC service (errno 111).
[  101.178979][ T8446] svc: failed to register nfsaclv3 RPC service (errno 111).
[  101.360833][ T8459] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1109'.
[  101.364269][ T8458] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1109'.
[  101.664431][ T8488] netlink: 'syz.2.1119': attribute type 1 has an invalid length.
[  101.667179][ T8488] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1119'.
[  101.807989][ T8494] vxcan1 speed is unknown, defaulting to 1000
[  102.017234][ T8506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  102.354993][ T8536] tap0: tun_chr_ioctl cmd 35108
[  102.455145][ T8538] syzkaller0: entered promiscuous mode
[  102.457100][ T8538] syzkaller0: entered allmulticast mode
[  103.060945][ T8582] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1162'.
[  103.083279][ T8585] netem: change failed
[  104.228433][ T8627] validate_nla: 1 callbacks suppressed
[  104.228444][ T8627] netlink: 'syz.2.1181': attribute type 2 has an invalid length.
[  104.251934][ T8629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1182'.
[  104.433241][ T8635] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  104.489827][ T8637] nbd0: detected capacity change from 0 to 63
[  104.489953][ T8641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1186'.
[  104.495814][ T8641] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  104.499859][ T8640] block nbd0: NBD_DISCONNECT
[  104.503171][ T8640] block nbd0: Disconnected due to user request.
[  104.506888][ T8640] block nbd0: shutting down sockets
[  104.511593][ T8635] netlink: 'syz.2.1185': attribute type 4 has an invalid length.
[  104.689780][ T8651] block nbd0: server does not support multiple connections per device.
[  104.692592][ T8651] block nbd0: shutting down sockets
[  104.899499][ T8670] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.293366][ T8684] vxcan1 speed is unknown, defaulting to 1000
[  105.445505][ T8688] netlink: 'syz.2.1204': attribute type 41 has an invalid length.
[  105.778731][ T5896] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.782891][ T5896] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.786721][ T5896] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.790753][ T5896] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.798421][ T5896] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.804311][ T5896] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.808183][ T5896] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.812456][ T5896] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.843519][ T8703] pim6reg: entered allmulticast mode
[  105.948436][ T8713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1211'.
[  106.080585][ T8723] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1220'.
[  106.083822][ T8723] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1220'.
[  106.502241][ T8773] vxcan1 speed is unknown, defaulting to 1000
[  106.944201][ T8789] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.977171][ T8789] syzkaller0: entered promiscuous mode
[  106.978973][ T8789] syzkaller0: entered allmulticast mode
[  106.986275][ T8789] tipc: Resetting bearer <eth:syzkaller0>
[  106.989626][ T8788] tipc: Resetting bearer <eth:syzkaller0>
[  106.994932][ T8788] tipc: Disabling bearer <eth:syzkaller0>
[  107.034188][ T8791] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1251'.
[  107.284755][ T8820] netlink: 'syz.0.1264': attribute type 1 has an invalid length.
[  107.373160][ T8820] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  107.377104][ T8820] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  107.962383][ T8826] gretap1: entered promiscuous mode
[  107.965010][ T8826] bond2: (slave gretap1): making interface the new active one
[  107.967578][ T8826] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  107.985933][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'.
[  107.992652][ T8834] netlink: 'syz.1.1267': attribute type 1 has an invalid length.
[  107.996104][ T8834] netlink: 'syz.1.1267': attribute type 2 has an invalid length.
[  108.006921][ T8836] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1268'.
[  108.011378][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'.
[  108.014356][ T8836] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  108.071386][ T8847] veth1_to_bond: entered allmulticast mode
[  108.077408][ T8847] bond_slave_1: entered promiscuous mode
[  108.080943][ T8847] bond_slave_1: left promiscuous mode
[  108.083145][ T8847] veth1_to_bond: left allmulticast mode
[  108.192665][ T8866] netlink: 'syz.1.1277': attribute type 10 has an invalid length.
[  108.206586][ T8866] team0: Port device dummy0 added
[  108.235144][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1283'.
[  108.354107][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'.
[  108.357417][ T8889] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.381124][ T8891] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1292'.
[  108.381289][ T8889] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.421121][ T8896] netlink: 'syz.1.1294': attribute type 1 has an invalid length.
[  109.320857][ T8907] vxcan1 speed is unknown, defaulting to 1000
[  109.492048][ T8926] netlink: 'syz.0.1307': attribute type 1 has an invalid length.
[  109.507348][ T8926] bond3 (unregistering): Released all slaves
[  109.536455][ T8947] netlink: zone id is out of range
[  109.538820][ T8947] netlink: zone id is out of range
[  109.547928][ T8947] netlink: zone id is out of range
[  109.551658][ T8947] netlink: get zone limit has 8 unknown bytes
[  109.701722][ T8959] wg1: entered promiscuous mode
[  109.703798][ T8959] wg1: entered allmulticast mode
[  110.517544][ T9009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.520586][ T9009] IPv6: NLM_F_CREATE should be set when creating new route
[  110.523511][ T9009] IPv6: NLM_F_CREATE should be set when creating new route
[  110.526547][ T9009] IPv6: NLM_F_CREATE should be set when creating new route
[  110.533653][ T9009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  110.574722][ T9017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.578256][ T9017] syzkaller0: entered promiscuous mode
[  110.581656][ T9017] syzkaller0: entered allmulticast mode
[  110.598290][ T9017] tipc: Resetting bearer <eth:syzkaller0>
[  110.604054][ T9015] tipc: Resetting bearer <eth:syzkaller0>
[  110.608628][ T9015] tipc: Disabling bearer <eth:syzkaller0>
[  110.842632][ T9044] sock: sock_set_timeout: `syz.0.1362' (pid 9044) tries to set negative timeout
[  111.490600][ T9075] netlink: 'syz.2.1375': attribute type 12 has an invalid length.
[  111.493430][ T9075] __nla_validate_parse: 6 callbacks suppressed
[  111.493437][ T9075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1375'.
[  111.516208][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'.
[  111.563177][ T9081] netlink: 'syz.2.1378': attribute type 7 has an invalid length.
[  111.666598][ T9093] atomic_op ffff88802b822998 conn xmit_atomic 0000000000000000
[  111.695205][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'.
[  111.836143][ T9109] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1392'.
[  112.056250][ T9122] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  112.120860][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'.
[  112.536323][ T9145] ip6gre1: entered allmulticast mode
[  113.258999][ T9160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.266065][ T9160] syzkaller0: entered promiscuous mode
[  113.268568][ T9160] syzkaller0: entered allmulticast mode
[  113.285341][ T9160] tipc: Resetting bearer <eth:syzkaller0>
[  113.302136][ T9159] tipc: Resetting bearer <eth:syzkaller0>
[  113.334438][ T9159] tipc: Disabling bearer <eth:syzkaller0>
[  113.424854][ T9136] Set syz1 is full, maxelem 65536 reached
[  113.455609][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1415'.
[  113.469039][ T9166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.520704][ T9172] batman_adv: batadv0: Adding interface: gretap3
[  113.523691][ T9172] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.533070][ T9172] batman_adv: batadv0: Interface activated: gretap3
[  113.657732][ T9183] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1424'.
[  113.755440][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'.
[  113.758696][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'.
[  113.786708][ T9193] netlink: 'syz.1.1429': attribute type 21 has an invalid length.
[  113.789438][ T9193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1429'.
[  113.944309][   T33] audit: type=1800 audit(1756215357.648:2): pid=9210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1436" name=CB dev="tmpfs" ino=2510 res=0 errno=0
[  114.131980][ T9236] tipc: Resetting bearer <eth:vlan0>
[  114.133441][ T9238] netlink: 'syz.0.1450': attribute type 9 has an invalid length.
[  114.134409][ T9236] vlan0: entered promiscuous mode
[  114.416697][ T9268] IPv6: NLM_F_REPLACE set, but no existing node found!
[  114.537427][ T9292] netlink: 'syz.1.1466': attribute type 9 has an invalid length.
[  114.541440][ T9292] netlink: 'syz.1.1466': attribute type 6 has an invalid length.
[  114.624285][ T9298] macsec1: entered promiscuous mode
[  114.626864][ T9298] bridge0: port 1(macsec1) entered blocking state
[  114.630997][ T9298] bridge0: port 1(macsec1) entered disabled state
[  114.633258][ T9298] macsec1: entered allmulticast mode
[  114.635138][ T9298] bridge0: entered allmulticast mode
[  114.638051][ T9298] macsec1: left allmulticast mode
[  114.641601][ T9298] bridge0: left allmulticast mode
[  114.750700][ T9307] openvswitch: netlink: Duplicate or invalid key (type 0).
[  114.753427][ T9307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.121700][ T9335] netlink: 'syz.2.1494': attribute type 1 has an invalid length.
[  115.132628][ T9335] smc: adding net device bond0 with user defined pnetid SYZ2
[  115.142159][ T9335] gretap4: entered allmulticast mode
[  115.148798][ T9335] bond0: (slave gretap4): making interface the new active one
[  115.153195][ T9335] bond0: (slave gretap4): Enslaving as an active interface with an up link
[  115.623516][ T9402] syz.0.1526 (9402) used obsolete PPPIOCDETACH ioctl
[  115.735362][ T9413] pim6reg: entered allmulticast mode
[  115.740115][ T9413] pim6reg: left allmulticast mode
[  116.331005][ T9455] syzkaller1: tun_chr_ioctl cmd 1074025677
[  116.333513][ T9455] syzkaller1: linktype set to 778
[  116.676805][ T9495] __nla_validate_parse: 12 callbacks suppressed
[  116.676815][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'.
[  117.422048][ T9522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1581'.
[  117.450636][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'.
[  117.464854][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1582'.
[  117.536295][ T9531] netlink: 'syz.1.1584': attribute type 4 has an invalid length.
[  117.608077][ T9539] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1587'.
[  117.717535][ T9553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.744037][ T9553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.781975][ T9562] netlink: 'syz.0.1598': attribute type 2 has an invalid length.
[  117.785411][ T9562] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1598'.
[  117.801262][ T9553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.834556][ T9564] syzkaller0: entered promiscuous mode
[  117.836585][ T9564] syzkaller0: entered allmulticast mode
[  117.848305][ T9553] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.916907][ T5896] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.924997][ T5896] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.934994][ T5896] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.946905][ T5896] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.056117][ T9577] openvswitch: netlink: IP tunnel dst address not specified
[  118.115273][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'.
[  118.199006][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1611'.
[  118.318783][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'.
[  118.347783][ T9613] vlan2: entered allmulticast mode
[  118.350079][ T9613] bond3: entered allmulticast mode
[  118.589878][ T9644] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1633'.
[  119.655497][ T9671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.833669][ T9695] netlink: 'syz.2.1658': attribute type 10 has an invalid length.
[  119.894263][ T9703] sctp: [Deprecated]: syz.2.1662 (pid 9703) Use of int in max_burst socket option.
[  119.894263][ T9703] Use struct sctp_assoc_value instead
[  119.974500][ T9717] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  120.101293][ T9733] atomic_op ffff888027536998 conn xmit_atomic 0000000000000000
[  120.300994][ T9756] netlink: 'syz.1.1687': attribute type 8 has an invalid length.
[  120.592214][ T9785] netlink: 'syz.1.1699': attribute type 58 has an invalid length.
[  121.112524][ T9820] vxcan1 speed is unknown, defaulting to 1000
[  121.388195][   T51] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  121.403378][   T51] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  121.416111][   T51] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  121.785621][ T9905] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  121.789447][ T9905] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  121.826087][ T9909] __nla_validate_parse: 4 callbacks suppressed
[  121.826097][ T9909] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1750'.
[  121.871633][ T9912] team0 (unregistering): Port device team_slave_0 removed
[  121.881920][ T9912] team0 (unregistering): Port device team_slave_1 removed
[  121.890150][ T9912] team0 (unregistering): Port device dummy0 removed
[  122.642175][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'.
[  122.795197][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'.
[  122.798938][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1769'.
[  122.831329][ T9960] netlink: 'syz.0.1774': attribute type 1 has an invalid length.
[  123.104448][T10003] pim6reg1: entered promiscuous mode
[  123.107772][T10003] pim6reg1: entered allmulticast mode
[  123.139630][T10007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.143705][T10007] syzkaller0: entered promiscuous mode
[  123.146237][T10007] syzkaller0: entered allmulticast mode
[  123.153987][T10007] tipc: Resetting bearer <eth:syzkaller0>
[  123.157273][T10006] tipc: Resetting bearer <eth:syzkaller0>
[  123.164623][T10006] tipc: Disabling bearer <eth:syzkaller0>
[  123.246935][T10011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.258659][T10013] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1799'.
[  123.262269][T10013] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1799'.
[  123.265481][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1799'.
[  123.270186][T10011] syzkaller0: entered promiscuous mode
[  123.272501][T10011] syzkaller0: entered allmulticast mode
[  123.275185][T10011] tipc: Resetting bearer <eth:syzkaller0>
[  123.297640][T10010] tipc: Resetting bearer <eth:syzkaller0>
[  123.359501][T10010] tipc: Disabling bearer <eth:syzkaller0>
[  123.490917][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'.
[  123.495695][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1810'.
[  123.532326][T10038] netlink: 'syz.1.1809': attribute type 13 has an invalid length.
[  123.535587][T10038] netlink: 'syz.1.1809': attribute type 17 has an invalid length.
[  123.545755][T10038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  123.573158][T10038] vxcan1 speed is unknown, defaulting to 1000
[  124.061301][T10075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.064638][T10075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.137080][T10075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.141972][T10075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.163627][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'.
[  124.166906][T10096] netlink: 'syz.1.1838': attribute type 18 has an invalid length.
[  124.206485][T10075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.211022][T10075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.236262][T10103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.239131][T10103] IPv6: NLM_F_CREATE should be set when creating new route
[  124.241915][T10103] IPv6: NLM_F_CREATE should be set when creating new route
[  124.244988][T10103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.277689][T10075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.283907][T10075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.299031][T10109] syz_tun: entered promiscuous mode
[  124.303014][T10109] vlan3: entered promiscuous mode
[  124.327965][ T5896] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.331611][ T5896] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.336971][ T5896] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.341754][ T5896] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.347703][ T5896] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.351478][ T5896] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.357424][ T5896] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.361908][ T5896] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.624446][T10154] netlink: 'syz.1.1858': attribute type 12 has an invalid length.
[  124.931086][T10189] netlink: 'syz.2.1878': attribute type 1 has an invalid length.
[  124.943888][T10194] tc_dump_action: action bad kind
[  124.959289][T10189] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  124.964383][T10189] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  124.967997][T10189] bond1: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  125.795114][T10225] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.798279][T10225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.801314][T10225] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.897349][T10238] tap0: tun_chr_ioctl cmd 1074025677
[  125.901432][T10238] tap0: linktype set to 805
[  125.979522][T10250] bond0: (slave bond_slave_0): Releasing backup interface
[  125.987137][T10250] bond0: (slave bond_slave_1): Releasing backup interface
[  125.995090][T10250] team0: Port device team_slave_0 removed
[  125.999632][T10250] team0: Port device team_slave_1 removed
[  126.004609][T10250] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.007836][T10250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.016345][T10250] team0: Port device geneve0 removed
[  126.018905][T10250] bond0: (slave wlan1): Releasing backup interface
[  126.023909][T10250] bond2: (slave gretap1): Releasing active interface
[  126.028295][   T24] vxcan1 speed is unknown, defaulting to 1000
[  126.044831][T10254] netlink: 'syz.1.1907': attribute type 2 has an invalid length.
[  126.128425][T10250] team0: Mode changed to "loadbalance"
[  126.226524][T10275] vxcan1 speed is unknown, defaulting to 1000
[  126.822205][T10340] netlink: 'syz.0.1942': attribute type 15 has an invalid length.
[  126.924161][T10356] netlink: 'syz.0.1950': attribute type 10 has an invalid length.
[  126.935468][T10356] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  127.077330][T10369] openvswitch: netlink: Missing valid actions attribute.
[  127.082182][T10369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.215844][T10389] __nla_validate_parse: 6 callbacks suppressed
[  127.215859][T10389] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1966'.
[  127.288110][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1971'.
[  127.295366][T10399] netlink: 'syz.2.1971': attribute type 11 has an invalid length.
[  127.347073][T10405] vxcan1 speed is unknown, defaulting to 1000
[  127.547368][T10430] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1985'.
[  127.635734][T10436] netlink: 'syz.2.1988': attribute type 1 has an invalid length.
[  127.638510][T10436] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1988'.
[  127.649278][T10438] rdma_rxe: rxe_newlink: failed to add bond0
[  127.680031][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'.
[  127.685006][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1992'.
[  127.778150][T10457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'.
[  127.926066][T10484] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2011'.
[  127.927097][T10486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2012'.
[  127.935036][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2011'.
[  127.994447][T10494] vxcan1 speed is unknown, defaulting to 1000
[  128.026875][T10503] syzkaller1: entered promiscuous mode
[  128.028744][T10503] syzkaller1: entered allmulticast mode
[  129.098194][T10551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.101134][T10551] syzkaller0: entered promiscuous mode
[  129.103132][T10551] syzkaller0: entered allmulticast mode
[  129.108700][T10551] tipc: Resetting bearer <eth:syzkaller0>
[  129.114912][T10550] tipc: Resetting bearer <eth:syzkaller0>
[  129.124639][T10550] tipc: Disabling bearer <eth:syzkaller0>
[  129.340581][T10573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  129.580606][T10617] vcan0: tx drop: invalid da for name 0x0000000000000001
[  129.819243][T10635] vxcan1 speed is unknown, defaulting to 1000
[  129.883315][T10655] netlink: 'syz.1.2088': attribute type 11 has an invalid length.
[  130.108599][T10682] dummy0: entered promiscuous mode
[  130.110934][T10682] vlan3: entered promiscuous mode
[  130.205647][T10692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.208493][T10692] syzkaller0: entered promiscuous mode
[  130.210798][T10692] syzkaller0: entered allmulticast mode
[  130.217525][T10692] tipc: Resetting bearer <eth:syzkaller0>
[  130.229630][T10691] tipc: Resetting bearer <eth:syzkaller0>
[  130.238089][T10691] tipc: Disabling bearer <eth:syzkaller0>
[  130.386913][T10717] vxcan1 speed is unknown, defaulting to 1000
[  130.757617][T10753] netlink: 'syz.1.2134': attribute type 6 has an invalid length.
[  130.846459][T10761] syzkaller0: tun_chr_ioctl cmd 1074025677
[  130.848440][T10761] syzkaller0: linktype set to 1
[  130.902069][T10771] netlink: 'syz.1.2142': attribute type 10 has an invalid length.
[  131.031286][T10797] vxcan1 speed is unknown, defaulting to 1000
[  131.114828][ T5875] Bluetooth: hci2: link tx timeout
[  131.116618][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.119597][ T5875] Bluetooth: hci2: link tx timeout
[  131.122203][ T5875] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.907148][T10820] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.024901][T10837] syzkaller1: entered promiscuous mode
[  132.026814][T10837] syzkaller1: entered allmulticast mode
[  132.265611][T10858] netlink: 'syz.0.2182': attribute type 22 has an invalid length.
[  132.268996][T10858] __nla_validate_parse: 14 callbacks suppressed
[  132.269008][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'.
[  132.278520][T10858] netlink: 'syz.0.2182': attribute type 22 has an invalid length.
[  132.284555][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'.
[  132.362228][T10862] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.365186][T10862] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.574585][ T5896] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.585356][ T5896] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.588416][ T5896] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.591259][ T5896] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.658012][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2194'.
[  132.858876][   T33] audit: type=1800 audit(1756215376.558:3): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2198" name="memory.events" dev="tmpfs" ino=3452 res=0 errno=0
[  133.081245][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'.
[  133.189892][ T5875] Bluetooth: hci2: command 0x0405 tx timeout
[  133.193283][T10945] geneve2: entered promiscuous mode
[  133.200461][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.203719][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.208621][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.214290][T10950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2221'.
[  133.218221][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.250417][T10952] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2222'.
[  133.254359][T10952] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2222'.
[  133.410843][T10972] syzkaller0: entered promiscuous mode
[  133.413251][T10972] syzkaller0: entered allmulticast mode
[  133.475667][T10979] netlink: 'syz.2.2235': attribute type 4 has an invalid length.
[  134.024962][T10999] tipc: New replicast peer: 255.255.255.255
[  134.028059][T10999] tipc: Enabled bearer <udp:syz2>, priority 10
[  134.243508][T11012] veth0_to_bridge: entered promiscuous mode
[  134.246775][T11011] veth0_to_bridge: left promiscuous mode
[  134.355125][T11026] netlink: 'syz.0.2257': attribute type 1 has an invalid length.
[  134.358088][T11026] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2257'.
[  134.362635][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'.
[  134.381375][T11028] sctp: [Deprecated]: syz.0.2258 (pid 11028) Use of int in max_burst socket option.
[  134.381375][T11028] Use struct sctp_assoc_value instead
[  134.411822][T11030] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2259'.
[  134.480070][T11036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.483090][T11036] syzkaller0: entered promiscuous mode
[  134.485147][T11036] syzkaller0: entered allmulticast mode
[  134.501126][T11036] tipc: Resetting bearer <eth:syzkaller0>
[  134.506743][T11035] tipc: Resetting bearer <eth:syzkaller0>
[  134.515103][T11035] tipc: Disabling bearer <eth:syzkaller0>
[  134.624858][T11064] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  134.638859][T11066] netlink: 'syz.2.2277': attribute type 1 has an invalid length.
[  134.651194][T11066] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.664440][T11066] bond2: (slave gretap5): making interface the new active one
[  134.667455][T11066] bond2: (slave gretap5): Enslaving as an active interface with an up link
[  134.696899][T11075] netlink: 'syz.0.2280': attribute type 4 has an invalid length.
[  134.763184][T11085] 8021q: adding VLAN 0 to HW filter on device bond3
[  134.772355][T11085] bond3: entered promiscuous mode
[  134.774256][T11085] macvlan2: entered promiscuous mode
[  134.776433][T11085] macvlan2: entered allmulticast mode
[  134.778866][T11085] bond3: entered allmulticast mode
[  134.782728][T11085] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  134.840751][T11098] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  135.053709][T11121] netlink: 'syz.2.2301': attribute type 1 has an invalid length.
[  135.382404][T11149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.385437][T11149] syzkaller0: entered promiscuous mode
[  135.387905][T11149] syzkaller0: entered allmulticast mode
[  135.394742][T11149] tipc: Resetting bearer <eth:syzkaller0>
[  135.398443][T11148] tipc: Resetting bearer <eth:syzkaller0>
[  135.402297][T11148] tipc: Disabling bearer <eth:syzkaller0>
[  135.538070][T11159] netlink: 'syz.2.2319': attribute type 1 has an invalid length.
[  135.559827][   T51] tipc: Node number set to 385115074
[  136.027059][T11184] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  136.291261][T11195] vxcan1 speed is unknown, defaulting to 1000
[  136.499580][T11214] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled
[  136.646267][T11240] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.651844][T11240] syzkaller0: entered promiscuous mode
[  136.653709][T11240] syzkaller0: entered allmulticast mode
[  136.664160][T11240] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  136.668076][T11242] tipc: Can't bind to reserved service type 2
[  136.674503][T11240] tipc: Resetting bearer <eth:syzkaller0>
[  136.681030][T11239] tipc: Resetting bearer <eth:syzkaller0>
[  136.698046][T11239] tipc: Disabling bearer <eth:syzkaller0>
[  136.994411][T11284] netlink: 'syz.1.2377': attribute type 6 has an invalid length.
[  137.453836][T11346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.457274][T11346] syzkaller0: entered promiscuous mode
[  137.459970][T11346] syzkaller0: entered allmulticast mode
[  137.465743][T11346] tipc: Resetting bearer <eth:syzkaller0>
[  137.469894][T11345] tipc: Resetting bearer <eth:syzkaller0>
[  137.474584][T11345] tipc: Disabling bearer <eth:syzkaller0>
[  137.837123][T11352] netlink: 'syz.2.2408': attribute type 1 has an invalid length.
[  137.892286][T11358] __nla_validate_parse: 21 callbacks suppressed
[  137.892302][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2411'.
[  137.903223][T11358] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2411'.
[  138.244726][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'.
[  138.247742][T11375] netlink: 'syz.0.2419': attribute type 1 has an invalid length.
[  138.271249][T11375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2419'.
[  138.274469][T11375] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  138.300901][T11377] netlink: 'syz.0.2420': attribute type 1 has an invalid length.
[  138.576787][T11411] netlink: 'syz.1.2437': attribute type 1 has an invalid length.
[  138.580194][T11411] netlink: 'syz.1.2437': attribute type 4 has an invalid length.
[  138.582821][T11411] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2437'.
[  138.587011][T11411] netlink: 'syz.1.2437': attribute type 1 has an invalid length.
[  138.590448][T11411] netlink: 'syz.1.2437': attribute type 4 has an invalid length.
[  138.593704][T11411] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2437'.
[  138.693097][T11433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2448'.
[  138.696832][T11433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2448'.
[  138.899612][T11456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2457'.
[  138.964504][T11466] netlink: 'syz.0.2462': attribute type 11 has an invalid length.
[  138.967502][T11466] netlink: 'syz.0.2462': attribute type 11 has an invalid length.
[  138.971282][T11466] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2462'.
[  139.081395][T11482] netlink: 'syz.1.2469': attribute type 1 has an invalid length.
[  139.121268][T11482] 8021q: adding VLAN 0 to HW filter on device bond4
[  139.124832][T11482] bond3: (slave bond4): making interface the new active one
[  139.127685][T11482] bond3: (slave bond4): Enslaving as an active interface with an up link
[  139.141134][T11482] bond3: (slave gretap1): Enslaving as a backup interface with an up link
[  139.148706][T11482] 8021q: adding VLAN 0 to HW filter on device bond3
[  139.189176][T11504] lo speed is unknown, defaulting to 1000
[  139.193783][T11504] lo speed is unknown, defaulting to 1000
[  139.198422][T11504] lo speed is unknown, defaulting to 1000
[  139.203566][T11504] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  139.207837][T11504] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  139.220034][T11504] lo speed is unknown, defaulting to 1000
[  139.222932][T11504] lo speed is unknown, defaulting to 1000
[  139.225422][T11504] lo speed is unknown, defaulting to 1000
[  139.392359][T11543] batadv_slave_1: entered promiscuous mode
[  139.627555][T11587] nbd: socks must be embedded in a SOCK_ITEM attr
[  140.089539][T11616] netlink: zone id is out of range
[  140.091651][T11616] netlink: zone id is out of range
[  140.093378][T11616] netlink: zone id is out of range
[  140.095397][T11616] netlink: zone id is out of range
[  140.097138][T11616] netlink: zone id is out of range
[  140.098790][T11616] netlink: zone id is out of range
[  140.102326][T11616] netlink: zone id is out of range
[  140.104056][T11616] netlink: zone id is out of range
[  140.106073][T11616] netlink: zone id is out of range
[  140.108352][T11616] netlink: zone id is out of range
[  140.512776][T11659] bond0: option use_carrier: invalid value (6)
[  140.750352][T11697] netlink: 'syz.0.2568': attribute type 1 has an invalid length.
[  140.783924][T11703] nbd: couldn't find a device at index 0
[  140.998494][T11731] syzkaller0: entered promiscuous mode
[  141.001121][T11731] syzkaller0: entered allmulticast mode
[  141.256267][T11760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.258963][T11760] syzkaller0: entered promiscuous mode
[  141.261282][T11760] syzkaller0: entered allmulticast mode
[  141.271092][T11760] tipc: Resetting bearer <eth:syzkaller0>
[  141.275643][T11758] tipc: Resetting bearer <eth:syzkaller0>
[  141.280797][T11758] tipc: Disabling bearer <eth:syzkaller0>
[  141.955491][T11871] bond0: (slave batadv_slave_0): Releasing backup interface
[  142.719464][T11912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.723368][T11912] syzkaller0: entered promiscuous mode
[  142.725276][T11912] syzkaller0: entered allmulticast mode
[  142.731646][T11912] tipc: Resetting bearer <eth:syzkaller0>
[  142.734389][T11911] tipc: Resetting bearer <eth:syzkaller0>
[  142.737339][T11911] tipc: Disabling bearer <eth:syzkaller0>
[  142.871660][T11929] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  143.105408][T11966] netlink: 'syz.0.2667': attribute type 83 has an invalid length.
[  143.126827][T11966] vxcan1 speed is unknown, defaulting to 1000
[  143.155175][T11970] syzkaller1: entered promiscuous mode
[  143.160077][T11970] syzkaller1: entered allmulticast mode
[  143.198657][T11966] lo speed is unknown, defaulting to 1000
[  143.459468][T11994] TCP: TCP_TX_DELAY enabled
[  143.590997][T12011] __nla_validate_parse: 14 callbacks suppressed
[  143.591008][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'.
[  143.596425][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2685'.
[  143.653727][T12021] netlink: 'syz.1.2691': attribute type 1 has an invalid length.
[  143.669230][T12021] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  143.678839][T12021] 8021q: adding VLAN 0 to HW filter on device bond6
[  143.687939][T12021] veth3: entered promiscuous mode
[  143.692135][T12021] bond6: (slave veth3): Enslaving as a backup interface with a down link
[  143.701037][T12021] bridge_slave_0: left allmulticast mode
[  143.703434][T12021] bridge_slave_0: left promiscuous mode
[  143.705875][T12021] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.709576][T12021] bridge_slave_1: left allmulticast mode
[  143.712193][T12021] bridge_slave_1: left promiscuous mode
[  143.714608][T12021] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.719939][T12021] bond0: (slave bond_slave_0): Releasing backup interface
[  143.723350][T12021] bond0: (slave bond_slave_1): Releasing backup interface
[  143.727213][T12021] bond1: (slave wlan0): Releasing active interface
[  143.730188][T12021] bond1: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  143.736935][T12021] vlan2: entered promiscuous mode
[  143.741128][T12021] bond1: (slave vlan2): Releasing active interface
[  143.744012][T12021] vlan2: left promiscuous mode
[  143.747860][T12021] bond3: (slave bond4): Releasing backup interface
[  143.751318][T12021] bond3: (slave bond4): the permanent HWaddr of slave - 52:d0:1c:05:1e:60 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  143.756914][T12021] bond3: (slave gretap1): making interface the new active one
[  143.761281][T12021] bond3: (slave gretap1): Releasing backup interface
[  143.765257][T12021] bond6: (slave ip6gretap1): Removing an active aggregator
[  143.768410][T12021] bond6: (slave ip6gretap1): Releasing backup interface
[  143.771507][T12021] bond6: (slave ip6gretap1): the permanent HWaddr of slave - 1a:27:fa:ac:29:cb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  143.781800][T12021] bond6: (slave veth3): Releasing backup interface
[  143.934277][ T5713] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  144.095273][T12046] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2700'.
[  144.115244][T12048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2701'.
[  144.929771][T12096] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2724'.
[  144.932962][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2724'.
[  144.986676][T12108] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  144.992429][T12108] netlink: 'syz.1.2730': attribute type 10 has an invalid length.
[  144.995725][T12108] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  144.998313][T12108] bond0: (slave wlan1): Opening slave failed
[  145.002244][T12108] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  145.005415][T12108] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  145.338345][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'.
[  145.342209][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'.
[  145.380527][T12062] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  145.641064][T12126] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2736'.
[  146.094705][T12147] netlink: 'syz.0.2746': attribute type 46 has an invalid length.
[  146.240301][T12167] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2756'.
[  146.300054][T12175] netlink: 'syz.0.2760': attribute type 10 has an invalid length.
[  146.421859][T12196] net_ratelimit: 17 callbacks suppressed
[  146.421870][T12196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  147.198438][T12277] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  147.440792][T12231] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  147.457797][T12300] netlink: 'syz.2.2818': attribute type 1 has an invalid length.
[  147.533687][T12310] bridge: RTM_NEWNEIGH with invalid ether address
[  147.601002][T12326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.603508][T12326] syzkaller0: entered promiscuous mode
[  147.605353][T12326] syzkaller0: entered allmulticast mode
[  147.609614][T12326] tipc: Resetting bearer <eth:syzkaller0>
[  147.613899][T12323] tipc: Resetting bearer <eth:syzkaller0>
[  147.616907][T12323] tipc: Disabling bearer <eth:syzkaller0>
[  148.226637][ T5713] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  148.230076][ T5713] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  148.233089][ T5713] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  148.237376][ T5713] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  148.251143][T12418] syzkaller1: entered promiscuous mode
[  148.253241][T12418] syzkaller1: entered allmulticast mode
[  148.257907][T12420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.261752][T12420] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  148.301861][T12420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.305622][T12420] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  148.361813][T12420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.365215][T12420] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  148.406210][T12420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.410080][T12420] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0
[  148.457130][ T5713] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  148.460481][ T5713] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  148.466523][ T5713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  148.470661][ T5713] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  148.477082][ T5713] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  148.480803][ T5713] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  148.486387][T12432] macsec0: entered promiscuous mode
[  148.488493][ T5713] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  148.492521][ T5713] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  148.585757][T12454] netlink: 'syz.2.2891': attribute type 10 has an invalid length.
[  148.664342][ T5713] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  148.746161][T12467] vxcan1 speed is unknown, defaulting to 1000
[  148.784970][T12467] lo speed is unknown, defaulting to 1000
[  150.455651][T12514] xt_socket: unknown flags 0xd0
[  150.588874][T12536] __nla_validate_parse: 16 callbacks suppressed
[  150.588884][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2923'.
[  150.717332][T12554] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2931'.
[  150.891537][T12568] "syz.2.2938" (12568) uses obsolete ecb(arc4) skcipher
[  151.012615][T12585] netlink: 'syz.0.2944': attribute type 1 has an invalid length.
[  151.035726][T12585] 8021q: adding VLAN 0 to HW filter on device bond5
[  151.048496][T12585] vlan2: entered promiscuous mode
[  151.051094][T12585] bond5: entered promiscuous mode
[  151.053547][T12585] vlan2: entered allmulticast mode
[  151.055816][T12585] bond5: entered allmulticast mode
[  151.066266][T12585] bond5: (slave gretap2): making interface the new active one
[  151.068921][T12585] gretap2: entered promiscuous mode
[  151.070930][T12585] gretap2: entered allmulticast mode
[  151.073992][T12585] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  151.150966][T12598] netlink: 'syz.2.2950': attribute type 10 has an invalid length.
[  151.668810][T12622] netlink: 'syz.1.2960': attribute type 1 has an invalid length.
[  151.671852][T12622] netlink: 'syz.1.2960': attribute type 1 has an invalid length.
[  151.730388][T12622] netlink: 'syz.1.2960': attribute type 1 has an invalid length.
[  151.748216][T12622] 8021q: adding VLAN 0 to HW filter on device bond7
[  151.758643][T12622] bond7: (slave wlan0): Opening slave failed
[  152.221709][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'.
[  152.224728][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2976'.
[  152.234855][T12661] netlink: 'syz.1.2976': attribute type 11 has an invalid length.
[  152.551827][T12685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2986'.
[  152.597300][T12691] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2989'.
[  152.601791][T12691] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2989'.
[  152.605540][T12691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2989'.
[  152.610433][T12691] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2989'.
[  152.614246][T12691] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2989'.
[  152.650122][T12695] netlink: 'syz.1.2991': attribute type 1 has an invalid length.
[  152.686117][T12699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.689390][T12699] syzkaller0: entered promiscuous mode
[  152.691673][T12699] syzkaller0: entered allmulticast mode
[  152.695461][T12699] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  152.701391][T12699] tipc: Resetting bearer <eth:syzkaller0>
[  152.704647][T12698] tipc: Resetting bearer <eth:syzkaller0>
[  152.708319][T12698] tipc: Disabling bearer <eth:syzkaller0>
[  153.040462][T12723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.223738][T12748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.227175][T12748] syzkaller0: entered promiscuous mode
[  153.229011][T12748] syzkaller0: entered allmulticast mode
[  153.236128][T12748] tipc: Resetting bearer <eth:syzkaller0>
[  153.244003][T12747] tipc: Resetting bearer <eth:syzkaller0>
[  153.251799][T12747] tipc: Disabling bearer <eth:syzkaller0>
[  153.452400][T12797] netlink: 'syz.2.3042': attribute type 4 has an invalid length.
[  153.562638][T12818] netlink: 'syz.2.3051': attribute type 6 has an invalid length.
[  154.413063][T12905] netlink: 'syz.0.3089': attribute type 3 has an invalid length.
[  154.491761][T12912] netlink: 'syz.2.3092': attribute type 10 has an invalid length.
[  154.494304][T12912] netlink: 'syz.2.3092': attribute type 49 has an invalid length.
[  154.509349][T12915] netlink: 'syz.2.3093': attribute type 1 has an invalid length.
[  154.512746][T12915] netlink: 'syz.2.3093': attribute type 2 has an invalid length.
[  154.666599][T12933] tap0: tun_chr_ioctl cmd 1074812118
[  154.728408][T12941] xt_time: invalid argument - start or stop time greater than 23:59:59
[  155.296455][T12983] tap0: tun_chr_ioctl cmd 1074025677
[  155.299070][T12983] tap0: linktype set to 804
[  155.395708][T12999] netlink: 'syz.0.3131': attribute type 21 has an invalid length.
[  155.517970][T13022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.575119][T13022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.595975][T13033] __nla_validate_parse: 14 callbacks suppressed
[  155.595984][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'.
[  155.635771][T13022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  155.693026][T13048] netlink: 'syz.2.3154': attribute type 1 has an invalid length.
[  155.695654][T13048] netlink: 'syz.2.3154': attribute type 1 has an invalid length.
[  155.893872][T13076] syzkaller0: entered promiscuous mode
[  155.895796][T13076] syzkaller0: entered allmulticast mode
[  156.202767][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3171'.
[  156.488664][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3183'.
[  156.518634][T13116] netlink: 'syz.1.3185': attribute type 21 has an invalid length.
[  156.521655][T13116] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3185'.
[  156.524600][T13116] netlink: 'syz.1.3185': attribute type 5 has an invalid length.
[  156.527189][T13116] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3185'.
[  156.697620][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3188'.
[  156.897754][T13133] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3192'.
[  156.920941][T13135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3193'.
[  156.923992][T13135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3193'.
[  157.581261][T13176] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  158.119411][T13262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'.
[  158.174657][T13271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.261610][T13343] batadv_slave_0: left promiscuous mode
[  159.264290][T13343] batadv_slave_1: left promiscuous mode
[  159.266833][T13343] vlan0: left promiscuous mode
[  159.268780][T13343] macsec0: left promiscuous mode
[  159.270986][T13343] vlan2: left allmulticast mode
[  159.272638][T13343] veth1: left allmulticast mode
[  159.280904][T13343] veth3: left promiscuous mode
[  159.467599][T13361] validate_nla: 5 callbacks suppressed
[  159.467611][T13361] netlink: 'syz.2.3297': attribute type 2 has an invalid length.
[  159.538344][T13369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.147621][T13397] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.152777][T13397] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.191456][T13397] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.195174][T13397] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.233228][T13397] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.239475][T13397] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.250800][T13403] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  160.276486][T13397] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.282076][T13397] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.333458][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.336854][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.345139][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.347886][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.354693][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.357504][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.365397][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.368617][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.486134][T13410] ==================================================================
[  160.488775][T13410] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  160.491312][T13410] Read of size 2 at addr ffff8881137c2542 by task syz.0.3320/13410
[  160.494888][T13410] 
[  160.495711][T13410] CPU: 0 UID: 0 PID: 13410 Comm: syz.0.3320 Not tainted syzkaller #0 PREEMPT(full) 
[  160.495722][T13410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.495727][T13410] Call Trace:
[  160.495732][T13410]  <TASK>
[  160.495735][T13410]  dump_stack_lvl+0x189/0x250
[  160.495750][T13410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.495760][T13410]  ? lock_release+0x4b/0x3e0
[  160.495773][T13410]  ? __virt_addr_valid+0x4a5/0x5c0
[  160.495783][T13410]  print_report+0xca/0x240
[  160.495790][T13410]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  160.495798][T13410]  kasan_report+0x118/0x150
[  160.495809][T13410]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  160.495816][T13410]  __xfrm_state_lookup+0x6ad/0x8d0
[  160.495825][T13410]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  160.495832][T13410]  ? xfrm_state_lookup+0x45/0x1e0
[  160.495840][T13410]  xfrm_state_lookup+0x11e/0x1e0
[  160.495849][T13410]  ipcomp4_init_state+0x205/0xb20
[  160.495858][T13410]  ? lock_release+0x4b/0x3e0
[  160.495867][T13410]  ? rcu_is_watching+0x15/0xb0
[  160.495874][T13410]  __xfrm_init_state+0xa76/0x13f0
[  160.495883][T13410]  ? __xfrm_init_state+0x7ef/0x13f0
[  160.495892][T13410]  xfrm_add_sa+0x2f5b/0x4070
[  160.495902][T13410]  ? __pfx_xfrm_add_sa+0x10/0x10
[  160.495909][T13410]  ? apparmor_capable+0x137/0x1b0
[  160.495919][T13410]  ? __nla_parse+0x40/0x60
[  160.495931][T13410]  xfrm_user_rcv_msg+0x7a3/0xab0
[  160.495941][T13410]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  160.495955][T13410]  ? __pfx___mutex_trylock_common+0x10/0x10
[  160.495963][T13410]  ? rcu_is_watching+0x15/0xb0
[  160.495970][T13410]  ? trace_contention_end+0x39/0x120
[  160.495977][T13410]  ? __mutex_lock+0x335/0x1350
[  160.495985][T13410]  netlink_rcv_skb+0x208/0x470
[  160.495996][T13410]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  160.496005][T13410]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.496017][T13410]  ? lock_release+0x4b/0x3e0
[  160.496027][T13410]  xfrm_netlink_rcv+0x79/0x90
[  160.496036][T13410]  netlink_unicast+0x82f/0x9e0
[  160.496046][T13410]  ? __pfx_netlink_unicast+0x10/0x10
[  160.496055][T13410]  ? netlink_sendmsg+0x642/0xb30
[  160.496061][T13410]  ? skb_put+0x11b/0x210
[  160.496069][T13410]  netlink_sendmsg+0x805/0xb30
[  160.496077][T13410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.496084][T13410]  ? futex_unqueue+0x22/0x240
[  160.496091][T13410]  ? aa_sock_msg_perm+0xf1/0x1d0
[  160.496098][T13410]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  160.496106][T13410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.496113][T13410]  __sock_sendmsg+0x21c/0x270
[  160.496123][T13410]  ____sys_sendmsg+0x505/0x830
[  160.496131][T13410]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.496139][T13410]  ? import_iovec+0x74/0xa0
[  160.496147][T13410]  ___sys_sendmsg+0x21f/0x2a0
[  160.496154][T13410]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.496167][T13410]  ? __fget_files+0x2a/0x420
[  160.496173][T13410]  ? __fget_files+0x3a0/0x420
[  160.496182][T13410]  __x64_sys_sendmsg+0x19b/0x260
[  160.496190][T13410]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  160.496199][T13410]  ? rcu_is_watching+0x15/0xb0
[  160.496205][T13410]  ? trace_sys_enter+0x25/0x100
[  160.496216][T13410]  do_syscall_64+0xfa/0x3b0
[  160.496223][T13410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.496230][T13410]  ? exc_page_fault+0x9f/0xf0
[  160.496241][T13410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.496249][T13410] RIP: 0033:0x7f387418ebe9
[  160.496257][T13410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.496265][T13410] RSP: 002b:00007f38750c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.496274][T13410] RAX: ffffffffffffffda RBX: 00007f38743b5fa0 RCX: 00007f387418ebe9
[  160.496279][T13410] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  160.496284][T13410] RBP: 00007f3874211e19 R08: 0000000000000000 R09: 0000000000000000
[  160.496289][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.496294][T13410] R13: 00007f38743b6038 R14: 00007f38743b5fa0 R15: 00007ffd0bed8ea8
[  160.496303][T13410]  </TASK>
[  160.496306][T13410] 
[  160.641211][T13410] Allocated by task 10389:
[  160.643027][T13410]  kasan_save_track+0x3e/0x80
[  160.645011][T13410]  __kasan_slab_alloc+0x6c/0x80
[  160.647013][T13410]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  160.649090][T13410]  xfrm_state_alloc+0x24/0x2f0
[  160.650856][T13410]  __find_acq_core+0x8a7/0x1c00
[  160.652799][T13410]  xfrm_find_acq+0x78/0xa0
[  160.654231][T13410]  xfrm_alloc_userspi+0x6b3/0xc90
[  160.655837][T13410]  xfrm_user_rcv_msg+0x7a3/0xab0
[  160.657390][T13410]  netlink_rcv_skb+0x208/0x470
[  160.658952][T13410]  xfrm_netlink_rcv+0x79/0x90
[  160.660446][T13410]  netlink_unicast+0x82f/0x9e0
[  160.661951][T13410]  netlink_sendmsg+0x805/0xb30
[  160.663483][T13410]  __sock_sendmsg+0x21c/0x270
[  160.665034][T13410]  ____sys_sendmsg+0x505/0x830
[  160.666554][T13410]  ___sys_sendmsg+0x21f/0x2a0
[  160.668051][T13410]  __x64_sys_sendmsg+0x19b/0x260
[  160.669640][T13410]  do_syscall_64+0xfa/0x3b0
[  160.671099][T13410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.673042][T13410] 
[  160.673869][T13410] Freed by task 51:
[  160.675133][T13410]  kasan_save_track+0x3e/0x80
[  160.676656][T13410]  kasan_save_free_info+0x46/0x50
[  160.678266][T13410]  __kasan_slab_free+0x5b/0x80
[  160.679825][T13410]  kmem_cache_free+0x18f/0x400
[  160.681342][T13410]  xfrm_state_gc_task+0x52d/0x6b0
[  160.682983][T13410]  process_scheduled_works+0xae1/0x17b0
[  160.684805][T13410]  worker_thread+0x8a0/0xda0
[  160.686334][T13410]  kthread+0x711/0x8a0
[  160.687793][T13410]  ret_from_fork+0x3fc/0x770
[  160.689422][T13410]  ret_from_fork_asm+0x1a/0x30
[  160.691338][T13410] 
[  160.692342][T13410] The buggy address belongs to the object at ffff8881137c2400
[  160.692342][T13410]  which belongs to the cache xfrm_state of size 928
[  160.697869][T13410] The buggy address is located 322 bytes inside of
[  160.697869][T13410]  freed 928-byte region [ffff8881137c2400, ffff8881137c27a0)
[  160.703275][T13410] 
[  160.704317][T13410] The buggy address belongs to the physical page:
[  160.706873][T13410] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881137c2880 pfn:0x1137c0
[  160.710337][T13410] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  160.713079][T13410] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  160.715536][T13410] page_type: f5(slab)
[  160.716998][T13410] raw: 057ff00000000040 ffff888105130b40 dead000000000122 0000000000000000
[  160.719949][T13410] raw: ffff8881137c2880 00000000800e0006 00000000f5000000 0000000000000000
[  160.722702][T13410] head: 057ff00000000040 ffff888105130b40 dead000000000122 0000000000000000
[  160.725538][T13410] head: ffff8881137c2880 00000000800e0006 00000000f5000000 0000000000000000
[  160.729053][T13410] head: 057ff00000000002 ffffea00044df001 00000000ffffffff 00000000ffffffff
[  160.732673][T13410] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  160.736235][T13410] page dumped because: kasan: bad access detected
[  160.738893][T13410] page_owner tracks the page as allocated
[  160.741257][T13410] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6316, tgid 6314 (syz.1.169), ts 75648340767, free_ts 75119541314
[  160.748974][T13410]  post_alloc_hook+0x240/0x2a0
[  160.750977][T13410]  get_page_from_freelist+0x21e4/0x22c0
[  160.753246][T13410]  __alloc_frozen_pages_noprof+0x181/0x370
[  160.755365][T13410]  alloc_pages_mpol+0x232/0x4a0
[  160.757381][T13410]  allocate_slab+0x8a/0x370
[  160.759277][T13410]  ___slab_alloc+0xbeb/0x1410
[  160.761272][T13410]  kmem_cache_alloc_noprof+0x283/0x3c0
[  160.763439][T13410]  xfrm_state_alloc+0x24/0x2f0
[  160.764963][T13410]  pfkey_add+0x6e4/0x2e00
[  160.766754][T13410]  pfkey_sendmsg+0xbfe/0x1090
[  160.768478][T13410]  __sock_sendmsg+0x21c/0x270
[  160.770050][T13410]  ____sys_sendmsg+0x505/0x830
[  160.771690][T13410]  ___sys_sendmsg+0x21f/0x2a0
[  160.773643][T13410]  __x64_sys_sendmsg+0x19b/0x260
[  160.775678][T13410]  do_syscall_64+0xfa/0x3b0
[  160.777636][T13410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.779856][T13410] page last free pid 1095 tgid 1095 stack trace:
[  160.781922][T13410]  __free_frozen_pages+0xbc4/0xd30
[  160.783637][T13410]  free_large_kmalloc+0x13a/0x1f0
[  160.785297][T13410]  htab_map_free+0x7b2/0x980
[  160.786917][T13410]  bpf_map_free_deferred+0x113/0x140
[  160.788635][T13410]  process_scheduled_works+0xae1/0x17b0
[  160.790482][T13410]  worker_thread+0x8a0/0xda0
[  160.792102][T13410]  kthread+0x711/0x8a0
[  160.793771][T13410]  ret_from_fork+0x3fc/0x770
[  160.795754][T13410]  ret_from_fork_asm+0x1a/0x30
[  160.797819][T13410] 
[  160.798858][T13410] Memory state around the buggy address:
[  160.801194][T13410]  ffff8881137c2400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.804576][T13410]  ffff8881137c2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.807945][T13410] >ffff8881137c2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.810903][T13410]                                            ^
[  160.813024][T13410]  ffff8881137c2580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.816296][T13410]  ffff8881137c2600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.819325][T13410] ==================================================================
[  160.828527][T13410] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  160.830938][T13410] CPU: 0 UID: 0 PID: 13410 Comm: syz.0.3320 Not tainted syzkaller #0 PREEMPT(full) 
[  160.833876][T13410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.837095][T13410] Call Trace:
[  160.838205][T13410]  <TASK>
[  160.839174][T13410]  dump_stack_lvl+0x99/0x250
[  160.840769][T13410]  ? __asan_memcpy+0x40/0x70
[  160.842599][T13410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.844453][T13410]  ? __pfx__printk+0x10/0x10
[  160.846049][T13410]  vpanic+0x281/0x750
[  160.847374][T13410]  ? preempt_schedule+0xae/0xc0
[  160.848957][T13410]  ? __pfx_vpanic+0x10/0x10
[  160.850465][T13410]  ? preempt_schedule_common+0x83/0xd0
[  160.852200][T13410]  ? preempt_schedule+0xae/0xc0
[  160.853800][T13410]  ? __pfx_preempt_schedule+0x10/0x10
[  160.855522][T13410]  panic+0xb9/0xc0
[  160.856738][T13410]  ? __pfx_panic+0x10/0x10
[  160.858179][T13410]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  160.860077][T13410]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  160.861882][T13410]  check_panic_on_warn+0x89/0xb0
[  160.863510][T13410]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  160.865201][T13410]  end_report+0x78/0x160
[  160.866636][T13410]  kasan_report+0x129/0x150
[  160.868101][T13410]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  160.869791][T13410]  __xfrm_state_lookup+0x6ad/0x8d0
[  160.871620][T13410]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  160.873427][T13410]  ? xfrm_state_lookup+0x45/0x1e0
[  160.875010][T13410]  xfrm_state_lookup+0x11e/0x1e0
[  160.876754][T13410]  ipcomp4_init_state+0x205/0xb20
[  160.878385][T13410]  ? lock_release+0x4b/0x3e0
[  160.879933][T13410]  ? rcu_is_watching+0x15/0xb0
[  160.881513][T13410]  __xfrm_init_state+0xa76/0x13f0
[  160.883114][T13410]  ? __xfrm_init_state+0x7ef/0x13f0
[  160.884840][T13410]  xfrm_add_sa+0x2f5b/0x4070
[  160.886431][T13410]  ? __pfx_xfrm_add_sa+0x10/0x10
[  160.888064][T13410]  ? apparmor_capable+0x137/0x1b0
[  160.889681][T13410]  ? __nla_parse+0x40/0x60
[  160.891197][T13410]  xfrm_user_rcv_msg+0x7a3/0xab0
[  160.892844][T13410]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  160.894706][T13410]  ? __pfx___mutex_trylock_common+0x10/0x10
[  160.896913][T13410]  ? rcu_is_watching+0x15/0xb0
[  160.898476][T13410]  ? trace_contention_end+0x39/0x120
[  160.900167][T13410]  ? __mutex_lock+0x335/0x1350
[  160.901750][T13410]  netlink_rcv_skb+0x208/0x470
[  160.903307][T13410]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  160.905066][T13410]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  160.906924][T13410]  ? lock_release+0x4b/0x3e0
[  160.908764][T13410]  xfrm_netlink_rcv+0x79/0x90
[  160.910418][T13410]  netlink_unicast+0x82f/0x9e0
[  160.911981][T13410]  ? __pfx_netlink_unicast+0x10/0x10
[  160.913837][T13410]  ? netlink_sendmsg+0x642/0xb30
[  160.915735][T13410]  ? skb_put+0x11b/0x210
[  160.917273][T13410]  netlink_sendmsg+0x805/0xb30
[  160.919142][T13410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.921100][T13410]  ? futex_unqueue+0x22/0x240
[  160.922888][T13410]  ? aa_sock_msg_perm+0xf1/0x1d0
[  160.924725][T13410]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  160.926728][T13410]  ? __pfx_netlink_sendmsg+0x10/0x10
[  160.928853][T13410]  __sock_sendmsg+0x21c/0x270
[  160.930391][T13410]  ____sys_sendmsg+0x505/0x830
[  160.931930][T13410]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.933636][T13410]  ? import_iovec+0x74/0xa0
[  160.935145][T13410]  ___sys_sendmsg+0x21f/0x2a0
[  160.936716][T13410]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.938423][T13410]  ? __fget_files+0x2a/0x420
[  160.939929][T13410]  ? __fget_files+0x3a0/0x420
[  160.941464][T13410]  __x64_sys_sendmsg+0x19b/0x260
[  160.943178][T13410]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  160.944933][T13410]  ? rcu_is_watching+0x15/0xb0
[  160.946823][T13410]  ? trace_sys_enter+0x25/0x100
[  160.948653][T13410]  do_syscall_64+0xfa/0x3b0
[  160.950121][T13410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.952048][T13410]  ? exc_page_fault+0x9f/0xf0
[  160.953603][T13410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.955484][T13410] RIP: 0033:0x7f387418ebe9
[  160.956906][T13410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.964174][T13410] RSP: 002b:00007f38750c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  160.967500][T13410] RAX: ffffffffffffffda RBX: 00007f38743b5fa0 RCX: 00007f387418ebe9
[  160.970659][T13410] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003
[  160.973827][T13410] RBP: 00007f3874211e19 R08: 0000000000000000 R09: 0000000000000000
[  160.976656][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.979191][T13410] R13: 00007f38743b6038 R14: 00007f38743b5fa0 R15: 00007ffd0bed8ea8
[  160.981713][T13410]  </TASK>
[  160.983346][T13410] Kernel Offset: disabled
[  160.984764][T13410] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:36:44  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000123e RDI=000000000000123f RBP=00000000000003f8 RSP=ffffc90006be6930
R8 =ffff888106938237 R9 =1ffff11020d27046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afd8ee R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f38750c26c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f38750c1fc8 CR3=00000000280a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=00007f2e91187498 ffffffff8133c57e XMM03=00007f2e911874a8 00007f2e911874a0
XMM04=00007f2e91ced100 00007f2e91187460 XMM05=00007f2e91187478 00007f2e911874c0
XMM06=00007f2e911874b8 00007f2e911874b0 XMM07=00007f2e911874a8 00007f2e911874a0
XMM08=0000000000000000 00007f2e91012ee7 XMM09=0000000000000000 00007f2e91012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=2b3525b11e3ef500 RBX=ffffffff819683b8 RCX=2b3525b11e3ef500 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38630 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b79f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000ac0 CR3=0000000044958000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81cb8366 ffffffff81cb83dc
XMM02=00007f08c4b87498 ffffffff81cb83dc XMM03=00007f08c4b874a8 00007f08c4b874a0
XMM04=00007f08c56ed100 00007f08c4b87460 XMM05=00007f08c4b87478 00007f08c4b874c0
XMM06=00007f08c4b874b8 00007f08c4b874b0 XMM07=00007f08c4b874a8 00007f08c4b874a0
XMM08=0000000000000000 00007f08c4a12ee7 XMM09=0000000000000000 00007f08c4a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
